$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/858c308a-431a-38d2-bff9-7bcffc77a16b.roa File: 858c308a-431a-38d2-bff9-7bcffc77a16b.roa (raw, json) Hash identifier: 11gpvEL6HuXAG2OlDOPyfDZcFsNE9rXbFdQ0XU/PDAw= Subject key identifier: 0D:F0:C9:2C:D2:E9:5F:03:D3:60:43:52:70:BD:93:E4:21:34:E4:96 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584D2644BA6A1D464547F63DAEC0 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/858c308a-431a-38d2-bff9-7bcffc77a16b.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 2615 IP address blocks: 147.1.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:ba:6a:1d:46:45:47:f6:3d:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=c7433082-e96c-4e34-a9b7-7acf13224dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:d0:de:f7:5d:78:fe:57:34:57:78:38:df: e4:5f:61:e3:6d:01:b7:73:b2:b8:90:3e:6b:1e:4a: dd:4f:8a:d3:dd:98:5b:ec:43:97:96:94:1b:36:29: bb:b6:a9:be:ec:ee:d0:94:2e:98:aa:b9:a3:13:1a: b8:6a:2a:d3:38:a7:b6:93:64:6d:04:95:c4:3f:c8: 5b:de:6a:6d:ef:6f:9f:87:82:3a:cb:cd:bf:ce:aa: ce:48:5f:4a:04:4d:6f:f7:a6:0b:a3:92:33:3d:fe: 3a:62:60:38:2b:fd:ad:92:3a:94:2b:eb:7a:7c:b7: fc:c1:f2:b8:ec:6a:36:a1:7c:2a:06:ea:9d:eb:2a: aa:6a:6c:b5:89:9e:6e:6c:78:cf:36:b5:7e:57:21: c4:3b:76:26:45:95:96:6e:05:0f:e2:46:d0:b0:49: 43:49:d3:c8:c6:b0:64:a5:20:11:65:aa:81:e4:d5: de:e0:32:46:42:d9:c4:2e:5a:f0:9d:2d:1b:d8:ad: 7b:be:83:a4:98:f9:63:fe:d4:f9:fe:89:46:11:e2: 98:51:a8:5f:cf:c4:df:50:4f:4f:2f:63:40:71:55: 4e:e7:36:29:97:37:05:84:4d:bb:85:eb:61:16:fc: d1:c8:00:c4:b3:cf:5d:0a:3e:c2:08:68:9a:07:7c: 1e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F0:C9:2C:D2:E9:5F:03:D3:60:43:52:70:BD:93:E4:21:34:E4:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/858c308a-431a-38d2-bff9-7bcffc77a16b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ba:61:bd:47:13:02:4d:b7:1c:bc:63:71:ae:0f:49:92:dd: 14:b5:5a:4b:46:c0:14:5a:87:1d:04:f6:18:89:0e:08:50:af: 60:9b:c5:e2:22:18:6d:13:12:4d:a4:1c:03:4d:21:31:7d:56: 22:da:66:82:9f:61:2e:53:8d:a3:03:ba:bc:bd:83:fe:02:b9: 14:f7:fd:35:26:3e:2e:72:68:56:38:0f:76:df:06:c0:b7:18: e1:46:4b:6a:e3:12:5c:c3:f0:3d:89:74:55:25:8f:d5:ef:ff: 34:3f:1b:8f:f8:ec:98:ac:78:81:8d:16:4d:31:a6:c2:03:49: a6:d6:55:00:9b:73:d7:50:a5:90:4b:81:80:2c:9a:09:f0:23: 2f:43:1a:8a:5e:99:bb:74:2d:3b:1b:0c:6e:b7:4f:64:10:68: e6:a2:bd:af:e3:c7:52:e8:95:45:d1:fc:7b:e6:0a:f1:7f:81: 59:9a:f5:69:ef:86:0a:a2:16:c1:22:cf:6e:38:9a:96:38:ec: 32:dc:15:87:f1:04:e7:88:84:ec:6e:b9:18:b9:46:4f:a4:34: 13:16:4f:fd:c6:da:b2:3a:1a:9b:56:0c:32:1d:3b:49:6b:16: 3b:51:4e:ea:ec:26:0f:c8:98:fe:a0:99:7f:ea:27:4b:34:75: 1f:49:d4:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLpqHUZFR/Y9rsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk Yzc0MzMwODItZTk2Yy00ZTM0LWE5YjctN2FjZjEzMjI0ZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyLQ3vddeP5XNFd4ON/kX2HjbQG3c7K4kD5r HkrdT4rT3Zhb7EOXlpQbNim7tqm+7O7QlC6YqrmjExq4airTOKe2k2RtBJXEP8hb 3mpt72+fh4I6y82/zqrOSF9KBE1v96YLo5IzPf46YmA4K/2tkjqUK+t6fLf8wfK4 7Go2oXwqBuqd6yqqamy1iZ5ubHjPNrV+VyHEO3YmRZWWbgUP4kbQsElDSdPIxrBk pSARZaqB5NXe4DJGQtnELlrwnS0b2K17voOkmPlj/tT5/olGEeKYUahfz8TfUE9P L2NAcVVO5zYplzcFhE27hethFvzRyADEs89dCj7CCGiaB3weWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3wySzS6V8D02BDUnC9k+QhNOSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvODU4YzMwOGEtNDMxYS0z OGQyLWJmZjktN2JjZmZjNzdhMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK6Yb1HEwJNtxy8Y3GuD0mS3RS1WktGwBRahx0E9hiJDghQr2CbxeIi GG0TEk2kHANNITF9ViLaZoKfYS5TjaMDury9g/4CuRT3/TUmPi5yaFY4D3bfBsC3 GOFGS2rjElzD8D2JdFUlj9Xv/zQ/G4/47JiseIGNFk0xpsIDSabWVQCbc9dQpZBL gYAsmgnwIy9DGopembt0LTsbDG63T2QQaOaiva/jx1LolUXR/HvmCvF/gVma9Wnv hgqiFsEiz244mpY47DLcFYfxBOeIhOxuuRi5Rk+kNBMWT/3G2rI6GptWDDIdO0lr FjtRTursJg/ImP6gmX/qJ0s0dR9J1J8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:25 2026 by rpki-client