$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/187c1cb3-35e6-3f3e-98c3-227ee5354c41.roa File: 187c1cb3-35e6-3f3e-98c3-227ee5354c41.roa (raw, json) Hash identifier: 6zRUq0atz28pWw0uRbQFQ+qqvFE8xlCdQb/X6NsKRf8= Subject key identifier: A8:98:C6:BD:03:9D:DF:0E:88:C3:5B:55:5F:35:1F:E0:96:BF:25:75 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584D07AD2252FA7CAD606379C740 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/187c1cb3-35e6-3f3e-98c3-227ee5354c41.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 2615 IP address blocks: 147.1.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:22:52:fa:7c:ad:60:63:79:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=1e8ef7a6-7eb5-4b17-801a-60905a634af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ff:31:1b:82:6c:ad:fc:4b:8f:44:95:74:c4: b2:6c:36:56:2a:37:1c:8c:e5:51:8f:fe:37:98:00: 0e:12:82:8c:b0:cf:03:10:48:3c:94:6a:09:d1:02: 32:53:26:07:a6:47:0b:1e:a9:02:17:d4:8e:aa:57: cd:78:1a:54:b2:62:9b:95:50:b7:ef:08:54:9b:6c: f6:5e:dd:b6:b5:be:fb:6c:85:1f:f1:8c:39:a2:50: 19:c2:3d:21:9f:03:1b:39:f7:80:71:1a:58:de:9d: 4d:4d:35:a2:3a:a4:07:17:2e:dc:a2:7c:28:9d:f1: 1e:c8:c4:d0:e0:29:11:a4:0f:5a:b2:51:af:bf:81: b3:31:31:d3:41:fb:86:23:3d:c4:96:1c:da:80:06: b7:e1:12:47:b4:7f:e4:d7:90:37:b5:8a:ca:5d:d6: 88:3b:c2:6e:dd:57:8a:b4:7e:db:65:e9:85:f6:bd: b0:94:d4:2b:15:6b:bf:d2:17:4c:44:c2:ef:79:69: cd:86:66:d5:6f:89:c0:5b:43:42:b5:67:8a:f7:da: a3:f0:23:16:ec:2f:b2:75:e2:14:e4:95:7f:1a:b8: a8:c2:ba:73:bc:25:c9:68:55:0f:c6:29:0a:15:04: e3:93:59:93:10:eb:83:4a:c7:8e:78:d8:86:82:f9: 0c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:98:C6:BD:03:9D:DF:0E:88:C3:5B:55:5F:35:1F:E0:96:BF:25:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/187c1cb3-35e6-3f3e-98c3-227ee5354c41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:fa:5f:e3:fb:35:a2:52:ec:c6:c2:d1:b1:87:da:e5:4f:fa: e5:08:1f:6f:7f:6e:03:34:5d:55:4d:6b:70:72:bb:6b:cc:cf: ae:59:a7:6d:11:d2:94:b1:67:b0:c8:03:81:7f:75:02:fa:54: ab:71:0c:c2:60:cd:a7:d5:ba:42:a0:28:4e:56:d4:a0:64:a9: 0f:e4:12:8e:a1:ff:16:0c:1b:ee:7a:60:4a:88:6b:b0:bd:6a: b0:43:8c:3f:2e:85:29:0e:87:0b:30:43:44:4f:14:16:68:69: 8c:dd:e0:ea:f2:e8:ac:7e:8e:dc:d8:94:82:15:0e:88:f0:c4: 57:1b:aa:1a:b0:28:91:67:87:41:b1:f8:67:bc:2f:a2:1b:9f: 38:93:7e:29:c8:ce:bf:be:42:3a:82:eb:77:16:3e:f5:bb:38: 6c:80:01:6f:f7:ba:22:75:05:fd:54:8d:32:a4:57:87:51:27: ba:8d:26:36:07:5e:2d:a8:61:41:1e:60:46:cb:0c:6b:4f:5b: 8c:66:4c:ad:e8:c7:43:7f:ed:5e:46:11:af:27:d5:86:d0:7c: 18:cb:dd:3e:c0:07:93:aa:e0:d7:63:dc:80:00:a0:3e:94:ab: ad:92:02:06:fc:4f:80:0e:d4:94:31:eb:f2:25:6a:9b:e0:80: 22:0d:10:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrSJS+nytYGN5x0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk MWU4ZWY3YTYtN2ViNS00YjE3LTgwMWEtNjA5MDVhNjM0YWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/8xG4JsrfxLj0SVdMSybDZWKjccjOVRj/43 mAAOEoKMsM8DEEg8lGoJ0QIyUyYHpkcLHqkCF9SOqlfNeBpUsmKblVC37whUm2z2 Xt22tb77bIUf8Yw5olAZwj0hnwMbOfeAcRpY3p1NTTWiOqQHFy7conwonfEeyMTQ 4CkRpA9aslGvv4GzMTHTQfuGIz3ElhzagAa34RJHtH/k15A3tYrKXdaIO8Ju3VeK tH7bZemF9r2wlNQrFWu/0hdMRMLveWnNhmbVb4nAW0NCtWeK99qj8CMW7C+ydeIU 5JV/GriowrpzvCXJaFUPxikKFQTjk1mTEOuDSseOeNiGgvkMawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiYxr0Dnd8OiMNbVV81H+CWvyV1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMTg3YzFjYjMtMzVlNi0z ZjNlLTk4YzMtMjI3ZWU1MzU0YzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAj6X+P7NaJS7MbC0bGH2uVP+uUIH29/bgM0XVVNa3Byu2vMz65Zp20R 0pSxZ7DIA4F/dQL6VKtxDMJgzafVukKgKE5W1KBkqQ/kEo6h/xYMG+56YEqIa7C9 arBDjD8uhSkOhwswQ0RPFBZoaYzd4Ory6Kx+jtzYlIIVDojwxFcbqhqwKJFnh0Gx +Ge8L6IbnziTfinIzr++QjqC63cWPvW7OGyAAW/3uiJ1Bf1UjTKkV4dRJ7qNJjYH Xi2oYUEeYEbLDGtPW4xmTK3ox0N/7V5GEa8n1YbQfBjL3T7AB5Oq4Ndj3IAAoD6U q62SAgb8T4AO1JQx6/IlapvggCINEAk= -----END CERTIFICATE-----Generated at Mon Mar 2 18:07:44 2026 by rpki-client