$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/4b30c105-62c0-379d-a807-bfe8de95ad8c.roa File: 4b30c105-62c0-379d-a807-bfe8de95ad8c.roa (raw, json) Hash identifier: TbhU/pTjUcFGSBexJAtlqhFOqVDJ50rakJw04NkA3kw= Subject key identifier: 1E:AC:F4:B3:AF:A5:A1:40:29:38:06:C9:7C:EC:C0:1C:0A:29:21:5E Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584B6E91F73D0CB8407D90751090 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/4b30c105-62c0-379d-a807-bfe8de95ad8c.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 2615 IP address blocks: 147.1.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:f7:3d:0c:b8:40:7d:90:75:10:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=23c49941-0ed2-441e-8693-ed8f51a66f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f4:74:ae:71:b8:72:f9:ed:18:7d:7b:99:ee: ef:06:fb:fc:7f:67:81:a0:73:52:a7:fe:f3:2d:76: 19:ff:f6:9c:f3:a1:19:eb:93:79:a6:76:95:1e:ab: 60:93:53:96:c5:8f:59:7d:06:40:e8:01:2e:7e:61: f0:cf:72:73:92:bf:fe:da:fd:eb:09:c4:f2:40:91: 66:4a:1b:d8:1d:4f:18:47:5b:f1:6d:49:14:43:71: 98:d9:21:68:cd:9a:5f:09:03:10:67:5a:59:cc:f0: 63:d6:10:29:ef:29:b5:c6:d3:e2:0f:ff:b7:e1:6d: dd:a4:39:a3:70:b6:ec:e1:7e:cb:25:d5:fb:57:47: 11:b6:a7:35:99:13:3c:4c:f8:8a:13:8b:88:0b:fc: fe:d3:3e:b2:c4:45:65:22:f0:0f:4a:1f:8c:45:b3: 12:d5:a9:1d:25:4d:f4:fd:67:6e:b7:61:0d:d3:3b: 4d:cb:7f:1d:80:8e:26:54:e8:97:a6:b1:7e:d5:17: 9c:b3:52:fc:fc:c7:34:cf:12:83:80:76:e9:0d:8f: 30:4a:8e:b2:7a:57:ec:cc:0a:10:f7:ad:c1:da:93: b0:93:7e:51:14:18:75:fa:13:21:f9:d5:ee:a1:08: 2b:0e:5f:29:cd:24:44:54:a0:aa:cd:32:43:ec:6d: c8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AC:F4:B3:AF:A5:A1:40:29:38:06:C9:7C:EC:C0:1C:0A:29:21:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/4b30c105-62c0-379d-a807-bfe8de95ad8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e3:62:bb:6f:cb:9f:19:43:26:8d:3c:bf:9d:dd:e9:be:12: 58:b5:e4:ca:4c:3b:bf:cd:14:93:ce:40:57:a6:3e:f7:c0:b1: 47:b5:ad:70:1b:b9:00:e5:cf:4a:e2:99:65:a1:d3:fb:80:32: 08:5b:30:07:3f:84:44:06:85:df:f5:1d:75:ba:c7:ad:38:92: 13:ab:cf:a5:3d:25:21:0d:3c:cc:f0:d4:26:7e:a4:5d:b2:26: c3:18:fa:ee:af:6a:52:08:88:0c:50:c2:f3:cd:74:7f:16:5f: ca:ef:f8:bb:74:c0:be:f2:ad:fb:fc:44:92:13:60:13:e9:b1: c1:79:0e:5f:4c:15:b9:c6:31:3f:0e:56:25:c2:df:f4:ae:79: 23:33:c9:84:1c:00:3f:2a:0f:bd:cd:15:b5:0c:bc:58:c3:57: 13:be:f7:77:56:25:d0:72:36:28:f3:ce:88:02:11:49:22:f0: e4:f7:77:db:bd:53:f3:1e:5e:c1:5c:32:b7:2c:21:6a:5b:b8: 26:04:b0:c9:55:f5:f7:cc:03:46:69:3e:2a:08:e1:31:7c:1b: 42:3b:e1:46:e8:36:90:e6:e9:03:71:8a:32:e4:61:30:db:3c: dd:2d:e4:5c:70:a1:bf:d7:72:71:19:bf:e8:cd:a0:fa:20:5b: 73:af:92:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukfc9DLhAfZB1EJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk MjNjNDk5NDEtMGVkMi00NDFlLTg2OTMtZWQ4ZjUxYTY2ZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPR0rnG4cvntGH17me7vBvv8f2eBoHNSp/7z LXYZ//ac86EZ65N5pnaVHqtgk1OWxY9ZfQZA6AEufmHwz3Jzkr/+2v3rCcTyQJFm ShvYHU8YR1vxbUkUQ3GY2SFozZpfCQMQZ1pZzPBj1hAp7ym1xtPiD/+34W3dpDmj cLbs4X7LJdX7V0cRtqc1mRM8TPiKE4uIC/z+0z6yxEVlIvAPSh+MRbMS1akdJU30 /Wdut2EN0ztNy38dgI4mVOiXprF+1Recs1L8/Mc0zxKDgHbpDY8wSo6yelfszAoQ 963B2pOwk35RFBh1+hMh+dXuoQgrDl8pzSREVKCqzTJD7G3ItwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6s9LOvpaFAKTgGyXzswBwKKSFeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNGIzMGMxMDUtNjJjMC0z NzlkLWE4MDctYmZlOGRlOTVhZDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwFKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTjYrtvy58ZQyaNPL+d3em+Eli15MpMO7/NFJPOQFemPvfAsUe1rXAb uQDlz0rimWWh0/uAMghbMAc/hEQGhd/1HXW6x604khOrz6U9JSENPMzw1CZ+pF2y JsMY+u6valIIiAxQwvPNdH8WX8rv+Lt0wL7yrfv8RJITYBPpscF5Dl9MFbnGMT8O ViXC3/SueSMzyYQcAD8qD73NFbUMvFjDVxO+93dWJdByNijzzogCEUki8OT3d9u9 U/MeXsFcMrcsIWpbuCYEsMlV9ffMA0ZpPioI4TF8G0I74UboNpDm6QNxijLkYTDb PN0t5Fxwob/XcnEZv+jNoPogW3OvklU= -----END CERTIFICATE-----Generated at Fri Oct 10 16:15:29 2025 by rpki-client