$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2a1000cb-3c1f-32c0-8d4e-ad3bddf38c27.roa File: 2a1000cb-3c1f-32c0-8d4e-ad3bddf38c27.roa (raw, json) Hash identifier: HiKUlK6kCZUHvP8hGR8qyIUi/y243Nskc/v0GACCswA= Subject key identifier: CD:5A:5E:AD:E1:69:73:B2:A9:2D:32:26:CA:D9:81:07:BC:6E:C9:D9 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584EE4F1EC246BD527CE99FCF980 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2a1000cb-3c1f-32c0-8d4e-ad3bddf38c27.roa Signing time: Thu 20 Aug 2026 01:00:12 +0000 ROA not before: Thu 20 Aug 2026 01:00:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 2615 IP address blocks: 147.1.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:f1:ec:24:6b:d5:27:ce:99:fc:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Aug 20 01:00:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=17bfeca2-3471-4c9c-9faa-8092d93e42f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:54:75:fc:a7:63:10:b0:57:35:ec:f2:7f:64: 84:76:2e:17:e6:31:99:17:67:a0:c2:45:3e:7e:82: d2:95:d7:5b:72:18:c1:ff:fa:c5:bc:c7:2a:bb:00: 60:7e:98:d9:86:6f:65:fb:73:b1:68:60:34:42:92: 32:39:c9:ce:c8:5d:0e:c9:f1:b6:b9:69:41:04:8a: 97:b0:2d:58:71:ea:63:b3:50:64:cf:fb:64:ab:82: 76:d4:da:f4:95:43:a0:d7:09:83:49:19:37:83:23: 1b:4e:be:ae:39:9f:20:48:f2:42:a2:b6:5f:e4:0f: c9:f5:2c:89:a3:29:fc:85:a3:57:cb:be:3d:f4:f1: 78:20:38:a0:b0:97:c5:d2:0e:78:ce:51:78:fa:85: ad:c7:53:8b:53:f5:a2:c1:24:0c:6b:12:d5:b5:c2: 00:89:61:b0:0c:ea:0c:c2:0e:17:9a:6d:1f:36:3d: ae:11:c1:8b:67:1b:ac:ab:f4:95:08:b2:f8:eb:c8: cb:4b:d0:d3:99:ba:a2:a3:4d:11:ac:36:e1:c4:ef: 0c:ac:a5:f4:24:22:52:08:9d:6e:71:07:41:8f:da: d7:88:25:eb:ba:83:ad:e6:40:74:82:aa:c3:0e:94: d0:e8:3b:47:bb:89:ab:31:6c:b9:d2:d0:92:0c:eb: 98:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5A:5E:AD:E1:69:73:B2:A9:2D:32:26:CA:D9:81:07:BC:6E:C9:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2a1000cb-3c1f-32c0-8d4e-ad3bddf38c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:09:cd:62:5c:d7:7b:f4:3a:13:0c:50:95:5f:97:a9:2e:39: ca:9d:cb:09:14:dc:3c:28:99:ba:2c:f4:b0:4b:f6:1e:45:9c: 64:2a:1e:a1:75:20:eb:2d:03:23:78:61:08:53:6c:1c:1d:a8: f3:ed:a9:c3:c4:43:49:f4:ad:79:37:dc:9f:35:d6:4d:ed:bf: 85:40:17:98:ea:44:38:bf:25:d1:5b:9f:a8:b4:e0:39:80:ad: 1a:ed:c8:43:d6:99:c1:c7:80:77:48:2f:07:b9:81:f7:76:56: 29:3f:c2:8e:80:46:74:0c:2d:4b:77:cf:84:bb:d9:64:15:c1: 18:b7:1b:1c:33:a1:25:2f:6e:85:7b:45:93:ca:e4:ea:1a:e8: fd:4d:8d:d0:b0:55:95:ac:7c:84:62:6e:36:f6:11:29:cd:f9: 35:70:40:d0:2d:10:c6:66:b0:b4:94:b6:d2:6e:3c:9c:79:30: ab:6e:e3:30:9f:7a:bd:2f:c5:d2:b1:5d:f6:33:88:91:24:51: 6e:fd:8c:55:78:79:7d:a5:de:c4:65:81:95:f2:1f:13:76:31: 53:64:26:c3:81:a0:97:bb:83:70:72:a7:53:d7:39:b7:de:40: 93:12:d1:f0:37:07:e6:54:d4:fe:57:32:c1:86:dd:57:ef:7f: 02:9b:50:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7k8ewka9Unzpn8+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk MTdiZmVjYTItMzQ3MS00YzljLTlmYWEtODA5MmQ5M2U0MmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVR1/KdjELBXNezyf2SEdi4X5jGZF2egwkU+ foLSlddbchjB//rFvMcquwBgfpjZhm9l+3OxaGA0QpIyOcnOyF0OyfG2uWlBBIqX sC1Ycepjs1Bkz/tkq4J21Nr0lUOg1wmDSRk3gyMbTr6uOZ8gSPJCorZf5A/J9SyJ oyn8haNXy7499PF4IDigsJfF0g54zlF4+oWtx1OLU/WiwSQMaxLVtcIAiWGwDOoM wg4Xmm0fNj2uEcGLZxusq/SVCLL468jLS9DTmbqio00RrDbhxO8MrKX0JCJSCJ1u cQdBj9rXiCXruoOt5kB0gqrDDpTQ6DtHu4mrMWy50tCSDOuYWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1aXq3haXOyqS0yJsrZgQe8bsnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMmExMDAwY2ItM2MxZi0z MmMwLThkNGUtYWQzYmRkZjM4YzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkwE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAJzWJc13v0OhMMUJVfl6kuOcqdywkU3Dwombos9LBL9h5FnGQqHqF1 IOstAyN4YQhTbBwdqPPtqcPEQ0n0rXk33J811k3tv4VAF5jqRDi/JdFbn6i04DmA rRrtyEPWmcHHgHdILwe5gfd2Vik/wo6ARnQMLUt3z4S72WQVwRi3GxwzoSUvboV7 RZPK5Ooa6P1NjdCwVZWsfIRibjb2ESnN+TVwQNAtEMZmsLSUttJuPJx5MKtu4zCf er0vxdKxXfYziJEkUW79jFV4eX2l3sRlgZXyHxN2MVNkJsOBoJe7g3Byp1PXObfe QJMS0fA3B+ZU1P5XMsGG3VfvfwKbUKE= -----END CERTIFICATE-----Generated at Tue Aug 25 08:01:33 2026 by rpki-client