$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/d6e47bdb-24a9-3833-ab3d-13192e87f425.roa File: d6e47bdb-24a9-3833-ab3d-13192e87f425.roa (raw, json) Hash identifier: R8Hi3j6AdH74p+KyrMp6H3ZcQwLjbdikNDe7WExtJX0= Subject key identifier: 93:06:2E:82:05:8E:AC:1F:0D:28:E2:D0:D8:E8:A6:C6:39:A0:C0:73 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584DB7703AF61E592FB57F39C240 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/d6e47bdb-24a9-3833-ab3d-13192e87f425.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 2615 IP address blocks: 147.1.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:3a:f6:1e:59:2f:b5:7f:39:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=db4f244c-cfa0-4c3b-945e-73ba2fcf6a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:42:2f:7c:9d:67:21:80:73:12:ed:cb:cb:74: 33:07:ed:54:0b:66:53:60:5a:9f:50:07:c6:a5:3b: fd:76:01:68:4c:45:eb:cf:26:a6:b6:d9:f0:76:ba: 21:49:f7:51:54:e6:f0:c2:21:be:b2:6e:23:84:f9: be:f1:62:f8:17:54:a4:50:48:66:0e:3f:ce:55:66: 7c:52:67:db:2e:fa:6e:de:a0:12:ba:fb:78:03:b8: d1:64:7d:07:15:25:72:30:9f:0d:b3:ea:53:db:47: ad:89:3f:64:13:64:c3:71:28:1c:7d:a6:65:a7:89: 9d:d8:7c:c5:f3:dc:db:99:ba:13:2d:b7:f5:ed:db: 85:fc:94:6c:63:e9:8c:ab:95:f7:d4:0e:32:1b:43: d0:fd:26:5a:c4:1c:99:6b:dd:8a:dc:88:d0:e3:fa: fb:98:26:25:83:aa:e5:14:0e:9a:f5:6a:4f:f4:c4: 11:2d:09:e9:18:cc:8f:c8:58:36:76:1a:ea:59:56: 52:2b:32:63:43:45:e1:92:20:cd:48:42:82:f4:1c: 6e:7f:b1:1e:3e:57:ca:05:53:d5:48:3e:4e:c3:82: e5:97:d3:fc:4f:29:20:a7:65:65:60:97:2a:12:67: 7a:e4:b1:ba:1a:c0:7e:9b:b2:9f:75:a6:1d:1d:a2: 7e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:06:2E:82:05:8E:AC:1F:0D:28:E2:D0:D8:E8:A6:C6:39:A0:C0:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/d6e47bdb-24a9-3833-ab3d-13192e87f425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:67:a5:90:ba:ee:19:4b:6c:97:32:94:53:9c:03:55:c1:f3: 65:a5:01:2e:a8:3f:64:2a:17:8a:43:b5:8b:cb:85:dd:22:d8: 4a:14:c2:90:90:11:3f:56:51:4d:fe:5a:d8:f7:2b:24:9a:5f: 8e:d8:26:6a:83:4a:c5:d4:89:56:1c:46:bb:08:9b:93:ce:45: 61:8e:be:62:52:fd:d5:a2:da:62:03:03:36:55:54:10:e2:0e: 19:f6:95:7e:6c:c3:d4:95:4e:39:40:3b:7b:be:55:c2:1b:02: 54:d3:f4:e6:11:75:7f:a1:36:e2:96:1a:83:09:97:8b:aa:a1: b9:31:ae:01:e9:bb:9e:b5:8e:e6:82:52:0e:07:9e:8f:3a:01: a7:8a:15:55:75:61:b2:5a:01:aa:e7:cf:d2:93:6d:89:41:9c: c2:ec:ae:85:82:a2:5c:51:63:f3:c0:54:0c:34:32:e8:8a:3b: 51:da:2f:61:be:28:f4:67:60:c2:a1:06:b1:8e:19:74:85:70: 12:34:95:bf:2e:16:f6:1b:a1:ee:15:bd:ab:2d:ea:1a:b2:81: 41:a0:d3:de:d7:1b:97:aa:67:a6:79:f6:e9:cb:46:d8:1c:13: 5b:82:d3:99:70:c5:6f:f0:dd:13:2f:6a:cd:aa:7a:a6:6f:47: 2b:8d:56:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cDr2HlkvtX85wkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk ZGI0ZjI0NGMtY2ZhMC00YzNiLTk0NWUtNzNiYTJmY2Y2YTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEIvfJ1nIYBzEu3Ly3QzB+1UC2ZTYFqfUAfG pTv9dgFoTEXrzyamttnwdrohSfdRVObwwiG+sm4jhPm+8WL4F1SkUEhmDj/OVWZ8 UmfbLvpu3qASuvt4A7jRZH0HFSVyMJ8Ns+pT20etiT9kE2TDcSgcfaZlp4md2HzF 89zbmboTLbf17duF/JRsY+mMq5X31A4yG0PQ/SZaxByZa92K3IjQ4/r7mCYlg6rl FA6a9WpP9MQRLQnpGMyPyFg2dhrqWVZSKzJjQ0XhkiDNSEKC9Bxuf7EePlfKBVPV SD5Ow4Lll9P8Tykgp2VlYJcqEmd65LG6GsB+m7KfdaYdHaJ+pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMGLoIFjqwfDSji0NjopsY5oMBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvZDZlNDdiZGItMjRhOS0z ODMzLWFiM2QtMTMxOTJlODdmNDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFnpZC67hlLbJcylFOcA1XB82WlAS6oP2QqF4pDtYvLhd0i2EoUwpCQ ET9WUU3+Wtj3KySaX47YJmqDSsXUiVYcRrsIm5PORWGOvmJS/dWi2mIDAzZVVBDi Dhn2lX5sw9SVTjlAO3u+VcIbAlTT9OYRdX+hNuKWGoMJl4uqobkxrgHpu561juaC Ug4Hno86AaeKFVV1YbJaAarnz9KTbYlBnMLsroWColxRY/PAVAw0MuiKO1HaL2G+ KPRnYMKhBrGOGXSFcBI0lb8uFvYboe4Vvast6hqygUGg097XG5eqZ6Z59unLRtgc E1uC05lwxW/w3RMvas2qeqZvRyuNVtc= -----END CERTIFICATE-----Generated at Wed May 13 04:01:42 2026 by rpki-client