$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/b354ebbc-2421-3278-ae3a-2710d363b5a5.roa File: b354ebbc-2421-3278-ae3a-2710d363b5a5.roa (raw, json) Hash identifier: eeVGeO3mbvD+ND3cMDzL3dJsk0pLXC5WWoXC2Koz3g0= Subject key identifier: DE:31:6E:9F:F3:56:10:52:E1:8F:26:1A:84:F1:96:7F:96:8A:D7:E9 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584B6367371BD359290824537840 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/b354ebbc-2421-3278-ae3a-2710d363b5a5.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 2615 IP address blocks: 147.1.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:37:1b:d3:59:29:08:24:53:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=9b8ebe37-358b-4cbd-8b8c-3303f4a0c762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:96:56:94:b5:6f:a5:0b:54:1c:a3:15:52:34: bd:fa:5b:a4:66:b2:32:8c:06:d0:8b:27:ee:1d:45: 2e:57:39:6d:cd:02:79:5a:5f:2a:6c:21:60:95:f9: 72:67:e2:97:6a:08:05:58:65:a5:7d:5e:69:91:95: 84:5e:b1:37:21:c9:cf:04:23:70:f7:36:e2:0a:20: 93:bd:6f:c5:6d:28:b5:35:00:eb:3c:7d:4b:d2:5f: 18:65:8d:1f:f2:0b:d8:c7:a2:03:4b:76:e0:e9:0d: 74:6b:d0:2c:b3:e7:37:26:ff:3c:a3:fb:fa:47:cd: f1:ff:6a:f1:db:8a:ac:1f:fd:cb:d3:9d:e7:81:4a: 94:d2:6b:48:6a:c3:cc:83:44:73:66:37:3a:4e:a3: 80:bb:65:bb:b5:34:7b:0a:05:91:05:50:db:f1:d4: 22:f7:14:a9:08:c2:f1:7a:bf:cf:50:ff:8e:b5:27: a6:d8:64:8f:ec:64:cf:d1:5d:92:bc:3c:18:a2:5e: 1c:2b:d4:6e:14:f9:ea:3d:42:7b:28:fc:aa:08:8c: 34:39:f6:f8:27:af:d1:fa:70:92:1b:ea:46:49:2d: 20:26:8a:d7:1c:4b:62:45:56:54:6e:c5:cd:d6:c2: c2:55:2a:4b:4f:6d:66:da:26:d7:b5:e0:16:ac:a8: 20:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:31:6E:9F:F3:56:10:52:E1:8F:26:1A:84:F1:96:7F:96:8A:D7:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/b354ebbc-2421-3278-ae3a-2710d363b5a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d6:66:ae:10:da:c0:39:c2:48:89:39:5f:2e:07:d5:15:bb: 49:ab:5e:aa:53:4a:07:e0:a2:2f:2a:a6:53:be:3f:ce:d1:14: 24:b5:6a:17:6b:4c:f3:4d:4a:b9:56:d3:42:87:74:45:25:3a: e1:f3:d7:2b:88:51:91:37:d7:2b:73:cb:32:18:fa:57:3f:50: c6:5a:be:0e:34:6c:fa:77:e8:b8:d1:8d:14:34:54:fb:97:1f: aa:b1:76:2c:93:90:e7:51:f7:f7:1e:26:ce:b9:06:96:2c:a7: 58:92:24:94:ec:44:44:f1:40:2d:12:fb:91:aa:2c:0a:39:ff: 64:37:78:dc:96:57:4d:bd:b5:70:33:eb:37:16:3c:a1:03:5e: ce:25:a3:b1:90:0b:65:e5:84:3e:81:11:f4:c4:9c:a2:e6:fd: ed:a6:8c:59:bc:69:66:da:c8:c9:c3:47:08:2b:51:b8:c8:f0: ae:14:7e:03:8e:70:6f:3b:f1:6d:42:6f:64:43:fc:79:72:c5: b8:c1:f4:2a:47:2a:9b:e8:d0:76:59:74:3c:00:75:d1:20:70: 2d:a5:c8:33:8e:d5:36:b9:5e:92:19:76:c5:c1:20:f0:ef:f8: c2:32:61:71:9f:0f:4e:e6:81:94:51:b4:ee:4b:fa:17:74:40: 7d:b2:50:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZzcb01kpCCRTeEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk OWI4ZWJlMzctMzU4Yi00Y2JkLThiOGMtMzMwM2Y0YTBjNzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpZWlLVvpQtUHKMVUjS9+lukZrIyjAbQiyfu HUUuVzltzQJ5Wl8qbCFglflyZ+KXaggFWGWlfV5pkZWEXrE3IcnPBCNw9zbiCiCT vW/FbSi1NQDrPH1L0l8YZY0f8gvYx6IDS3bg6Q10a9Ass+c3Jv88o/v6R83x/2rx 24qsH/3L053ngUqU0mtIasPMg0RzZjc6TqOAu2W7tTR7CgWRBVDb8dQi9xSpCMLx er/PUP+OtSem2GSP7GTP0V2SvDwYol4cK9RuFPnqPUJ7KPyqCIw0Ofb4J6/R+nCS G+pGSS0gJorXHEtiRVZUbsXN1sLCVSpLT21m2ibXteAWrKggZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4xbp/zVhBS4Y8mGoTxln+WitfpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvYjM1NGViYmMtMjQyMS0z Mjc4LWFlM2EtMjcxMGQzNjNiNWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXWZq4Q2sA5wkiJOV8uB9UVu0mrXqpTSgfgoi8qplO+P87RFCS1ahdr TPNNSrlW00KHdEUlOuHz1yuIUZE31ytzyzIY+lc/UMZavg40bPp36LjRjRQ0VPuX H6qxdiyTkOdR9/ceJs65BpYsp1iSJJTsRETxQC0S+5GqLAo5/2Q3eNyWV029tXAz 6zcWPKEDXs4lo7GQC2XlhD6BEfTEnKLm/e2mjFm8aWbayMnDRwgrUbjI8K4UfgOO cG878W1Cb2RD/HlyxbjB9CpHKpvo0HZZdDwAddEgcC2lyDOO1Ta5XpIZdsXBIPDv +MIyYXGfD07mgZRRtO5L+hd0QH2yUCI= -----END CERTIFICATE-----Generated at Fri Oct 10 16:16:39 2025 by rpki-client