$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8acd6ab8-bc00-37fe-9b47-9b25b7fb1a99.roa File: 8acd6ab8-bc00-37fe-9b47-9b25b7fb1a99.roa (raw, json) Hash identifier: ofOxJ4nYvhBcgHCxZ+57NdbE5IxCu5J5fITvLXszcIg= Subject key identifier: B4:D0:D4:BC:B3:7E:E6:E3:96:0E:12:03:39:89:6C:85:8E:29:FA:B4 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584EA7918AB15E12783501917E40 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8acd6ab8-bc00-37fe-9b47-9b25b7fb1a99.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 2615 IP address blocks: 147.1.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:8a:b1:5e:12:78:35:01:91:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c3214c23-d21d-43c3-b706-52b76d92ff6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:3a:96:e2:a7:71:94:be:70:aa:23:43:bd: 91:50:2c:3a:2b:1e:b2:3b:cd:ca:b1:d9:f1:1a:65: ec:7f:1a:1f:98:7a:8e:d3:c7:d1:a6:a7:82:16:89: c8:e7:64:16:3a:aa:37:fe:aa:aa:a0:44:23:5a:36: 3f:d8:dd:41:fc:e5:eb:60:6a:ae:74:fe:6a:d0:57: 49:44:18:a5:7b:e8:59:53:63:e6:b4:d3:79:f7:63: 8c:9d:55:fc:45:94:68:e4:41:01:c7:76:16:cc:fc: f6:14:43:43:df:a4:c0:86:1d:37:03:d2:5b:b5:24: ad:7e:8a:ab:8c:fc:af:b1:cb:b7:91:ec:d5:c8:12: a1:34:81:9a:53:43:1e:48:3a:fd:25:5b:93:37:da: ab:43:56:88:1e:fe:f4:59:95:ef:10:d5:36:29:51: 12:f4:c4:84:72:d9:1d:89:f9:54:d8:eb:bc:06:77: 86:e9:fd:26:bb:8c:0b:5a:bb:e1:00:9a:f5:c0:dc: a1:90:4c:9b:07:a5:37:c3:b9:62:fe:25:5a:6c:05: 8b:56:13:b5:e3:2e:2a:40:2d:05:53:39:27:c8:63: b1:2f:d6:80:86:1c:80:8f:b8:7e:1e:d9:96:fd:13: be:9a:91:91:7d:cb:d6:73:3d:26:3d:c3:e1:ec:d8: d1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D0:D4:BC:B3:7E:E6:E3:96:0E:12:03:39:89:6C:85:8E:29:FA:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8acd6ab8-bc00-37fe-9b47-9b25b7fb1a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9d:f1:69:79:b2:3e:94:5c:96:2e:64:de:09:39:e4:f4:2a: 48:38:72:c6:d4:7d:29:2f:6d:fd:db:34:57:d6:4b:97:61:8b: 30:0f:58:b1:6a:3f:c5:13:93:b5:e8:98:ab:d7:aa:c3:87:da: d6:84:9e:17:df:79:13:0f:1b:0d:a0:d9:0b:e0:26:16:31:15: b9:db:9a:e8:a1:7c:01:f9:0c:1d:3f:21:a0:6f:f9:52:6d:bc: 34:f3:e9:47:bb:0e:00:c6:33:aa:cb:d0:ac:83:a3:3c:02:f8: 79:4a:32:c2:00:d7:e7:c6:b3:c7:a8:6e:2c:90:5c:ef:60:b7: 9a:a0:20:aa:f7:a1:2f:da:51:e6:10:3c:33:29:ce:34:b8:ab: 04:f2:9a:a7:9e:7e:bc:e5:17:15:43:b7:10:81:72:61:e8:0e: 61:cb:d1:35:b5:71:39:f5:1e:66:a3:e7:2f:20:29:b0:cc:8d: c0:3f:03:49:57:14:16:c1:8c:3a:2c:85:54:c4:d2:35:53:03: 23:e3:75:c1:6f:d2:ca:f8:1f:f4:2e:9c:57:cf:7b:47:d9:c3: b1:20:07:09:70:31:b3:c8:bf:04:67:ad:12:2f:a5:d7:31:7b: 4c:3d:e0:b7:2c:ee:79:a5:06:b2:3d:c6:06:64:90:c6:b4:9e: 38:26:e9:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkYqxXhJ4NQGRfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzMyMTRjMjMtZDIxZC00M2MzLWI3MDYtNTJiNzZkOTJmZjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUE6luKncZS+cKojQ72RUCw6Kx6yO83Ksdnx GmXsfxofmHqO08fRpqeCFonI52QWOqo3/qqqoEQjWjY/2N1B/OXrYGqudP5q0FdJ RBile+hZU2PmtNN592OMnVX8RZRo5EEBx3YWzPz2FEND36TAhh03A9JbtSStfoqr jPyvscu3kezVyBKhNIGaU0MeSDr9JVuTN9qrQ1aIHv70WZXvENU2KVES9MSEctkd iflU2Ou8BneG6f0mu4wLWrvhAJr1wNyhkEybB6U3w7li/iVabAWLVhO14y4qQC0F UzknyGOxL9aAhhyAj7h+HtmW/RO+mpGRfcvWcz0mPcPh7NjREwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTQ1Lyzfubjlg4SAzmJbIWOKfq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvOGFjZDZhYjgtYmMwMC0z N2ZlLTliNDctOWIyNWI3ZmIxYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwERMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOd8Wl5sj6UXJYuZN4JOeT0Kkg4csbUfSkvbf3bNFfWS5dhizAPWLFq P8UTk7XomKvXqsOH2taEnhffeRMPGw2g2QvgJhYxFbnbmuihfAH5DB0/IaBv+VJt vDTz6Ue7DgDGM6rL0KyDozwC+HlKMsIA1+fGs8eobiyQXO9gt5qgIKr3oS/aUeYQ PDMpzjS4qwTymqeefrzlFxVDtxCBcmHoDmHL0TW1cTn1Hmaj5y8gKbDMjcA/A0lX FBbBjDoshVTE0jVTAyPjdcFv0sr4H/QunFfPe0fZw7EgBwlwMbPIvwRnrRIvpdcx e0w94Lcs7nmlBrI9xgZkkMa0njgm6d8= -----END CERTIFICATE-----Generated at Wed Aug 26 08:07:46 2026 by rpki-client