$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/0bea3d4f-fe7f-3fb5-9ca4-cc0982a98325.roa File: 0bea3d4f-fe7f-3fb5-9ca4-cc0982a98325.roa (raw, json) Hash identifier: S+6ZfzCcDmqKb1mNQGiQ/M+BfQnyjJ10JaT/Pvtki58= Subject key identifier: A5:E3:64:A9:18:D6:7C:81:EB:C3:DF:94:DA:5C:94:A8:DF:A1:03:A9 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584F067220B3F80113600DBBAB60 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/0bea3d4f-fe7f-3fb5-9ca4-cc0982a98325.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 2615 IP address blocks: 147.1.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:20:b3:f8:01:13:60:0d:bb:ab:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=8de8a3d5-af5d-4336-b4ac-f19e051f0f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:77:3f:77:52:e4:cd:e8:89:7a:1f:56:bd:f4: 5d:6c:e7:6b:db:c6:d0:3f:e0:d8:92:c3:61:93:c7: c7:31:59:7a:87:b0:31:26:75:b4:47:41:8f:1d:3b: a9:44:54:d2:9d:da:a3:6d:78:bd:4a:87:dd:29:cd: ea:86:88:09:5a:df:38:c6:de:4a:ed:a7:d8:67:b2: d9:c9:98:26:50:2a:cf:d4:82:6a:f0:a7:f9:41:1b: 05:45:c8:15:5d:8e:61:42:f1:12:86:2f:f9:1c:c0: b7:5e:e1:6e:e2:24:31:f1:2c:09:00:d4:d1:6e:f7: b8:d5:51:e1:69:2b:07:fa:bd:7b:1b:be:60:14:dc: 18:c6:d4:0d:94:db:b6:1f:87:da:16:bf:53:14:57: 11:f1:32:f0:f3:f6:51:32:3b:22:1b:ec:ca:e7:f0: 0b:1e:47:71:9b:a4:8a:5e:4b:a2:73:e8:74:51:60: af:96:b2:eb:e5:25:90:9f:59:a9:a8:c4:0d:c7:e4: d6:f5:cc:5f:e9:39:b1:d7:e9:5a:1b:94:1c:ee:f0: 34:ed:08:16:be:9e:a1:71:a3:86:f9:5a:52:6d:d4: e0:7d:24:a2:0b:96:d1:64:89:9b:a9:d1:93:f3:1a: 4f:f6:5e:81:d4:6d:72:e0:e9:e4:2e:50:38:1a:4f: 64:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E3:64:A9:18:D6:7C:81:EB:C3:DF:94:DA:5C:94:A8:DF:A1:03:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/0bea3d4f-fe7f-3fb5-9ca4-cc0982a98325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:1b:4c:05:4f:e1:f9:c8:f0:83:40:4c:8a:4c:6f:a5:00:e7: a7:22:0d:cd:67:c8:12:06:1a:07:3f:1b:2e:36:3b:83:9b:db: 87:e1:f4:28:55:ee:46:a6:d1:85:af:19:46:17:23:44:68:79: 66:21:5a:3e:d0:59:59:7d:3f:b7:24:b9:d0:6e:3b:2a:56:ae: be:29:6f:4a:e2:c7:b2:ed:e6:9d:17:c3:8d:c3:da:bf:4c:91: 5f:f4:55:44:a6:b3:36:6b:ce:68:f7:11:a5:52:9a:1c:a9:39: 0f:01:a9:28:94:f6:9a:df:96:80:40:36:2b:44:30:a3:3a:f5: 18:ee:92:fd:4d:5e:13:01:36:67:d4:3d:fb:75:81:ee:b5:25: 3d:2a:ab:ae:85:43:ec:c4:6e:90:95:e5:82:43:fc:90:9c:d3: 19:62:d8:74:c8:eb:67:93:7d:af:d6:c1:24:25:73:a1:ee:c6: cb:ce:15:1f:42:3c:55:ff:9f:75:40:19:4e:f7:bd:87:00:58: 17:4c:76:4c:38:4f:9a:69:38:84:4b:72:82:cf:1c:ef:b8:98: 70:53:41:55:36:ab:86:be:74:34:6e:f3:87:41:b3:71:ef:20: 91:3f:6d:82:49:9c:6a:d0:a9:6c:0d:79:ce:a0:a2:8b:a0:68: 35:37:31:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GciCz+AETYA27q2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk OGRlOGEzZDUtYWY1ZC00MzM2LWI0YWMtZjE5ZTA1MWYwZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnc/d1LkzeiJeh9WvfRdbOdr28bQP+DYksNh k8fHMVl6h7AxJnW0R0GPHTupRFTSndqjbXi9SofdKc3qhogJWt84xt5K7afYZ7LZ yZgmUCrP1IJq8Kf5QRsFRcgVXY5hQvEShi/5HMC3XuFu4iQx8SwJANTRbve41VHh aSsH+r17G75gFNwYxtQNlNu2H4faFr9TFFcR8TLw8/ZRMjsiG+zK5/ALHkdxm6SK Xkuic+h0UWCvlrLr5SWQn1mpqMQNx+TW9cxf6Tmx1+laG5Qc7vA07QgWvp6hcaOG +VpSbdTgfSSiC5bRZImbqdGT8xpP9l6B1G1y4OnkLlA4Gk9kmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXjZKkY1nyB68PflNpclKjfoQOpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMGJlYTNkNGYtZmU3Zi0z ZmI1LTljYTQtY2MwOTgyYTk4MzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwbTAVP4fnI8INATIpMb6UA56ciDc1nyBIGGgc/Gy42O4Ob24fh9ChV 7kam0YWvGUYXI0RoeWYhWj7QWVl9P7ckudBuOypWrr4pb0rix7Lt5p0Xw43D2r9M kV/0VUSmszZrzmj3EaVSmhypOQ8BqSiU9prfloBANitEMKM69Rjukv1NXhMBNmfU Pft1ge61JT0qq66FQ+zEbpCV5YJD/JCc0xli2HTI62eTfa/WwSQlc6HuxsvOFR9C PFX/n3VAGU73vYcAWBdMdkw4T5ppOIRLcoLPHO+4mHBTQVU2q4a+dDRu84dBs3Hv IJE/bYJJnGrQqWwNec6goougaDU3MRM= -----END CERTIFICATE-----Generated at Tue Sep 22 18:08:21 2026 by rpki-client