$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/10eae504-c535-3d7f-8fd1-8a39ac437127.roa File: 10eae504-c535-3d7f-8fd1-8a39ac437127.roa (raw, json) Hash identifier: k5PmGyhtDESoBun8WRMg/n/nspiq8Fk9u8q6ao/sCLo= Subject key identifier: 43:DA:2F:B5:EB:39:07:BC:11:07:9D:E8:99:F5:96:D6:75:AC:81:70 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584F549D4CCA2FA022F5CD16B500 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/10eae504-c535-3d7f-8fd1-8a39ac437127.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 2615 IP address blocks: 147.1.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:4c:ca:2f:a0:22:f5:cd:16:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=0742f7d0-3605-4ee8-b827-6fcda3d1b339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:43:06:a2:a9:c7:4c:64:75:f5:b0:ce:fc:cd: b1:89:32:3e:c4:7f:9d:b0:69:d6:49:81:cc:e5:c7: e7:24:4d:77:34:c1:5f:9b:94:e5:cb:e6:63:21:96: eb:f6:52:ee:48:74:db:4a:58:61:24:ee:fb:54:3e: 59:5e:4f:0b:bf:94:d5:fd:27:74:b7:68:31:34:d7: 7c:c0:d2:a8:3e:56:10:9d:e4:cb:cc:49:0d:05:c1: c5:76:3e:69:30:cc:72:a7:26:e5:6a:f0:6e:71:b2: 96:fa:f3:df:fd:a2:da:ac:0b:b9:12:6d:4a:6c:ce: 7a:fe:f6:27:a0:2e:07:dd:ec:1e:20:30:02:c2:b3: f0:5e:7e:c0:98:8f:5f:6c:a8:05:e5:e2:d6:5f:db: 2d:0a:1d:17:a5:66:dc:1a:a2:41:57:a3:f8:35:19: 7e:35:48:b0:36:15:30:3c:25:21:ba:59:cf:5f:34: 61:3b:13:e7:cd:6a:87:11:ec:fd:d0:59:8e:b4:8b: 89:d7:2e:10:2b:95:d9:cb:bb:f4:c4:e0:d4:81:51: 02:19:f7:86:5c:66:7f:e6:e6:5c:d2:59:70:b3:c3: 76:25:70:e1:83:01:9a:0c:89:14:90:09:cf:05:e2: 7d:a4:94:8c:ed:aa:55:af:c8:90:a4:d0:d8:43:8b: 1a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DA:2F:B5:EB:39:07:BC:11:07:9D:E8:99:F5:96:D6:75:AC:81:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/10eae504-c535-3d7f-8fd1-8a39ac437127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:2d:1b:5e:17:a8:9e:43:ce:1a:7e:17:43:b0:d9:e3:a5:4c: ac:24:7e:2d:1e:90:e6:7b:39:44:a0:e3:33:2a:32:de:e7:08: 5e:dd:98:03:41:cb:83:6d:9f:d8:6b:f8:c4:67:75:9a:d3:fb: 92:d0:5d:8b:24:3a:54:98:8e:6a:21:67:12:91:5b:68:e5:91: 07:2f:92:13:62:2f:4f:21:9a:c3:12:d7:1e:c3:5c:83:a9:77: 9c:39:88:a2:c6:43:19:73:94:8f:89:4a:9a:4e:69:ac:db:7a: 65:9f:3b:25:64:fc:9a:39:b5:cc:90:8e:0a:b7:c6:e8:e0:79: 5a:98:fd:16:db:c2:4a:e5:34:9c:99:eb:33:7c:56:d8:e3:a1: 05:37:94:ab:d2:53:d4:2f:e8:15:69:e6:2a:6d:b2:d9:56:d2: 68:ea:ad:3d:f4:e3:cd:4b:37:d6:b0:b3:67:3f:76:9c:91:3e: b4:e3:1a:63:6d:a4:b0:57:fa:ad:25:ca:40:76:a7:c7:bf:fc: 34:07:9b:ef:5d:0f:f0:68:3a:bf:6c:f1:bd:06:00:56:5b:da: 98:72:67:60:2b:af:b9:8c:2c:e7:8b:26:6d:99:c6:0d:0e:3f: 5b:17:73:d4:1d:26:8e:c0:5e:f6:42:94:19:9a:e7:e6:50:f4: 56:e4:81:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnUzKL6Ai9c0WtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MDc0MmY3ZDAtMzYwNS00ZWU4LWI4MjctNmZjZGEzZDFiMzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEMGoqnHTGR19bDO/M2xiTI+xH+dsGnWSYHM 5cfnJE13NMFfm5Tly+ZjIZbr9lLuSHTbSlhhJO77VD5ZXk8Lv5TV/Sd0t2gxNNd8 wNKoPlYQneTLzEkNBcHFdj5pMMxypyblavBucbKW+vPf/aLarAu5Em1KbM56/vYn oC4H3eweIDACwrPwXn7AmI9fbKgF5eLWX9stCh0XpWbcGqJBV6P4NRl+NUiwNhUw PCUhulnPXzRhOxPnzWqHEez90FmOtIuJ1y4QK5XZy7v0xODUgVECGfeGXGZ/5uZc 0llws8N2JXDhgwGaDIkUkAnPBeJ9pJSM7apVr8iQpNDYQ4sa+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPaL7XrOQe8EQed6Jn1ltZ1rIFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMTBlYWU1MDQtYzUzNS0z ZDdmLThmZDEtOGEzOWFjNDM3MTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAktG14XqJ5Dzhp+F0Ow2eOlTKwkfi0ekOZ7OUSg4zMqMt7nCF7dmANB y4Ntn9hr+MRndZrT+5LQXYskOlSYjmohZxKRW2jlkQcvkhNiL08hmsMS1x7DXIOp d5w5iKLGQxlzlI+JSppOaazbemWfOyVk/Jo5tcyQjgq3xujgeVqY/RbbwkrlNJyZ 6zN8VtjjoQU3lKvSU9Qv6BVp5iptstlW0mjqrT30481LN9aws2c/dpyRPrTjGmNt pLBX+q0lykB2p8e//DQHm+9dD/BoOr9s8b0GAFZb2phyZ2Arr7mMLOeLJm2Zxg0O P1sXc9QdJo7AXvZClBma5+ZQ9Fbkgek= -----END CERTIFICATE-----Generated at Sun Oct 11 08:13:23 2026 by rpki-client