$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa File: 22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa (raw, json) Hash identifier: MpFzavjWZe5fkVq9WwsADDgcDgux4fQnt91odkAeEV0= Subject key identifier: 84:55:55:44:AA:9A:F1:F9:F7:73:6E:78:BE:96:69:54:66:0B:33:BD Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584EB2B1F41129476E99F7C2AFE0 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 2615 IP address blocks: 147.1.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:f4:11:29:47:6e:99:f7:c2:af:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=5b72c6de-b4f7-468d-a464-8c3cf0da40ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c2:90:30:8a:e6:05:69:ff:21:2b:67:28:0d: de:ca:ed:ba:6b:4b:74:aa:87:37:ed:2e:57:52:73: cf:10:83:48:4c:62:3a:c3:cd:6c:2f:b4:82:b6:e0: a7:e1:c0:00:5a:1c:40:64:8b:07:51:f8:d8:07:43: 73:ac:3a:f8:63:3d:d7:46:aa:dc:d0:fd:39:fd:44: 18:61:d3:0d:f7:7a:b1:38:ce:d4:b0:9d:56:08:a9: 5c:d1:10:df:d0:0f:60:aa:fc:97:e7:cc:7f:6d:9e: 06:d3:e2:8c:e8:a0:ce:09:f7:d0:37:3b:8b:41:3e: fd:ae:22:ec:36:f6:aa:db:8f:90:7e:e7:82:0a:a6: d2:5d:79:64:95:63:6a:9e:2e:94:88:ed:66:72:2f: e0:34:fa:8b:39:49:18:81:05:38:7b:83:ce:c8:cd: bb:b0:4b:4a:0b:51:7d:9f:69:12:c8:58:28:29:67: 37:98:32:97:73:c3:a2:00:0c:d6:5d:94:ff:1a:d9: b4:4e:bb:8a:c3:28:e4:1e:c9:b9:7e:17:80:15:da: fc:2e:36:b8:bb:49:aa:f3:86:c6:aa:42:1e:1a:37: 65:40:38:23:64:66:4f:6f:0d:fa:c1:81:39:4e:c9: ce:36:94:52:98:07:58:5b:b3:dc:00:2d:8e:26:00: 1b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:55:55:44:AA:9A:F1:F9:F7:73:6E:78:BE:96:69:54:66:0B:33:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:93:f4:e4:9e:3c:d1:f6:01:e4:c4:00:8c:35:17:01:9e:f4: d4:24:ee:ca:b5:ec:c5:73:51:d6:40:00:83:dd:2a:a1:a6:e2: cc:c9:63:8e:35:9b:69:85:fd:6a:6c:4c:41:bd:88:bd:13:3d: 91:bd:5b:93:92:04:2b:98:ed:1c:7a:1c:dd:6f:e4:6c:38:02: be:ac:d8:35:96:f1:67:f6:f1:e3:20:3e:bf:c9:37:b0:6d:57: cc:da:c2:52:f8:8b:0a:ae:2c:63:9f:e8:6b:a1:0e:ce:18:44: 3b:9c:6f:8c:1e:57:30:78:4a:2f:1e:e0:14:ec:28:b7:94:58: b2:e1:63:19:77:be:fa:af:2b:f9:57:69:c0:cb:32:9e:6b:2c: ae:dc:78:fb:3f:cc:79:a0:5b:f4:a4:39:4d:b1:58:dd:af:25: 9a:af:d3:7d:2a:a4:ca:c8:ff:80:6a:e2:dd:14:7a:da:e5:b0: 69:4a:bf:7b:6b:da:34:5a:7e:36:01:be:56:60:14:b4:a3:aa: e0:e9:2c:0c:11:25:c5:8c:6d:34:25:90:d5:48:bb:21:0c:eb: bb:b1:c3:5e:4a:50:a6:c2:a7:ff:ec:71:5d:ea:9a:d5:35:ac: db:2f:0a:ec:b0:f9:ea:21:e3:72:de:ec:46:57:b6:d3:c3:2b: 27:de:78:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysfQRKUdumffCr+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk NWI3MmM2ZGUtYjRmNy00NjhkLWE0NjQtOGMzY2YwZGE0MGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8KQMIrmBWn/IStnKA3eyu26a0t0qoc37S5X UnPPEINITGI6w81sL7SCtuCn4cAAWhxAZIsHUfjYB0NzrDr4Yz3XRqrc0P05/UQY YdMN93qxOM7UsJ1WCKlc0RDf0A9gqvyX58x/bZ4G0+KM6KDOCffQNzuLQT79riLs Nvaq24+QfueCCqbSXXlklWNqni6UiO1mci/gNPqLOUkYgQU4e4POyM27sEtKC1F9 n2kSyFgoKWc3mDKXc8OiAAzWXZT/Gtm0TruKwyjkHsm5fheAFdr8Lja4u0mq84bG qkIeGjdlQDgjZGZPbw36wYE5TsnONpRSmAdYW7PcAC2OJgAbXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRVVUSqmvH593NueL6WaVRmCzO9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMjJkMWNiMDctZGIyZC0z YzdkLTgyMDItZTYzZmY3YThmMGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyT9OSePNH2AeTEAIw1FwGe9NQk7sq17MVzUdZAAIPdKqGm4szJY441 m2mF/WpsTEG9iL0TPZG9W5OSBCuY7Rx6HN1v5Gw4Ar6s2DWW8Wf28eMgPr/JN7Bt V8zawlL4iwquLGOf6GuhDs4YRDucb4weVzB4Si8e4BTsKLeUWLLhYxl3vvqvK/lX acDLMp5rLK7cePs/zHmgW/SkOU2xWN2vJZqv030qpMrI/4Bq4t0UetrlsGlKv3tr 2jRafjYBvlZgFLSjquDpLAwRJcWMbTQlkNVIuyEM67uxw15KUKbCp//scV3qmtU1 rNsvCuyw+eoh43Le7EZXttPDKyfeeFA= -----END CERTIFICATE-----Generated at Tue Aug 25 08:00:25 2026 by rpki-client