$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/514e116e-7b0c-3978-b9a2-1653b3a7d019.roa File: 514e116e-7b0c-3978-b9a2-1653b3a7d019.roa (raw, json) Hash identifier: NPywf5ahaM+7JAh5kG81pVI0IqVEWNxYz3g8YNU5yh8= Subject key identifier: 7A:4A:27:31:51:1B:90:B8:47:DF:E4:D2:58:06:3B:88:41:C1:09:56 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584D95EFE96A495378E574454C48 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/514e116e-7b0c-3978-b9a2-1653b3a7d019.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 2615 IP address blocks: 147.1.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:e9:6a:49:53:78:e5:74:45:4c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=4607272a-ceb7-47e6-978f-292a2c67097a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:80:bc:64:b6:12:dc:45:85:69:99:19:ca:d5: cd:1b:44:6f:72:74:db:50:4e:e1:a3:fa:1e:0c:60: 5c:e8:69:ac:9a:b9:86:25:6e:d8:5c:27:79:1e:60: 85:53:32:a4:b0:b7:6d:e8:48:ca:96:34:76:0c:dc: a8:aa:01:b2:99:9a:b7:a2:30:2b:69:54:f7:21:fa: b5:1b:93:e2:c2:74:35:10:01:ef:6a:9f:56:10:37: b5:a2:d9:f9:01:1c:ee:07:01:a7:1c:4e:ee:3c:61: ab:ba:e4:f7:6f:0a:a2:67:a8:e8:1c:58:c0:05:96: 8a:44:4a:5f:4e:fc:43:29:77:79:5c:1f:d0:0e:66: 23:f5:a8:fa:31:6a:46:7f:34:d0:9d:80:6f:e0:07: e7:87:60:9f:82:47:ab:d3:28:13:6c:f5:76:17:00: a5:0d:35:bd:b9:a9:98:66:a1:44:8b:0d:5c:e1:d2: e5:b9:68:45:40:7b:ba:08:5f:87:bd:fa:ef:c7:a6: a0:51:3f:bc:07:cc:30:35:53:dd:1e:ba:50:30:6e: f5:cc:bf:15:9f:84:38:34:1c:5a:97:ad:5e:a9:57: 96:bc:01:55:57:78:3b:3b:c9:f8:e1:07:e5:64:c1: 8d:bb:9f:91:98:ff:a3:e7:ae:68:4e:7a:6e:33:fe: 00:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4A:27:31:51:1B:90:B8:47:DF:E4:D2:58:06:3B:88:41:C1:09:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/514e116e-7b0c-3978-b9a2-1653b3a7d019.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c7:c8:60:9e:42:79:19:4c:53:fd:2d:78:15:7f:63:0f:05: f8:d1:56:b2:1f:77:f3:46:10:4a:c4:a6:8b:04:62:ee:7e:da: d3:52:1a:8a:63:20:88:d0:fc:32:38:63:4d:4e:e4:6d:21:d1: 3a:6e:59:a2:e4:2f:60:e7:60:96:45:89:c2:12:38:c2:42:e9: a4:3a:41:a0:f1:1b:5d:3f:b6:3c:9c:bd:cd:c0:50:e6:f9:0c: d8:7b:4c:cb:47:60:71:d4:c6:3d:94:95:4d:c9:0e:d1:3b:69: f6:4d:b9:c7:5e:91:96:63:de:57:75:0c:f7:66:c0:90:29:46: ac:40:cc:13:c5:4f:7c:26:60:ed:73:fb:a9:74:56:d7:9b:92: 9b:8d:01:1e:32:2e:f3:f9:70:b9:89:24:ff:bc:33:84:1f:d6: e2:61:c8:43:50:d7:dc:57:7a:7d:7f:24:39:84:52:85:f1:10: ba:23:3d:f7:6a:ab:b8:18:a9:b9:07:8e:88:19:34:d0:0c:b0: 8f:93:fe:bc:c1:d0:88:46:bb:8c:e7:ee:b7:bc:82:0e:8f:d6: 34:18:3d:d1:8a:db:09:f9:27:7a:51:88:93:40:75:74:94:48: 99:56:b7:78:fc:da:61:f1:5f:8f:73:c1:37:a2:3d:45:bb:6d: 3f:82:2b:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V7+lqSVN45XRFTEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NDYwNzI3MmEtY2ViNy00N2U2LTk3OGYtMjkyYTJjNjcwOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IC8ZLYS3EWFaZkZytXNG0RvcnTbUE7ho/oe DGBc6GmsmrmGJW7YXCd5HmCFUzKksLdt6EjKljR2DNyoqgGymZq3ojAraVT3Ifq1 G5PiwnQ1EAHvap9WEDe1otn5ARzuBwGnHE7uPGGruuT3bwqiZ6joHFjABZaKREpf TvxDKXd5XB/QDmYj9aj6MWpGfzTQnYBv4Afnh2Cfgker0ygTbPV2FwClDTW9uamY ZqFEiw1c4dLluWhFQHu6CF+Hvfrvx6agUT+8B8wwNVPdHrpQMG71zL8Vn4Q4NBxa l61eqVeWvAFVV3g7O8n44QflZMGNu5+RmP+j565oTnpuM/4AKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpKJzFRG5C4R9/k0lgGO4hBwQlWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNTE0ZTExNmUtN2IwYy0z OTc4LWI5YTItMTY1M2IzYTdkMDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrHyGCeQnkZTFP9LXgVf2MPBfjRVrIfd/NGEErEposEYu5+2tNSGopj IIjQ/DI4Y01O5G0h0TpuWaLkL2DnYJZFicISOMJC6aQ6QaDxG10/tjycvc3AUOb5 DNh7TMtHYHHUxj2UlU3JDtE7afZNucdekZZj3ld1DPdmwJApRqxAzBPFT3wmYO1z +6l0VtebkpuNAR4yLvP5cLmJJP+8M4Qf1uJhyENQ19xXen1/JDmEUoXxELojPfdq q7gYqbkHjogZNNAMsI+T/rzB0IhGu4zn7re8gg6P1jQYPdGK2wn5J3pRiJNAdXSU SJlWt3j82mHxX49zwTeiPUW7bT+CKy0= -----END CERTIFICATE-----Generated at Wed May 13 06:36:19 2026 by rpki-client