$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/05e9ac96-987f-3e34-9ff7-83cec026ab99.roa File: 05e9ac96-987f-3e34-9ff7-83cec026ab99.roa (raw, json) Hash identifier: 1+9OYDbpKs7tAGll2lnR0zFQ3sOYvqkJAVnjqDM4hho= Subject key identifier: B5:0C:C0:5E:D8:B6:8E:85:38:79:9B:95:9D:11:22:E8:7C:31:78:BD Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584B6367500514EA1B51A11AA314 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/05e9ac96-987f-3e34-9ff7-83cec026ab99.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 2615 IP address blocks: 147.1.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:50:05:14:ea:1b:51:a1:1a:a3:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=dcbb86bb-b268-4f68-9860-f95665084aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9f:e5:07:99:0d:17:fc:be:5c:da:9d:be:32: 92:ae:94:77:6c:6a:b6:b5:77:ac:49:9e:91:76:d7: 13:bf:75:46:e8:35:5c:30:2c:cb:40:27:59:39:20: 6a:a1:7a:84:37:1b:3c:f7:56:1d:60:f3:8e:d4:39: b6:c4:d6:e5:9c:f1:cf:77:a6:6a:a1:79:cb:f0:5c: d4:87:a5:7d:ee:f3:e2:01:71:cf:09:65:c6:45:ac: cf:1f:4c:ef:73:31:97:3a:42:eb:df:2a:f7:28:a2: d4:a7:8e:08:97:25:d0:01:ac:7c:9e:21:f1:14:55: 49:ef:66:8d:a4:36:dd:76:a4:d8:90:50:de:75:69: e1:98:5e:3c:fe:8d:68:26:57:01:98:23:81:e3:9c: 12:99:16:dc:5d:63:9b:7f:d6:12:87:6d:9f:d1:ab: 05:7d:b7:6d:e3:7f:7e:ef:6e:08:8e:bb:f4:d6:c4: c7:9f:3e:50:0a:f5:19:b0:0a:55:7e:ed:4d:6a:2e: 0e:7c:32:b9:9f:d3:95:38:1b:29:c5:3e:fe:af:2b: a7:cf:ad:58:94:1b:80:0c:7d:7a:2f:16:a2:86:ce: 79:6a:96:98:c2:3e:dd:c5:8b:49:01:c6:30:48:3e: c6:a7:d3:7a:39:47:d2:67:e9:1e:61:d8:aa:5f:ae: 48:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0C:C0:5E:D8:B6:8E:85:38:79:9B:95:9D:11:22:E8:7C:31:78:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/05e9ac96-987f-3e34-9ff7-83cec026ab99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:5d:f9:6a:b5:9e:65:53:50:73:f4:36:c3:c6:c8:a8:34:2e: b6:b8:6e:3f:ab:2b:dc:04:38:b9:46:dc:1e:3e:42:03:ab:92: 0a:e8:51:ca:ef:4a:63:dc:af:c2:9b:87:ca:89:64:d6:09:3e: a4:ec:1b:78:39:c6:a8:46:48:9c:ab:91:55:92:eb:1f:4b:fe: 41:d3:1a:22:36:e1:d5:fa:2d:98:b3:17:39:c9:87:4d:22:d6: 67:12:47:d0:10:20:f3:a7:79:44:70:62:d1:74:02:1a:a5:ac: 2f:28:5b:cd:42:1f:00:7c:a2:bc:a6:37:6a:1a:29:01:9e:7f: b8:13:eb:0f:43:80:2b:a4:88:9b:5e:b6:4f:ba:26:50:1b:a3: f7:10:c5:e0:3e:da:ed:00:ab:73:54:cc:5b:f8:ea:6f:15:46: 0e:1f:88:b2:15:96:63:84:65:3a:87:26:e9:74:4d:b8:40:72: 3f:a3:fa:7b:2e:72:e2:ad:de:79:88:d3:d9:7d:bd:70:62:4a: f2:37:d8:b4:52:96:7f:9b:c7:17:50:9b:46:21:b1:83:23:c6: 4e:5e:68:1a:9d:e6:bf:f2:5c:23:38:50:26:78:ef:f0:11:04: d0:00:07:79:02:23:85:45:b4:36:62:90:07:2b:0e:ae:d0:dd: 66:ae:31:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ1AFFOobUaEaoxQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk ZGNiYjg2YmItYjI2OC00ZjY4LTk4NjAtZjk1NjY1MDg0YWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ/lB5kNF/y+XNqdvjKSrpR3bGq2tXesSZ6R dtcTv3VG6DVcMCzLQCdZOSBqoXqENxs891YdYPOO1Dm2xNblnPHPd6ZqoXnL8FzU h6V97vPiAXHPCWXGRazPH0zvczGXOkLr3yr3KKLUp44IlyXQAax8niHxFFVJ72aN pDbddqTYkFDedWnhmF48/o1oJlcBmCOB45wSmRbcXWObf9YSh22f0asFfbdt439+ 724Ijrv01sTHnz5QCvUZsApVfu1Nai4OfDK5n9OVOBspxT7+ryunz61YlBuADH16 Lxaihs55apaYwj7dxYtJAcYwSD7Gp9N6OUfSZ+keYdiqX65IZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUMwF7Yto6FOHmblZ0RIuh8MXi9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMDVlOWFjOTYtOTg3Zi0z ZTM0LTlmZjctODNjZWMwMjZhYjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwHWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANd+Wq1nmVTUHP0NsPGyKg0Lra4bj+rK9wEOLlG3B4+QgOrkgroUcrv SmPcr8Kbh8qJZNYJPqTsG3g5xqhGSJyrkVWS6x9L/kHTGiI24dX6LZizFznJh00i 1mcSR9AQIPOneURwYtF0AhqlrC8oW81CHwB8orymN2oaKQGef7gT6w9DgCukiJte tk+6JlAbo/cQxeA+2u0Aq3NUzFv46m8VRg4fiLIVlmOEZTqHJul0TbhAcj+j+nsu cuKt3nmI09l9vXBiSvI32LRSln+bxxdQm0YhsYMjxk5eaBqd5r/yXCM4UCZ47/AR BNAAB3kCI4VFtDZikAcrDq7Q3WauMYs= -----END CERTIFICATE-----Generated at Fri Oct 10 16:13:41 2025 by rpki-client