$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/eb14bdce-678f-3bbb-8240-44d411908d1e.roa File: eb14bdce-678f-3bbb-8240-44d411908d1e.roa (raw, json) Hash identifier: svufgZo2mz6cNdw/qecHotN34BGMLMMV5oEyPfmJv4k= Subject key identifier: EC:49:74:D2:D7:97:44:9A:9E:73:7F:E7:4A:CC:12:62:72:2E:37:03 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584D19B4DADB69EBDDAD99D39FC0 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/eb14bdce-678f-3bbb-8240-44d411908d1e.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 2615 IP address blocks: 147.1.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:da:db:69:eb:dd:ad:99:d3:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=9da10ba4-6c27-49cf-9751-956b43d7e7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:2f:75:68:f5:c8:06:18:f6:22:4e:10:1c: 5d:cf:f7:1c:f7:97:b9:80:24:fb:d6:1a:5b:0f:8d: 9b:68:1d:c2:0f:1a:00:c0:18:c4:b7:17:c8:00:8a: 80:c1:59:2a:61:31:7e:6c:76:b6:84:52:fe:5d:a6: 60:48:04:77:b1:8d:17:e9:39:8d:e4:52:c8:98:10: 4c:ad:72:2c:30:85:d4:a6:d9:74:d3:32:a0:f0:23: d5:a8:8f:38:3a:9c:34:a4:27:4d:96:72:31:35:c4: 7f:5d:31:fe:f2:ad:6c:85:63:27:f6:54:24:c1:46: 59:dc:3b:97:f8:29:8b:fd:3f:99:6d:54:cb:00:7f: 66:12:a9:8f:ee:11:71:45:d6:8f:01:a5:32:d5:75: 65:c8:5b:a2:8e:ea:ef:5d:22:98:3f:2f:d6:c6:fd: 96:3e:df:d5:87:e8:77:a7:09:e6:3b:9d:45:40:5a: 54:fe:e0:ef:5a:ff:57:bb:a8:d8:b5:e7:b2:ac:7a: 15:4f:e7:a1:16:da:90:54:d4:69:b8:cf:5a:8d:67: d4:3e:1c:ce:d1:53:00:02:78:5c:4e:7d:af:fc:e9: 0b:11:62:ab:3b:a3:f9:96:21:81:5f:07:72:78:71: f1:8f:1a:63:a9:d3:f7:74:43:30:ad:44:56:67:d8: ee:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:49:74:D2:D7:97:44:9A:9E:73:7F:E7:4A:CC:12:62:72:2E:37:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/eb14bdce-678f-3bbb-8240-44d411908d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:05:e1:c3:ec:85:21:de:65:43:df:1b:c1:f9:16:1a:e5:f5: 33:4a:68:19:5a:0d:17:02:53:5a:e0:5e:cb:c0:57:44:2e:68: 32:a6:ac:6f:ec:b8:5b:38:5d:3d:0a:ae:28:d7:06:2f:a0:f0: 67:6a:34:f9:06:3e:7a:92:c6:a5:4b:91:d3:d8:e6:c4:91:94: f3:4b:9d:eb:56:eb:d0:fd:48:5c:5e:b4:59:24:a1:70:fa:31: 8f:3a:1d:fd:3e:5f:01:c7:16:74:76:36:4a:c2:a1:08:3c:0b: a5:92:85:99:1a:cd:1c:f7:1d:18:56:f9:5e:16:96:e8:4b:93: 13:e6:7e:14:0a:44:bd:85:ab:01:cc:4d:a6:4b:49:b0:dc:b4: c9:b6:89:05:05:54:d1:06:5f:b9:d4:ee:5b:a5:15:72:6e:3e: 64:3d:2f:2e:72:09:12:72:fc:0e:96:fe:57:c3:cf:d0:40:3a: bd:6c:1c:cd:86:1f:2d:ed:30:c5:06:84:df:1d:0e:39:69:3f: ea:c7:6a:fd:12:dd:04:5a:1a:f7:6c:ca:38:7c:db:96:fd:1d: 86:de:5f:d7:ba:ad:38:1e:ce:19:53:7f:ee:0c:08:48:cb:87: de:18:9c:9f:83:69:e7:b8:4a:fe:3c:c2:3e:82:c5:08:db:5b: 2a:f5:fe:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNrbaevdrZnTn8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk OWRhMTBiYTQtNmMyNy00OWNmLTk3NTEtOTU2YjQzZDdlN2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9EvdWj1yAYY9iJOEBxdz/cc95e5gCT71hpb D42baB3CDxoAwBjEtxfIAIqAwVkqYTF+bHa2hFL+XaZgSAR3sY0X6TmN5FLImBBM rXIsMIXUptl00zKg8CPVqI84Opw0pCdNlnIxNcR/XTH+8q1shWMn9lQkwUZZ3DuX +CmL/T+ZbVTLAH9mEqmP7hFxRdaPAaUy1XVlyFuijurvXSKYPy/Wxv2WPt/Vh+h3 pwnmO51FQFpU/uDvWv9Xu6jYteeyrHoVT+ehFtqQVNRpuM9ajWfUPhzO0VMAAnhc Tn2v/OkLEWKrO6P5liGBXwdyeHHxjxpjqdP3dEMwrURWZ9ju9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxJdNLXl0SannN/50rMEmJyLjcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvZWIxNGJkY2UtNjc4Zi0z YmJiLTgyNDAtNDRkNDExOTA4ZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQF4cPshSHeZUPfG8H5Fhrl9TNKaBlaDRcCU1rgXsvAV0QuaDKmrG/s uFs4XT0KrijXBi+g8GdqNPkGPnqSxqVLkdPY5sSRlPNLnetW69D9SFxetFkkoXD6 MY86Hf0+XwHHFnR2NkrCoQg8C6WShZkazRz3HRhW+V4WluhLkxPmfhQKRL2FqwHM TaZLSbDctMm2iQUFVNEGX7nU7lulFXJuPmQ9Ly5yCRJy/A6W/lfDz9BAOr1sHM2G Hy3tMMUGhN8dDjlpP+rHav0S3QRaGvdsyjh825b9HYbeX9e6rTgezhlTf+4MCEjL h94YnJ+Daee4Sv48wj6CxQjbWyr1/rM= -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:16 2026 by rpki-client