$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2cd3c772-112c-3222-ae8e-7af04bf1d6d4.roa File: 2cd3c772-112c-3222-ae8e-7af04bf1d6d4.roa (raw, json) Hash identifier: rn9Jx9S7VOtSR+pBmldc4omN/yWYP+vyRK+5zCVjdXc= Subject key identifier: 4F:EC:EF:73:5A:37:9F:9B:7C:B0:DC:04:97:B3:BA:FA:85:E0:35:2F Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584F549DAC8122B1C27AA3495ED0 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2cd3c772-112c-3222-ae8e-7af04bf1d6d4.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 2615 IP address blocks: 147.1.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:ac:81:22:b1:c2:7a:a3:49:5e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=e692a92f-892f-4eec-a6d9-ea18789d331d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8e:ab:c6:4f:a1:5e:10:cc:79:ba:4a:ec:67: 5f:e7:df:49:87:fb:ca:e9:80:81:87:34:5c:8b:52: ff:d5:b6:fa:75:99:06:78:68:d7:9a:ef:b2:06:30: 0a:c8:c0:99:a5:4d:3d:3c:23:83:bc:e2:db:7f:24: d0:44:3d:b2:4a:52:b4:c7:15:93:b0:50:52:35:fd: ff:1f:94:99:17:b5:0f:ed:9b:37:a8:20:55:7a:1c: c9:4c:a9:92:c9:fa:46:ba:59:ad:d6:8a:7d:63:64: f1:36:78:2a:f2:12:2e:c0:2b:aa:fb:77:d1:85:fc: ff:0c:6a:f6:07:6a:f2:0f:37:c1:66:1c:24:54:66: 6c:4a:b5:54:ae:2a:70:80:df:77:04:aa:2a:ce:df: 35:38:33:28:53:78:0f:11:f6:3a:9c:80:12:e7:78: 2d:77:45:1a:39:f7:3c:a3:82:9d:9a:04:7b:a1:a5: ed:13:54:08:f8:68:a3:35:84:3a:6b:bf:34:a8:01: 77:8b:f5:fb:b1:2f:1b:13:89:8b:d0:1e:22:d3:79: e3:84:ca:31:9a:16:9f:34:e8:22:1c:68:0d:dd:16: d2:75:4f:00:83:63:96:03:af:4f:51:a4:fd:74:a6: 2a:a3:de:bb:8a:1c:db:eb:bf:6b:49:d3:e4:40:36: fd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EC:EF:73:5A:37:9F:9B:7C:B0:DC:04:97:B3:BA:FA:85:E0:35:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2cd3c772-112c-3222-ae8e-7af04bf1d6d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:bc:26:ec:78:f9:7d:23:9d:81:ac:5d:1e:6f:60:10:de:f0: 4e:bb:d2:9a:9b:65:1b:22:47:2a:6e:91:d3:49:af:f3:d7:2d: 81:0a:0c:3d:22:90:18:7e:b7:fd:15:a6:48:62:5c:77:2d:c8: 04:95:7a:b4:06:dc:a0:7b:24:ae:50:72:73:9a:2d:2f:1a:be: 34:de:5b:97:b7:34:99:a9:eb:4c:1c:91:48:56:8f:6d:9a:4d: 8a:ef:df:d0:0a:0a:4b:e9:97:ba:bf:cc:94:7a:5d:65:05:5d: 1f:ce:e1:ae:ed:16:5c:58:a1:37:65:e2:5f:a1:0f:3f:87:89: 58:ab:b9:b5:1d:34:6b:b0:ed:9b:7d:79:fb:3d:03:60:be:7e: fa:8c:5b:97:6a:a6:0a:4f:9d:5a:f2:66:da:41:a7:d1:45:ed: a9:9e:d1:21:ff:9b:09:2f:77:8d:37:3c:0c:3a:3d:8e:6c:3f: 84:6c:32:24:49:16:65:93:8d:b5:80:e6:f2:c4:c9:40:c6:81: e0:25:66:64:d3:f1:7e:cd:90:9c:fe:b7:59:50:12:3a:ff:a4: c7:8e:d0:83:0c:31:1c:0f:5b:dc:00:e8:45:24:05:22:f2:ce: 58:c8:8d:c5:12:32:98:3f:a3:b2:19:57:6a:1a:e3:6f:22:70: f6:ce:f3:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnayBIrHCeqNJXtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZTY5MmE5MmYtODkyZi00ZWVjLWE2ZDktZWExODc4OWQzMzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY6rxk+hXhDMebpK7Gdf599Jh/vK6YCBhzRc i1L/1bb6dZkGeGjXmu+yBjAKyMCZpU09PCODvOLbfyTQRD2ySlK0xxWTsFBSNf3/ H5SZF7UP7Zs3qCBVehzJTKmSyfpGulmt1op9Y2TxNngq8hIuwCuq+3fRhfz/DGr2 B2ryDzfBZhwkVGZsSrVUripwgN93BKoqzt81ODMoU3gPEfY6nIAS53gtd0UaOfc8 o4KdmgR7oaXtE1QI+GijNYQ6a780qAF3i/X7sS8bE4mL0B4i03njhMoxmhafNOgi HGgN3RbSdU8Ag2OWA69PUaT9dKYqo967ihzb679rSdPkQDb96QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/s73NaN5+bfLDcBJezuvqF4DUvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMmNkM2M3NzItMTEyYy0z MjIyLWFlOGUtN2FmMDRiZjFkNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGi8Jux4+X0jnYGsXR5vYBDe8E670pqbZRsiRypukdNJr/PXLYEKDD0i kBh+t/0VpkhiXHctyASVerQG3KB7JK5QcnOaLS8avjTeW5e3NJmp60wckUhWj22a TYrv39AKCkvpl7q/zJR6XWUFXR/O4a7tFlxYoTdl4l+hDz+HiVirubUdNGuw7Zt9 efs9A2C+fvqMW5dqpgpPnVryZtpBp9FF7ame0SH/mwkvd403PAw6PY5sP4RsMiRJ FmWTjbWA5vLEyUDGgeAlZmTT8X7NkJz+t1lQEjr/pMeO0IMMMRwPW9wA6EUkBSLy zljIjcUSMpg/o7IZV2oa428icPbO858= -----END CERTIFICATE-----Generated at Sat Oct 10 17:25:54 2026 by rpki-client