$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa File: 2b70cd1b-681d-3341-8277-ce21a1801227.roa (raw, json) Hash identifier: dHoBAI2AuSvnb7BpOOd7Xz0qjZfuhCgYxW3LBOLyeXE= Subject key identifier: 53:1E:1C:ED:27:F8:FE:FE:3D:D5:7A:18:20:4B:A5:24:36:F5:EE:24 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584AAC8B7F456DF8BE76F69FB100 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa Signing time: Tue 29 Jul 2025 01:00:48 +0000 ROA not before: Tue 29 Jul 2025 01:00:48 +0000 ROA not after: Mon 27 Oct 2025 01:00:48 +0000 asID: 2615 IP address blocks: 147.1.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ac:8b:7f:45:6d:f8:be:76:f6:9f:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jul 29 01:00:48 2025 GMT Not After : Oct 27 01:00:48 2025 GMT Subject: CN=be39faf7-fd49-498f-9b4e-dc928c70bcf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6e:af:72:9c:ad:99:1d:81:cd:a0:36:c1:8c: b4:86:ab:22:fe:a8:6d:ce:53:b6:03:d3:a8:05:e2: e3:69:de:10:cf:04:c0:dc:2a:09:6e:71:73:52:eb: 3e:a2:80:fd:de:51:35:19:eb:25:cb:ba:e2:f6:83: 03:72:a2:b7:87:30:dc:4f:c0:2f:a2:e4:ec:94:e8: 71:24:65:e6:95:9a:b9:fc:cf:cc:bd:3b:95:1e:c0: e5:7a:7c:0a:2a:34:6c:de:a6:3c:c3:10:2d:96:31: f0:7f:9f:18:3b:55:4b:83:e7:d0:f6:f3:66:1d:c4: 8c:5a:cb:6b:0a:d0:9d:b1:12:f7:fa:c4:28:ad:96: 1a:66:26:21:71:a6:c5:61:5e:49:e5:00:5f:cd:70: f1:b0:62:21:26:ae:48:50:ad:09:b9:96:de:3a:25: cd:b1:9f:2c:4e:fc:ca:f6:86:ef:7e:3c:ed:89:72: d0:8e:fd:e2:54:8b:64:2e:3e:dc:c7:21:90:65:0c: 87:4a:93:25:7d:29:7c:c7:db:57:52:b7:15:23:11: 1e:36:35:66:98:14:6b:4d:07:4b:85:9b:be:8b:c4: 5e:c7:f6:12:66:b0:8b:18:6a:59:53:78:04:dd:85: cc:38:58:41:d1:74:f6:64:5b:e9:96:f6:5c:0f:a6: a3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1E:1C:ED:27:F8:FE:FE:3D:D5:7A:18:20:4B:A5:24:36:F5:EE:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:62:44:20:8b:94:87:0d:f1:83:49:f4:bc:2b:f2:f6:40:0d: 4d:d3:13:29:24:31:e5:7f:9b:d0:ac:b3:3d:01:30:67:e9:7e: 23:8c:eb:3c:6b:f3:58:65:17:4f:20:a2:94:a3:b2:89:8d:86: 5d:99:bb:b6:a9:a1:e7:02:d7:4c:0c:b8:53:f6:58:46:ea:b3: 83:90:d6:2b:4f:82:d4:ba:83:2a:bd:00:fb:d1:21:d9:9d:3f: 1e:de:5f:e0:07:5c:35:5e:27:dc:15:d8:1c:11:db:a3:22:a6: 95:9a:a4:0e:cc:0b:e9:02:0c:bf:4c:81:fb:bf:e2:f5:31:c2: 2c:2d:4a:ae:b2:71:2e:5c:0b:c0:97:ae:3b:99:40:de:ca:cf: 86:2f:e4:2e:e8:28:f9:3a:7e:ea:ef:b9:03:03:d3:05:f1:a7: ae:d9:a7:6b:dc:b7:3b:1f:c4:8b:76:91:11:9d:17:ed:d1:c3: 8e:78:52:1b:85:59:4b:55:72:8e:4a:43:8b:35:19:79:3c:b5: f4:15:49:e5:3d:b8:22:ca:e8:28:a2:d0:87:9e:f2:c3:28:57: 61:a9:c1:f7:78:b9:90:61:14:97:c3:89:c0:45:0f:d1:de:15: 86:88:c3:72:a7:a0:34:6d:5f:42:a2:e4:58:ab:1f:97:5f:93: 3e:1c:1b:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqsi39Fbfi+dvafsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDcyOTAxMDA0OFoXDTI1MTAyNzAxMDA0OFowLzEtMCsGA1UEAxMk YmUzOWZhZjctZmQ0OS00OThmLTliNGUtZGM5MjhjNzBiY2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW6vcpytmR2BzaA2wYy0hqsi/qhtzlO2A9Oo BeLjad4QzwTA3CoJbnFzUus+ooD93lE1Gesly7ri9oMDcqK3hzDcT8AvouTslOhx JGXmlZq5/M/MvTuVHsDlenwKKjRs3qY8wxAtljHwf58YO1VLg+fQ9vNmHcSMWstr CtCdsRL3+sQorZYaZiYhcabFYV5J5QBfzXDxsGIhJq5IUK0JuZbeOiXNsZ8sTvzK 9obvfjztiXLQjv3iVItkLj7cxyGQZQyHSpMlfSl8x9tXUrcVIxEeNjVmmBRrTQdL hZu+i8Rex/YSZrCLGGpZU3gE3YXMOFhB0XT2ZFvplvZcD6ajPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMeHO0n+P7+PdV6GCBLpSQ29e4kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMmI3MGNkMWItNjgxZC0z MzQxLTgyNzctY2UyMWExODAxMjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtiRCCLlIcN8YNJ9Lwr8vZADU3TEykkMeV/m9Cssz0BMGfpfiOM6zxr 81hlF08gopSjsomNhl2Zu7apoecC10wMuFP2WEbqs4OQ1itPgtS6gyq9APvRIdmd Px7eX+AHXDVeJ9wV2BwR26MippWapA7MC+kCDL9Mgfu/4vUxwiwtSq6ycS5cC8CX rjuZQN7Kz4Yv5C7oKPk6furvuQMD0wXxp67Zp2vctzsfxIt2kRGdF+3Rw454UhuF WUtVco5KQ4s1GXk8tfQVSeU9uCLK6Cii0Iee8sMoV2Gpwfd4uZBhFJfDicBFD9He FYaIw3KnoDRtX0Ki5FirH5dfkz4cG8Y= -----END CERTIFICATE-----Generated at Sun Aug 24 05:43:04 2025 by rpki-client