$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/b354ebbc-2421-3278-ae3a-2710d363b5a5.roa File: b354ebbc-2421-3278-ae3a-2710d363b5a5.roa (raw, json) Hash identifier: PnrzH8rN8I5c2TwLlMcjvJgoIDbLV4PjeCt7RSb2V5Y= Subject key identifier: B5:63:B4:BE:11:D5:DD:09:5E:6C:C7:BB:FC:BF:7C:61:7F:81:2F:17 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584F4972EDC385D322DBC3941F00 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/b354ebbc-2421-3278-ae3a-2710d363b5a5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2615 IP address blocks: 147.1.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ed:c3:85:d3:22:db:c3:94:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5d99f1dc-d553-4386-bc62-399f6cbfaddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4b:be:15:e8:3b:87:9b:12:94:37:08:61:61: 63:4f:9d:0b:a4:d6:bd:8f:1c:fa:6d:cb:78:16:cb: 2d:9a:f6:82:6d:8d:37:a1:a0:26:b3:21:36:ad:5b: 4c:5d:1c:bf:99:2e:2b:a4:c6:b8:81:43:7f:e9:81: 86:ed:87:0b:9c:50:16:73:85:b3:9d:b9:f6:29:fb: f8:3f:6a:32:45:23:f0:ff:99:4d:1a:91:47:3c:b7: d5:bf:e6:30:c2:5a:9b:69:e4:c7:d7:32:72:1e:61: 51:d6:58:dc:56:a2:ef:9b:b0:94:5f:34:9d:6d:57: 63:d2:b2:e1:66:4b:5e:bb:b3:51:62:b1:6d:73:7a: 69:6e:18:76:30:18:90:27:eb:e1:a6:d4:6d:c5:da: c7:e8:86:4b:0f:f4:c3:aa:3d:aa:a8:6f:9e:3d:d2: 4f:99:5b:10:57:e0:8b:b6:f5:f2:f0:c1:7e:b3:aa: d1:17:9d:e0:b7:3d:70:ac:e4:81:b9:9d:9b:5e:83: f4:6b:37:88:a8:dd:3e:f2:c4:ea:a2:84:5d:47:87: 79:38:8f:77:30:9f:ed:18:36:b5:a4:d2:8b:f8:21: a7:02:f0:54:47:c5:77:37:da:8c:5c:31:0e:4d:f8: 9e:e8:54:b6:b1:e4:ae:99:e9:23:9c:6b:4b:20:8b: 98:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:63:B4:BE:11:D5:DD:09:5E:6C:C7:BB:FC:BF:7C:61:7F:81:2F:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/b354ebbc-2421-3278-ae3a-2710d363b5a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:c3:73:74:2a:1c:cc:f1:99:0a:93:9b:bf:d7:14:0e:df:ca: d4:4c:25:b2:f1:d4:5f:44:2f:2d:83:21:28:eb:da:80:e8:f7: 4b:a1:e8:75:59:96:f5:f2:70:e5:0e:01:f5:6f:a2:76:85:ef: e2:4b:50:2e:b3:02:34:fc:61:0c:dd:9c:99:e1:56:dd:89:e3: 56:65:99:5e:05:43:d8:df:89:7f:1a:17:87:93:db:eb:35:86: 35:54:6a:ee:98:12:35:4b:e0:e8:e5:ff:1c:db:ce:e9:f9:f3: 78:90:53:a4:a2:71:c0:02:07:93:a5:4f:33:38:74:4e:af:c3: 44:1e:6f:9a:93:9c:44:26:e6:d8:78:6f:d1:5e:c3:51:3b:cf: b0:47:b6:b6:5d:c4:6d:09:da:43:82:d8:d5:ae:08:ab:2e:4e: 0e:18:4f:35:4b:1f:ee:df:06:68:f7:eb:d5:b1:5e:f7:4f:0b: b2:b0:04:88:92:ed:48:0d:ed:d7:08:83:8c:c7:82:3b:63:c7: c5:54:ba:98:33:c6:22:5f:b7:8e:65:80:3c:ad:4e:37:68:67: 29:a4:07:4b:96:6d:24:f8:27:d2:a1:8a:44:d9:11:17:46:1e: a9:03:96:3d:bd:ea:fa:1f:d4:89:d2:7a:14:d4:83:8e:28:28: 8c:c1:0d:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcu3DhdMi28OUHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWQ5OWYxZGMtZDU1My00Mzg2LWJjNjItMzk5ZjZjYmZhZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEu+Feg7h5sSlDcIYWFjT50LpNa9jxz6bct4 FsstmvaCbY03oaAmsyE2rVtMXRy/mS4rpMa4gUN/6YGG7YcLnFAWc4Wznbn2Kfv4 P2oyRSPw/5lNGpFHPLfVv+YwwlqbaeTH1zJyHmFR1ljcVqLvm7CUXzSdbVdj0rLh Zkteu7NRYrFtc3ppbhh2MBiQJ+vhptRtxdrH6IZLD/TDqj2qqG+ePdJPmVsQV+CL tvXy8MF+s6rRF53gtz1wrOSBuZ2bXoP0azeIqN0+8sTqooRdR4d5OI93MJ/tGDa1 pNKL+CGnAvBUR8V3N9qMXDEOTfie6FS2seSumekjnGtLIIuYfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVjtL4R1d0JXmzHu/y/fGF/gS8XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvYjM1NGViYmMtMjQyMS0z Mjc4LWFlM2EtMjcxMGQzNjNiNWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPDc3QqHMzxmQqTm7/XFA7fytRMJbLx1F9ELy2DISjr2oDo90uh6HVZ lvXycOUOAfVvonaF7+JLUC6zAjT8YQzdnJnhVt2J41ZlmV4FQ9jfiX8aF4eT2+s1 hjVUau6YEjVL4Ojl/xzbzun583iQU6SiccACB5OlTzM4dE6vw0Qeb5qTnEQm5th4 b9Few1E7z7BHtrZdxG0J2kOC2NWuCKsuTg4YTzVLH+7fBmj369WxXvdPC7KwBIiS 7UgN7dcIg4zHgjtjx8VUupgzxiJft45lgDytTjdoZymkB0uWbST4J9KhikTZERdG HqkDlj296vof1InSehTUg44oKIzBDcg= -----END CERTIFICATE-----Generated at Sat Sep 26 12:37:40 2026 by rpki-client