$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/10eae504-c535-3d7f-8fd1-8a39ac437127.roa File: 10eae504-c535-3d7f-8fd1-8a39ac437127.roa (raw, json) Hash identifier: P2JFDCStW3Y3wj8lVGImGwXsRzeFmsq0xXzzyno5RFk= Subject key identifier: 22:A8:AC:78:5A:C6:9F:B7:62:2C:1F:57:89:F2:45:A0:41:0F:B7:0A Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584E104ED2D6611840CE15ECB100 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/10eae504-c535-3d7f-8fd1-8a39ac437127.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 2615 IP address blocks: 147.1.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:d2:d6:61:18:40:ce:15:ec:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=49d042fc-3f08-43e1-b42c-ae3c18609522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:10:c6:aa:b7:a6:c2:c0:28:1e:17:7b:07:39: ff:97:3f:c2:d9:52:28:4e:49:42:92:ec:5c:83:d2: 8e:5c:54:1d:5c:f7:67:4e:03:77:e9:09:bf:4b:47: 8c:b3:24:fb:e9:72:25:53:c9:fd:a6:a7:28:5a:f0: 44:21:03:31:c5:32:bb:90:ac:54:7c:10:bd:7d:7a: 93:a0:fd:9f:c6:0b:0d:d7:2d:66:77:90:66:33:7b: f7:ce:f5:c5:3e:92:ac:e7:e5:2d:4d:a0:90:2b:07: 5a:7e:35:6f:18:25:d7:73:91:50:39:b1:78:40:27: ef:70:d6:43:7c:03:9f:05:74:82:f0:99:a3:87:51: 68:c4:0f:d7:0a:b9:73:94:01:e6:12:02:f7:b4:52: f4:fd:33:b7:af:59:12:19:cf:52:54:fd:7e:a9:25: 49:a2:69:20:99:41:6c:2c:f5:dc:82:6b:1b:e2:02: eb:33:08:88:d4:e0:4e:eb:d7:c5:15:db:1c:66:3e: 14:32:fb:61:58:e7:87:fd:2f:00:5e:d6:3f:f8:a5: 43:05:43:eb:05:94:a8:1d:2f:3b:af:c6:61:6e:ac: 3d:5b:36:d3:d2:41:ae:f5:2a:96:eb:20:72:5a:ca: 48:73:b0:6d:01:9f:d5:c8:58:98:b7:c7:c9:d4:de: cd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A8:AC:78:5A:C6:9F:B7:62:2C:1F:57:89:F2:45:A0:41:0F:B7:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/10eae504-c535-3d7f-8fd1-8a39ac437127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:56:5c:5f:48:74:d4:14:c7:b6:08:8d:f9:23:7d:39:87:02: 5e:73:30:5e:12:cb:46:2c:8b:e2:de:89:9c:dd:45:fa:51:a2: 71:0f:7f:dc:7b:c1:3f:46:21:f3:e0:ed:59:16:c4:91:3d:74: 3a:f6:85:9f:c1:43:61:85:4e:23:dc:13:c3:1d:3a:de:77:ac: fa:a2:0b:85:ce:31:e0:0f:87:bc:30:07:13:4d:e4:79:91:ff: b0:9a:4e:fb:13:f5:e2:d8:e8:da:da:bb:5f:3c:49:7a:24:01: 56:b0:34:79:af:58:b5:ea:fb:28:8a:9e:2d:71:5c:dc:b3:38: d5:8f:1f:0b:60:70:ac:3a:75:12:b7:29:66:10:bf:5a:b4:54: a3:b6:ef:5a:2e:ea:68:18:d8:77:1e:b6:a7:d4:2d:55:4d:3a: 35:22:20:86:98:13:8c:5f:97:c7:e8:10:7b:0e:73:b4:c8:77: 02:cc:27:3b:dc:07:9b:9f:68:95:f5:4c:44:13:97:a3:b3:97: 2c:9b:49:aa:d9:32:57:9e:36:f6:ba:7f:7e:a9:26:b1:b2:60: 78:bf:04:07:4e:a9:5c:fc:04:ed:0c:2a:db:ad:24:fa:8c:e2: 9b:a7:ca:7f:20:fc:77:df:34:be:25:28:21:b5:de:c3:01:f1: 13:4d:cb:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTtLWYRhAzhXssQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NDlkMDQyZmMtM2YwOC00M2UxLWI0MmMtYWUzYzE4NjA5NTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxDGqremwsAoHhd7Bzn/lz/C2VIoTklCkuxc g9KOXFQdXPdnTgN36Qm/S0eMsyT76XIlU8n9pqcoWvBEIQMxxTK7kKxUfBC9fXqT oP2fxgsN1y1md5BmM3v3zvXFPpKs5+UtTaCQKwdafjVvGCXXc5FQObF4QCfvcNZD fAOfBXSC8Jmjh1FoxA/XCrlzlAHmEgL3tFL0/TO3r1kSGc9SVP1+qSVJomkgmUFs LPXcgmsb4gLrMwiI1OBO69fFFdscZj4UMvthWOeH/S8AXtY/+KVDBUPrBZSoHS87 r8Zhbqw9WzbT0kGu9SqW6yByWspIc7BtAZ/VyFiYt8fJ1N7NDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKorHhaxp+3YiwfV4nyRaBBD7cKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMTBlYWU1MDQtYzUzNS0z ZDdmLThmZDEtOGEzOWFjNDM3MTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdWXF9IdNQUx7YIjfkjfTmHAl5zMF4Sy0Ysi+LeiZzdRfpRonEPf9x7 wT9GIfPg7VkWxJE9dDr2hZ/BQ2GFTiPcE8MdOt53rPqiC4XOMeAPh7wwBxNN5HmR /7CaTvsT9eLY6Nrau188SXokAVawNHmvWLXq+yiKni1xXNyzONWPHwtgcKw6dRK3 KWYQv1q0VKO271ou6mgY2HcetqfULVVNOjUiIIaYE4xfl8foEHsOc7TIdwLMJzvc B5ufaJX1TEQTl6OzlyybSarZMleeNva6f36pJrGyYHi/BAdOqVz8BO0MKtutJPqM 4punyn8g/HffNL4lKCG13sMB8RNNy9E= -----END CERTIFICATE-----Generated at Sat Jun 13 15:51:10 2026 by rpki-client