$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/bc2bcadd-3b70-3c35-aa79-dbb2ba52fd8b.roa File: bc2bcadd-3b70-3c35-aa79-dbb2ba52fd8b.roa (raw, json) Hash identifier: Xcs6TN3U/enPRUu82xs85W5i4tHIg1NB5wJqKdjo0fE= Subject key identifier: 14:C3:5D:FB:0E:EA:8A:6F:C9:0D:13:00:6D:79:35:15:CA:90:E7:D5 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584E640FC3139BE093989A088500 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/bc2bcadd-3b70-3c35-aa79-dbb2ba52fd8b.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 2615 IP address blocks: 147.1.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:c3:13:9b:e0:93:98:9a:08:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=c3ab6f9d-6f27-4a71-9be2-fc2c6b235cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6d:4a:ba:e1:be:77:a0:e8:e8:dc:a2:51:96: de:6f:81:3f:b3:06:05:ba:71:d9:f9:15:28:00:74: b8:3b:2e:9a:db:74:3b:c5:0a:14:e5:ef:53:a1:e4: 75:5e:61:97:f9:2f:6e:16:3e:53:28:e1:e2:16:f0: e6:12:b1:78:5c:65:55:e1:71:b9:83:e5:89:06:ab: 4d:64:44:64:d4:7f:5f:a3:ba:ea:70:2f:8c:d5:a0: 60:85:f0:14:21:3b:a0:28:e6:45:aa:42:5e:60:98: ca:f6:be:97:c7:9f:a6:d9:0a:e0:da:c1:85:51:f8: bd:e1:36:26:75:7a:50:d3:bf:1e:a1:49:01:fc:da: a1:04:e1:ca:d3:57:0a:27:a3:d7:0a:f1:a5:d3:21: 67:87:0f:8f:96:55:8e:c0:96:be:0c:33:c3:4b:91: 03:72:3b:54:c5:75:a8:0d:d0:69:51:7d:16:82:d9: 5e:4a:8b:c1:5d:12:35:80:87:69:b7:7c:2d:36:05: 6a:66:be:ed:86:49:94:f8:5c:08:99:8b:63:c3:50: 79:d2:54:f2:23:2c:d5:d0:43:de:e1:f3:87:fe:e4: 7f:d7:16:4f:49:ab:96:21:82:89:1a:c1:9a:43:00: ad:6a:29:f9:67:c9:09:ca:4f:db:7b:68:6f:73:97: 62:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C3:5D:FB:0E:EA:8A:6F:C9:0D:13:00:6D:79:35:15:CA:90:E7:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/bc2bcadd-3b70-3c35-aa79-dbb2ba52fd8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:4b:a8:fb:d3:85:00:49:65:80:bb:08:1b:e2:87:88:9a:b2: ac:d1:b5:1e:b3:e1:47:84:4a:58:a3:f1:fd:17:9b:75:6d:3a: f0:ed:6c:02:c5:24:4e:ac:f7:8b:20:78:37:32:e8:f3:cc:d5: a8:64:65:9e:c9:8d:9a:5d:53:82:90:73:4f:1c:e9:ce:76:93: 07:5c:fd:5c:f7:9e:ce:24:e4:4d:a5:fa:ea:3c:cb:b4:f6:85: cf:bc:14:2a:d0:f0:e2:1e:1a:f7:ff:83:9b:08:54:b6:3d:bf: e8:d1:5b:b0:26:f8:84:43:29:7c:37:33:83:ea:50:1b:b8:90: e3:d2:f4:8a:83:80:e1:33:04:14:86:5c:b7:40:2a:5e:56:dc: 4c:b3:ba:91:26:17:64:0b:64:47:81:2c:53:16:4d:52:81:fd: 1b:75:79:0b:e0:b1:30:f5:8b:48:b5:dd:e8:91:43:c0:e0:81: b1:59:66:c9:1b:a0:3a:fe:4f:72:04:92:2c:af:7c:6c:ce:17: c9:03:39:1a:21:88:88:4c:6b:61:4c:b4:09:71:ad:52:98:02: 72:65:60:fa:19:24:b8:6a:67:57:62:8e:b5:8e:97:a3:0a:b3: e1:75:cd:20:9f:94:d2:f1:a8:a8:da:48:ef:7c:35:f2:d0:d8: 41:5e:77:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD8MTm+CTmJoIhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk YzNhYjZmOWQtNmYyNy00YTcxLTliZTItZmMyYzZiMjM1Y2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m1KuuG+d6Do6NyiUZbeb4E/swYFunHZ+RUo AHS4Oy6a23Q7xQoU5e9ToeR1XmGX+S9uFj5TKOHiFvDmErF4XGVV4XG5g+WJBqtN ZERk1H9fo7rqcC+M1aBghfAUITugKOZFqkJeYJjK9r6Xx5+m2Qrg2sGFUfi94TYm dXpQ078eoUkB/NqhBOHK01cKJ6PXCvGl0yFnhw+PllWOwJa+DDPDS5EDcjtUxXWo DdBpUX0WgtleSovBXRI1gIdpt3wtNgVqZr7thkmU+FwImYtjw1B50lTyIyzV0EPe 4fOH/uR/1xZPSauWIYKJGsGaQwCtain5Z8kJyk/be2hvc5ditwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTDXfsO6opvyQ0TAG15NRXKkOfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvYmMyYmNhZGQtM2I3MC0z YzM1LWFhNzktZGJiMmJhNTJmZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwHhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxLqPvThQBJZYC7CBvih4iasqzRtR6z4UeESlij8f0Xm3VtOvDtbALF JE6s94sgeDcy6PPM1ahkZZ7JjZpdU4KQc08c6c52kwdc/Vz3ns4k5E2l+uo8y7T2 hc+8FCrQ8OIeGvf/g5sIVLY9v+jRW7Am+IRDKXw3M4PqUBu4kOPS9IqDgOEzBBSG XLdAKl5W3EyzupEmF2QLZEeBLFMWTVKB/Rt1eQvgsTD1i0i13eiRQ8DggbFZZskb oDr+T3IEkiyvfGzOF8kDORohiIhMa2FMtAlxrVKYAnJlYPoZJLhqZ1dijrWOl6MK s+F1zSCflNLxqKjaSO98NfLQ2EFed8o= -----END CERTIFICATE-----Generated at Thu Jul 9 21:02:43 2026 by rpki-client