$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/3a1e733f-7332-3c2d-8a7c-dfc463c33e35.roa File: 3a1e733f-7332-3c2d-8a7c-dfc463c33e35.roa (raw, json) Hash identifier: PAMi5v5GqqKgvXoGMHhA6ozQHwvB+w6PlWuYi+q9B2o= Subject key identifier: 48:40:8D:E4:BF:7D:A5:65:0E:B4:DF:25:38:E9:FE:89:6F:8F:5F:C2 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584B6E91FF54FABCEFBC8240D580 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/3a1e733f-7332-3c2d-8a7c-dfc463c33e35.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 2615 IP address blocks: 147.1.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:ff:54:fa:bc:ef:bc:82:40:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=9c6e7381-0590-41b4-9f7d-5e39121e52ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:62:c5:a4:18:ee:74:a5:96:e3:68:27:88:54: 1c:ec:3f:82:c9:76:41:ba:1c:56:b2:58:f1:ea:83: e3:ff:3d:52:38:72:70:94:e1:38:71:f2:d1:23:f1: 3b:16:e3:ea:36:cd:46:d8:da:6b:61:f7:c8:70:cc: 57:ea:4e:1c:97:51:0f:e2:86:44:15:b4:88:9a:fd: c2:05:41:40:75:f1:47:9e:29:6f:ad:5d:09:54:13: d3:de:e5:60:45:50:71:b5:1d:e7:28:2b:83:b5:77: ee:e7:cf:77:04:bb:f7:61:85:cf:c3:0a:13:54:54: f3:4b:21:4f:67:58:32:69:c3:f8:d2:d8:e4:57:68: 98:c4:01:61:52:00:36:ed:a0:33:53:53:1e:bd:dc: d4:6b:c0:81:14:f4:6a:c0:a2:cf:84:b9:60:ec:77: 18:8a:e8:3b:64:e6:7f:44:bb:f9:6f:21:53:7a:24: 52:c3:49:f6:d6:7b:78:75:7b:e8:a6:e6:12:16:4b: 1a:45:8a:7c:bf:ac:56:64:78:e7:a7:2b:be:6b:6e: 67:a3:a8:48:45:ab:6d:7d:95:e9:8a:e6:21:52:59: b2:19:b7:a7:4c:d4:b4:b1:5c:23:d7:64:ee:2c:9b: 2e:b4:48:ea:c8:54:7b:bd:98:9a:ea:7f:1e:b0:87: 1a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:40:8D:E4:BF:7D:A5:65:0E:B4:DF:25:38:E9:FE:89:6F:8F:5F:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/3a1e733f-7332-3c2d-8a7c-dfc463c33e35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ff:ce:5d:9c:62:16:44:ef:dc:ad:9b:da:6d:a8:06:f6:63: 59:3c:3f:77:f4:6b:7f:8c:c1:4e:6f:d6:52:47:fe:96:9f:6e: eb:00:90:97:9f:d4:d1:97:5b:1b:38:9a:13:49:c1:91:ce:d2: 39:9b:3f:f2:a6:59:fb:17:11:c1:cc:54:99:83:5c:b7:96:47: 77:03:a5:de:59:b8:fa:80:8b:d4:8f:17:67:cd:b9:4c:38:51: b9:04:01:7c:2e:d9:9a:06:bc:35:5e:9c:a7:72:21:99:9c:da: d7:0b:69:e7:62:3f:0e:51:ba:7b:60:2b:a0:ae:f6:e8:63:40: 18:b1:99:32:c3:84:b2:6c:3a:01:63:53:a6:2d:7f:f1:41:ce: cf:0b:23:64:60:eb:c2:11:8f:86:b9:f5:05:c5:5e:8f:13:70: a3:bd:70:e6:4e:a3:de:03:1e:22:47:91:dc:34:c8:6d:86:c3: 3f:6f:28:67:95:4d:00:5d:95:6c:21:ac:8f:25:bb:fa:a0:c7: 9a:f9:00:cb:5e:19:54:25:11:22:0b:1e:e4:52:6d:f4:09:40: 8f:14:59:83:e6:f0:a1:5d:ef:22:25:50:71:76:22:ad:c6:01: 0e:2b:f4:34:01:5d:c1:f4:4d:51:ac:e8:2f:e3:2c:ef:e5:b4: ee:71:9d:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukf9U+rzvvIJA1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk OWM2ZTczODEtMDU5MC00MWI0LTlmN2QtNWUzOTEyMWU1MmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2LFpBjudKWW42gniFQc7D+CyXZBuhxWsljx 6oPj/z1SOHJwlOE4cfLRI/E7FuPqNs1G2NprYffIcMxX6k4cl1EP4oZEFbSImv3C BUFAdfFHnilvrV0JVBPT3uVgRVBxtR3nKCuDtXfu5893BLv3YYXPwwoTVFTzSyFP Z1gyacP40tjkV2iYxAFhUgA27aAzU1MevdzUa8CBFPRqwKLPhLlg7HcYiug7ZOZ/ RLv5byFTeiRSw0n21nt4dXvopuYSFksaRYp8v6xWZHjnpyu+a25no6hIRattfZXp iuYhUlmyGbenTNS0sVwj12TuLJsutEjqyFR7vZia6n8esIcamwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhAjeS/faVlDrTfJTjp/olvj1/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvM2ExZTczM2YtNzMzMi0z YzJkLThhN2MtZGZjNDYzYzMzZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3/zl2cYhZE79ytm9ptqAb2Y1k8P3f0a3+MwU5v1lJH/pafbusAkJef 1NGXWxs4mhNJwZHO0jmbP/KmWfsXEcHMVJmDXLeWR3cDpd5ZuPqAi9SPF2fNuUw4 UbkEAXwu2ZoGvDVenKdyIZmc2tcLaediPw5RuntgK6Cu9uhjQBixmTLDhLJsOgFj U6Ytf/FBzs8LI2Rg68IRj4a59QXFXo8TcKO9cOZOo94DHiJHkdw0yG2Gwz9vKGeV TQBdlWwhrI8lu/qgx5r5AMteGVQlESILHuRSbfQJQI8UWYPm8KFd7yIlUHF2Iq3G AQ4r9DQBXcH0TVGs6C/jLO/ltO5xncg= -----END CERTIFICATE-----Generated at Fri Oct 10 16:08:08 2025 by rpki-client