$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8725cbd2-7d4c-3441-b378-daac43948e62.roa File: 8725cbd2-7d4c-3441-b378-daac43948e62.roa (raw, json) Hash identifier: H2lPB3IpFe/g6QmzIA1E7e700baxq0nqja3mZybNENk= Subject key identifier: 6D:F2:58:F7:E1:E2:58:01:81:E1:1F:4F:26:C9:29:D8:65:71:3A:EA Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584B477C9D8F65C273E26A3E9E00 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8725cbd2-7d4c-3441-b378-daac43948e62.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 2615 IP address blocks: 147.1.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:9d:8f:65:c2:73:e2:6a:3e:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=d960fe37-9852-460a-8027-edd18c59b183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8f:8a:83:af:fb:2c:1e:31:9c:40:19:9f:38: a5:51:b7:c7:24:52:3a:a9:5c:c8:e0:11:48:26:4f: e0:86:ca:66:d6:e4:f6:19:74:ab:25:5e:27:6d:27: dd:e3:35:23:97:82:2c:9d:91:29:69:5d:e2:6c:06: 74:f4:46:92:bf:dc:49:29:39:e1:6a:e1:59:65:dc: 40:55:f8:c3:4f:38:ba:59:2b:37:1b:b1:7d:ff:35: 4f:37:82:09:95:ff:ab:07:54:70:45:9d:19:4b:10: 0d:ad:d8:0e:94:c7:aa:63:42:68:9c:53:a9:31:b9: fc:7b:7e:ce:ab:32:9a:6e:61:d3:01:b7:c3:d9:b0: d2:a9:99:0c:5d:ff:33:9a:0d:7d:51:7c:9e:33:40: b3:d0:29:fc:ed:53:13:db:e7:b6:89:f9:ed:31:59: c5:ed:e4:4a:c3:05:b4:54:0b:ec:fd:68:38:d6:68: f4:1c:c3:c8:f6:2c:37:e8:c5:b0:86:6a:82:d1:30: bc:40:40:f8:34:d1:77:a7:06:da:05:da:f7:8d:05: e6:52:1b:ac:6b:2e:56:77:f7:cd:77:a9:4d:17:2f: 36:5b:e0:4e:1d:89:0a:fb:6f:82:f3:0a:89:f9:9d: 80:b9:e7:a5:b2:ce:48:df:1a:c7:db:25:d7:98:b1: 11:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F2:58:F7:E1:E2:58:01:81:E1:1F:4F:26:C9:29:D8:65:71:3A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8725cbd2-7d4c-3441-b378-daac43948e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:9f:5b:72:73:ce:fa:75:c5:a3:27:1d:ee:f8:d8:5c:53:46: 6a:e7:5e:7d:f5:2c:15:7d:e4:42:7c:c3:9f:11:21:de:23:c0: e1:57:5c:de:dc:30:c6:62:65:d1:1a:86:a4:5e:e4:c5:2a:c4: 6d:75:49:e0:e8:2c:c7:42:6e:4c:4f:bf:c6:08:8a:f2:c0:70: a8:e0:bc:cd:09:34:de:30:06:38:7e:ab:4a:62:f6:ea:f7:c9: 62:91:84:d6:60:30:68:16:b5:74:d2:14:65:bc:7f:d3:fc:e9: 20:ba:b9:ce:61:a3:34:ef:49:91:08:ef:fc:a4:93:61:12:ba: c6:81:5a:13:e0:1b:28:52:bc:38:c8:13:18:ab:d8:ef:69:1b: 73:9c:db:e9:8e:d6:77:35:3c:58:e5:44:7b:ed:03:76:10:e5: eb:97:65:01:b0:86:e5:f0:e3:6b:08:f9:19:10:b7:ec:95:57: 9f:84:2b:18:8a:67:92:a3:4f:a1:00:5f:2e:91:e5:cf:6a:c5: 21:89:82:27:72:fb:07:2c:28:36:d6:52:ea:d4:16:87:e7:67: 50:61:58:bb:2c:4a:05:01:ef:fc:21:ed:eb:aa:68:72:e6:98: a1:e4:a6:8c:3d:22:57:97:f9:9a:f3:90:9f:1b:09:c6:f9:78: b5:4f:4f:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJ2PZcJz4mo+ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ZDk2MGZlMzctOTg1Mi00NjBhLTgwMjctZWRkMThjNTliMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY+Kg6/7LB4xnEAZnzilUbfHJFI6qVzI4BFI Jk/ghspm1uT2GXSrJV4nbSfd4zUjl4IsnZEpaV3ibAZ09EaSv9xJKTnhauFZZdxA VfjDTzi6WSs3G7F9/zVPN4IJlf+rB1RwRZ0ZSxANrdgOlMeqY0JonFOpMbn8e37O qzKabmHTAbfD2bDSqZkMXf8zmg19UXyeM0Cz0Cn87VMT2+e2ifntMVnF7eRKwwW0 VAvs/Wg41mj0HMPI9iw36MWwhmqC0TC8QED4NNF3pwbaBdr3jQXmUhusay5Wd/fN d6lNFy82W+BOHYkK+2+C8wqJ+Z2Aueelss5I3xrH2yXXmLERsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3yWPfh4lgBgeEfTybJKdhlcTrqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvODcyNWNiZDItN2Q0Yy0z NDQxLWIzNzgtZGFhYzQzOTQ4ZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACifW3Jzzvp1xaMnHe742FxTRmrnXn31LBV95EJ8w58RId4jwOFXXN7c MMZiZdEahqRe5MUqxG11SeDoLMdCbkxPv8YIivLAcKjgvM0JNN4wBjh+q0pi9ur3 yWKRhNZgMGgWtXTSFGW8f9P86SC6uc5hozTvSZEI7/ykk2ESusaBWhPgGyhSvDjI Exir2O9pG3Oc2+mO1nc1PFjlRHvtA3YQ5euXZQGwhuXw42sI+RkQt+yVV5+EKxiK Z5KjT6EAXy6R5c9qxSGJgidy+wcsKDbWUurUFofnZ1BhWLssSgUB7/wh7euqaHLm mKHkpow9IleX+ZrzkJ8bCcb5eLVPT4U= -----END CERTIFICATE-----Generated at Fri Oct 10 16:13:42 2025 by rpki-client