$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/abba4b82-7f03-3c53-9d73-12234ba085a8.roa File: abba4b82-7f03-3c53-9d73-12234ba085a8.roa (raw, json) Hash identifier: 49zpTQTMBpdZ24kzUqM7LHEHkTJOxiEcSABo/Jtt4Ps= Subject key identifier: E6:18:20:BA:A9:16:A5:DA:CF:BD:0E:B7:4F:8C:FB:12:B1:7A:12:64 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D34080CEF19B28B8FAB905260 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/abba4b82-7f03-3c53-9d73-12234ba085a8.roa Signing time: Tue 17 Mar 2026 23:19:50 +0000 ROA not before: Tue 17 Mar 2026 23:19:50 +0000 ROA not after: Mon 15 Jun 2026 23:19:50 +0000 asID: 31898 IP address blocks: 147.5.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:08:0c:ef:19:b2:8b:8f:ab:90:52:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Mar 17 23:19:50 2026 GMT Not After : Jun 15 23:19:50 2026 GMT Subject: CN=32dcb063-c8f5-44a2-8f90-9e5dc2a3d989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a2:b0:9d:ad:0e:35:84:0f:bf:06:70:8c:f4: c9:90:e5:8b:58:89:7b:2a:97:7d:ad:88:f3:83:27: bd:ea:7a:b3:6d:82:97:a3:b4:7d:24:fc:0e:07:ae: 66:ff:93:84:3e:38:a0:a3:fd:ed:47:96:b0:f5:05: e2:2d:b7:2f:b0:fe:fe:30:bc:b0:28:c3:1f:8e:d1: 99:4f:74:8e:9a:da:a3:35:d2:12:61:12:19:3a:e8: 34:69:09:38:fd:b8:12:c2:06:e8:65:c7:70:33:fe: 7d:b4:3e:c5:9c:b5:39:be:eb:93:c9:76:28:c5:71: 6a:08:6f:3d:a2:f9:40:c0:01:4e:60:f4:46:7b:ae: 5d:12:6f:4f:2d:26:16:87:dd:3a:d8:b7:d5:1c:f4: 2e:a2:99:6f:af:d0:2e:9d:81:2f:1d:09:b7:c3:df: b9:16:29:c1:a5:c1:a9:88:a1:30:f0:20:4d:c9:bf: ca:f5:4c:b9:cb:c1:c6:f1:61:87:a9:0b:74:2e:3a: 7d:cb:80:6b:3d:0c:cd:f5:27:cc:cb:6e:76:e5:e5: 59:9b:83:8b:29:27:c1:95:28:8e:44:5d:18:a1:ae: e5:ee:50:39:54:35:e8:cb:50:52:53:a9:6f:01:3b: 21:c4:24:6f:2a:3d:ed:fa:40:2f:75:14:28:93:c7: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:18:20:BA:A9:16:A5:DA:CF:BD:0E:B7:4F:8C:FB:12:B1:7A:12:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/abba4b82-7f03-3c53-9d73-12234ba085a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 147.5.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:91:97:6d:22:cb:1b:71:a2:01:91:0f:c7:d4:ea:f1:dd:c6: 0c:ca:56:72:b7:23:7c:d2:16:ee:b5:77:d2:d1:d3:23:76:39: ed:ab:b4:c1:d4:64:c2:e0:07:1b:f9:3f:37:a6:af:16:de:a8: 04:9f:57:00:e7:26:0f:2d:27:b8:7f:58:be:0d:e2:33:9b:10: 32:06:ee:d6:40:9f:5d:2c:a7:2e:18:e8:79:aa:15:dd:ca:3a: 10:24:87:30:f1:d7:b1:e2:47:f0:b4:bc:21:9e:9f:02:ee:92: a5:cf:aa:09:35:c8:22:2b:3b:2c:9f:0c:5c:4c:8c:df:0b:ae: d7:a6:c2:c1:22:0d:f4:52:7b:90:36:65:22:3b:2f:15:b2:a2: 12:35:7e:cd:c0:e3:e4:3a:ce:7e:12:4b:5e:51:35:04:77:72: c0:50:31:70:e5:45:17:cf:bc:5d:80:7c:99:bf:10:d9:d2:cf: d7:60:c6:65:30:09:be:52:f0:2a:58:d2:4c:c7:d7:08:2f:29: c2:e2:6e:a0:55:1b:9b:86:a0:5a:f1:61:0a:bc:0f:5c:cc:f1: be:ba:ea:c1:85:71:37:d7:95:ef:68:07:4d:3f:07:79:1b:98: 4f:58:27:da:16:99:28:68:b4:6c:d3:64:c0:d5:ea:8c:b5:15: 61:d0:5a:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00CAzvGbKLj6uQUmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDMxNzIzMTk1MFoXDTI2MDYxNTIzMTk1MFowLzEtMCsGA1UEAxMk MzJkY2IwNjMtYzhmNS00NGEyLThmOTAtOWU1ZGMyYTNkOTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaKwna0ONYQPvwZwjPTJkOWLWIl7Kpd9rYjz gye96nqzbYKXo7R9JPwOB65m/5OEPjigo/3tR5aw9QXiLbcvsP7+MLywKMMfjtGZ T3SOmtqjNdISYRIZOug0aQk4/bgSwgboZcdwM/59tD7FnLU5vuuTyXYoxXFqCG89 ovlAwAFOYPRGe65dEm9PLSYWh9062LfVHPQuoplvr9AunYEvHQm3w9+5FinBpcGp iKEw8CBNyb/K9Uy5y8HG8WGHqQt0Ljp9y4BrPQzN9SfMy2525eVZm4OLKSfBlSiO RF0Yoa7l7lA5VDXoy1BSU6lvATshxCRvKj3t+kAvdRQok8ewlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYYILqpFqXaz70Ot0+M+xKxehJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYWJiYTRiODItN2YwMy0z YzUzLTlkNzMtMTIyMzRiYTA4NWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwUKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWRl20iyxtxogGRD8fU6vHdxgzKVnK3I3zSFu61d9LR0yN2Oe2rtMHU ZMLgBxv5PzemrxbeqASfVwDnJg8tJ7h/WL4N4jObEDIG7tZAn10spy4Y6HmqFd3K OhAkhzDx17HiR/C0vCGenwLukqXPqgk1yCIrOyyfDFxMjN8LrtemwsEiDfRSe5A2 ZSI7LxWyohI1fs3A4+Q6zn4SS15RNQR3csBQMXDlRRfPvF2AfJm/ENnSz9dgxmUw Cb5S8CpY0kzH1wgvKcLibqBVG5uGoFrxYQq8D1zM8b666sGFcTfXle9oB00/B3kb mE9YJ9oWmShotGzTZMDV6oy1FWHQWig= -----END CERTIFICATE-----Generated at Thu Mar 26 14:40:58 2026 by rpki-client