$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa File: 72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa (raw, json) Hash identifier: Ps4H7TKgn9Wa/RUWt+qHDmyTirSuHOywq83Bs2VUaw4= Subject key identifier: 0A:83:0B:85:65:B2:42:3E:81:19:56:C0:A7:91:03:0F:29:9D:25:FB Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584B583C88E327CF5507C4586100 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 2615 IP address blocks: 147.1.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:88:e3:27:cf:55:07:c4:58:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=c7d19d3a-b35a-4768-adf7-615e1b030375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bf:f8:b2:30:bc:a5:dc:af:14:ac:88:56:41: 1d:6c:f0:6b:cc:c9:b5:41:66:5d:6f:c8:bc:d6:c9: 0e:ab:41:be:92:13:cb:37:60:a9:fb:b7:3f:38:d1: ff:07:8e:25:3a:79:75:db:44:ae:11:f2:6c:9d:b0: f4:15:ae:97:e6:f8:ea:0d:53:9f:de:fd:0f:8d:07: 7e:65:d4:b9:e3:b0:b4:65:7b:15:55:82:2b:34:ac: c9:1f:9b:f3:f5:54:01:90:16:17:5f:57:3e:50:11: c4:8b:06:2e:91:0d:77:2c:77:5f:70:17:a8:f6:77: 91:2d:f8:d2:d0:57:22:10:0b:06:7d:9d:b8:2f:1f: b2:dd:b7:8d:27:3e:92:6f:38:7f:80:70:22:dc:4c: c1:e0:f5:03:6b:0e:97:d1:d0:44:9c:b8:09:2e:e2: fa:f2:53:45:82:03:02:3e:82:31:de:6f:54:bd:be: 98:7a:eb:e8:a0:9a:ab:a9:f8:e7:18:b0:7b:d5:34: d7:c6:e8:a6:dd:cc:e3:fa:af:c9:be:60:b8:f8:83: 9b:dd:47:cc:2a:b4:f7:81:e7:2a:33:ef:10:ae:39: 4c:1b:87:c8:e2:25:20:2d:74:e5:c9:81:b3:53:0f: 2d:b2:cc:74:43:d8:55:76:de:78:f4:09:94:ea:72: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:83:0B:85:65:B2:42:3E:81:19:56:C0:A7:91:03:0F:29:9D:25:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d3:7c:97:25:ea:4d:d8:fa:71:00:e7:cf:0b:32:b1:56:b4: 80:d6:dd:7d:c2:f8:de:0e:c3:45:92:7a:0a:62:d5:4a:40:4b: 4e:da:a9:d0:8e:e9:92:6c:b7:b3:03:af:0d:74:9e:47:8b:f1: 76:fb:e5:d8:42:d8:d9:76:92:14:86:ca:c0:89:5f:7d:db:1c: 43:be:b3:ec:b6:cd:ee:29:11:1b:10:37:89:0c:30:3d:ea:08: 40:e3:9b:8b:e2:a3:9d:05:f2:81:ec:09:5b:b7:84:f2:1a:11: 64:a1:7c:86:d8:62:46:7d:54:a4:8d:3c:50:86:af:49:c8:a9: e6:8d:87:ff:07:09:b0:0f:94:e3:9a:b6:2f:1a:6d:eb:b6:d6: b1:11:5c:c2:5b:b9:66:51:15:6a:04:87:ea:6d:ac:37:73:63: 95:11:da:f7:87:9d:18:99:98:7e:50:18:b5:2a:27:66:13:10: 71:52:0b:7c:5c:39:3f:d9:c3:7e:33:6f:f0:37:f0:71:3c:5c: c8:bb:29:92:14:01:4c:89:28:e7:12:db:e1:5c:cd:08:61:b0: b9:65:f1:85:d8:fc:18:6f:a7:10:40:75:af:40:25:cd:3c:86: 04:42:40:ae:57:f2:0f:6b:eb:a3:c6:45:35:43:02:7e:93:49: 3f:d7:c1:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIjjJ89VB8RYYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YzdkMTlkM2EtYjM1YS00NzY4LWFkZjctNjE1ZTFiMDMwMzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7/4sjC8pdyvFKyIVkEdbPBrzMm1QWZdb8i8 1skOq0G+khPLN2Cp+7c/ONH/B44lOnl120SuEfJsnbD0Fa6X5vjqDVOf3v0PjQd+ ZdS547C0ZXsVVYIrNKzJH5vz9VQBkBYXX1c+UBHEiwYukQ13LHdfcBeo9neRLfjS 0FciEAsGfZ24Lx+y3beNJz6Sbzh/gHAi3EzB4PUDaw6X0dBEnLgJLuL68lNFggMC PoIx3m9Uvb6YeuvooJqrqfjnGLB71TTXxuim3czj+q/JvmC4+IOb3UfMKrT3gecq M+8QrjlMG4fI4iUgLXTlyYGzUw8tssx0Q9hVdt549AmU6nLmRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqDC4VlskI+gRlWwKeRAw8pnSX7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNzJiOWY0ZjAtMGYyMi0z YmFhLTg5OWEtODdiNWUzN2YxZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzTfJcl6k3Y+nEA588LMrFWtIDW3X3C+N4Ow0WSegpi1UpAS07aqdCO 6ZJst7MDrw10nkeL8Xb75dhC2Nl2khSGysCJX33bHEO+s+y2ze4pERsQN4kMMD3q CEDjm4vio50F8oHsCVu3hPIaEWShfIbYYkZ9VKSNPFCGr0nIqeaNh/8HCbAPlOOa ti8abeu21rERXMJbuWZRFWoEh+ptrDdzY5UR2veHnRiZmH5QGLUqJ2YTEHFSC3xc OT/Zw34zb/A38HE8XMi7KZIUAUyJKOcS2+FczQhhsLll8YXY/BhvpxBAda9AJc08 hgRCQK5X8g9r66PGRTVDAn6TST/XwW0= -----END CERTIFICATE-----Generated at Fri Oct 10 16:08:07 2025 by rpki-client