$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/47760afb-ad71-36be-aa85-d7a81aec9d1e.roa File: 47760afb-ad71-36be-aa85-d7a81aec9d1e.roa (raw, json) Hash identifier: vvBDzs9wDfKZKQdRq/U6O00YvwbM/GEj2JRy+1mdUFo= Subject key identifier: 60:4E:FE:71:1E:CA:36:FE:87:61:70:0B:49:B1:9E:AD:E5:45:78:3E Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584A655B2BF9299440E38AE76740 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/47760afb-ad71-36be-aa85-d7a81aec9d1e.roa Signing time: Thu 03 Jul 2025 13:01:04 +0000 ROA not before: Thu 03 Jul 2025 13:01:04 +0000 ROA not after: Wed 01 Oct 2025 13:01:04 +0000 asID: 2615 IP address blocks: 147.1.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:65:5b:2b:f9:29:94:40:e3:8a:e7:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jul 3 13:01:04 2025 GMT Not After : Oct 1 13:01:04 2025 GMT Subject: CN=d126b001-fcfa-4fb2-bd75-4e3c96006cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:ba:99:e3:10:ee:62:05:25:ad:86:c7:66: 9b:d4:f2:8a:38:46:6b:61:21:2e:0d:3e:07:50:3d: fb:53:d5:38:aa:51:e4:62:69:76:8e:41:fa:f3:99: f0:fb:c0:3a:f5:48:9d:f0:54:31:ac:0d:87:ac:5a: 96:fb:47:85:78:bd:8d:75:7b:4d:12:a1:84:61:68: 2e:8c:0e:51:5c:d1:a5:9e:2d:fa:21:2d:43:90:2a: e2:da:69:35:0d:e1:df:2a:45:cc:a4:ee:d9:b5:f0: 54:b4:43:aa:99:46:fe:ee:0e:0c:b2:b1:83:1d:7e: 06:98:25:fe:12:8c:e9:ef:13:ea:f8:62:98:45:95: a0:27:7e:6d:f8:b7:c1:44:fe:a0:f0:6b:84:e5:b9: ba:2c:0b:c6:d8:51:b2:a3:1c:0a:28:ee:95:2d:80: 4e:5a:75:bd:94:9f:cf:84:98:80:3c:ea:af:74:74: 40:be:00:67:13:91:19:98:21:c5:b7:ea:a8:4a:e1: 46:7e:38:46:95:1f:58:78:27:28:2a:93:69:ff:32: 0f:c1:41:e0:f5:32:82:62:38:25:a7:a7:af:2d:e5: 19:ce:b2:0c:23:f4:d3:bf:7b:6c:2c:38:36:5f:dc: db:07:af:2f:8e:c8:ad:57:7e:b1:b6:7e:98:aa:9f: a6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4E:FE:71:1E:CA:36:FE:87:61:70:0B:49:B1:9E:AD:E5:45:78:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/47760afb-ad71-36be-aa85-d7a81aec9d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:32:de:65:a1:8d:c3:8e:bb:e6:7c:56:35:2b:b2:bf:31:41: b0:f2:a6:ab:96:a0:39:91:fb:64:99:25:1d:02:43:a5:5b:ce: 1d:db:69:6e:11:87:bc:ae:2c:50:fa:1a:74:00:a2:b5:9b:c7: 3e:f8:54:9b:b2:16:b4:58:2d:9b:f3:65:27:83:11:7f:eb:57: 3a:24:21:47:6a:b1:60:33:e1:98:a4:d8:1a:14:69:1a:59:0c: 21:0a:e5:25:2f:e1:3f:6d:92:93:e5:07:0d:36:fd:39:7b:28: 0d:d8:b1:2e:83:ad:8d:f5:19:ff:43:f8:5f:76:db:57:57:da: 91:38:fa:a0:e6:b7:72:71:3e:c1:57:76:c7:0d:36:52:f4:19: f9:15:2a:d4:97:f8:67:80:bf:07:4e:2c:c4:f9:c2:86:8a:a3: 78:11:f6:d5:94:d5:ca:b4:c6:45:c4:62:5d:f9:49:95:83:da: 4a:06:c2:61:55:92:2f:ad:a2:4f:d5:96:c3:24:0a:24:5d:28: 69:2c:9a:65:b4:f7:84:7c:54:32:66:b0:b1:aa:c1:3a:7a:dc: 6f:d6:0e:80:ba:4d:4b:5f:88:c9:6a:57:ad:ae:45:eb:1e:57: 7b:70:c7:bc:2a:50:1d:d1:2d:c9:45:72:36:5f:54:df:ab:31: 6b:6f:5c:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEplWyv5KZRA44rnZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDcwMzEzMDEwNFoXDTI1MTAwMTEzMDEwNFowLzEtMCsGA1UEAxMk ZDEyNmIwMDEtZmNmYS00ZmIyLWJkNzUtNGUzYzk2MDA2Y2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1O6meMQ7mIFJa2Gx2ab1PKKOEZrYSEuDT4H UD37U9U4qlHkYml2jkH685nw+8A69Uid8FQxrA2HrFqW+0eFeL2NdXtNEqGEYWgu jA5RXNGlni36IS1DkCri2mk1DeHfKkXMpO7ZtfBUtEOqmUb+7g4MsrGDHX4GmCX+ Eozp7xPq+GKYRZWgJ35t+LfBRP6g8GuE5bm6LAvG2FGyoxwKKO6VLYBOWnW9lJ/P hJiAPOqvdHRAvgBnE5EZmCHFt+qoSuFGfjhGlR9YeCcoKpNp/zIPwUHg9TKCYjgl p6evLeUZzrIMI/TTv3tsLDg2X9zbB68vjsitV36xtn6Yqp+m/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBO/nEeyjb+h2FwC0mxnq3lRXg+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNDc3NjBhZmItYWQ3MS0z NmJlLWFhODUtZDdhODFhZWM5ZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUy3mWhjcOOu+Z8VjUrsr8xQbDypquWoDmR+2SZJR0CQ6Vbzh3baW4R h7yuLFD6GnQAorWbxz74VJuyFrRYLZvzZSeDEX/rVzokIUdqsWAz4Zik2BoUaRpZ DCEK5SUv4T9tkpPlBw02/Tl7KA3YsS6DrY31Gf9D+F9221dX2pE4+qDmt3JxPsFX dscNNlL0GfkVKtSX+GeAvwdOLMT5woaKo3gR9tWU1cq0xkXEYl35SZWD2koGwmFV ki+tok/VlsMkCiRdKGksmmW094R8VDJmsLGqwTp63G/WDoC6TUtfiMlqV62uRese V3twx7wqUB3RLclFcjZfVN+rMWtvXJ0= -----END CERTIFICATE-----Generated at Tue Jul 8 19:27:47 2025 by rpki-client