$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa File: da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa (raw, json) Hash identifier: BwIW8EmYm5hFEbN61eeAKhbMV4ayDTn+k8ggIzbLfBI= Subject key identifier: E3:32:B5:88:67:CC:70:03:9B:2A:A1:30:D4:59:83:A9:8E:5A:0A:F9 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584B583C889EDA42FCC7921C7480 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 2615 IP address blocks: 147.1.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:88:9e:da:42:fc:c7:92:1c:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=843ae9f1-eab7-4e01-8564-96481c9c7521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cc:72:5e:3d:53:19:89:e9:4c:5b:54:6d:65: eb:8f:0a:ca:9f:b9:2f:17:61:39:c1:54:b1:a0:5f: 25:58:da:e9:21:cb:f7:1f:0f:9a:df:f3:a7:8f:96: 78:90:5c:9c:59:93:c4:90:34:59:38:15:c7:46:b6: fb:66:7f:27:e0:da:a1:3d:ff:f0:ee:a5:d5:13:92: 0d:d3:91:a6:3b:de:9d:97:94:f4:d4:3a:3e:b6:78: db:a7:5e:37:0e:58:65:05:d1:d1:2b:5e:33:d5:42: 0f:bc:a6:1e:0d:e0:f5:31:df:4a:e0:d8:6c:ee:cb: ec:85:19:b9:68:37:d6:ed:79:66:71:57:70:98:68: 71:ba:f1:62:6b:94:45:fe:57:70:79:74:2a:f6:6f: 4e:ba:27:43:ff:54:d6:77:18:e5:03:cf:82:cd:62: 6e:4c:7f:ef:4c:16:6b:91:38:04:60:f4:28:d4:29: a8:2a:bc:03:ad:11:56:e0:d5:33:91:07:41:3d:3a: 8d:03:0b:78:e0:9e:f5:6f:2c:68:be:b6:50:f2:8d: ad:ee:de:88:12:1b:3b:20:1c:42:a4:79:b3:52:7c: 22:2f:99:ac:8f:70:44:13:ae:90:26:b9:be:ba:dd: 82:71:c6:d2:ac:a6:a1:9d:8d:86:55:45:59:ec:18: 32:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:32:B5:88:67:CC:70:03:9B:2A:A1:30:D4:59:83:A9:8E:5A:0A:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ef:de:38:5a:19:d9:65:80:f4:c1:0d:a8:fd:91:86:6f:f3: 34:b1:d2:58:fa:03:b3:68:73:84:6a:ab:f1:00:3e:e0:19:b7: 98:02:d0:28:7c:80:2f:26:52:d4:1b:75:6d:54:48:85:6b:e6: a4:c3:a8:f9:62:a2:07:da:21:e5:25:e0:71:e0:97:9c:91:f1: 48:98:4a:43:ae:eb:5b:01:ed:8e:0f:e5:53:90:81:ca:d1:53: 83:50:e4:79:79:80:00:c1:13:84:e4:77:d1:09:fb:40:7f:01: d2:05:67:e9:12:b7:09:56:ea:a7:60:9e:ba:3d:86:3c:ff:78: 63:e5:b1:f2:7d:93:5f:b1:eb:52:95:90:c2:b0:77:07:2c:3c: 9e:57:43:aa:82:16:d0:e0:27:31:52:e7:ee:d1:6d:26:ba:61: 36:a1:54:4c:63:b0:f6:48:22:0b:04:dd:f2:13:1d:ca:08:f4: 1b:24:df:8b:fa:e6:ee:14:eb:f0:95:e0:a0:28:ce:0b:d4:b9: 16:4d:d9:f6:ce:c5:f7:21:ae:5f:c5:87:12:66:22:c1:e4:15: 8c:cf:9d:81:2f:d5:0b:8c:14:52:40:75:79:d2:98:50:5e:7a: 74:50:fc:14:2e:2d:9b:72:e6:80:40:a8:e4:a5:ab:72:a7:54: 99:a8:f2:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIie2kL8x5IcdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ODQzYWU5ZjEtZWFiNy00ZTAxLTg1NjQtOTY0ODFjOWM3NTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18xyXj1TGYnpTFtUbWXrjwrKn7kvF2E5wVSx oF8lWNrpIcv3Hw+a3/Onj5Z4kFycWZPEkDRZOBXHRrb7Zn8n4NqhPf/w7qXVE5IN 05GmO96dl5T01Do+tnjbp143DlhlBdHRK14z1UIPvKYeDeD1Md9K4Nhs7svshRm5 aDfW7XlmcVdwmGhxuvFia5RF/ldweXQq9m9OuidD/1TWdxjlA8+CzWJuTH/vTBZr kTgEYPQo1CmoKrwDrRFW4NUzkQdBPTqNAwt44J71byxovrZQ8o2t7t6IEhs7IBxC pHmzUnwiL5msj3BEE66QJrm+ut2CccbSrKahnY2GVUVZ7Bgy5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMytYhnzHADmyqhMNRZg6mOWgr5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvZGE0OWU4YTctMDlmNS0z NTYyLTk4YjctMmUyOGJlMGU4YWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7v3jhaGdllgPTBDaj9kYZv8zSx0lj6A7Noc4Rqq/EAPuAZt5gC0Ch8 gC8mUtQbdW1USIVr5qTDqPliogfaIeUl4HHgl5yR8UiYSkOu61sB7Y4P5VOQgcrR U4NQ5Hl5gADBE4Tkd9EJ+0B/AdIFZ+kStwlW6qdgnro9hjz/eGPlsfJ9k1+x61KV kMKwdwcsPJ5XQ6qCFtDgJzFS5+7RbSa6YTahVExjsPZIIgsE3fITHcoI9Bsk34v6 5u4U6/CV4KAozgvUuRZN2fbOxfchrl/FhxJmIsHkFYzPnYEv1QuMFFJAdXnSmFBe enRQ/BQuLZty5oBAqOSlq3KnVJmo8o0= -----END CERTIFICATE-----Generated at Fri Oct 10 16:09:10 2025 by rpki-client