$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8acd6ab8-bc00-37fe-9b47-9b25b7fb1a99.roa File: 8acd6ab8-bc00-37fe-9b47-9b25b7fb1a99.roa (raw, json) Hash identifier: jT16iV4u3dNgmqPtjdMJVShrV263YToMoOpawvUQp+c= Subject key identifier: 2D:18:A8:71:2E:EE:9B:AC:22:F8:DE:B2:AB:CA:60:A0:BF:C4:56:77 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584A655B2C2142B98EFD011AFA60 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8acd6ab8-bc00-37fe-9b47-9b25b7fb1a99.roa Signing time: Thu 03 Jul 2025 13:01:04 +0000 ROA not before: Thu 03 Jul 2025 13:01:04 +0000 ROA not after: Wed 01 Oct 2025 13:01:04 +0000 asID: 2615 IP address blocks: 147.1.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:65:5b:2c:21:42:b9:8e:fd:01:1a:fa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jul 3 13:01:04 2025 GMT Not After : Oct 1 13:01:04 2025 GMT Subject: CN=2edbb720-43ae-4b55-9797-7b3560448b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:55:cc:2e:6a:68:18:56:32:5c:d1:29:00:61: 91:60:9f:ee:5a:c3:64:d7:01:96:21:2f:26:ad:86: 19:8f:9e:37:b8:ea:76:4b:9e:b4:43:a4:bd:87:f6: 68:c2:47:77:b7:3c:72:ca:aa:32:dd:46:4b:61:1b: 2a:dc:db:e1:ea:ce:e5:0c:2b:ff:a2:ef:74:1d:17: 8c:59:d8:f3:12:6d:05:99:f6:12:db:10:ef:02:98: 18:0f:da:5f:20:93:1a:79:f7:ae:90:5e:1e:6e:f0: 6e:b6:af:69:a8:61:21:43:a7:f2:89:06:b7:a0:98: 18:43:c6:7c:20:37:43:78:00:85:37:35:54:4e:20: bf:05:1e:4f:e6:4f:9f:33:77:f7:57:fd:31:0b:53: 79:be:5c:06:aa:62:80:07:55:15:d5:1b:cf:5f:dc: cd:13:ca:a2:b6:72:91:2d:f1:8a:e5:fd:79:2f:45: 35:27:c7:4d:49:85:da:f4:09:b8:29:81:2b:03:c1: c7:31:50:48:2a:ee:1a:fd:41:db:c1:91:c8:21:96: f9:58:4a:7e:99:f9:b1:d8:5c:51:25:52:26:92:cd: 97:91:98:91:02:4b:cc:d0:95:ad:04:7b:1e:3e:70: f3:9f:86:56:f7:da:92:cc:68:9c:2b:c0:9b:d9:49: f8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:18:A8:71:2E:EE:9B:AC:22:F8:DE:B2:AB:CA:60:A0:BF:C4:56:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8acd6ab8-bc00-37fe-9b47-9b25b7fb1a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:0d:fc:72:c1:a6:d9:cf:bc:8c:96:51:9f:e6:6d:d6:96:4d: 4e:5e:79:be:cf:86:eb:3b:54:0a:fb:64:26:e2:27:ed:64:d6: 37:91:d3:0b:c2:f7:73:d2:b5:54:59:97:94:e2:07:cd:10:ec: e1:a4:f3:6c:27:eb:e8:6b:45:a6:a2:4b:a5:97:10:b1:c0:a6: 06:2d:4d:7e:71:49:af:19:59:26:f0:d5:44:09:fb:71:63:0c: 7c:20:0c:4c:68:70:8a:85:f0:9e:be:32:ae:08:8b:c6:05:28: 16:cb:6d:85:3a:62:01:fe:ed:46:75:c6:e3:d1:1f:36:4f:b1: 7c:ea:04:0e:49:1a:e6:c7:92:f6:66:a9:55:e5:5c:1a:59:56: 14:14:0a:b8:8a:3f:48:d7:f1:06:b0:eb:03:2e:b9:2e:0f:c8: b2:14:98:d8:b6:39:5b:ba:7d:aa:2a:4b:ba:90:a1:3f:97:86: 56:a6:d7:7d:cb:fe:26:fc:c4:b4:55:43:cf:8f:a8:7e:a9:39: 96:9a:27:34:d9:a5:f6:c8:8b:5c:98:96:b4:3e:64:95:a6:d1: 83:9f:f7:fe:e9:dc:e1:8a:19:e2:d3:c1:bb:ca:f9:99:ec:e5: 28:57:5b:85:da:58:ff:00:b5:82:3f:4a:df:0c:23:80:3e:f1: 7d:4a:01:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEplWywhQrmO/QEa+mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDcwMzEzMDEwNFoXDTI1MTAwMTEzMDEwNFowLzEtMCsGA1UEAxMk MmVkYmI3MjAtNDNhZS00YjU1LTk3OTctN2IzNTYwNDQ4YjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVXMLmpoGFYyXNEpAGGRYJ/uWsNk1wGWIS8m rYYZj543uOp2S560Q6S9h/Zowkd3tzxyyqoy3UZLYRsq3Nvh6s7lDCv/ou90HReM WdjzEm0FmfYS2xDvApgYD9pfIJMaefeukF4ebvButq9pqGEhQ6fyiQa3oJgYQ8Z8 IDdDeACFNzVUTiC/BR5P5k+fM3f3V/0xC1N5vlwGqmKAB1UV1RvPX9zNE8qitnKR LfGK5f15L0U1J8dNSYXa9Am4KYErA8HHMVBIKu4a/UHbwZHIIZb5WEp+mfmx2FxR JVImks2XkZiRAkvM0JWtBHsePnDzn4ZW99qSzGicK8Cb2Un4xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0YqHEu7pusIvjesqvKYKC/xFZ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvOGFjZDZhYjgtYmMwMC0z N2ZlLTliNDctOWIyNWI3ZmIxYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwERMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoN/HLBptnPvIyWUZ/mbdaWTU5eeb7Phus7VAr7ZCbiJ+1k1jeR0wvC 93PStVRZl5TiB80Q7OGk82wn6+hrRaaiS6WXELHApgYtTX5xSa8ZWSbw1UQJ+3Fj DHwgDExocIqF8J6+Mq4Ii8YFKBbLbYU6YgH+7UZ1xuPRHzZPsXzqBA5JGubHkvZm qVXlXBpZVhQUCriKP0jX8Qaw6wMuuS4PyLIUmNi2OVu6faoqS7qQoT+Xhlam133L /ib8xLRVQ8+PqH6pOZaaJzTZpfbIi1yYlrQ+ZJWm0YOf9/7p3OGKGeLTwbvK+Zns 5ShXW4XaWP8AtYI/St8MI4A+8X1KAdk= -----END CERTIFICATE-----Generated at Tue Jul 8 18:32:09 2025 by rpki-client