$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2a1000cb-3c1f-32c0-8d4e-ad3bddf38c27.roa File: 2a1000cb-3c1f-32c0-8d4e-ad3bddf38c27.roa (raw, json) Hash identifier: tpP2L/jgUO0gCeqoq3n1nvJvX90JKg+btuXpkEBmjh8= Subject key identifier: E0:A6:20:17:97:30:A5:40:2E:15:57:78:4D:3D:BF:49:98:65:8C:80 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584AC17B8DBE8B765EDF41E46A00 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2a1000cb-3c1f-32c0-8d4e-ad3bddf38c27.roa Signing time: Tue 05 Aug 2025 13:00:41 +0000 ROA not before: Tue 05 Aug 2025 13:00:41 +0000 ROA not after: Mon 03 Nov 2025 14:00:41 +0000 asID: 2615 IP address blocks: 147.1.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:7b:8d:be:8b:76:5e:df:41:e4:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Aug 5 13:00:41 2025 GMT Not After : Nov 3 14:00:41 2025 GMT Subject: CN=75e9b579-1aa6-410a-ac8a-482e471bdb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5b:e8:66:55:07:c1:d0:b3:06:63:99:fb:e7: 8a:35:7b:48:90:ba:b5:a0:8d:be:ea:e9:48:36:a9: 20:44:5c:5a:37:0a:9b:80:46:fa:0e:f2:ff:f3:c0: 90:0e:c1:5b:27:ea:00:04:79:5c:68:43:26:2d:ee: 12:d5:80:a7:1b:f4:af:d3:77:8a:49:04:47:4a:f4: 80:71:76:0f:5d:3f:b8:ad:23:8d:31:99:ef:a2:6c: 4f:70:f8:df:b1:9b:75:e5:18:cd:be:c4:3e:06:ad: 30:c6:52:42:72:98:35:b7:37:77:f2:8b:fd:bf:4d: 64:24:65:cd:7b:2c:f8:48:55:8b:13:d1:29:17:87: df:1e:36:8d:b5:25:27:53:d3:6f:ad:5b:45:77:25: e2:ea:f1:69:18:9f:04:67:0c:4f:7f:bf:80:e7:c6: e8:8c:a6:cb:b7:40:12:d9:2c:45:c1:f3:4e:fe:ca: 56:2c:94:90:d2:1a:c5:00:29:22:59:3f:18:04:63: e4:98:c7:1e:6a:b3:c9:ce:ed:c2:b3:e0:4f:7e:9c: fd:35:23:de:b0:be:21:d5:a0:99:89:28:f8:5e:f9: 08:dc:d5:21:76:5e:5c:d6:4c:f7:a4:69:fd:d6:0e: 85:6b:aa:3b:17:80:8d:67:d9:17:85:24:61:8c:18: b2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A6:20:17:97:30:A5:40:2E:15:57:78:4D:3D:BF:49:98:65:8C:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2a1000cb-3c1f-32c0-8d4e-ad3bddf38c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:8a:7a:c7:91:04:07:78:7b:9d:2e:5a:bc:9c:f1:fd:78:82: 08:a0:08:dc:af:19:82:33:16:de:c5:8f:23:8d:6e:1c:8a:37: e4:a5:2b:2d:7e:c9:a2:26:bc:23:a0:91:56:07:0d:55:c1:b8: ad:43:d4:46:63:96:e4:8c:04:1f:b5:a9:89:85:b2:f1:5d:d2: 97:51:15:61:cc:a8:16:fb:6f:43:b8:95:fd:19:e3:2b:8a:90: dd:81:e0:bd:14:8e:d2:bc:72:9c:5f:c4:ef:a9:ce:eb:30:5d: d0:8a:07:1f:3f:ce:29:39:da:54:a2:57:73:f8:44:3e:c2:c2: 5e:c4:98:ad:dd:b3:c2:ef:3d:36:8a:db:69:8d:df:35:5f:82: 34:14:2a:de:ad:e8:21:5a:7a:b9:ef:9a:d1:64:38:0d:da:12: e9:d5:dc:43:4a:6f:c4:8e:b2:19:28:e8:d8:2c:51:df:cc:dc: 04:0a:09:32:f3:6a:4f:0d:c2:ea:d1:25:1a:13:1d:db:a8:82: d4:bd:20:68:ec:c5:ea:ab:88:40:72:cf:6e:03:3f:42:a4:14: 6d:3a:b0:06:d2:45:43:97:92:eb:4b:6e:2d:64:0d:57:b2:5e: 6b:f7:29:19:54:a6:39:e3:3c:a7:26:95:fd:b9:2f:3e:99:bb: c2:e7:51:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErBe42+i3Ze30HkagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDgwNTEzMDA0MVoXDTI1MTEwMzE0MDA0MVowLzEtMCsGA1UEAxMk NzVlOWI1NzktMWFhNi00MTBhLWFjOGEtNDgyZTQ3MWJkYjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVvoZlUHwdCzBmOZ++eKNXtIkLq1oI2+6ulI NqkgRFxaNwqbgEb6DvL/88CQDsFbJ+oABHlcaEMmLe4S1YCnG/Sv03eKSQRHSvSA cXYPXT+4rSONMZnvomxPcPjfsZt15RjNvsQ+Bq0wxlJCcpg1tzd38ov9v01kJGXN eyz4SFWLE9EpF4ffHjaNtSUnU9NvrVtFdyXi6vFpGJ8EZwxPf7+A58bojKbLt0AS 2SxFwfNO/spWLJSQ0hrFACkiWT8YBGPkmMcearPJzu3Cs+BPfpz9NSPesL4h1aCZ iSj4XvkI3NUhdl5c1kz3pGn91g6Fa6o7F4CNZ9kXhSRhjBiydQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCmIBeXMKVALhVXeE09v0mYZYyAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMmExMDAwY2ItM2MxZi0z MmMwLThkNGUtYWQzYmRkZjM4YzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkwE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByKeseRBAd4e50uWryc8f14ggigCNyvGYIzFt7FjyONbhyKN+SlKy1+ yaImvCOgkVYHDVXBuK1D1EZjluSMBB+1qYmFsvFd0pdRFWHMqBb7b0O4lf0Z4yuK kN2B4L0UjtK8cpxfxO+pzuswXdCKBx8/zik52lSiV3P4RD7Cwl7EmK3ds8LvPTaK 22mN3zVfgjQUKt6t6CFaernvmtFkOA3aEunV3ENKb8SOshko6NgsUd/M3AQKCTLz ak8NwurRJRoTHduogtS9IGjsxeqriEByz24DP0KkFG06sAbSRUOXkutLbi1kDVey Xmv3KRlUpjnjPKcmlf25Lz6Zu8LnUYs= -----END CERTIFICATE-----Generated at Sun Aug 24 03:50:29 2025 by rpki-client