$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/80cd6a23-5ccd-3284-b7b0-5178308cfc25.roa File: 80cd6a23-5ccd-3284-b7b0-5178308cfc25.roa (raw, json) Hash identifier: yYdvoaa9CnYt+nKw0PaahPjza+j8sDD3GNW6zX3M6qw= Subject key identifier: 30:CE:3B:BC:C0:33:21:9C:F4:BF:2E:03:3E:43:FA:FF:0B:98:62:B2 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584B153C280B1BC23A06E44BBA80 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/80cd6a23-5ccd-3284-b7b0-5178308cfc25.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 2615 IP address blocks: 147.1.24.0/24 maxlen: 24 147.1.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:28:0b:1b:c2:3a:06:e4:4b:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=3d87531c-8546-4381-b92d-4e5f3678ce1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3f:16:45:82:17:6f:7c:ed:61:84:65:a2:4b: 29:4b:a2:46:c7:f2:97:8c:91:e2:f5:fd:0d:63:45: ea:2d:18:7a:a8:61:4e:6b:5c:9b:d2:37:2d:d2:58: e7:e8:44:01:c6:04:ae:49:41:16:dd:73:f6:42:a7: 23:1c:78:ca:02:9a:0c:af:82:d1:dc:4a:d2:ef:98: 2b:be:a4:ac:20:08:37:00:2a:93:f3:dd:29:41:e8: 71:81:34:78:26:ab:fb:38:86:f0:8d:3d:e7:76:a8: 41:ec:f0:e3:75:8b:15:40:f1:57:cb:c2:a2:8b:eb: 8e:fe:c1:1a:ec:7b:41:1e:17:93:5f:2e:55:21:90: 61:bf:5f:a1:be:9a:56:7c:67:ea:59:9b:5a:a3:33: 21:d0:48:bd:ef:35:01:a1:db:3b:4d:39:c2:8a:cd: b5:78:ab:98:f1:17:e2:98:53:11:4e:bc:7b:cd:f0: fa:46:1c:dc:cb:c6:f5:a2:2f:ef:e0:de:f0:61:56: c4:0b:f7:62:e7:c8:26:7d:47:bb:dd:84:26:fa:e6: 2f:e4:59:7e:53:bd:93:52:11:ae:ca:bf:cf:f3:be: 18:16:9d:91:34:09:0c:a4:2d:14:5a:89:e9:b8:48: 67:fd:0a:5a:ed:90:fa:da:cf:3f:61:11:7a:ba:4b: fa:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CE:3B:BC:C0:33:21:9C:F4:BF:2E:03:3E:43:FA:FF:0B:98:62:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/80cd6a23-5ccd-3284-b7b0-5178308cfc25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:0b:2c:89:6c:19:c3:38:6d:e8:31:38:ab:76:3c:3f:fb:13: 37:fa:cf:b2:aa:cd:64:3d:16:21:a2:8e:9b:f8:82:ee:f1:cb: 73:3f:71:e0:3a:81:c4:bd:2a:95:f5:cb:b1:15:26:ff:9f:fb: 29:f7:ed:84:bf:91:64:a7:ff:e8:29:36:2b:50:96:18:01:03: 62:b1:e7:eb:c0:4c:0c:5b:2a:bb:5d:40:8a:1b:18:1a:d4:c0: 58:96:8d:87:83:b5:b2:b8:e8:37:88:78:19:c7:b8:7e:17:bc: 17:89:a4:30:ed:d2:e8:ed:86:61:04:cd:29:2d:d7:92:70:0f: 77:27:ef:0b:b3:ec:ae:29:ef:c4:b0:cf:bb:34:2b:a7:48:52: 25:91:96:ae:28:54:6e:29:78:2e:b1:e4:58:27:e7:4f:09:ea: f8:3f:aa:bf:d5:62:6b:52:0f:70:09:eb:eb:89:f9:72:94:a5: 5d:49:e2:39:79:35:7e:84:89:8c:18:62:90:2a:11:f0:8f:f2: a0:5a:3c:7e:b2:e3:12:a6:2b:cb:79:6b:b5:24:37:14:7f:83: 9c:5d:2d:5d:61:3c:4f:8c:b5:52:93:26:4f:23:5a:4d:7f:a2: c5:a2:02:96:47:0f:11:d1:74:8f:17:b4:9d:ec:a5:d2:e9:a2: 31:86:c5:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCgLG8I6BuRLuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk M2Q4NzUzMWMtODU0Ni00MzgxLWI5MmQtNGU1ZjM2NzhjZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT8WRYIXb3ztYYRlokspS6JGx/KXjJHi9f0N Y0XqLRh6qGFOa1yb0jct0ljn6EQBxgSuSUEW3XP2QqcjHHjKApoMr4LR3ErS75gr vqSsIAg3ACqT890pQehxgTR4Jqv7OIbwjT3ndqhB7PDjdYsVQPFXy8Kii+uO/sEa 7HtBHheTXy5VIZBhv1+hvppWfGfqWZtaozMh0Ei97zUBods7TTnCis21eKuY8Rfi mFMRTrx7zfD6Rhzcy8b1oi/v4N7wYVbEC/di58gmfUe73YQm+uYv5Fl+U72TUhGu yr/P874YFp2RNAkMpC0UWonpuEhn/Qpa7ZD62s8/YRF6ukv6xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDOO7zAMyGc9L8uAz5D+v8LmGKyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvODBjZDZhMjMtNWNjZC0z Mjg0LWI3YjAtNTE3ODMwOGNmYzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkwEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0LLIlsGcM4begxOKt2PD/7Ezf6z7KqzWQ9FiGijpv4gu7xy3M/ceA6 gcS9KpX1y7EVJv+f+yn37YS/kWSn/+gpNitQlhgBA2Kx5+vATAxbKrtdQIobGBrU wFiWjYeDtbK46DeIeBnHuH4XvBeJpDDt0ujthmEEzSkt15JwD3cn7wuz7K4p78Sw z7s0K6dIUiWRlq4oVG4peC6x5Fgn508J6vg/qr/VYmtSD3AJ6+uJ+XKUpV1J4jl5 NX6EiYwYYpAqEfCP8qBaPH6y4xKmK8t5a7UkNxR/g5xdLV1hPE+MtVKTJk8jWk1/ osWiApZHDxHRdI8XtJ3spdLpojGGxV0= -----END CERTIFICATE-----Generated at Mon Oct 20 20:56:43 2025 by rpki-client