$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/514e116e-7b0c-3978-b9a2-1653b3a7d019.roa File: 514e116e-7b0c-3978-b9a2-1653b3a7d019.roa (raw, json) Hash identifier: TL9dcwqjwMOmVhEvWJOdbeqq8RZNyirx6R4YykFUc1M= Subject key identifier: 76:80:6B:10:CE:55:E6:18:10:71:0E:25:C1:A1:57:A1:15:FE:2C:F8 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584AF5217050082C4CE9CDB52B80 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/514e116e-7b0c-3978-b9a2-1653b3a7d019.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 2615 IP address blocks: 147.1.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:70:50:08:2c:4c:e9:cd:b5:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=1155bc8e-fdc0-4401-8866-747f1deb6dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6e:89:10:6d:4b:4d:10:de:a2:6a:d0:bb:29: cc:c1:d3:29:61:31:97:cf:7e:79:2f:bd:34:72:02: 8b:75:c5:e7:51:bd:6e:22:07:5d:79:1b:c7:c2:ce: 8b:f9:d7:dd:79:11:84:84:ee:4b:49:62:59:26:d0: 68:98:30:8e:c7:52:ea:23:55:d5:3b:f6:64:59:ba: 09:40:99:7c:bf:80:d1:bf:6e:08:88:7a:95:54:e1: 3c:21:e1:55:c1:b8:87:76:86:e0:86:14:72:b7:61: 7f:bd:e1:55:90:06:bc:76:8b:31:99:2f:a8:7b:2f: 52:54:cd:08:dc:05:a7:77:a8:c0:f7:9d:08:05:15: 3b:31:11:26:23:c7:c2:2e:03:7e:3a:6f:48:ea:94: f1:96:8e:0c:10:dd:72:9c:81:55:55:d8:a2:f7:7b: 13:b5:15:6b:1e:99:de:7f:3c:6a:99:55:92:29:5c: 1b:0f:a6:be:7e:db:33:c4:6a:25:70:e0:69:3c:1e: ab:17:6e:e6:bf:24:14:b7:4d:d7:16:6e:a7:3f:93: 05:7f:d1:b7:00:79:6a:46:30:27:c7:d5:cc:2c:08: 4f:7c:75:f7:67:10:dd:44:e6:20:2a:c7:d0:34:5d: 4f:c3:e9:b7:b3:e2:45:ce:31:4c:19:3e:3b:54:f0: 97:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:80:6B:10:CE:55:E6:18:10:71:0E:25:C1:A1:57:A1:15:FE:2C:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/514e116e-7b0c-3978-b9a2-1653b3a7d019.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ad:48:cd:59:0a:98:cb:aa:88:1e:76:b8:3d:8a:c9:16:6d: 8a:5d:cc:a6:cd:10:0c:9b:71:05:7c:af:92:d5:ef:3d:20:8c: af:36:cb:4c:32:e7:7f:03:48:8d:37:f5:b5:3c:7c:9f:f0:e3: 04:f9:2c:33:13:1f:78:c8:f5:a4:b0:4b:fb:39:9e:fc:35:38: 75:64:e8:4b:42:c2:84:1f:2f:6c:9d:b8:58:7f:3d:80:75:7b: 9b:5e:29:26:ae:ca:82:37:eb:42:0e:40:39:93:66:7f:2d:a0: 36:c3:9a:6e:c6:93:94:5f:44:24:4e:7d:84:09:77:5c:af:e6: b4:9d:1d:2d:96:a3:1f:a9:f7:72:f8:dc:12:a3:c6:75:02:47: 8a:67:34:9d:dc:94:b6:17:f8:99:f8:02:78:94:e1:6c:66:7d: 74:5a:40:6f:12:4f:7e:f6:c4:fe:9e:4f:ea:48:2c:b8:bc:5a: 39:7f:1a:af:78:26:6e:d6:50:8c:04:30:0b:59:1a:ee:5d:02: 11:a8:91:89:d5:8a:c9:b7:ce:c7:6e:be:e8:71:12:de:24:10: 0e:73:9d:91:53:70:05:50:3e:a8:4f:e4:6e:a9:55:7c:7b:d7: 7e:51:a8:7e:6f:bc:92:2d:dc:41:98:9f:4c:2f:6d:bd:5d:91: 68:67:11:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IXBQCCxM6c21K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MTE1NWJjOGUtZmRjMC00NDAxLTg4NjYtNzQ3ZjFkZWI2ZGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo26JEG1LTRDeomrQuynMwdMpYTGXz355L700 cgKLdcXnUb1uIgddeRvHws6L+dfdeRGEhO5LSWJZJtBomDCOx1LqI1XVO/ZkWboJ QJl8v4DRv24IiHqVVOE8IeFVwbiHdobghhRyt2F/veFVkAa8dosxmS+oey9SVM0I 3AWnd6jA950IBRU7MREmI8fCLgN+Om9I6pTxlo4MEN1ynIFVVdii93sTtRVrHpne fzxqmVWSKVwbD6a+ftszxGolcOBpPB6rF27mvyQUt03XFm6nP5MFf9G3AHlqRjAn x9XMLAhPfHX3ZxDdROYgKsfQNF1Pw+m3s+JFzjFMGT47VPCXMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaAaxDOVeYYEHEOJcGhV6EV/iz4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNTE0ZTExNmUtN2IwYy0z OTc4LWI5YTItMTY1M2IzYTdkMDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKtSM1ZCpjLqogedrg9iskWbYpdzKbNEAybcQV8r5LV7z0gjK82y0wy 538DSI039bU8fJ/w4wT5LDMTH3jI9aSwS/s5nvw1OHVk6EtCwoQfL2yduFh/PYB1 e5teKSauyoI360IOQDmTZn8toDbDmm7Gk5RfRCROfYQJd1yv5rSdHS2Wox+p93L4 3BKjxnUCR4pnNJ3clLYX+Jn4AniU4WxmfXRaQG8ST372xP6eT+pILLi8Wjl/Gq94 Jm7WUIwEMAtZGu5dAhGokYnVism3zsduvuhxEt4kEA5znZFTcAVQPqhP5G6pVXx7 135RqH5vvJIt3EGYn0wvbb1dkWhnEcg= -----END CERTIFICATE-----Generated at Sun Aug 24 05:32:54 2025 by rpki-client