$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa File: da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa (raw, json) Hash identifier: KwkLDKxn8j7jD5Xkh7W1kP8s4waoM9wG+wFaRrPDi+k= Subject key identifier: 8E:42:3D:F4:ED:C5:E8:0A:17:9A:B7:B5:89:FE:F1:B9:94:43:65:7C Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584F4974B66F71F644E1BD3E1C80 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2615 IP address blocks: 147.1.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:b6:6f:71:f6:44:e1:bd:3e:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e049d040-0f01-4a67-b94e-cd79198d9a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f9:d5:4a:e7:4c:23:90:e9:9e:ce:59:90:aa: 16:f2:dd:50:f8:b1:5a:56:d3:95:f3:d9:68:e2:c5: df:c7:2c:79:e8:ac:b5:ca:86:70:35:31:ee:55:9f: 3a:cc:ef:9c:0a:b4:7c:c4:eb:83:46:5f:6e:b7:80: c0:6f:fe:8d:a2:94:60:4d:47:e1:17:ef:8e:62:c1: 60:30:7a:33:3b:a7:51:0a:36:0d:68:c8:0c:54:02: 88:0b:db:8e:84:17:88:4d:f4:64:29:15:5b:c8:6a: 1f:30:38:cb:35:80:a4:24:0d:78:13:43:91:46:85: 9a:81:e3:82:dd:b3:c1:fa:b3:5b:e0:83:b0:bb:35: 54:24:1f:1b:24:31:36:74:ee:c5:df:e5:63:b0:24: 76:a6:93:95:9c:aa:23:60:52:3e:54:2a:82:82:1f: 07:fb:ff:19:54:65:d8:c8:d3:d4:50:e7:3f:c7:32: 2b:91:f9:84:88:29:92:37:40:1e:a7:2f:d8:ce:a5: c1:ff:99:86:62:f0:5b:2d:4b:62:d3:d6:d4:06:2e: 36:ee:ba:be:45:33:b7:68:4b:eb:fe:2c:ef:58:0d: 83:99:de:43:9b:5a:d0:09:e4:97:77:2a:12:a7:04: 44:9b:63:d4:10:3a:75:33:a6:8c:fa:1d:34:31:ea: 21:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:42:3D:F4:ED:C5:E8:0A:17:9A:B7:B5:89:FE:F1:B9:94:43:65:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:b3:f5:4f:a9:0a:98:71:44:40:bb:09:b8:fd:7d:6e:a8:a2: dc:cd:b5:25:20:ea:8d:ff:f1:26:73:60:b8:1f:52:d7:27:5f: c4:35:a0:b8:13:54:ad:ab:a4:f9:2a:dd:43:8a:cf:40:7b:47: 3f:23:fb:97:b3:a4:52:1d:fb:2a:1c:9d:d8:90:c8:67:24:49: bb:53:25:ce:bb:51:3e:fa:4d:1b:d8:68:c5:59:87:57:e7:a2: df:df:cd:c9:20:b2:84:36:88:5e:34:06:09:1a:e5:47:16:b9: af:bd:69:7a:24:02:d0:f3:06:eb:ab:d0:04:09:5f:5f:ef:05: be:59:55:37:1f:44:77:a3:35:3a:2b:b0:03:6a:ad:c0:c5:71: 78:95:04:da:62:b2:00:62:3d:61:f4:a5:9b:7d:16:04:71:21: eb:27:4c:90:20:f3:35:d3:52:8b:fb:f1:07:a8:e8:7a:7d:db: aa:83:2b:3c:b5:e6:fe:70:c9:7e:0f:44:87:35:10:f8:df:4b: 32:92:32:8c:91:7f:1f:69:b7:b3:ae:27:08:d4:14:bd:7d:a5: ac:fc:95:71:c1:d4:06:85:2c:31:2f:60:4d:97:d7:75:9e:a0: 91:62:4a:59:02:c1:9e:e1:c9:d6:0f:87:ca:a4:ef:4a:3b:9f: 67:c1:be:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdLZvcfZE4b0+HIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTA0OWQwNDAtMGYwMS00YTY3LWI5NGUtY2Q3OTE5OGQ5YTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/nVSudMI5Dpns5ZkKoW8t1Q+LFaVtOV89lo 4sXfxyx56Ky1yoZwNTHuVZ86zO+cCrR8xOuDRl9ut4DAb/6NopRgTUfhF++OYsFg MHozO6dRCjYNaMgMVAKIC9uOhBeITfRkKRVbyGofMDjLNYCkJA14E0ORRoWageOC 3bPB+rNb4IOwuzVUJB8bJDE2dO7F3+VjsCR2ppOVnKojYFI+VCqCgh8H+/8ZVGXY yNPUUOc/xzIrkfmEiCmSN0Aepy/YzqXB/5mGYvBbLUti09bUBi427rq+RTO3aEvr /izvWA2Dmd5Dm1rQCeSXdyoSpwREm2PUEDp1M6aM+h00MeohYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5CPfTtxegKF5q3tYn+8bmUQ2V8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvZGE0OWU4YTctMDlmNS0z NTYyLTk4YjctMmUyOGJlMGU4YWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGz9U+pCphxREC7Cbj9fW6ootzNtSUg6o3/8SZzYLgfUtcnX8Q1oLgT VK2rpPkq3UOKz0B7Rz8j+5ezpFId+yocndiQyGckSbtTJc67UT76TRvYaMVZh1fn ot/fzckgsoQ2iF40Bgka5UcWua+9aXokAtDzBuur0AQJX1/vBb5ZVTcfRHejNTor sANqrcDFcXiVBNpisgBiPWH0pZt9FgRxIesnTJAg8zXTUov78Qeo6Hp926qDKzy1 5v5wyX4PRIc1EPjfSzKSMoyRfx9pt7OuJwjUFL19paz8lXHB1AaFLDEvYE2X13We oJFiSlkCwZ7hydYPh8qk70o7n2fBvp8= -----END CERTIFICATE-----Generated at Sat Oct 10 17:25:56 2026 by rpki-client