$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa File: 72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa (raw, json) Hash identifier: Gi8N/Z+Qx7yAgossRvizjR89W8eTZrMoqi8PP5Cn0vc= Subject key identifier: 88:5D:48:95:95:FB:C8:2B:4D:BF:BC:5F:EC:9A:39:D8:61:4D:B0:79 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584F4974EF597BCB2E176BF9D100 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2615 IP address blocks: 147.1.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:ef:59:7b:cb:2e:17:6b:f9:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7189ac66-b947-424d-8c7a-269e8c3ff93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e1:da:97:f2:27:92:3e:9b:2d:3e:72:11:0d: 32:59:8c:f0:fa:7a:e6:33:89:a0:d7:20:cf:24:c8: 32:48:8c:df:94:6c:d8:11:1e:aa:6e:b7:bc:8a:4b: aa:76:07:19:c8:f5:17:8e:7d:eb:00:66:08:e5:f6: 60:42:e1:d0:78:fa:b8:9b:c3:3a:d2:b5:61:f7:e9: 69:cb:fb:87:e7:29:0c:cf:48:5a:33:f6:20:91:e7: eb:a9:13:dc:1b:cf:60:8c:3a:c1:fb:2e:39:45:97: 94:dc:b1:13:3e:78:c1:d1:46:15:66:5d:ab:13:db: ec:36:fa:ec:65:19:f3:e4:f0:0f:a1:98:78:34:14: f5:aa:c4:d0:fc:9a:08:82:44:db:10:ea:21:e8:64: f1:07:27:1d:3d:69:14:37:96:ba:07:e4:2f:41:4c: 0d:18:58:ca:53:71:80:41:68:78:30:73:1c:d0:3b: fe:9d:5b:ae:b4:00:70:cd:56:99:18:4a:0e:cb:07: 60:e1:c0:dd:f3:28:e3:5f:5e:bc:a1:99:85:8a:4b: 59:5c:6b:04:4b:79:19:91:8c:02:ed:77:fd:b1:b2: e4:f5:2f:ac:b2:f0:10:7c:22:2d:bd:ff:9c:b2:db: 6e:39:9c:c4:81:07:ad:21:5a:4e:bf:78:b7:9e:fd: b3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5D:48:95:95:FB:C8:2B:4D:BF:BC:5F:EC:9A:39:D8:61:4D:B0:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:54:06:e1:36:dc:f7:80:af:f8:37:ba:38:bf:53:2a:13:67: d8:7b:b8:b1:30:24:3f:35:58:0b:29:6e:35:a9:0a:9f:8f:23: ed:0c:61:32:4b:41:ab:38:a7:cd:42:89:e9:b9:65:67:d3:00: f7:62:ff:74:cc:39:75:53:e2:d8:70:99:c7:45:cf:db:4e:69: fe:34:ca:a5:0a:af:f6:68:64:2d:8c:0c:62:43:05:a2:29:f0: ae:6e:a1:7d:d0:e1:cb:ef:18:57:25:15:ab:80:ba:2b:49:80: 2d:78:ab:b3:a3:8e:3e:47:f0:46:65:56:6a:d9:96:b8:a7:50: 29:45:54:6c:db:5e:82:bf:1c:cf:d2:3a:18:01:0a:99:d7:13: f1:8e:24:de:37:87:34:67:d1:4c:bf:72:8f:6d:61:5a:80:ee: 30:8d:ad:ed:41:9d:ad:48:f2:61:33:2d:a1:c3:dc:5a:de:63: 38:e6:42:cd:9a:06:9a:47:3c:54:ff:09:34:6c:d0:8e:10:38: 9b:1d:79:af:cd:fd:d1:dd:d0:95:60:99:c5:83:3b:c1:31:c4: f1:91:7c:b0:64:82:a5:14:d6:b9:1b:8b:7d:a7:d0:13:ac:0f: 86:73:bb:b5:0d:2a:f0:95:ac:9a:6f:25:f9:0a:7a:c7:39:40: 8e:c5:f3:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdO9Ze8suF2v50QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzE4OWFjNjYtYjk0Ny00MjRkLThjN2EtMjY5ZThjM2ZmOTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuHal/Inkj6bLT5yEQ0yWYzw+nrmM4mg1yDP JMgySIzflGzYER6qbre8ikuqdgcZyPUXjn3rAGYI5fZgQuHQePq4m8M60rVh9+lp y/uH5ykMz0haM/YgkefrqRPcG89gjDrB+y45RZeU3LETPnjB0UYVZl2rE9vsNvrs ZRnz5PAPoZh4NBT1qsTQ/JoIgkTbEOoh6GTxBycdPWkUN5a6B+QvQUwNGFjKU3GA QWh4MHMc0Dv+nVuutABwzVaZGEoOywdg4cDd8yjjX168oZmFiktZXGsES3kZkYwC 7Xf9sbLk9S+ssvAQfCItvf+csttuOZzEgQetIVpOv3i3nv2zUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhdSJWV+8grTb+8X+yaOdhhTbB5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNzJiOWY0ZjAtMGYyMi0z YmFhLTg5OWEtODdiNWUzN2YxZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFUBuE23PeAr/g3uji/UyoTZ9h7uLEwJD81WAspbjWpCp+PI+0MYTJL Qas4p81Ciem5ZWfTAPdi/3TMOXVT4thwmcdFz9tOaf40yqUKr/ZoZC2MDGJDBaIp 8K5uoX3Q4cvvGFclFauAuitJgC14q7Ojjj5H8EZlVmrZlrinUClFVGzbXoK/HM/S OhgBCpnXE/GOJN43hzRn0Uy/co9tYVqA7jCNre1Bna1I8mEzLaHD3FreYzjmQs2a BppHPFT/CTRs0I4QOJsdea/N/dHd0JVgmcWDO8ExxPGRfLBkgqUU1rkbi32n0BOs D4Zzu7UNKvCVrJpvJfkKesc5QI7F82Y= -----END CERTIFICATE-----Generated at Fri Sep 25 09:13:25 2026 by rpki-client