$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa File: da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa (raw, json) Hash identifier: T6/LNcahrAiAFXhJdW2oI/rZp32fCyMZBb8jPeIMCUo= Subject key identifier: 29:3C:AB:75:CD:70:A7:6E:E9:3E:96:7A:F2:75:1F:08:1E:FD:81:89 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584D19B4B23EFD73352C7CCAB906 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 2615 IP address blocks: 147.1.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:b2:3e:fd:73:35:2c:7c:ca:b9:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=031a99af-1ff1-4d45-b407-dd61446eb1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2c:14:87:76:f6:60:0b:6c:3e:5e:42:24:2a: 4c:ad:72:99:fd:9a:8e:ec:c0:eb:d0:19:cb:9d:e7: 4b:b2:7f:d7:ab:7d:5d:59:40:7d:86:d3:a3:43:00: a6:c7:3a:16:08:35:17:20:e4:9f:2b:f0:e6:cc:24: 8b:48:52:35:14:c0:2f:8c:b5:54:5c:c3:72:4c:25: c8:10:ee:ce:b0:ae:71:2a:54:1a:86:43:1e:42:a1: be:2f:4d:a2:48:f6:d6:8f:f0:23:49:1c:00:e9:41: d9:50:17:bf:58:1a:87:4a:81:6d:01:d7:02:d2:44: 70:36:a7:69:8b:61:31:51:5d:a9:37:ca:3a:4f:0c: e8:b5:e4:ca:f8:b2:50:a1:42:cb:9d:ea:e8:2c:0a: e7:55:7c:6a:87:e0:4a:dc:b4:eb:a9:23:d8:b4:d1: 3f:41:d1:cc:ba:78:00:fa:09:9e:e4:bf:20:59:c1: 65:bb:9d:e6:d2:84:5e:d8:e5:70:9a:9e:30:6a:13: c2:39:6b:62:3f:a1:9d:66:c1:09:9b:38:fa:a1:bb: ab:65:58:6b:53:d2:58:76:6e:aa:d1:8e:5f:93:9f: 36:e8:33:40:4b:34:3d:de:52:46:16:c5:1a:f4:ee: f2:79:ef:30:a7:87:eb:f4:e1:f7:d4:80:df:12:b3: 06:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3C:AB:75:CD:70:A7:6E:E9:3E:96:7A:F2:75:1F:08:1E:FD:81:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:04:80:95:1e:bf:71:02:bf:fe:9a:21:68:41:3e:0d:dd:9e: 79:04:ca:36:e2:d1:03:de:d7:89:80:b4:0d:48:a5:b8:8a:90: 9e:fe:c9:5e:70:f0:17:ff:49:2d:df:20:ae:0b:ef:9a:ba:f9: b0:39:c5:91:33:fc:a8:d2:f4:90:02:e9:ba:8e:bb:27:fb:d9: 02:77:53:44:1c:68:9e:87:d5:ed:31:71:d3:da:95:d3:93:1c: c7:b5:ed:28:53:f8:36:78:46:54:1a:ff:69:37:9e:59:34:66: 3b:bf:3c:31:d1:f9:c2:77:77:5d:ce:aa:b9:cc:3d:6d:8f:0f: f6:23:db:7a:28:3f:42:33:e0:e3:39:88:66:1c:84:05:5c:75: 29:08:ab:cd:16:6a:75:30:1c:8f:80:02:dd:4c:19:e2:8f:a5: 46:0a:7d:56:e0:51:34:06:63:da:03:b8:0c:67:28:fb:70:3c: f3:02:bf:02:15:8f:11:77:d1:d6:f1:17:09:c1:5c:f4:9d:68: 55:30:91:fa:78:0e:27:1e:46:51:f7:12:8a:8a:02:0d:b1:dc: 29:70:11:cb:8c:51:b4:59:b1:79:d4:07:9c:f3:85:1f:80:6d: 4a:03:00:53:8a:3b:b1:85:b0:69:cc:62:3c:b6:1c:2f:4b:08: 64:c0:a8:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtLI+/XM1LHzKuQYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MDMxYTk5YWYtMWZmMS00ZDQ1LWI0MDctZGQ2MTQ0NmViMWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvywUh3b2YAtsPl5CJCpMrXKZ/ZqO7MDr0BnL nedLsn/Xq31dWUB9htOjQwCmxzoWCDUXIOSfK/DmzCSLSFI1FMAvjLVUXMNyTCXI EO7OsK5xKlQahkMeQqG+L02iSPbWj/AjSRwA6UHZUBe/WBqHSoFtAdcC0kRwNqdp i2ExUV2pN8o6TwzoteTK+LJQoULLneroLArnVXxqh+BK3LTrqSPYtNE/QdHMungA +gme5L8gWcFlu53m0oRe2OVwmp4wahPCOWtiP6GdZsEJmzj6oburZVhrU9JYdm6q 0Y5fk5826DNASzQ93lJGFsUa9O7yee8wp4fr9OH31IDfErMGeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCk8q3XNcKdu6T6WevJ1Hwge/YGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvZGE0OWU4YTctMDlmNS0z NTYyLTk4YjctMmUyOGJlMGU4YWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYEgJUev3ECv/6aIWhBPg3dnnkEyjbi0QPe14mAtA1IpbiKkJ7+yV5w 8Bf/SS3fIK4L75q6+bA5xZEz/KjS9JAC6bqOuyf72QJ3U0QcaJ6H1e0xcdPaldOT HMe17ShT+DZ4RlQa/2k3nlk0Zju/PDHR+cJ3d13OqrnMPW2PD/Yj23ooP0Iz4OM5 iGYchAVcdSkIq80WanUwHI+AAt1MGeKPpUYKfVbgUTQGY9oDuAxnKPtwPPMCvwIV jxF30dbxFwnBXPSdaFUwkfp4DiceRlH3EoqKAg2x3ClwEcuMUbRZsXnUB5zzhR+A bUoDAFOKO7GFsGnMYjy2HC9LCGTAqOc= -----END CERTIFICATE-----Generated at Thu Mar 26 11:28:13 2026 by rpki-client