$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/9ba08d73-b505-3fa5-a35b-23519c486b5c.roa File: 9ba08d73-b505-3fa5-a35b-23519c486b5c.roa (raw, json) Hash identifier: +dFmKvL004VYCsgywQ6ubyZBHweok5jCDszg01dfBmg= Subject key identifier: 30:41:70:FD:1F:CE:B6:47:1E:E8:6A:65:20:B5:90:4E:16:10:35:BE Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584F549D5F87373F1162EDCF3848 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/9ba08d73-b505-3fa5-a35b-23519c486b5c.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 2615 IP address blocks: 147.1.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:5f:87:37:3f:11:62:ed:cf:38:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=6561caba-04d7-4e3b-bc56-9b0b5d2c5bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:94:9d:b1:60:95:a4:c2:e8:d2:73:d1:7c:fd: 72:fc:2f:82:08:0e:51:60:54:62:1b:ca:41:5b:69: 9b:ac:ab:63:97:f2:8f:a4:30:b8:60:9d:65:aa:39: 39:51:8d:e7:36:68:0a:e2:9b:81:bd:3c:44:62:96: ef:a4:c5:b8:ae:65:fc:2c:d8:37:cf:15:c2:f0:59: 76:53:d3:02:18:f6:11:f2:e3:46:4c:3f:90:4c:30: 86:a0:d7:fe:bc:a0:c4:55:5b:0b:a1:dd:71:53:2e: 4e:86:dc:7b:1b:3d:1c:6a:d8:90:27:be:68:17:6c: fb:5d:a0:c4:6d:d3:44:10:78:da:51:ab:f8:72:00: 5a:e5:98:e2:ee:11:0f:11:f9:6e:90:43:de:9e:07: 62:3d:87:3a:17:06:f8:9a:ef:ea:4d:1e:99:cc:ef: df:f4:74:5a:cd:17:e6:69:b1:93:a0:5d:c6:61:2a: 5a:e4:cd:f2:cc:f8:ba:21:c3:5a:b1:8c:49:bc:d8: f5:4f:fe:41:7b:1e:0f:2f:a3:1b:67:a9:73:2a:eb: 59:9a:c8:da:2d:d3:3c:16:a9:d0:f8:c5:7f:f0:6a: 2d:63:b0:ac:e7:1b:25:dc:7c:1c:15:d4:31:10:a2: e5:03:53:dd:2a:04:44:b3:af:26:f3:59:ab:27:07: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:41:70:FD:1F:CE:B6:47:1E:E8:6A:65:20:B5:90:4E:16:10:35:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/9ba08d73-b505-3fa5-a35b-23519c486b5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:88:7f:ae:f4:65:08:06:ca:0e:b5:40:51:b9:96:ee:86:02: d9:a1:d1:c7:05:ad:48:d1:23:57:ac:03:7d:1b:30:2a:cf:fe: 1c:fe:34:d9:93:9d:e6:67:13:78:8b:6c:6d:9a:c5:ab:0a:c6: 7d:f4:07:8d:4e:c4:7d:01:16:53:09:69:45:59:d3:a2:36:72: ac:35:fd:2a:bd:8d:5f:0c:e4:8a:7a:18:c4:80:ce:7d:cc:c9: 22:d4:92:4c:6c:c7:e9:b6:1f:04:0d:75:7a:62:93:84:d3:7f: a8:84:5c:7e:bb:23:00:c7:2e:21:84:ff:ab:ce:5a:32:65:ba: 46:81:c3:c2:9f:0e:dc:e0:42:41:2a:1f:90:8e:75:47:c6:09: ff:1f:3b:39:73:8d:68:81:57:5c:15:89:8e:f7:5d:a9:fa:d8: 45:5b:a3:97:a0:60:4b:90:0a:32:0a:28:70:a6:2f:4a:2f:d4: f9:eb:c8:e7:7f:8b:45:90:58:c6:b2:9b:f3:05:d3:09:a1:ee: ab:c6:3d:cc:02:d9:b9:b4:77:9f:73:4a:61:29:cf:40:7c:09: b9:f8:f0:58:50:d0:1d:c3:a6:5c:97:bb:d7:5b:d5:1a:ab:28: 7d:ba:d6:74:ae:7e:8e:a2:a4:d2:a4:29:77:29:38:29:12:dc: 1c:70:b0:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnV+HNz8RYu3POEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NjU2MWNhYmEtMDRkNy00ZTNiLWJjNTYtOWIwYjVkMmM1YmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJSdsWCVpMLo0nPRfP1y/C+CCA5RYFRiG8pB W2mbrKtjl/KPpDC4YJ1lqjk5UY3nNmgK4puBvTxEYpbvpMW4rmX8LNg3zxXC8Fl2 U9MCGPYR8uNGTD+QTDCGoNf+vKDEVVsLod1xUy5Ohtx7Gz0catiQJ75oF2z7XaDE bdNEEHjaUav4cgBa5Zji7hEPEflukEPengdiPYc6Fwb4mu/qTR6ZzO/f9HRazRfm abGToF3GYSpa5M3yzPi6IcNasYxJvNj1T/5Bex4PL6MbZ6lzKutZmsjaLdM8FqnQ +MV/8GotY7Cs5xsl3HwcFdQxEKLlA1PdKgREs68m81mrJwcdmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBBcP0fzrZHHuhqZSC1kE4WEDW+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvOWJhMDhkNzMtYjUwNS0z ZmE1LWEzNWItMjM1MTljNDg2YjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwESMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiIf670ZQgGyg61QFG5lu6GAtmh0ccFrUjRI1esA30bMCrP/hz+NNmT neZnE3iLbG2axasKxn30B41OxH0BFlMJaUVZ06I2cqw1/Sq9jV8M5Ip6GMSAzn3M ySLUkkxsx+m2HwQNdXpik4TTf6iEXH67IwDHLiGE/6vOWjJlukaBw8KfDtzgQkEq H5COdUfGCf8fOzlzjWiBV1wViY73Xan62EVbo5egYEuQCjIKKHCmL0ov1PnryOd/ i0WQWMaym/MF0wmh7qvGPcwC2bm0d59zSmEpz0B8Cbn48FhQ0B3DplyXu9db1Rqr KH261nSufo6ipNKkKXcpOCkS3BxwsA0= -----END CERTIFICATE-----Generated at Tue Sep 29 19:18:26 2026 by rpki-client