$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/10eae504-c535-3d7f-8fd1-8a39ac437127.roa File: 10eae504-c535-3d7f-8fd1-8a39ac437127.roa (raw, json) Hash identifier: 8Te2huwmRNfhm/SU6vNj1wNkfEeggIDX+Q7NAwOqD8Q= Subject key identifier: CC:1D:9B:FF:F5:65:A3:89:AA:FF:A9:16:15:E2:DE:DE:FD:F8:05:20 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584B6E91F56EAA6286DDE8C77680 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/10eae504-c535-3d7f-8fd1-8a39ac437127.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 2615 IP address blocks: 147.1.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:f5:6e:aa:62:86:dd:e8:c7:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=de40e54b-a6e4-43fc-ac9f-80300f832008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:11:fa:64:b0:92:80:bb:69:c7:5b:1c:59:fd: 87:9c:82:6c:f8:8f:24:6e:15:3a:69:f2:ef:45:a0: 89:69:7d:3a:46:7f:6c:97:a1:8e:fa:8f:f1:2c:6a: 8a:f7:2f:8c:ee:c0:25:12:3e:67:1d:ba:8c:5c:90: fc:2e:54:8b:8f:a2:ce:f6:4a:0d:d1:3a:2a:4f:14: 7e:b3:5c:16:d8:b6:23:b2:bf:83:d6:b8:5d:40:71: b6:bc:53:fd:4c:26:20:95:9d:71:a5:ea:98:85:b9: 3c:1f:60:96:dd:d2:45:8b:f2:7f:52:37:d5:2b:8c: f8:d9:01:89:4d:1d:bf:14:17:42:f7:d6:c7:a9:f5: 71:d1:79:4a:66:22:15:25:fa:18:1d:f7:a6:52:88: 47:94:e3:19:40:05:2a:22:bb:b6:11:3f:6f:9d:a0: bd:df:6d:58:a4:78:80:94:80:60:43:30:62:d0:be: 09:6d:ad:4c:78:79:88:0b:e3:ac:eb:5e:c6:ee:67: b7:ed:da:8a:d8:3b:25:11:3d:57:a4:e7:13:bb:58: d4:eb:fb:70:75:40:8e:3d:c3:15:ac:7d:0b:57:24: 1f:ff:c3:67:c0:18:a6:e0:6e:90:0b:80:2b:e2:89: 85:6e:e3:50:ce:00:ee:d3:c1:a3:27:77:61:f5:08: fe:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1D:9B:FF:F5:65:A3:89:AA:FF:A9:16:15:E2:DE:DE:FD:F8:05:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/10eae504-c535-3d7f-8fd1-8a39ac437127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:a6:5d:83:53:c9:c5:29:da:47:e7:46:22:4b:bb:c4:07:a9: b0:cd:a2:8a:6c:7d:9a:90:c0:3d:9f:a8:40:21:22:d8:61:e7: 1c:06:ba:36:d6:de:be:3c:21:db:b3:4c:e7:40:70:29:7c:8c: 20:0e:39:13:18:d8:69:08:61:df:5d:a9:0a:d8:45:c7:79:a2: 48:10:7f:ca:02:f5:40:32:72:54:16:65:5a:95:df:f9:7c:a4: 16:9d:30:11:d6:6a:cd:e2:c1:4d:d2:77:f4:59:90:33:ae:e1: a9:cc:6e:32:e3:b1:e1:9d:6f:82:3e:ac:f7:ad:90:a1:6c:99: 65:60:34:91:a9:2a:c3:44:d0:bd:6d:96:a1:f3:66:f6:13:a3: 90:3b:8c:88:ec:e7:43:51:45:06:d0:0f:f0:12:82:f5:c5:36: 0e:25:2b:80:5d:72:36:99:9a:0b:db:f3:52:d5:ee:be:cf:ba: a2:50:7f:91:a6:32:74:55:65:6c:a2:ed:b7:e1:a4:0a:47:36: c9:c0:04:ba:5e:0d:72:a2:f4:81:18:b2:fc:a8:b6:35:62:d8: c3:e9:51:69:bd:af:63:09:fa:47:2a:f8:34:e8:c9:3e:c9:54: 20:9b:39:4a:0e:36:56:86:93:4c:51:ec:87:5d:36:6e:57:71: 3a:10:c2:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukfVuqmKG3ejHdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGU0MGU1NGItYTZlNC00M2ZjLWFjOWYtODAzMDBmODMyMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRH6ZLCSgLtpx1scWf2HnIJs+I8kbhU6afLv RaCJaX06Rn9sl6GO+o/xLGqK9y+M7sAlEj5nHbqMXJD8LlSLj6LO9koN0ToqTxR+ s1wW2LYjsr+D1rhdQHG2vFP9TCYglZ1xpeqYhbk8H2CW3dJFi/J/UjfVK4z42QGJ TR2/FBdC99bHqfVx0XlKZiIVJfoYHfemUohHlOMZQAUqIru2ET9vnaC9321YpHiA lIBgQzBi0L4Jba1MeHmIC+Os617G7me37dqK2DslET1XpOcTu1jU6/twdUCOPcMV rH0LVyQf/8NnwBim4G6QC4Ar4omFbuNQzgDu08GjJ3dh9Qj+AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwdm//1ZaOJqv+pFhXi3t79+AUgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMTBlYWU1MDQtYzUzNS0z ZDdmLThmZDEtOGEzOWFjNDM3MTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKmXYNTycUp2kfnRiJLu8QHqbDNoopsfZqQwD2fqEAhIthh5xwGujbW 3r48IduzTOdAcCl8jCAOORMY2GkIYd9dqQrYRcd5okgQf8oC9UAyclQWZVqV3/l8 pBadMBHWas3iwU3Sd/RZkDOu4anMbjLjseGdb4I+rPetkKFsmWVgNJGpKsNE0L1t lqHzZvYTo5A7jIjs50NRRQbQD/ASgvXFNg4lK4BdcjaZmgvb81LV7r7PuqJQf5Gm MnRVZWyi7bfhpApHNsnABLpeDXKi9IEYsvyotjVi2MPpUWm9r2MJ+kcq+DToyT7J VCCbOUoONlaGk0xR7IddNm5XcToQwqM= -----END CERTIFICATE-----Generated at Fri Oct 10 16:15:30 2025 by rpki-client