$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8725cbd2-7d4c-3441-b378-daac43948e62.roa File: 8725cbd2-7d4c-3441-b378-daac43948e62.roa (raw, json) Hash identifier: Q2S1x0Vs3+5t6Yan+Ey8a751D7PArGmReXO3eow2XSU= Subject key identifier: 9D:E1:C8:98:92:BD:71:3A:CA:E1:78:3C:08:1F:40:DE:21:D0:BA:09 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584A66C066DF50F04DDE4DDBEE00 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8725cbd2-7d4c-3441-b378-daac43948e62.roa Signing time: Fri 04 Jul 2025 01:00:49 +0000 ROA not before: Fri 04 Jul 2025 01:00:49 +0000 ROA not after: Thu 02 Oct 2025 01:00:49 +0000 asID: 2615 IP address blocks: 147.1.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:c0:66:df:50:f0:4d:de:4d:db:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jul 4 01:00:49 2025 GMT Not After : Oct 2 01:00:49 2025 GMT Subject: CN=4988f4a4-a704-462c-ba7f-cb8e0dcec78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5d:d1:93:d0:61:48:16:72:0b:d0:4c:c2:17: 45:37:ab:96:47:c4:84:3a:07:c8:0f:39:b1:e8:2d: 13:54:fd:76:ba:ee:40:2f:8b:01:f5:a4:7a:ec:3b: 1e:b7:8d:f3:25:16:ec:55:e5:d8:61:b8:b2:e1:58: 5b:1b:46:8b:86:10:36:4b:2c:c3:bf:12:ff:d0:f3: 0a:ef:34:d0:26:5a:ea:56:11:1c:40:7c:d5:38:a0: c4:55:bb:0c:5f:1a:29:55:30:8c:08:98:37:46:57: a9:b7:1e:a2:fb:ec:75:dc:d1:e4:b5:1e:91:56:20: 80:89:48:04:38:43:ab:ed:2c:ad:c8:2c:35:40:fc: b4:ad:db:21:e7:1a:c4:fa:6b:4f:9f:41:49:49:46: 7b:f9:6f:4a:08:36:6b:2b:27:2e:37:ff:88:c8:3c: 26:66:c6:e1:15:7e:63:00:bc:b1:5b:35:a1:0f:9a: ec:65:cd:67:67:32:75:5e:9b:dc:af:25:e8:71:f5: 22:88:4f:b3:1e:28:28:3c:47:8b:0d:80:78:6a:39: e0:75:77:c0:a0:55:af:df:d6:4a:ae:54:0e:ff:ca: 23:33:22:f4:af:a7:80:4c:ba:46:14:7e:7d:2f:88: 6d:ef:ee:e0:fc:d2:0f:8c:9e:7f:ec:af:0c:b8:6f: 3f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E1:C8:98:92:BD:71:3A:CA:E1:78:3C:08:1F:40:DE:21:D0:BA:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8725cbd2-7d4c-3441-b378-daac43948e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:47:bb:ed:f5:88:d3:b3:af:d2:89:fb:39:b3:bb:15:54:1d: 3b:2b:44:16:9e:61:d4:4d:29:5e:2a:2a:51:1f:48:66:ea:39: fd:6d:6d:c2:80:d7:36:5d:da:53:7c:c8:25:5f:56:27:76:22: 14:e2:c0:95:7c:3a:53:44:2f:c9:18:2f:b2:96:e5:73:15:91: a6:2c:f0:4c:13:f1:92:f1:8c:35:06:d6:e0:ec:ed:ba:9a:40: b9:76:46:90:db:c9:a7:8b:e0:d8:60:05:f5:8f:ff:13:e4:77: ab:63:b8:69:86:ac:31:fc:ce:80:b9:4b:c3:a7:0b:29:35:bb: b2:bf:4f:37:73:c5:4f:da:23:88:87:ad:6d:30:0e:ff:0a:72: 67:ef:50:d9:e2:fd:70:69:aa:4d:99:a6:f4:2a:d6:57:3a:96: d7:56:d0:50:88:bb:1d:63:a0:87:de:65:1a:03:e7:31:15:79: 25:16:e6:a8:9f:fe:fe:fa:56:e2:d3:47:c9:0f:af:a1:af:50: 5b:3e:16:de:e1:6d:04:40:d1:a3:60:b3:1a:10:5f:7b:fe:54: f8:32:d4:b4:36:4e:64:62:89:27:6d:30:43:01:83:60:9b:0f: 1f:b1:0a:d7:68:54:d9:3e:9d:2b:52:95:10:a8:41:e4:4d:2b: f6:bd:77:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwGbfUPBN3k3b7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk NDk4OGY0YTQtYTcwNC00NjJjLWJhN2YtY2I4ZTBkY2VjNzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml3Rk9BhSBZyC9BMwhdFN6uWR8SEOgfIDzmx 6C0TVP12uu5AL4sB9aR67Dset43zJRbsVeXYYbiy4VhbG0aLhhA2SyzDvxL/0PMK 7zTQJlrqVhEcQHzVOKDEVbsMXxopVTCMCJg3Rleptx6i++x13NHktR6RViCAiUgE OEOr7SytyCw1QPy0rdsh5xrE+mtPn0FJSUZ7+W9KCDZrKycuN/+IyDwmZsbhFX5j ALyxWzWhD5rsZc1nZzJ1XpvcryXocfUiiE+zHigoPEeLDYB4ajngdXfAoFWv39ZK rlQO/8ojMyL0r6eATLpGFH59L4ht7+7g/NIPjJ5/7K8MuG8/TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3hyJiSvXE6yuF4PAgfQN4h0LoJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvODcyNWNiZDItN2Q0Yy0z NDQxLWIzNzgtZGFhYzQzOTQ4ZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5Hu+31iNOzr9KJ+zmzuxVUHTsrRBaeYdRNKV4qKlEfSGbqOf1tbcKA 1zZd2lN8yCVfVid2IhTiwJV8OlNEL8kYL7KW5XMVkaYs8EwT8ZLxjDUG1uDs7bqa QLl2RpDbyaeL4NhgBfWP/xPkd6tjuGmGrDH8zoC5S8OnCyk1u7K/TzdzxU/aI4iH rW0wDv8KcmfvUNni/XBpqk2ZpvQq1lc6ltdW0FCIux1joIfeZRoD5zEVeSUW5qif /v76VuLTR8kPr6GvUFs+Ft7hbQRA0aNgsxoQX3v+VPgy1LQ2TmRiiSdtMEMBg2Cb Dx+xCtdoVNk+nStSlRCoQeRNK/a9d5A= -----END CERTIFICATE-----Generated at Tue Jul 8 19:23:11 2025 by rpki-client