$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/3a1e733f-7332-3c2d-8a7c-dfc463c33e35.roa File: 3a1e733f-7332-3c2d-8a7c-dfc463c33e35.roa (raw, json) Hash identifier: qVGhekvyFFuU/FZox6nmLYNexMNBCetTc9VdtDN/NRM= Subject key identifier: 22:63:22:3D:0E:44:C7:04:4A:E0:A8:8A:2C:FD:77:9E:A2:E0:44:D5 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584D300A3B30A9D18DC46F4B1680 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/3a1e733f-7332-3c2d-8a7c-dfc463c33e35.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 2615 IP address blocks: 147.1.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:3b:30:a9:d1:8d:c4:6f:4b:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=72c4fad8-7846-4b92-8c3b-af4e547fadbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:92:1c:b5:24:12:d5:76:2f:3e:b4:31:47:61: 14:9e:68:17:b8:d2:5f:fb:08:da:9f:98:bf:db:f5: 00:ca:96:da:9c:79:0c:a8:44:87:72:58:e2:ac:c1: 30:d6:01:d8:9f:6d:69:8e:85:a0:47:30:ae:c0:44: 52:0a:c4:d3:b1:09:cb:2a:bb:4d:ea:ec:62:22:58: 6f:8f:ec:58:9a:ed:e4:b6:80:ca:ae:b6:04:0a:19: 35:40:b0:5e:3a:62:3c:59:34:d9:94:eb:15:2f:70: 8e:c0:68:75:ea:64:4c:81:92:26:d3:b1:8c:5a:68: d0:79:57:3d:d2:0b:4a:bb:e6:d7:4a:8f:3b:82:93: e1:55:65:29:8f:7e:6f:cd:bb:cf:fd:ab:f3:84:65: c8:d4:85:ea:f7:41:be:65:04:20:0b:70:1a:b8:10: 55:32:03:7d:91:23:da:d6:ec:18:a0:1c:8c:ae:58: ef:2f:44:6f:75:be:13:98:57:a2:ca:98:a7:24:b2: 06:07:a0:6a:82:ff:cd:7e:2f:28:38:b7:e7:1d:65: 3d:b5:20:fa:60:10:bb:10:29:65:be:5c:8d:d2:bd: b5:c2:5f:29:be:2c:14:16:56:3b:fa:c0:32:77:3e: c7:a0:ea:91:38:50:22:bb:8d:c2:03:5e:76:d5:7e: a3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:63:22:3D:0E:44:C7:04:4A:E0:A8:8A:2C:FD:77:9E:A2:E0:44:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/3a1e733f-7332-3c2d-8a7c-dfc463c33e35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c6:5d:8b:b3:0c:5e:7a:ad:92:2d:40:84:f4:a9:97:e3:0e: 65:cf:22:7b:c3:e4:6c:58:30:c7:42:06:5c:bd:b4:eb:f2:d7: 7a:8b:5a:e0:5d:97:5e:1f:b7:c6:37:31:5d:76:1e:5e:c8:80: 62:97:5a:1e:12:93:90:ed:a4:fa:3f:f1:0a:c2:f8:0a:e3:11: 1c:53:58:ae:f2:e4:5d:be:94:86:63:9d:ac:8e:e3:ed:21:3d: d6:7f:f5:22:2c:aa:3e:74:88:37:f1:41:f4:67:1a:32:43:e3: ae:e5:6b:9e:f1:d1:64:26:d3:65:b2:56:b9:9f:6d:8c:2b:86: a3:b8:49:27:be:97:65:84:20:72:4d:06:55:62:ac:f8:9c:df: 87:56:53:09:8e:fe:f0:86:31:76:3f:5b:6f:2e:45:78:93:55: c4:05:c5:3a:78:56:d6:dc:13:95:b5:c6:de:17:b5:e6:97:97: 34:f6:3a:fe:32:e1:cc:cd:d9:fe:68:51:0a:27:e0:ea:c7:60: 47:6e:0c:be:0e:e0:c4:4a:97:51:ce:1f:8f:42:ef:8a:32:5f: 23:2a:a4:62:3c:29:1b:c0:fe:76:29:3a:12:c0:8d:77:a0:7a: 8d:66:2f:cd:b4:ba:44:62:53:8f:17:7f:45:4b:70:9d:ce:da: 17:4a:d9:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCjswqdGNxG9LFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NzJjNGZhZDgtNzg0Ni00YjkyLThjM2ItYWY0ZTU0N2ZhZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJIctSQS1XYvPrQxR2EUnmgXuNJf+wjan5i/ 2/UAypbanHkMqESHcljirMEw1gHYn21pjoWgRzCuwERSCsTTsQnLKrtN6uxiIlhv j+xYmu3ktoDKrrYEChk1QLBeOmI8WTTZlOsVL3COwGh16mRMgZIm07GMWmjQeVc9 0gtKu+bXSo87gpPhVWUpj35vzbvP/avzhGXI1IXq90G+ZQQgC3AauBBVMgN9kSPa 1uwYoByMrljvL0Rvdb4TmFeiypinJLIGB6Bqgv/Nfi8oOLfnHWU9tSD6YBC7ECll vlyN0r21wl8pviwUFlY7+sAydz7HoOqROFAiu43CA1521X6jQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJjIj0ORMcESuCoiiz9d56i4ETVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvM2ExZTczM2YtNzMzMi0z YzJkLThhN2MtZGZjNDYzYzMzZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrGXYuzDF56rZItQIT0qZfjDmXPInvD5GxYMMdCBly9tOvy13qLWuBd l14ft8Y3MV12Hl7IgGKXWh4Sk5DtpPo/8QrC+ArjERxTWK7y5F2+lIZjnayO4+0h PdZ/9SIsqj50iDfxQfRnGjJD467la57x0WQm02WyVrmfbYwrhqO4SSe+l2WEIHJN BlVirPic34dWUwmO/vCGMXY/W28uRXiTVcQFxTp4VtbcE5W1xt4XteaXlzT2Ov4y 4czN2f5oUQon4OrHYEduDL4O4MRKl1HOH49C74oyXyMqpGI8KRvA/nYpOhLAjXeg eo1mL820ukRiU48Xf0VLcJ3O2hdK2fI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:04:17 2026 by rpki-client