$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/7e5dcca5-e907-3b14-856c-3aa40aece24d.roa File: 7e5dcca5-e907-3b14-856c-3aa40aece24d.roa (raw, json) Hash identifier: EtpBkcZOwq/9ATcU+vnafWojXJkn3jKlGTZQ0rOqVMw= Subject key identifier: 59:E1:63:8D:85:35:8C:8B:F9:A2:C1:0B:A0:5E:F1:31:0A:E2:91:86 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584B6E91F30E72261222FE24EF80 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/7e5dcca5-e907-3b14-856c-3aa40aece24d.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 2615 IP address blocks: 147.1.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:f3:0e:72:26:12:22:fe:24:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=bc2f6dfe-761e-471c-b4a5-58eda4c0c23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:50:90:2b:5b:39:fa:0c:9b:32:51:1e:83:9a: 82:cb:c0:4b:53:91:4e:97:bc:a8:23:70:3d:38:3d: e5:a4:65:c3:21:53:93:16:80:39:dc:7e:d3:a0:6c: 84:7d:7f:74:ec:e4:0e:4a:20:97:86:3f:76:9f:e7: 82:8b:01:b8:fd:6f:18:77:c7:54:9e:2c:1f:e9:a6: 7d:57:38:4d:b3:cd:fd:ca:98:9f:85:37:ac:50:cc: fa:fd:1e:cf:97:82:92:72:7e:3e:ff:1d:c9:2b:cb: 77:27:bd:de:a1:3e:b1:3e:49:94:b2:f0:b9:00:ec: 21:30:d6:5a:3b:e0:31:35:15:8b:97:a2:a3:77:fc: 0e:14:ae:08:71:4b:ed:fc:0c:09:e5:2e:19:f9:5c: ef:1d:96:42:fe:b4:b5:06:99:6a:ac:23:17:51:89: 71:d7:67:e4:47:92:d5:be:b2:c7:3e:55:45:3e:1d: 5d:da:21:bc:24:58:b5:b6:c9:25:eb:03:13:e2:32: fc:e4:ca:b7:11:f7:eb:26:fa:2f:68:9f:77:0f:99: 1b:e2:df:52:83:dc:1b:6d:c4:c3:30:a0:2b:7c:28: 1c:a9:78:20:85:15:0d:17:7f:08:7c:64:76:c5:0f: bd:30:57:3a:4e:5d:2a:fd:5a:6e:d1:43:a0:f9:63: 10:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E1:63:8D:85:35:8C:8B:F9:A2:C1:0B:A0:5E:F1:31:0A:E2:91:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/7e5dcca5-e907-3b14-856c-3aa40aece24d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d4:75:94:61:3e:e4:0c:48:72:26:87:5c:81:05:4d:59:b4: 10:aa:2c:8c:bf:56:79:d6:f6:03:49:c8:3b:7b:63:a5:24:ea: 39:cf:98:52:7b:ee:7f:80:5b:b1:35:b6:f7:06:92:01:a1:41: 2c:10:be:9a:59:6e:0e:d2:1d:8e:be:76:57:18:5d:f1:55:d2: 6f:77:ba:3b:f4:a3:ce:14:41:3a:14:00:22:86:2c:b6:bb:65: f4:21:bd:a7:05:cb:b6:ba:b6:c8:e3:68:db:6a:df:f7:fd:fa: 8e:15:0b:01:2c:d2:43:30:ac:70:9b:10:4f:05:53:6f:21:8d: 17:b3:be:ce:e0:0a:30:44:a1:d3:bf:bc:1a:86:a3:74:0f:69: 4f:a1:b0:f2:0e:0d:e3:d9:bb:61:64:bb:c6:b7:9c:90:f2:18: 5c:0e:02:91:23:24:a2:4e:d8:00:e0:e5:16:8b:2e:a6:75:42: b8:3d:5f:58:86:3a:2f:82:c9:ff:51:d0:10:be:2b:b9:aa:43: b3:33:e1:b6:58:20:41:6a:21:cb:3f:82:53:59:b0:91:58:76: 99:93:15:18:0a:21:13:98:aa:55:2d:40:e2:8c:0a:e0:8a:5d: c3:28:1b:e3:64:37:6b:3c:ce:ba:c7:8d:98:22:c8:98:a8:43: 26:47:d9:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukfMOciYSIv4k74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk YmMyZjZkZmUtNzYxZS00NzFjLWI0YTUtNThlZGE0YzBjMjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVCQK1s5+gybMlEeg5qCy8BLU5FOl7yoI3A9 OD3lpGXDIVOTFoA53H7ToGyEfX907OQOSiCXhj92n+eCiwG4/W8Yd8dUniwf6aZ9 VzhNs839ypifhTesUMz6/R7Pl4KScn4+/x3JK8t3J73eoT6xPkmUsvC5AOwhMNZa O+AxNRWLl6Kjd/wOFK4IcUvt/AwJ5S4Z+VzvHZZC/rS1BplqrCMXUYlx12fkR5LV vrLHPlVFPh1d2iG8JFi1tskl6wMT4jL85Mq3EffrJvovaJ93D5kb4t9Sg9wbbcTD MKArfCgcqXgghRUNF38IfGR2xQ+9MFc6Tl0q/Vpu0UOg+WMQHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnhY42FNYyL+aLBC6Be8TEK4pGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvN2U1ZGNjYTUtZTkwNy0z YjE0LTg1NmMtM2FhNDBhZWNlMjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXUdZRhPuQMSHImh1yBBU1ZtBCqLIy/VnnW9gNJyDt7Y6Uk6jnPmFJ7 7n+AW7E1tvcGkgGhQSwQvppZbg7SHY6+dlcYXfFV0m93ujv0o84UQToUACKGLLa7 ZfQhvacFy7a6tsjjaNtq3/f9+o4VCwEs0kMwrHCbEE8FU28hjRezvs7gCjBEodO/ vBqGo3QPaU+hsPIODePZu2Fku8a3nJDyGFwOApEjJKJO2ADg5RaLLqZ1Qrg9X1iG Oi+Cyf9R0BC+K7mqQ7Mz4bZYIEFqIcs/glNZsJFYdpmTFRgKIROYqlUtQOKMCuCK XcMoG+NkN2s8zrrHjZgiyJioQyZH2Zs= -----END CERTIFICATE-----Generated at Fri Oct 10 16:08:09 2025 by rpki-client