$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8c35e725-cb7a-34fc-b8dd-3626efeea859.roa File: 8c35e725-cb7a-34fc-b8dd-3626efeea859.roa (raw, json) Hash identifier: xLEbSVxvNTOFz3Aopsaj1Xc4hL3kMYfydXzmXf7yKdw= Subject key identifier: 85:D8:18:63:A4:A4:DA:AE:CA:1B:A4:EF:8A:D0:78:25:CC:13:64:80 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584DB7702996B9E595EDE0BD2140 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8c35e725-cb7a-34fc-b8dd-3626efeea859.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 2615 IP address blocks: 147.1.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:29:96:b9:e5:95:ed:e0:bd:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=a487b6ab-c568-456d-a175-1330c70e2057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4a:71:f4:76:9c:26:94:00:1a:c5:d5:75:c4: b9:5e:28:a4:6a:77:46:c6:3c:90:34:bc:43:8f:dd: db:67:7d:55:76:9b:30:f0:1a:b3:5d:ac:c4:e3:fc: aa:97:2d:73:be:0d:4f:35:30:f5:50:72:31:81:36: 39:d7:14:68:5b:67:13:28:e1:03:bc:d7:a2:5f:38: 4b:16:1c:5a:c9:50:fa:61:e5:f2:b6:60:c4:04:05: 06:a9:ea:3d:3b:cd:fe:3b:b4:6d:8b:a7:df:e8:e6: 4f:81:a3:11:eb:c8:4e:1f:c0:5a:fb:f4:dc:16:90: e0:f6:50:6f:90:80:79:13:02:96:e5:69:4b:de:14: c2:18:3b:6c:f9:84:e5:7e:eb:01:77:6d:da:66:e6: fe:07:1c:6e:cf:58:80:23:13:1b:ea:ef:dd:98:2c: 4b:15:da:00:5c:89:7c:a1:a2:eb:ec:d3:63:5b:ab: cd:d9:72:b8:4b:58:54:8c:9b:4d:ea:15:6c:9d:c2: a6:05:5c:0c:e2:39:d9:fa:16:e9:70:03:1d:d7:ab: be:3d:b7:af:73:f9:ad:e5:ac:57:23:6d:32:28:3d: d6:2a:9c:b1:16:8b:5b:18:81:e1:a7:a2:4f:1c:ad: 8b:a6:50:38:f4:2b:b9:96:3c:be:f4:e0:b4:9c:05: fc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D8:18:63:A4:A4:DA:AE:CA:1B:A4:EF:8A:D0:78:25:CC:13:64:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8c35e725-cb7a-34fc-b8dd-3626efeea859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:dd:1e:c7:98:0a:af:78:a2:49:91:ab:44:b0:f9:78:8c:3d: 8a:5e:1d:43:4f:f4:6c:36:8a:ac:4f:f5:ba:58:a2:20:16:a4: 60:8d:d4:9f:8e:85:d2:94:93:c1:c9:12:e2:7b:06:7a:d2:ad: ca:96:c1:e5:81:92:d7:1d:77:e2:3d:ad:92:f6:89:66:b2:2a: 48:06:0c:cd:1a:95:c6:96:21:cd:f8:da:3d:d6:ea:01:3e:2d: 3c:9e:c0:63:12:db:11:31:a3:9b:95:6f:09:90:74:98:ed:36: b2:9c:88:09:f4:42:cd:91:45:8e:00:cf:cc:a4:ad:e5:61:41: c2:9d:5a:a3:39:c2:5c:6d:b7:6b:cd:32:28:47:04:19:6d:06: b0:40:8f:e5:7e:84:4b:60:07:f3:1f:07:f0:95:db:57:b6:4d: 2d:d5:91:9e:ba:6c:6f:9e:7e:15:a2:c7:27:08:62:11:ed:f3: bd:6f:17:23:86:b1:a0:cf:9d:41:b7:c7:e5:d3:22:36:43:67: 8d:f1:e2:b4:e1:ad:18:3f:37:46:0c:f8:bb:d3:6d:1b:7a:c3: 8d:db:d5:9e:7c:df:03:58:74:07:cb:7c:1f:b6:45:88:ed:d9: d2:c9:c0:d0:76:59:5b:f4:de:99:f8:5c:6c:10:22:68:d0:47: e8:af:84:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cCmWueWV7eC9IUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk YTQ4N2I2YWItYzU2OC00NTZkLWExNzUtMTMzMGM3MGUyMDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0px9HacJpQAGsXVdcS5XiikandGxjyQNLxD j93bZ31Vdpsw8BqzXazE4/yqly1zvg1PNTD1UHIxgTY51xRoW2cTKOEDvNeiXzhL FhxayVD6YeXytmDEBAUGqeo9O83+O7Rti6ff6OZPgaMR68hOH8Ba+/TcFpDg9lBv kIB5EwKW5WlL3hTCGDts+YTlfusBd23aZub+Bxxuz1iAIxMb6u/dmCxLFdoAXIl8 oaLr7NNjW6vN2XK4S1hUjJtN6hVsncKmBVwM4jnZ+hbpcAMd16u+Pbevc/mt5axX I20yKD3WKpyxFotbGIHhp6JPHK2LplA49Cu5ljy+9OC0nAX82QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXYGGOkpNquyhuk74rQeCXME2SAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvOGMzNWU3MjUtY2I3YS0z NGZjLWI4ZGQtMzYyNmVmZWVhODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbdHseYCq94okmRq0Sw+XiMPYpeHUNP9Gw2iqxP9bpYoiAWpGCN1J+O hdKUk8HJEuJ7BnrSrcqWweWBktcdd+I9rZL2iWayKkgGDM0alcaWIc342j3W6gE+ LTyewGMS2xExo5uVbwmQdJjtNrKciAn0Qs2RRY4Az8ykreVhQcKdWqM5wlxtt2vN MihHBBltBrBAj+V+hEtgB/MfB/CV21e2TS3VkZ66bG+efhWixycIYhHt871vFyOG saDPnUG3x+XTIjZDZ43x4rThrRg/N0YM+LvTbRt6w43b1Z583wNYdAfLfB+2RYjt 2dLJwNB2WVv03pn4XGwQImjQR+ivhIE= -----END CERTIFICATE-----Generated at Wed May 13 03:28:46 2026 by rpki-client