$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/47760afb-ad71-36be-aa85-d7a81aec9d1e.roa File: 47760afb-ad71-36be-aa85-d7a81aec9d1e.roa (raw, json) Hash identifier: 1F7NeaL5/ZHI9QKJHftu2a/ugfJ0CoKzN5+6ZFb/rL8= Subject key identifier: B1:08:A5:0F:D3:99:AA:14:A8:0B:E8:40:47:E2:62:D9:15:EF:EF:AD Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584B461704BE86964A35E6CE9600 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/47760afb-ad71-36be-aa85-d7a81aec9d1e.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 2615 IP address blocks: 147.1.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:17:04:be:86:96:4a:35:e6:ce:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=28a9d23c-9755-4327-9e36-ab763fc17e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:77:5c:4e:13:be:b3:c0:f1:c8:1d:cb:e8:53: f2:6d:dd:88:9d:23:4b:f7:5f:3f:d7:4b:b6:dc:e4: 6d:f8:67:13:b0:53:b4:9f:63:21:3b:e4:80:15:44: 08:9e:04:4c:1f:c9:70:50:3b:dd:e9:cd:44:10:3d: bd:8d:13:5c:51:3f:bf:62:b5:96:5f:20:6e:a5:93: a0:98:f6:0c:2c:9a:c0:8f:15:40:8f:ca:9b:1a:b7: 82:b9:bc:d0:11:31:65:93:9a:cd:2c:9b:85:78:23: ef:d3:07:ef:a3:d3:a5:22:a8:12:f9:52:65:e1:d9: b7:47:e4:2b:19:23:70:5e:17:f6:33:2f:f2:2c:90: 7b:e5:21:a5:b0:a5:6b:38:be:74:c5:0d:c3:26:d3: 00:d1:f2:49:b4:17:65:53:4a:e6:da:92:ba:a5:9f: 18:e4:18:65:af:18:6e:53:6d:e7:20:42:bf:42:3f: 6d:bb:2d:23:ce:e9:4f:05:19:d3:c3:4a:19:3d:0c: de:a0:5c:7e:07:ff:a4:cb:60:58:96:12:57:c1:58: 31:ed:1a:ac:da:90:48:f8:fd:c9:af:f6:d5:14:dc: ea:61:ff:22:92:4c:0d:14:4f:3a:50:42:d0:7c:32: 9e:90:92:c1:b3:b3:e7:92:9f:b5:d5:a4:03:7c:51: bd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:08:A5:0F:D3:99:AA:14:A8:0B:E8:40:47:E2:62:D9:15:EF:EF:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/47760afb-ad71-36be-aa85-d7a81aec9d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:3a:0b:64:7e:db:a0:a7:50:4c:32:61:ed:42:3a:6f:fb:2d: 01:29:49:8a:ab:e4:d5:5b:30:9d:f6:dc:d0:4a:03:a2:30:9c: 09:e6:4a:5f:45:83:83:a1:1c:d7:69:1c:71:5b:6a:1c:36:3b: bf:04:64:1f:51:8a:96:9b:2b:e9:9c:c4:6f:44:b2:1a:43:49: 37:af:c2:52:f9:5c:2a:7b:48:10:88:bf:b1:36:e0:f6:98:e8: 90:21:bd:e3:eb:36:90:00:a7:be:e6:50:e5:85:5f:0b:28:d9: 77:7c:62:5c:73:a8:69:8a:ed:f5:26:2e:b2:8f:aa:8d:48:65: a1:a1:d5:02:48:72:3f:75:f0:19:c2:f2:6c:11:df:88:f7:b5: 85:23:a2:d6:2c:79:3b:45:cc:d0:84:e4:6b:1b:e6:e6:59:53: 75:b4:40:b3:98:a8:cc:75:50:fa:ab:9d:72:ff:41:0d:e3:e4: 86:c1:0e:a4:3d:48:cc:6b:91:6d:d5:69:66:f1:61:c8:26:c9: 58:16:bd:a3:3d:d9:bc:a2:28:55:69:fb:cf:17:30:36:cf:36: a7:21:63:7e:2a:5e:a4:6c:03:b0:0a:a8:95:7d:01:e5:6a:b6: fd:a0:e8:38:66:60:78:bf:c1:16:95:7c:eb:28:a3:23:8c:fc: a2:e4:47:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFwS+hpZKNebOlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk MjhhOWQyM2MtOTc1NS00MzI3LTllMzYtYWI3NjNmYzE3ZTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjndcThO+s8DxyB3L6FPybd2InSNL918/10u2 3ORt+GcTsFO0n2MhO+SAFUQIngRMH8lwUDvd6c1EED29jRNcUT+/YrWWXyBupZOg mPYMLJrAjxVAj8qbGreCubzQETFlk5rNLJuFeCPv0wfvo9OlIqgS+VJl4dm3R+Qr GSNwXhf2My/yLJB75SGlsKVrOL50xQ3DJtMA0fJJtBdlU0rm2pK6pZ8Y5Bhlrxhu U23nIEK/Qj9tuy0jzulPBRnTw0oZPQzeoFx+B/+ky2BYlhJXwVgx7Rqs2pBI+P3J r/bVFNzqYf8ikkwNFE86UELQfDKekJLBs7Pnkp+11aQDfFG9hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEIpQ/TmaoUqAvoQEfiYtkV7++tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNDc3NjBhZmItYWQ3MS0z NmJlLWFhODUtZDdhODFhZWM5ZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQ6C2R+26CnUEwyYe1COm/7LQEpSYqr5NVbMJ323NBKA6IwnAnmSl9F g4OhHNdpHHFbahw2O78EZB9RipabK+mcxG9EshpDSTevwlL5XCp7SBCIv7E24PaY 6JAhvePrNpAAp77mUOWFXwso2Xd8YlxzqGmK7fUmLrKPqo1IZaGh1QJIcj918BnC 8mwR34j3tYUjotYseTtFzNCE5Gsb5uZZU3W0QLOYqMx1UPqrnXL/QQ3j5IbBDqQ9 SMxrkW3VaWbxYcgmyVgWvaM92byiKFVp+88XMDbPNqchY34qXqRsA7AKqJV9AeVq tv2g6DhmYHi/wRaVfOsooyOM/KLkR0I= -----END CERTIFICATE-----Generated at Fri Oct 10 16:13:41 2025 by rpki-client