$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/858c308a-431a-38d2-bff9-7bcffc77a16b.roa File: 858c308a-431a-38d2-bff9-7bcffc77a16b.roa (raw, json) Hash identifier: NKhnkRhTsa/aAgiYYzo/uPsOZm/u+5kTWr/Yqo88IiA= Subject key identifier: 6D:77:7E:1C:45:0B:FC:F9:D2:51:1A:2B:31:0B:2E:0F:8A:95:82:0D Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584EA8EC40ED4B492BD3142681A0 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/858c308a-431a-38d2-bff9-7bcffc77a16b.roa Signing time: Wed 29 Jul 2026 13:00:12 +0000 ROA not before: Wed 29 Jul 2026 13:00:12 +0000 ROA not after: Tue 27 Oct 2026 13:00:12 +0000 asID: 2615 IP address blocks: 147.1.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a8:ec:40:ed:4b:49:2b:d3:14:26:81:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jul 29 13:00:12 2026 GMT Not After : Oct 27 13:00:12 2026 GMT Subject: CN=1779f5b6-5f8d-4b0e-913a-be36dcfde5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4d:dd:ec:2d:d7:66:d0:ef:31:73:16:8e:f4: dd:cf:77:dc:96:7b:fd:6e:1a:40:c2:6e:c2:7f:b7: 57:98:60:c9:1d:03:63:f5:e7:3b:c7:cb:34:b3:bf: 31:6c:ac:6b:0f:02:b3:ca:ca:f5:6d:9d:cf:1f:46: 84:4e:1f:eb:4f:59:44:80:67:11:0e:f1:d7:34:1b: de:5e:1a:87:9d:fd:b8:62:e2:b4:91:9f:09:8d:6f: 4b:a6:4c:ca:a4:d7:7a:60:b1:1a:de:d0:4b:fa:8b: 13:ca:1e:30:09:41:db:21:83:80:d2:de:13:49:b1: 78:e9:86:9b:64:9a:68:f2:90:2b:7f:af:d6:bf:ac: 6a:e6:d9:d5:1c:38:45:10:4c:66:47:3e:f8:88:dc: 8e:48:93:6a:5e:a4:08:66:e5:72:42:03:ce:c9:53: 01:5a:ad:ac:5d:d4:8a:e5:f8:f1:8a:33:38:39:d6: 62:8e:8e:c9:c1:c1:7c:ed:82:e6:09:dc:d4:6f:fe: 00:5a:0c:c0:1d:df:c0:05:6d:99:82:29:26:40:2b: c5:ae:f0:54:5a:86:07:ad:fc:3c:00:7d:c1:51:6a: d3:b3:a3:4c:ab:4f:8d:32:fe:31:0b:38:30:b0:11: b4:f1:e1:98:45:98:52:3c:b5:d4:d9:c3:55:49:8e: d5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:77:7E:1C:45:0B:FC:F9:D2:51:1A:2B:31:0B:2E:0F:8A:95:82:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/858c308a-431a-38d2-bff9-7bcffc77a16b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:75:ec:cc:39:73:8f:55:18:47:61:2f:6d:98:f3:17:83:0a: 4b:00:60:c3:12:55:0f:43:2e:25:55:7a:b9:1c:2b:25:ba:e7: 4c:70:79:d4:9f:7e:87:d7:30:85:e9:80:ed:0a:1d:6d:e8:24: 81:a7:0d:32:eb:40:cf:ee:d4:b0:98:eb:9d:42:00:e2:a2:07: 30:52:68:f4:0c:06:45:57:42:4f:99:17:db:e4:94:a2:52:43: 82:e0:40:e3:28:40:4c:3c:14:1e:11:9f:5f:44:0e:77:6a:5b: a5:42:f3:70:51:0c:c8:f5:13:12:fe:00:e2:60:e8:82:5d:d3: ee:74:24:65:00:7a:5c:d4:6c:bd:75:0c:e9:dc:72:2d:99:a5: be:f1:dc:e1:7e:a3:77:e7:db:aa:c2:60:7a:eb:fa:6e:7c:ec: 94:90:8d:70:33:b3:93:0f:1d:1e:f4:3c:e7:eb:b4:50:30:76: 20:0d:79:c0:09:a0:de:51:75:95:dc:c3:b8:e4:cf:7a:fb:09: dc:ec:92:36:86:a6:e5:31:2c:8b:03:30:da:25:51:84:ff:c1: 94:c6:71:70:ec:82:d2:59:15:78:f9:02:d4:c6:57:3b:99:e6: 4b:92:4f:8d:ac:59:ff:04:a7:c8:14:62:3d:8c:a8:2f:de:78: 14:e4:f3:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6o7EDtS0kr0xQmgaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk MTc3OWY1YjYtNWY4ZC00YjBlLTkxM2EtYmUzNmRjZmRlNWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik3d7C3XZtDvMXMWjvTdz3fclnv9bhpAwm7C f7dXmGDJHQNj9ec7x8s0s78xbKxrDwKzysr1bZ3PH0aETh/rT1lEgGcRDvHXNBve XhqHnf24YuK0kZ8JjW9LpkzKpNd6YLEa3tBL+osTyh4wCUHbIYOA0t4TSbF46Yab ZJpo8pArf6/Wv6xq5tnVHDhFEExmRz74iNyOSJNqXqQIZuVyQgPOyVMBWq2sXdSK 5fjxijM4OdZijo7JwcF87YLmCdzUb/4AWgzAHd/ABW2ZgikmQCvFrvBUWoYHrfw8 AH3BUWrTs6NMq0+NMv4xCzgwsBG08eGYRZhSPLXU2cNVSY7V3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG13fhxFC/z50lEaKzELLg+KlYINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvODU4YzMwOGEtNDMxYS0z OGQyLWJmZjktN2JjZmZjNzdhMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl17Mw5c49VGEdhL22Y8xeDCksAYMMSVQ9DLiVVerkcKyW650xwedSf fofXMIXpgO0KHW3oJIGnDTLrQM/u1LCY651CAOKiBzBSaPQMBkVXQk+ZF9vklKJS Q4LgQOMoQEw8FB4Rn19EDndqW6VC83BRDMj1ExL+AOJg6IJd0+50JGUAelzUbL11 DOncci2Zpb7x3OF+o3fn26rCYHrr+m587JSQjXAzs5MPHR70POfrtFAwdiANecAJ oN5RdZXcw7jkz3r7CdzskjaGpuUxLIsDMNolUYT/wZTGcXDsgtJZFXj5AtTGVzuZ 5kuST42sWf8Ep8gUYj2MqC/eeBTk8wc= -----END CERTIFICATE-----Generated at Tue Aug 25 08:01:28 2026 by rpki-client