$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/9ba08d73-b505-3fa5-a35b-23519c486b5c.roa File: 9ba08d73-b505-3fa5-a35b-23519c486b5c.roa (raw, json) Hash identifier: RW6vJqcGZeEFl+W1DhdRQoKpk/l5NMiOI3xC+jYAA+I= Subject key identifier: 74:9E:9B:43:E2:3D:02:1B:A6:9B:E8:CF:67:CE:6E:80:BD:4A:A8:5F Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584EB2B1B3BF6228853D5C17A1C0 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/9ba08d73-b505-3fa5-a35b-23519c486b5c.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 2615 IP address blocks: 147.1.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:b3:bf:62:28:85:3d:5c:17:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=70c3cc91-fabb-4fd3-b576-eef3245a7bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a1:16:60:ec:5c:bf:b4:c3:75:a1:d8:88:61: ef:65:c2:dd:b3:12:68:37:ec:cb:cb:ca:9d:f5:d8: 70:a7:49:b7:5a:4c:a8:f9:f8:0b:13:84:a4:52:2b: f5:c4:bf:dd:31:33:fd:70:dd:75:2c:ce:f9:ab:94: 99:7c:82:cc:24:90:48:1f:9a:ce:73:72:be:5c:dc: 51:fd:86:41:42:7e:cd:3c:40:1f:b6:a7:44:7e:41: cc:e1:6f:c0:a8:af:3c:99:bf:eb:93:ea:56:32:30: 86:8f:a9:88:9c:b8:61:3f:4e:ec:66:5e:35:80:95: 4b:f2:6c:d6:81:89:8f:68:1c:76:13:bb:be:81:37: b9:0a:14:4e:9e:f0:67:86:97:7c:a2:2d:95:64:4f: 5a:4d:03:c8:d5:51:b0:1d:46:81:0f:a4:c9:e8:9f: d0:42:80:f9:63:e1:e0:97:ed:98:3d:37:83:73:4b: d2:2e:50:78:ef:68:0b:78:78:e3:79:42:38:1a:7f: 1e:28:1a:ef:1c:44:d0:d3:ab:15:a3:e6:47:91:cc: b1:4f:61:a2:fb:28:0a:05:51:27:c9:93:7b:bd:e8: f9:31:18:6a:86:67:41:d0:28:9f:9f:3e:9f:2e:5e: 8e:64:1c:99:39:b3:cd:ef:7d:38:39:06:fb:a5:2d: 14:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9E:9B:43:E2:3D:02:1B:A6:9B:E8:CF:67:CE:6E:80:BD:4A:A8:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/9ba08d73-b505-3fa5-a35b-23519c486b5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:cf:34:72:a5:23:df:48:2c:98:19:29:58:22:30:3e:ad:56: 47:0c:9c:c2:f9:bd:87:83:ae:e9:4b:b4:cf:90:62:c8:16:f6: cd:b3:b6:91:85:7c:85:db:37:56:6e:a9:ae:7e:3f:ec:64:c4: d4:19:cc:be:f7:33:a1:5e:f3:dc:3d:f7:2b:01:29:96:93:b3: 1d:10:c9:96:49:e9:42:61:57:fb:18:06:bf:fc:92:0e:f9:7c: 63:aa:e2:b4:f5:e0:ba:7e:07:3c:34:9f:8e:22:96:91:73:25: 2f:2b:47:b9:2b:8e:fb:19:53:ed:82:f2:a9:d7:15:c0:7d:45: 2e:12:59:c0:b8:43:a2:89:88:f7:a0:6a:47:ad:18:0e:1b:e3: 7a:f5:e1:b3:d9:75:92:33:ea:93:cd:6a:eb:a3:ab:ff:f6:1e: c0:c9:4a:63:29:38:29:19:9f:bf:10:06:7e:66:37:f0:70:c6: 99:42:67:a7:0e:56:54:04:bb:3a:db:b9:aa:a4:1b:54:46:3c: 7d:9f:8f:7a:c4:e9:6d:47:ab:d1:88:3d:5c:6e:9a:c6:d0:b2: f6:0c:05:4f:81:55:56:7d:f7:e6:35:b3:70:d0:12:f9:94:a0: d5:dd:d9:42:2b:69:5d:9e:5e:75:f8:a9:02:db:66:58:6b:59: 85:f6:ec:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysbO/YiiFPVwXocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk NzBjM2NjOTEtZmFiYi00ZmQzLWI1NzYtZWVmMzI0NWE3YmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaEWYOxcv7TDdaHYiGHvZcLdsxJoN+zLy8qd 9dhwp0m3Wkyo+fgLE4SkUiv1xL/dMTP9cN11LM75q5SZfILMJJBIH5rOc3K+XNxR /YZBQn7NPEAftqdEfkHM4W/AqK88mb/rk+pWMjCGj6mInLhhP07sZl41gJVL8mzW gYmPaBx2E7u+gTe5ChROnvBnhpd8oi2VZE9aTQPI1VGwHUaBD6TJ6J/QQoD5Y+Hg l+2YPTeDc0vSLlB472gLeHjjeUI4Gn8eKBrvHETQ06sVo+ZHkcyxT2Gi+ygKBVEn yZN7vej5MRhqhmdB0Cifnz6fLl6OZByZObPN7304OQb7pS0UjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSem0PiPQIbppvoz2fOboC9SqhfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvOWJhMDhkNzMtYjUwNS0z ZmE1LWEzNWItMjM1MTljNDg2YjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwESMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7PNHKlI99ILJgZKVgiMD6tVkcMnML5vYeDrulLtM+QYsgW9s2ztpGF fIXbN1Zuqa5+P+xkxNQZzL73M6Fe89w99ysBKZaTsx0QyZZJ6UJhV/sYBr/8kg75 fGOq4rT14Lp+Bzw0n44ilpFzJS8rR7krjvsZU+2C8qnXFcB9RS4SWcC4Q6KJiPeg aketGA4b43r14bPZdZIz6pPNauujq//2HsDJSmMpOCkZn78QBn5mN/BwxplCZ6cO VlQEuzrbuaqkG1RGPH2fj3rE6W1Hq9GIPVxumsbQsvYMBU+BVVZ99+Y1s3DQEvmU oNXd2UIraV2eXnX4qQLbZlhrWYX27NA= -----END CERTIFICATE-----Generated at Tue Aug 25 23:41:26 2026 by rpki-client