$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/10eae504-c535-3d7f-8fd1-8a39ac437127.roa File: 10eae504-c535-3d7f-8fd1-8a39ac437127.roa (raw, json) Hash identifier: sZsPWnj42Xm7Pxn/H3/QiFTa8A5QzD8GR6p8kZ/EiqQ= Subject key identifier: 07:DF:48:48:CA:87:68:C6:89:6C:1E:82:E3:FD:73:6B:E2:21:F1:85 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584D300A1E098B425758557A54C0 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/10eae504-c535-3d7f-8fd1-8a39ac437127.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 2615 IP address blocks: 147.1.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:1e:09:8b:42:57:58:55:7a:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=592ba6c0-c753-4f9e-a5a5-826c4578c3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:bb:87:47:16:c9:fa:fd:26:bf:63:b2:95: ec:68:00:02:70:53:07:8c:b9:a7:aa:fe:27:0b:8f: f4:74:ce:2f:a6:1f:05:02:7a:23:1d:59:7f:cb:0f: 67:fa:44:c9:bf:f3:62:02:b0:9d:88:cd:cb:34:62: f2:ba:61:4e:b2:c7:b7:80:43:18:e5:97:1d:95:09: 37:ef:c7:27:6a:4b:af:7d:55:0c:7d:ed:fc:58:e3: a1:44:45:4f:bd:3f:af:98:9a:48:5e:d0:39:9c:58: 60:36:3a:fe:1d:2d:50:4c:a5:cc:0a:c8:29:c3:a0: 3f:64:ff:b9:df:19:23:36:51:9c:e9:9b:57:b6:0b: 3d:22:90:cc:5c:39:53:63:20:e4:e2:e1:0b:6b:d5: 9f:1a:07:be:0b:02:b3:ba:0d:8c:be:d1:04:a1:5e: bb:c1:75:3c:1e:56:99:8d:6b:c0:39:7d:98:f7:61: c5:57:75:dd:21:ac:fd:a8:f5:ed:91:41:f1:81:ea: d4:57:75:9b:22:39:fb:09:20:88:be:55:06:c4:35: cc:e4:fe:71:9e:9f:4b:b8:31:4f:59:0d:1e:73:1c: 83:2f:bf:3e:8a:d2:8e:0a:f2:13:58:e3:ed:4f:de: e6:d5:f2:95:78:74:5f:0a:3e:38:dd:04:0d:43:58: a2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DF:48:48:CA:87:68:C6:89:6C:1E:82:E3:FD:73:6B:E2:21:F1:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/10eae504-c535-3d7f-8fd1-8a39ac437127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:0c:44:40:33:a7:4a:90:46:9a:d7:ca:ec:85:f4:c7:0b:d2: 5a:5a:1c:0f:5e:a6:b3:01:7a:8a:5c:0d:99:47:6e:7c:fb:f9: 1d:49:3a:dc:44:d3:dc:3e:02:4b:1e:d3:8f:b3:bd:ac:84:ea: 77:98:72:16:c1:82:68:a0:2f:30:30:93:cb:3f:64:f4:0a:26: 77:40:d9:1d:bf:ee:6b:57:59:bd:6e:54:77:9c:ce:22:33:8f: 99:3a:4d:8c:ce:a9:5c:19:9d:29:3c:fa:f3:9b:c6:ba:85:17: 76:a0:71:59:f6:76:d6:b6:c6:c6:a7:40:e8:62:38:2c:d0:0a: 4d:36:02:c4:27:21:62:2a:fe:e8:16:93:11:c7:2a:a6:6f:0a: aa:40:09:17:c2:24:a0:96:3d:86:6e:3f:30:b0:13:cb:ad:9f: 42:ef:16:6a:8f:a2:9e:9f:7a:64:86:26:aa:45:28:cd:92:8d: e0:b1:e3:90:34:79:aa:9b:aa:b2:d9:4a:66:1a:ef:0f:cd:1a: 94:c8:9f:55:3a:50:84:4b:70:9e:a7:41:eb:d7:f1:08:87:fd: c6:68:71:3a:78:ec:58:4e:49:80:90:ab:a3:40:e6:fe:35:a1: 04:5a:5c:fa:2e:31:98:b3:32:2b:7d:0c:85:91:43:2f:6e:06: 28:32:23:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCh4Ji0JXWFV6VMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NTkyYmE2YzAtYzc1My00ZjllLWE1YTUtODI2YzQ1NzhjM2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6S7h0cWyfr9Jr9jspXsaAACcFMHjLmnqv4n C4/0dM4vph8FAnojHVl/yw9n+kTJv/NiArCdiM3LNGLyumFOsse3gEMY5ZcdlQk3 78cnakuvfVUMfe38WOOhREVPvT+vmJpIXtA5nFhgNjr+HS1QTKXMCsgpw6A/ZP+5 3xkjNlGc6ZtXtgs9IpDMXDlTYyDk4uELa9WfGge+CwKzug2MvtEEoV67wXU8HlaZ jWvAOX2Y92HFV3XdIaz9qPXtkUHxgerUV3WbIjn7CSCIvlUGxDXM5P5xnp9LuDFP WQ0ecxyDL78+itKOCvITWOPtT97m1fKVeHRfCj443QQNQ1iiXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAffSEjKh2jGiWweguP9c2viIfGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMTBlYWU1MDQtYzUzNS0z ZDdmLThmZDEtOGEzOWFjNDM3MTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEMREAzp0qQRprXyuyF9McL0lpaHA9eprMBeopcDZlHbnz7+R1JOtxE 09w+Akse04+zvayE6neYchbBgmigLzAwk8s/ZPQKJndA2R2/7mtXWb1uVHecziIz j5k6TYzOqVwZnSk8+vObxrqFF3agcVn2dta2xsanQOhiOCzQCk02AsQnIWIq/ugW kxHHKqZvCqpACRfCJKCWPYZuPzCwE8utn0LvFmqPop6femSGJqpFKM2SjeCx45A0 eaqbqrLZSmYa7w/NGpTIn1U6UIRLcJ6nQevX8QiH/cZocTp47FhOSYCQq6NA5v41 oQRaXPouMZizMit9DIWRQy9uBigyI9M= -----END CERTIFICATE-----Generated at Thu Mar 26 08:53:47 2026 by rpki-client