$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/6d6e6880-8099-38d6-ac73-365d3c567564.roa File: 6d6e6880-8099-38d6-ac73-365d3c567564.roa (raw, json) Hash identifier: NFYhGY+3LnxxW4kwHTIVWLn6+9dwdv83PQN2lHxK/gs= Subject key identifier: BE:31:42:06:AF:32:20:C1:DA:6F:10:FD:BB:C2:AC:20:1B:80:58:E7 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584B153C14D1F15A6DE43D2F9780 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/6d6e6880-8099-38d6-ac73-365d3c567564.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 2615 IP address blocks: 147.1.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:14:d1:f1:5a:6d:e4:3d:2f:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=7aacd610-700e-4c17-947a-67fb71778cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:db:b6:76:7f:dd:27:da:31:80:ed:69:9d: b3:3e:e4:10:bb:a6:fb:47:ab:37:08:85:c6:77:dc: 05:7a:b3:2b:40:c8:fa:c1:fd:2a:11:8e:d9:09:a7: ac:f8:49:b8:25:4f:6c:bd:49:30:17:56:7c:fc:e3: b3:86:43:af:c6:68:52:cb:13:ce:7a:56:1d:d8:88: 93:7b:6d:21:ac:56:17:5e:0c:17:7b:e5:e4:eb:f3: 77:35:1a:b6:e1:c8:c0:7b:4f:ff:9b:26:e2:78:79: 36:8e:0f:de:01:f3:b6:53:2e:36:7c:31:5a:7d:84: 97:c5:6d:85:25:6e:0d:a6:4f:9d:6c:4f:bc:4a:fd: 0c:76:66:1f:af:fa:44:15:c5:eb:8d:ce:f2:a9:65: b2:d7:c9:0c:d2:12:b7:6b:1d:e8:83:98:b6:f2:e1: 3a:c5:de:a9:08:63:b8:4e:fb:3e:36:b3:7c:f7:d2: 46:0c:99:72:25:a3:0f:a7:ab:6f:2e:0d:f9:96:31: 4b:7f:4e:7e:49:c4:a0:00:52:bc:f5:fb:94:ab:79: 10:3b:a9:7e:e8:1b:5d:da:fb:71:3d:d4:b0:bd:68: 6e:0e:30:d5:f6:bb:58:22:36:9e:ff:95:13:c0:56: a9:f0:b6:76:b5:eb:0e:00:e4:ce:d2:91:10:72:3b: bb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:31:42:06:AF:32:20:C1:DA:6F:10:FD:BB:C2:AC:20:1B:80:58:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/6d6e6880-8099-38d6-ac73-365d3c567564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:4c:5d:06:38:fa:f4:92:ca:66:e4:f2:45:11:60:91:99:4d: d5:d7:79:2f:a5:8b:ec:18:df:7a:22:80:2a:84:2e:f6:0b:d4: a6:64:8c:74:c6:ad:af:55:2c:18:2e:a0:07:03:9c:6b:76:c2: 52:ae:03:f5:c1:93:8f:43:e4:58:c3:9d:ff:af:41:a0:e8:d4: eb:05:57:28:91:81:7d:d5:66:f9:23:dd:bb:b5:05:66:64:9d: 4e:e4:8a:ee:c6:c6:c3:aa:53:b8:06:05:30:75:64:74:43:68: 3b:95:4c:9d:ac:09:b6:b7:1c:f7:5d:11:9d:ce:ee:38:fe:a4: a9:c8:c9:10:93:19:9b:62:1f:86:25:16:39:b3:45:c8:1f:f2: 73:18:2a:e0:87:6b:75:b6:27:66:af:7d:3c:01:4c:72:fd:3a: f4:f8:ed:63:c5:07:28:fc:33:57:cc:b1:a7:8d:23:21:c6:7b: 85:5d:ba:1d:b9:84:c7:52:50:29:50:70:b2:7e:f7:c5:bd:f0: be:ac:7c:55:93:ab:eb:13:a9:6d:53:cd:14:52:72:f6:f4:2e: 60:40:8c:f6:2e:bb:bb:de:df:55:f1:1c:f8:39:ed:56:43:d3: 74:9b:71:32:27:98:ae:a7:58:17:75:96:8a:57:28:9c:76:e4: f8:79:17:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBTR8Vpt5D0vl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk N2FhY2Q2MTAtNzAwZS00YzE3LTk0N2EtNjdmYjcxNzc4Y2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3zbtnZ/3SfaMYDtaZ2zPuQQu6b7R6s3CIXG d9wFerMrQMj6wf0qEY7ZCaes+Em4JU9svUkwF1Z8/OOzhkOvxmhSyxPOelYd2IiT e20hrFYXXgwXe+Xk6/N3NRq24cjAe0//mybieHk2jg/eAfO2Uy42fDFafYSXxW2F JW4Npk+dbE+8Sv0MdmYfr/pEFcXrjc7yqWWy18kM0hK3ax3og5i28uE6xd6pCGO4 Tvs+NrN899JGDJlyJaMPp6tvLg35ljFLf05+ScSgAFK89fuUq3kQO6l+6Btd2vtx PdSwvWhuDjDV9rtYIjae/5UTwFap8LZ2tesOAOTO0pEQcju7OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4xQgavMiDB2m8Q/bvCrCAbgFjnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNmQ2ZTY4ODAtODA5OS0z OGQ2LWFjNzMtMzY1ZDNjNTY3NTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwH1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdMXQY4+vSSymbk8kURYJGZTdXXeS+li+wY33oigCqELvYL1KZkjHTG ra9VLBguoAcDnGt2wlKuA/XBk49D5FjDnf+vQaDo1OsFVyiRgX3VZvkj3bu1BWZk nU7kiu7GxsOqU7gGBTB1ZHRDaDuVTJ2sCba3HPddEZ3O7jj+pKnIyRCTGZtiH4Yl FjmzRcgf8nMYKuCHa3W2J2avfTwBTHL9OvT47WPFByj8M1fMsaeNIyHGe4Vduh25 hMdSUClQcLJ+98W98L6sfFWTq+sTqW1TzRRScvb0LmBAjPYuu7ve31XxHPg57VZD 03SbcTInmK6nWBd1lopXKJx25Ph5F0o= -----END CERTIFICATE-----Generated at Fri Oct 10 16:16:41 2025 by rpki-client