$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/858c308a-431a-38d2-bff9-7bcffc77a16b.roa File: 858c308a-431a-38d2-bff9-7bcffc77a16b.roa (raw, json) Hash identifier: NTdT2IpEYwLMPKVpCF4gBlyzKYLOZ76Y16FUl9HJsvs= Subject key identifier: 99:1F:56:84:01:9A:7C:06:6C:C5:E6:CB:FF:89:57:07:E9:F6:16:29 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584F4C3D4BF952DD4CBB5B78C900 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/858c308a-431a-38d2-bff9-7bcffc77a16b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 2615 IP address blocks: 147.1.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:4b:f9:52:dd:4c:bb:5b:78:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e5125180-67ec-4f4c-b375-c265dc59aa5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:51:d3:28:3d:bb:5e:e6:99:35:df:92:24:f6: da:26:61:9c:ef:8b:a0:db:ad:39:e3:2f:4d:94:b3: 2e:be:80:94:0e:3e:32:0b:ff:fe:99:83:97:51:cd: 60:40:10:c4:d3:2e:b3:35:fd:18:d8:be:ce:af:ae: 3d:99:4e:b8:03:06:52:8f:5d:66:dc:12:ef:73:46: fe:27:27:bb:ce:c8:77:14:8b:62:c2:fe:5a:9e:42: 5a:a4:d2:0d:3b:5c:97:c6:91:8e:1d:47:b6:4f:62: 2d:07:09:64:03:ff:ac:74:fc:b3:ad:37:03:ee:18: e7:3f:e9:dc:fb:f7:fb:c6:aa:c9:be:bf:5a:c3:b7: 47:f8:fb:ba:3a:d0:34:73:71:21:b8:ad:27:27:fa: e9:52:73:43:64:a4:05:cc:db:8e:72:49:74:a8:fe: 23:7e:1b:b0:ce:69:db:14:9d:e8:42:10:0e:3f:f0: 20:fc:83:93:a9:e9:c2:dc:75:57:0c:8c:61:b8:09: c4:30:76:c9:80:68:87:13:f4:51:5f:1d:e3:0f:67: 16:dd:10:c6:aa:3f:c9:34:7f:a4:c8:59:10:61:e5: 0d:3f:a4:12:df:10:fa:05:e1:5c:69:5d:8d:95:f5: 13:13:35:61:c0:54:ff:e5:4c:bd:3a:15:ac:b8:04: fd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1F:56:84:01:9A:7C:06:6C:C5:E6:CB:FF:89:57:07:E9:F6:16:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/858c308a-431a-38d2-bff9-7bcffc77a16b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:3f:a8:85:2f:c1:30:7b:f2:cd:26:45:2b:2c:e2:3b:18:87: ea:c7:3d:30:55:fa:56:86:f3:11:a4:55:f5:f3:5f:81:ff:f2: 9d:b4:50:80:ed:75:31:72:07:31:fd:78:db:9d:b4:c6:8a:d1: d8:50:06:20:1d:0b:99:d7:38:5a:4e:b1:95:da:3e:40:21:ac: 01:d8:ea:e5:93:38:e2:38:56:c4:7b:82:8a:84:df:c7:5c:c7: 26:a8:7c:ba:2c:1e:af:90:03:3d:b1:80:25:46:70:21:1e:93: 5d:b5:6e:8e:33:0d:d2:34:fc:4c:e7:b4:03:98:9b:8c:fb:f1: fe:9f:27:08:2b:34:0b:4e:58:e9:81:6d:f9:93:2e:36:67:8e: 07:7d:dd:41:20:ad:a8:ee:1c:ab:2b:d9:6b:f2:61:52:af:4f: f4:56:93:a2:d1:46:b2:fc:c0:e5:97:2d:8e:82:af:84:dc:64: f1:d1:5f:c8:fd:47:a1:f7:29:ca:39:6a:34:42:15:8b:f8:33: e8:bb:92:2e:1d:e2:67:ba:4c:8f:63:74:1a:9b:2f:05:84:6f: c1:07:8c:a3:d2:0d:44:52:78:ba:9e:99:ee:92:af:15:0f:8e: 5b:66:22:97:e6:bc:b9:ec:7a:bf:0a:29:1a:94:b9:e3:65:57: d9:60:05:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUv5Ut1Mu1t4yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTUxMjUxODAtNjdlYy00ZjRjLWIzNzUtYzI2NWRjNTlhYTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VHTKD27XuaZNd+SJPbaJmGc74ug26054y9N lLMuvoCUDj4yC//+mYOXUc1gQBDE0y6zNf0Y2L7Or649mU64AwZSj11m3BLvc0b+ Jye7zsh3FItiwv5ankJapNINO1yXxpGOHUe2T2ItBwlkA/+sdPyzrTcD7hjnP+nc +/f7xqrJvr9aw7dH+Pu6OtA0c3EhuK0nJ/rpUnNDZKQFzNuOckl0qP4jfhuwzmnb FJ3oQhAOP/Ag/IOTqenC3HVXDIxhuAnEMHbJgGiHE/RRXx3jD2cW3RDGqj/JNH+k yFkQYeUNP6QS3xD6BeFcaV2NlfUTEzVhwFT/5Uy9OhWsuAT9OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkfVoQBmnwGbMXmy/+JVwfp9hYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvODU4YzMwOGEtNDMxYS0z OGQyLWJmZjktN2JjZmZjNzdhMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM/qIUvwTB78s0mRSss4jsYh+rHPTBV+laG8xGkVfXzX4H/8p20UIDt dTFyBzH9eNudtMaK0dhQBiAdC5nXOFpOsZXaPkAhrAHY6uWTOOI4VsR7goqE38dc xyaofLosHq+QAz2xgCVGcCEek121bo4zDdI0/EzntAOYm4z78f6fJwgrNAtOWOmB bfmTLjZnjgd93UEgrajuHKsr2WvyYVKvT/RWk6LRRrL8wOWXLY6Cr4TcZPHRX8j9 R6H3Kco5ajRCFYv4M+i7ki4d4me6TI9jdBqbLwWEb8EHjKPSDURSeLqeme6SrxUP jltmIpfmvLnser8KKRqUueNlV9lgBeQ= -----END CERTIFICATE-----Generated at Sat Oct 10 17:26:02 2026 by rpki-client