$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa File: 2b70cd1b-681d-3341-8277-ce21a1801227.roa (raw, json) Hash identifier: QIHeJ932v9ur6AEaA/JkOD/fHhZqnw6mpaL8gt8wkwc= Subject key identifier: 51:08:D8:73:5B:F3:DC:FA:87:0A:17:A8:A4:AA:DB:3F:BF:59:28:CF Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584F71ED78FCE197A2B8D2F5D2C0 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 2615 IP address blocks: 147.1.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:78:fc:e1:97:a2:b8:d2:f5:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=ed24667e-eaf4-45ae-a39c-b9faec95b328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:b6:eb:9b:44:f7:a8:28:5b:81:1c:91:f7: c1:21:a2:c8:4c:0c:ae:0b:a9:66:2d:59:c8:de:0a: 85:ce:f5:7d:d3:aa:a0:8c:c5:ae:86:d8:d9:ae:94: 43:ea:b0:88:c9:88:38:df:22:93:ba:43:d0:f1:7b: aa:d0:1f:81:03:24:f3:59:a2:4e:6e:4f:1d:ac:2c: 7d:24:ec:0a:c3:34:7c:1d:44:70:58:47:16:03:d0: 58:1d:1f:9b:16:d6:48:cb:a0:91:97:61:8e:5b:ff: 81:10:d9:da:95:8d:c6:c9:67:4e:f5:b0:f1:dd:49: 0f:e2:bf:cf:1a:b4:4b:dc:e4:89:99:65:97:85:a2: 7b:6e:51:77:b6:0b:f9:a0:d3:1d:04:57:9d:85:71: e8:5a:8d:f3:ab:70:2a:46:8a:ce:8a:c9:59:ab:84: b8:96:24:64:3f:03:f3:95:6b:56:68:ee:2e:75:8c: ca:36:45:29:35:1c:90:31:5f:86:10:0b:66:3b:61: 53:b0:a2:4e:e7:b9:99:a8:07:91:b4:4a:3b:a6:b5: 17:29:7b:9f:41:fd:54:c4:eb:ff:ad:30:c9:4d:55: 7a:d4:c3:6b:10:f7:6a:c9:41:e8:a1:0d:9f:79:3c: b5:0c:38:81:68:2f:a8:07:6a:69:4d:f7:d4:e1:3b: 6a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:08:D8:73:5B:F3:DC:FA:87:0A:17:A8:A4:AA:DB:3F:BF:59:28:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ac:4f:d0:29:42:57:fb:8a:04:d2:82:46:cf:fc:85:e6:d0: 19:cd:28:7d:71:e2:48:8a:49:4c:77:28:72:73:8f:5c:e0:5e: e4:04:fa:3b:62:7a:b9:56:81:2c:48:a8:6a:85:cd:51:18:4a: c7:38:69:7a:02:3b:4c:0b:27:10:2e:9d:bf:2e:f5:99:45:96: ee:5a:1b:ed:62:dc:e7:cc:1a:31:30:3d:d2:94:f3:f1:db:3f: 9e:f9:1a:43:5a:ca:e1:5a:d3:2c:e9:24:22:66:3e:dd:79:8e: df:60:69:97:c7:03:8a:a0:ee:bd:7e:00:61:92:d7:03:ff:f1: 20:e3:1f:97:3b:37:2f:c6:ad:2f:3f:72:cb:d9:c5:57:ab:b0: 4d:23:5a:01:9b:d9:d6:bf:7c:ee:d6:72:b5:ee:be:fd:3b:ef: 28:b7:16:0b:b5:21:e6:87:2f:0e:40:97:ab:eb:a5:e2:c1:2d: 2d:55:a4:a4:6b:75:04:d3:c2:bb:28:2b:59:9f:15:e0:e7:b0: 1a:65:24:c6:76:f3:6f:8b:59:82:1e:fd:23:fd:64:23:7b:39: b8:81:5f:e9:2f:80:46:77:a0:64:28:e2:8d:0c:eb:2a:4c:8d: a5:17:df:6a:82:67:bf:ad:04:6f:15:63:ca:b9:90:97:ac:16: 43:83:3d:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Xj84ZeiuNL10sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk ZWQyNDY2N2UtZWFmNC00NWFlLWEzOWMtYjlmYWVjOTViMzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa2265tE96goW4EckffBIaLITAyuC6lmLVnI 3gqFzvV906qgjMWuhtjZrpRD6rCIyYg43yKTukPQ8Xuq0B+BAyTzWaJObk8drCx9 JOwKwzR8HURwWEcWA9BYHR+bFtZIy6CRl2GOW/+BENnalY3GyWdO9bDx3UkP4r/P GrRL3OSJmWWXhaJ7blF3tgv5oNMdBFedhXHoWo3zq3AqRorOislZq4S4liRkPwPz lWtWaO4udYzKNkUpNRyQMV+GEAtmO2FTsKJO57mZqAeRtEo7prUXKXufQf1UxOv/ rTDJTVV61MNrEPdqyUHooQ2feTy1DDiBaC+oB2ppTffU4TtqlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEI2HNb89z6hwoXqKSq2z+/WSjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMmI3MGNkMWItNjgxZC0z MzQxLTgyNzctY2UyMWExODAxMjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOsT9ApQlf7igTSgkbP/IXm0BnNKH1x4kiKSUx3KHJzj1zgXuQE+jti erlWgSxIqGqFzVEYSsc4aXoCO0wLJxAunb8u9ZlFlu5aG+1i3OfMGjEwPdKU8/Hb P575GkNayuFa0yzpJCJmPt15jt9gaZfHA4qg7r1+AGGS1wP/8SDjH5c7Ny/GrS8/ csvZxVersE0jWgGb2da/fO7WcrXuvv077yi3Fgu1IeaHLw5Al6vrpeLBLS1VpKRr dQTTwrsoK1mfFeDnsBplJMZ282+LWYIe/SP9ZCN7ObiBX+kvgEZ3oGQo4o0M6ypM jaUX32qCZ7+tBG8VY8q5kJesFkODPT8= -----END CERTIFICATE-----Generated at Sat Oct 10 17:26:21 2026 by rpki-client