$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/9ba08d73-b505-3fa5-a35b-23519c486b5c.roa File: 9ba08d73-b505-3fa5-a35b-23519c486b5c.roa (raw, json) Hash identifier: GLyUsbfK7Sjb21zg56ObLiasqBD2dn7UyE45kw7AQb0= Subject key identifier: F1:8D:A1:D2:F2:5D:7B:8E:A1:AB:2F:2A:B8:44:BD:34:1F:32:42:B1 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584B6E91F82A880D5D0DD6E39E00 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/9ba08d73-b505-3fa5-a35b-23519c486b5c.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 2615 IP address blocks: 147.1.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:f8:2a:88:0d:5d:0d:d6:e3:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=f977cbf2-c5dc-472f-b8d7-e660cd8739e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:58:bd:0a:44:62:79:96:88:b0:23:33:94:ed: 0a:50:70:87:3b:b9:5b:39:a7:12:0e:de:35:42:f9: 71:db:9d:39:92:92:e5:9f:fd:ee:82:7a:f8:9d:4e: 0d:58:7e:c5:f0:b5:9a:c1:26:7e:9e:d4:86:b0:e1: 56:4b:89:dc:0e:6c:fa:d5:c9:d3:66:47:47:f4:9f: 01:d3:76:15:99:a0:fb:fd:6a:1b:28:c7:92:da:c5: 37:43:84:4b:51:6d:b4:df:d4:ff:40:71:35:5a:79: bc:4c:49:3c:75:d2:fa:a2:8c:c9:74:7a:14:f7:59: 70:af:c7:8a:b0:ea:68:36:ab:e1:db:9f:cd:73:c3: c8:75:c5:da:2f:c7:3a:88:c0:72:08:4b:0e:63:b6: 0f:9c:00:fe:21:46:87:b2:d4:2b:a3:50:e7:5e:ef: 16:3b:c7:72:ce:03:5e:83:91:b4:f7:ea:9a:ad:82: 27:7d:7a:43:45:12:2f:dd:a2:86:07:36:aa:a7:76: 4a:0f:86:88:0d:0b:43:d6:80:9e:4d:eb:19:02:4b: 6c:fb:6b:a4:1d:49:75:5c:4e:90:40:a1:a8:9a:4d: 8a:bb:7d:0c:a5:3d:06:a6:75:e7:00:21:dd:27:5b: 06:07:81:b8:b9:00:f4:3c:2b:e1:ac:2a:7a:6c:9d: f0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8D:A1:D2:F2:5D:7B:8E:A1:AB:2F:2A:B8:44:BD:34:1F:32:42:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/9ba08d73-b505-3fa5-a35b-23519c486b5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:a1:5c:a8:ea:c2:41:d3:ef:4c:67:6e:90:07:03:4f:5b:eb: a4:45:03:9b:e0:30:7a:fa:43:d4:dc:c9:0f:85:ac:1f:6a:32: a0:2b:ef:95:65:71:05:67:4b:07:d1:69:d7:d4:f5:2a:83:43: 4a:b8:7b:46:6c:e2:16:1e:80:4e:45:58:e4:b7:55:46:bd:c1: a2:4f:a3:a3:bd:5a:55:98:ff:71:74:e3:d3:0a:7a:7b:64:ba: 9c:cc:bc:f6:bb:35:1c:ed:5f:23:e4:2c:86:71:c8:d9:d9:18: f5:61:0d:1d:63:3b:8a:86:94:df:db:1b:6c:35:7b:d1:f0:96: c2:9d:27:09:45:53:e4:dd:99:b9:50:b4:51:23:88:01:d5:14: 42:00:0d:e4:6d:36:90:b8:a8:af:b4:c2:9e:d0:7a:f0:6e:7d: df:e9:d5:d7:b2:a0:74:76:f2:06:1f:13:cc:09:e6:e8:71:16: 92:2b:bf:85:b6:b5:b1:c2:30:4d:15:c4:29:9a:bd:33:6f:c7: 6d:64:0e:87:9e:9a:05:3a:9f:a5:bd:cb:cc:23:f7:f8:26:68: 41:63:94:35:38:c8:3c:9f:fa:e5:10:08:a1:19:10:b6:b0:a5: ca:82:a3:91:01:2e:79:34:da:fa:62:f6:5e:9c:dd:65:38:a5: a0:03:9b:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukfgqiA1dDdbjngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk Zjk3N2NiZjItYzVkYy00NzJmLWI4ZDctZTY2MGNkODczOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1i9CkRieZaIsCMzlO0KUHCHO7lbOacSDt41 Qvlx2505kpLln/3ugnr4nU4NWH7F8LWawSZ+ntSGsOFWS4ncDmz61cnTZkdH9J8B 03YVmaD7/WobKMeS2sU3Q4RLUW2039T/QHE1Wnm8TEk8ddL6oozJdHoU91lwr8eK sOpoNqvh25/Nc8PIdcXaL8c6iMByCEsOY7YPnAD+IUaHstQro1DnXu8WO8dyzgNe g5G09+qarYInfXpDRRIv3aKGBzaqp3ZKD4aIDQtD1oCeTesZAkts+2ukHUl1XE6Q QKGomk2Ku30MpT0GpnXnACHdJ1sGB4G4uQD0PCvhrCp6bJ3w8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGNodLyXXuOoasvKrhEvTQfMkKxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvOWJhMDhkNzMtYjUwNS0z ZmE1LWEzNWItMjM1MTljNDg2YjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwESMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+hXKjqwkHT70xnbpAHA09b66RFA5vgMHr6Q9TcyQ+FrB9qMqAr75Vl cQVnSwfRadfU9SqDQ0q4e0Zs4hYegE5FWOS3VUa9waJPo6O9WlWY/3F049MKentk upzMvPa7NRztXyPkLIZxyNnZGPVhDR1jO4qGlN/bG2w1e9HwlsKdJwlFU+TdmblQ tFEjiAHVFEIADeRtNpC4qK+0wp7QevBufd/p1deyoHR28gYfE8wJ5uhxFpIrv4W2 tbHCME0VxCmavTNvx21kDoeemgU6n6W9y8wj9/gmaEFjlDU4yDyf+uUQCKEZELaw pcqCo5EBLnk02vpi9l6c3WU4paADm6w= -----END CERTIFICATE-----Generated at Fri Oct 10 16:09:13 2025 by rpki-client