$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/eb14bdce-678f-3bbb-8240-44d411908d1e.roa File: eb14bdce-678f-3bbb-8240-44d411908d1e.roa (raw, json) Hash identifier: F9KT2eFZOYT/oDCgGRsQvh2PpDcFV+zbOOliykaW24s= Subject key identifier: 57:46:63:D2:B9:23:85:F4:81:A8:90:49:01:7C:A2:F5:E0:8F:CB:A4 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584F4972E158A11A18FCA74BCCC8 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/eb14bdce-678f-3bbb-8240-44d411908d1e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2615 IP address blocks: 147.1.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:e1:58:a1:1a:18:fc:a7:4b:cc:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=159f2f71-e26b-4080-a781-ad1380a8b4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e5:70:7b:ee:32:ac:4d:9c:0f:b3:61:cf:0c: 4a:a1:bf:99:c0:51:69:4e:a6:2f:1d:4e:7d:72:d6: 2c:31:ef:a5:66:e2:84:6c:a9:c0:77:61:df:dd:a1: ef:e0:cb:dc:c9:8e:21:b8:13:bf:1b:86:05:ea:3b: b4:41:a7:c4:1b:c5:ce:fe:0d:71:33:a2:50:62:cd: 27:f7:76:43:ee:c9:b5:11:78:64:1c:9f:2b:33:3f: 2b:77:a0:03:04:3c:33:85:e5:13:dd:bc:7d:a7:df: c3:7b:48:7d:37:78:b4:48:01:b0:d4:bf:72:4a:22: 64:7a:70:e9:36:2b:03:a2:2f:f3:79:51:34:45:e7: 7f:0e:53:20:2d:fc:2b:20:35:51:51:de:f8:22:fe: c8:03:e5:f0:1f:e2:29:17:a3:98:f0:d0:7a:49:b0: 20:38:f7:74:fc:7c:47:73:e1:6b:2e:81:9d:5a:16: f9:ad:99:8f:3e:e4:59:38:f7:c6:de:19:10:ad:96: 7f:42:fc:fb:da:ea:ca:e4:be:6e:c4:18:b0:91:b5: d9:56:b2:c6:83:4e:0f:c4:82:30:cc:78:0b:f2:05: ea:cb:60:1b:42:7b:50:d4:d9:b6:87:85:e3:14:c9: b9:34:f9:4b:32:59:84:e9:e3:15:ed:6f:3e:7a:dc: 75:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:46:63:D2:B9:23:85:F4:81:A8:90:49:01:7C:A2:F5:E0:8F:CB:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/eb14bdce-678f-3bbb-8240-44d411908d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:0d:ee:23:7f:50:93:e4:5a:71:93:b5:6d:e8:9e:01:9a:ce: dc:bf:fd:72:e0:b2:a3:ab:10:18:58:33:87:f2:17:ae:60:81: fa:1f:58:d1:2f:0f:1b:b9:2d:e7:fe:cb:cf:3c:15:6b:84:f0: b7:e0:16:6d:74:a0:8b:4d:e6:cf:ad:ec:70:92:e7:11:b8:81: b6:a7:6e:a2:c4:81:2e:19:ab:14:ef:01:2b:b3:a6:03:02:04: 59:94:c5:8a:10:7d:98:c5:26:b8:be:72:98:6a:a3:14:6e:40: cc:ea:3f:b1:c7:bb:46:b8:28:78:8e:c6:41:9e:a1:3a:38:31: 07:4f:9e:f4:2b:cc:9e:68:c3:37:f6:14:e5:d8:a1:46:16:fc: ee:1a:66:3d:92:e4:9e:84:62:fc:86:39:a1:bd:ae:c5:ea:75: 62:bf:d3:64:72:9f:31:0c:74:c7:e3:88:c3:ab:50:91:66:c4: 27:67:35:29:c1:5f:7b:7d:09:6c:ce:ea:58:d9:bd:70:0f:9b: ec:37:4f:12:d9:8b:d8:48:83:02:47:c4:aa:7b:e5:10:0f:4d: bb:ab:22:82:76:f5:cb:db:1e:d7:74:55:9b:23:ac:9b:9b:75: 74:67:de:f9:65:c0:6c:c2:04:e3:a3:42:c2:44:10:a6:16:a9: 97:f0:b0:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcuFYoRoY/KdLzMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTU5ZjJmNzEtZTI2Yi00MDgwLWE3ODEtYWQxMzgwYThiNGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eVwe+4yrE2cD7NhzwxKob+ZwFFpTqYvHU59 ctYsMe+lZuKEbKnAd2Hf3aHv4MvcyY4huBO/G4YF6ju0QafEG8XO/g1xM6JQYs0n 93ZD7sm1EXhkHJ8rMz8rd6ADBDwzheUT3bx9p9/De0h9N3i0SAGw1L9ySiJkenDp NisDoi/zeVE0Red/DlMgLfwrIDVRUd74Iv7IA+XwH+IpF6OY8NB6SbAgOPd0/HxH c+FrLoGdWhb5rZmPPuRZOPfG3hkQrZZ/Qvz72urK5L5uxBiwkbXZVrLGg04PxIIw zHgL8gXqy2AbQntQ1Nm2h4XjFMm5NPlLMlmE6eMV7W8+etx1ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdGY9K5I4X0gaiQSQF8ovXgj8ukMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvZWIxNGJkY2UtNjc4Zi0z YmJiLTgyNDAtNDRkNDExOTA4ZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsN7iN/UJPkWnGTtW3ongGazty//XLgsqOrEBhYM4fyF65ggfofWNEv Dxu5Lef+y888FWuE8LfgFm10oItN5s+t7HCS5xG4gbanbqLEgS4ZqxTvASuzpgMC BFmUxYoQfZjFJri+cphqoxRuQMzqP7HHu0a4KHiOxkGeoTo4MQdPnvQrzJ5owzf2 FOXYoUYW/O4aZj2S5J6EYvyGOaG9rsXqdWK/02RynzEMdMfjiMOrUJFmxCdnNSnB X3t9CWzO6ljZvXAPm+w3TxLZi9hIgwJHxKp75RAPTburIoJ29cvbHtd0VZsjrJub dXRn3vllwGzCBOOjQsJEEKYWqZfwsLQ= -----END CERTIFICATE-----Generated at Sat Oct 10 17:25:45 2026 by rpki-client