
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa
File: 72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa (raw, json)
Hash identifier: 7XzgE5PbRn6YZXTGHFUtnYtzb3vO48XLmCbRjG/Dg/Y=
Subject key identifier: 46:BE:6D:B1:D3:3E:CE:F3:14:F1:84:77:BB:D6:6E:1A:F3:CA:22:4F
Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial: 010D0C9F4328584EA798085FE2A727A499BFC600
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 2615
IP address blocks: 147.1.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Aug 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:98:08:5f:e2:a7:27:a4:99:bf:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=dc84ab37-0114-44c8-8ad3-5fda6c593f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5d:b6:40:51:dc:5b:39:2d:a0:df:63:89:61:
ac:cd:79:2d:9e:63:d8:aa:2d:b0:87:82:a0:fd:03:
67:d7:3f:1c:2d:ac:a7:54:b5:58:60:c2:3a:c5:8d:
64:ce:56:af:cb:71:f8:60:da:7f:e6:58:7a:65:76:
36:19:d2:c6:a8:51:dc:ba:30:2b:1f:9e:7b:c6:0d:
98:32:e8:9c:e2:0c:47:2d:e4:14:c3:c2:ed:08:09:
86:3b:8d:e8:eb:a4:84:bc:d8:b3:0c:30:3e:14:e9:
93:e3:45:5c:55:d0:7a:23:99:a0:f6:ac:3e:e6:6d:
ea:4a:96:5e:9c:53:75:c8:3b:cc:80:5b:79:c4:2e:
49:4c:3b:0f:69:00:a8:98:f3:72:0e:f8:5f:d0:c0:
d5:74:65:ff:d5:66:97:9c:d3:ab:40:f1:e3:44:60:
9d:d9:bd:ab:1a:bc:d4:2a:8c:56:04:43:c9:1a:d6:
09:90:24:fa:9d:09:a4:b5:7d:54:19:91:85:69:c1:
8d:f2:7a:d1:f6:75:38:bc:13:50:bd:e8:38:36:56:
06:10:81:4f:48:4d:23:ea:5f:58:59:44:96:ba:21:
9f:ed:93:c9:5b:92:c4:29:e4:b1:39:8b:ba:2f:74:
80:2a:2e:a9:97:94:c9:55:e1:ec:b7:27:a5:71:57:
f5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BE:6D:B1:D3:3E:CE:F3:14:F1:84:77:BB:D6:6E:1A:F3:CA:22:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
X509v3 Authority Key Identifier:
keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
sbgp-ipAddrBlock: critical
IPv4:
147.1.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:db:d9:84:83:01:2a:8d:9d:17:60:79:c2:8e:11:69:bf:04:
8c:a1:01:0d:3e:45:c0:e7:b7:d4:9e:e8:1a:ac:7e:16:b2:f5:
81:14:63:a9:c0:28:06:cf:5d:c7:d6:21:db:b3:f0:87:5e:fb:
32:d0:4e:4a:4f:49:53:1a:f8:cc:54:bd:e1:49:6d:e3:59:61:
fd:a1:b0:01:1a:ac:e9:41:f1:d8:59:92:ee:8d:23:06:d2:4b:
75:6d:88:91:04:69:b8:c0:1e:78:1c:c4:f4:ed:50:fa:cd:29:
cb:8a:81:ee:6a:39:d5:04:b9:ce:65:27:6a:b0:3e:de:4f:b5:
e5:a9:eb:21:33:10:bd:9e:c6:23:45:e7:5e:e3:b0:af:c8:b5:
c6:56:fd:34:33:3d:11:a8:d7:dc:58:82:fe:b2:fe:05:92:d4:
35:00:ca:80:c2:9a:06:3f:18:07:8c:8d:7a:80:5f:04:19:df:
f0:6c:e7:e8:67:25:08:9b:a8:1a:ea:10:a1:98:50:9b:06:97:
bd:cb:62:88:52:af:96:8e:5b:01:ce:c5:cb:1c:67:0c:43:c5:
2c:be:59:8c:1c:47:cf:b2:b8:9a:3c:08:d6:1b:f6:38:8f:83:
29:8d:c4:ab:16:7e:ec:4d:a7:62:6c:ef:a3:9f:ff:d9:ea:c9:
13:bc:e0:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmAhf4qcnpJm/xgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm
NTIzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZGM4NGFiMzctMDExNC00NGM4LThhZDMtNWZkYTZjNTkzZjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil22QFHcWzktoN9jiWGszXktnmPYqi2wh4Kg
/QNn1z8cLaynVLVYYMI6xY1kzlavy3H4YNp/5lh6ZXY2GdLGqFHcujArH557xg2Y
Muic4gxHLeQUw8LtCAmGO43o66SEvNizDDA+FOmT40VcVdB6I5mg9qw+5m3qSpZe
nFN1yDvMgFt5xC5JTDsPaQComPNyDvhf0MDVdGX/1WaXnNOrQPHjRGCd2b2rGrzU
KoxWBEPJGtYJkCT6nQmktX1UGZGFacGN8nrR9nU4vBNQveg4NlYGEIFPSE0j6l9Y
WUSWuiGf7ZPJW5LEKeSxOYu6L3SAKi6pl5TJVeHstyelcVf1YQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEa+bbHTPs7zFPGEd7vWbhrzyiJPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl
YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNzJiOWY0ZjAtMGYyMi0z
YmFhLTg5OWEtODdiNWUzN2YxZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4
MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy
ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5
NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwFoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADHb2YSDASqNnRdgecKOEWm/BIyhAQ0+RcDnt9Se6Bqsfhay9YEUY6nA
KAbPXcfWIduz8Ide+zLQTkpPSVMa+MxUveFJbeNZYf2hsAEarOlB8dhZku6NIwbS
S3VtiJEEabjAHngcxPTtUPrNKcuKge5qOdUEuc5lJ2qwPt5PteWp6yEzEL2exiNF
517jsK/ItcZW/TQzPRGo19xYgv6y/gWS1DUAyoDCmgY/GAeMjXqAXwQZ3/Bs5+hn
JQibqBrqEKGYUJsGl73LYohSr5aOWwHOxcscZwxDxSy+WYwcR8+yuJo8CNYb9jiP
gymNxKsWfuxNp2Js76Of/9nqyRO84I8=
-----END CERTIFICATE-----
Generated at Tue Aug 25 08:01:20 2026 by rpki-client