$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/517d4d16-8ae0-3416-b488-37d337e7455b.roa File: 517d4d16-8ae0-3416-b488-37d337e7455b.roa (raw, json) Hash identifier: PvGy7g0XRSuaQtlnarBvsrFVyA/VitzDXSjUykSFt2w= Subject key identifier: 07:17:21:A6:73:55:65:0E:0C:EC:05:02:5E:47:D2:8F:B0:AA:26:6F Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584B153C26BFE73233153501E780 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/517d4d16-8ae0-3416-b488-37d337e7455b.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 2615 IP address blocks: 147.1.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:26:bf:e7:32:33:15:35:01:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=01bcac96-61b7-498b-ba53-5dfe04229582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:75:58:0e:c8:9a:29:27:af:24:3f:17:2c:3a: 3b:ee:9f:86:26:ae:7c:e5:69:21:d2:0d:4d:c4:76: 71:b0:88:10:bf:ca:f5:02:0d:ca:72:ad:54:8f:b2: bb:9f:24:e7:a9:d5:c4:04:19:ea:27:f8:23:d2:4e: 00:37:55:3a:20:43:cb:16:cf:f7:03:eb:e6:63:18: d7:42:0a:9c:ed:5a:93:25:6e:2c:00:1a:11:9c:21: d8:8d:12:40:61:01:8b:57:b3:5b:40:5c:9b:97:c5: 8d:fd:db:4d:16:1b:68:c1:8d:25:f1:79:e1:af:46: f1:f2:4c:18:2c:d6:b3:c4:c6:11:e2:ff:17:1c:d2: 08:e7:7a:a2:9c:03:8e:21:22:be:9a:d7:41:29:0e: ee:5b:f2:56:c9:cd:3d:9f:1d:bc:fa:07:ba:2a:ba: a2:2e:50:e6:28:cd:e6:dd:04:bb:27:bf:4d:39:dd: 6e:d2:7c:15:9a:7f:b9:c3:66:b1:fd:e1:98:7d:dd: 39:60:d1:e6:05:7d:1c:d7:65:ef:d7:a1:ce:b2:ed: b6:91:19:b0:dd:db:3f:b8:70:ee:b0:97:1c:51:b2: ca:de:a9:ce:80:a4:a7:4f:dd:10:d4:4c:9d:bb:d9: 97:af:a9:05:e4:be:cb:f7:0c:c8:5f:bf:cf:05:86: cc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:17:21:A6:73:55:65:0E:0C:EC:05:02:5E:47:D2:8F:B0:AA:26:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/517d4d16-8ae0-3416-b488-37d337e7455b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:12:32:ca:18:87:db:b2:48:a8:14:f4:76:1c:bc:93:8e:93: 74:53:98:f7:56:4b:65:4d:8a:99:63:ff:d4:dd:d0:12:9e:d0: 47:76:4b:35:84:62:c5:00:54:4c:40:e4:f5:1c:3d:db:83:22: 48:45:44:ee:57:9c:3e:a2:6c:75:a2:33:88:2b:11:a2:54:b7: 11:a1:4d:67:00:2f:39:db:55:80:8c:73:08:a3:d3:e7:a4:d2: 0a:44:45:f5:8a:4e:19:9d:c1:f2:a6:0b:f6:48:e1:7b:69:aa: dd:fc:b1:81:1d:87:1b:98:19:6f:36:17:ee:2e:49:07:10:bb: 14:c7:8b:01:b1:a0:a8:1c:0d:e8:ef:bc:24:51:79:28:b4:18: 25:4b:a5:d6:62:77:1f:e0:34:f8:fd:b9:b9:e7:50:79:10:d1: 11:ca:21:d4:d7:e7:1b:07:f2:a4:95:d7:cf:c7:73:9f:b3:1b: e4:d5:13:9e:72:cc:b1:a3:15:8e:f9:fd:3f:94:5f:25:ea:da: a9:3b:d7:6a:8d:e9:34:67:b4:80:46:3c:87:ce:2b:71:1d:17: 02:82:f7:c1:07:5f:78:69:af:bf:d1:fd:a7:61:76:54:fe:6f: f6:d4:64:7b:b7:6d:d9:3c:59:2c:6a:29:1c:87:65:5c:e2:7a: e2:7e:d6:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCa/5zIzFTUB54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk MDFiY2FjOTYtNjFiNy00OThiLWJhNTMtNWRmZTA0MjI5NTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHVYDsiaKSevJD8XLDo77p+GJq585Wkh0g1N xHZxsIgQv8r1Ag3Kcq1Uj7K7nyTnqdXEBBnqJ/gj0k4AN1U6IEPLFs/3A+vmYxjX Qgqc7VqTJW4sABoRnCHYjRJAYQGLV7NbQFybl8WN/dtNFhtowY0l8Xnhr0bx8kwY LNazxMYR4v8XHNII53qinAOOISK+mtdBKQ7uW/JWyc09nx28+ge6KrqiLlDmKM3m 3QS7J79NOd1u0nwVmn+5w2ax/eGYfd05YNHmBX0c12Xv16HOsu22kRmw3ds/uHDu sJccUbLK3qnOgKSnT90Q1Eydu9mXr6kF5L7L9wzIX7/PBYbMjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcXIaZzVWUODOwFAl5H0o+wqiZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNTE3ZDRkMTYtOGFlMC0z NDE2LWI0ODgtMzdkMzM3ZTc0NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwHtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkSMsoYh9uySKgU9HYcvJOOk3RTmPdWS2VNiplj/9Td0BKe0Ed2SzWE YsUAVExA5PUcPduDIkhFRO5XnD6ibHWiM4grEaJUtxGhTWcALznbVYCMcwij0+ek 0gpERfWKThmdwfKmC/ZI4Xtpqt38sYEdhxuYGW82F+4uSQcQuxTHiwGxoKgcDejv vCRReSi0GCVLpdZidx/gNPj9ubnnUHkQ0RHKIdTX5xsH8qSV18/Hc5+zG+TVE55y zLGjFY75/T+UXyXq2qk712qN6TRntIBGPIfOK3EdFwKC98EHX3hpr7/R/adhdlT+ b/bUZHu3bdk8WSxqKRyHZVzieuJ+1sk= -----END CERTIFICATE-----Generated at Fri Oct 10 16:16:39 2025 by rpki-client