$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/46a242d8-96ac-376a-9920-486439d6e3da.roa File: 46a242d8-96ac-376a-9920-486439d6e3da.roa (raw, json) Hash identifier: BCcb+4qTMD0aqW7ea950fID3QO1/S2XUvOX9f5RZatE= Subject key identifier: E4:39:9A:A4:5F:7A:F8:B8:1D:83:EC:1F:C3:2D:4F:2A:EC:22:55:21 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584B153C255C43DA50CA44E7DFC0 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/46a242d8-96ac-376a-9920-486439d6e3da.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 2615 IP address blocks: 147.1.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:25:5c:43:da:50:ca:44:e7:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=2227acbc-c39f-4e14-9aef-a4743c46a20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ca:4c:bd:b7:d2:e0:96:92:bd:11:c3:5d:5a: 5c:fc:41:db:97:c2:aa:10:74:a4:d1:57:61:61:75: c0:2d:4b:df:9b:5e:11:23:5d:7e:7e:21:dc:29:18: 5c:7c:5c:ea:08:27:b7:19:73:67:cd:42:33:1c:bd: 09:1d:5a:77:1b:fe:dc:73:a5:05:d4:b5:4c:85:10: e2:ca:4e:ba:05:f1:b4:b0:d9:4a:80:df:d6:45:34: da:c1:1a:92:bc:52:c6:49:41:21:f8:a5:e6:a9:b2: 6c:7e:0c:d2:b0:9d:be:8f:9b:4b:a9:ea:21:51:e2: 75:39:75:e8:1a:24:e8:31:7f:49:3d:a0:08:4b:3e: fc:b8:a2:bc:83:18:3d:1b:06:40:a1:a5:40:97:c5: 60:96:15:71:a0:c6:b2:38:5d:4c:ff:d0:ce:a5:e6: 11:35:56:32:3d:7f:67:31:6e:2b:6f:31:2d:24:65: 3a:1f:61:4a:f7:ac:6e:7c:61:46:42:19:e0:9b:25: 21:3d:c3:ea:5f:e9:e3:87:40:3d:27:16:0e:4c:cb: a4:ab:20:86:e3:04:2c:ce:2c:be:f9:15:76:07:2b: 7d:09:47:c4:ba:76:09:3b:66:3c:97:aa:d5:ff:34: 1b:7f:9c:ac:03:97:54:a5:33:6c:80:91:c6:6d:74: 67:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:39:9A:A4:5F:7A:F8:B8:1D:83:EC:1F:C3:2D:4F:2A:EC:22:55:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/46a242d8-96ac-376a-9920-486439d6e3da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b2:1e:a8:22:b7:83:90:7b:a2:d5:0a:4e:5b:6f:bd:b1:72: 38:c5:d1:05:85:35:39:67:70:05:99:b5:0e:0a:3c:ba:ab:e5: c4:2b:ac:1a:a7:85:35:a2:b9:d7:25:7f:ac:c6:23:4a:b0:9b: 93:06:92:8e:17:30:e3:6b:7a:27:d5:07:a7:c3:77:66:1b:9a: 22:39:d0:b4:15:b2:88:cb:c2:f4:1e:28:38:56:ef:97:cb:28: 86:f2:6a:a7:e8:05:24:00:d0:98:50:34:be:aa:97:9b:3b:90: 12:33:f5:05:8f:bf:24:ef:2f:12:e7:03:e7:19:8d:e8:8b:4c: a4:45:c4:28:58:c9:aa:c1:6f:94:10:15:df:32:1a:65:29:45: dc:45:16:8c:a2:36:eb:17:87:da:f1:fc:99:a5:7c:9d:e6:7f: b6:37:30:0f:5d:a8:60:5b:04:86:95:37:0f:21:2b:7c:dc:73: af:a6:d8:fe:68:89:0a:d9:8d:67:89:60:b4:74:2b:9b:fa:25: 79:65:0d:62:9a:af:47:7a:6e:13:8e:d5:6d:fb:68:c5:53:a6: 11:6c:a5:bc:c8:8b:a7:c0:c6:3c:d5:2e:93:d4:fc:a9:5b:4a: a2:c9:7a:80:54:af:64:b9:33:bd:4b:77:4e:c7:71:bf:1e:e8: 36:17:da:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCVcQ9pQykTn38AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk MjIyN2FjYmMtYzM5Zi00ZTE0LTlhZWYtYTQ3NDNjNDZhMjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcpMvbfS4JaSvRHDXVpc/EHbl8KqEHSk0Vdh YXXALUvfm14RI11+fiHcKRhcfFzqCCe3GXNnzUIzHL0JHVp3G/7cc6UF1LVMhRDi yk66BfG0sNlKgN/WRTTawRqSvFLGSUEh+KXmqbJsfgzSsJ2+j5tLqeohUeJ1OXXo GiToMX9JPaAISz78uKK8gxg9GwZAoaVAl8VglhVxoMayOF1M/9DOpeYRNVYyPX9n MW4rbzEtJGU6H2FK96xufGFGQhngmyUhPcPqX+njh0A9JxYOTMukqyCG4wQsziy+ +RV2Byt9CUfEunYJO2Y8l6rV/zQbf5ysA5dUpTNsgJHGbXRnWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQ5mqRfevi4HYPsH8MtTyrsIlUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNDZhMjQyZDgtOTZhYy0z NzZhLTk5MjAtNDg2NDM5ZDZlM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwHrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKyHqgit4OQe6LVCk5bb72xcjjF0QWFNTlncAWZtQ4KPLqr5cQrrBqn hTWiudclf6zGI0qwm5MGko4XMONreifVB6fDd2YbmiI50LQVsojLwvQeKDhW75fL KIbyaqfoBSQA0JhQNL6ql5s7kBIz9QWPvyTvLxLnA+cZjeiLTKRFxChYyarBb5QQ Fd8yGmUpRdxFFoyiNusXh9rx/JmlfJ3mf7Y3MA9dqGBbBIaVNw8hK3zcc6+m2P5o iQrZjWeJYLR0K5v6JXllDWKar0d6bhOO1W37aMVTphFspbzIi6fAxjzVLpPU/Klb SqLJeoBUr2S5M71Ld07Hcb8e6DYX2t4= -----END CERTIFICATE-----Generated at Fri Oct 10 16:12:58 2025 by rpki-client