$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa File: 22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa (raw, json) Hash identifier: wRxXEzFY5ydm+Auiqe4CrPcxKAnHD4zGN3/xbUyQBpw= Subject key identifier: 42:AD:DE:73:4D:21:C0:DC:90:5F:3C:A0:BE:79:2E:99:52:09:B8:39 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584E104F28A0837B48BE0A48B940 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 2615 IP address blocks: 147.1.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:28:a0:83:7b:48:be:0a:48:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=49ad4ac1-b8a4-4368-bb9b-774304890895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c1:b6:bf:1a:fb:96:0d:a3:d5:3d:64:7d:57: ea:0e:aa:94:b8:50:14:61:11:8d:04:1c:0b:d6:8d: 66:3b:91:b7:aa:d4:0d:7d:82:de:bf:7e:87:e5:80: 49:e2:3f:6c:ed:5e:5b:6d:56:55:97:af:d1:a7:62: 6b:63:53:bc:2a:22:5c:e5:9e:be:a0:f1:e3:d7:f1: 38:8e:f3:ad:fa:38:bf:9d:41:0a:ff:0f:0e:08:ec: 44:a3:c8:59:a7:12:94:c5:8f:5f:d6:7e:9d:5b:54: cb:15:3f:51:a8:70:ae:c9:09:98:b0:aa:a0:bd:14: d6:68:05:f3:e7:5f:3f:3b:8d:65:4d:54:10:22:7e: 2d:69:12:15:70:f7:83:cc:16:6e:07:a1:78:a3:8c: 33:ba:c2:b4:17:5f:27:13:8e:f0:bd:b2:bf:c7:84: 6b:6b:f2:f6:99:87:47:70:87:1a:04:55:35:52:34: af:6b:83:fc:7f:c7:10:fd:f4:8a:70:f3:aa:1f:f3: d4:b2:ef:3d:ec:d9:00:5b:af:f9:9c:42:ff:d2:42: f8:82:a9:e2:4c:04:b0:85:85:15:f8:c2:51:f3:88: b2:c7:0a:54:82:68:8a:55:0f:28:ce:af:8e:6c:51: 27:ff:26:e5:ca:dc:04:ce:50:8f:f5:1a:d5:03:bb: 89:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AD:DE:73:4D:21:C0:DC:90:5F:3C:A0:BE:79:2E:99:52:09:B8:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:5c:ea:a2:9c:06:a1:69:06:db:b5:de:2d:a2:0e:7c:06:8d: b4:92:82:a9:64:66:be:d3:8d:99:a1:21:83:a9:29:eb:0c:2d: a7:85:b1:42:ef:e2:1b:23:09:34:5b:89:1f:05:88:b8:dc:7a: 81:e9:fc:06:37:4d:b1:42:ad:a6:62:f9:1d:97:31:65:31:cd: 7c:a6:d1:21:87:fb:ca:60:99:0a:93:fe:97:64:6f:0c:b4:39: 9f:41:d6:0a:67:3a:ab:1b:99:6c:2e:f7:48:c7:78:a8:7f:5c: fe:ea:c8:a7:87:e6:02:de:85:93:3b:1a:a8:59:55:a1:43:bc: 85:a7:23:04:ef:6b:6c:ab:a9:3b:35:0c:8e:91:ec:a3:89:fc: 02:6e:98:c5:a5:71:49:bb:45:bd:ed:9a:8c:13:8e:0a:5b:57: e2:7b:7f:83:21:9a:51:a1:6a:bb:14:15:b6:df:cd:0b:b9:66: b2:80:96:c1:e8:4a:d5:37:b3:69:8f:b0:43:38:bd:f0:c8:fc: 0b:d1:99:29:f1:1c:9d:45:de:69:64:bc:fd:ae:f6:15:27:a3: 54:88:7f:ba:4c:81:5f:e0:8b:a1:10:c7:c7:41:7c:d9:71:f2: fd:c3:5e:d2:3d:1b:52:d2:bc:b7:4a:09:7c:69:88:6a:70:37: 27:e8:22:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTyigg3tIvgpIuUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NDlhZDRhYzEtYjhhNC00MzY4LWJiOWItNzc0MzA0ODkwODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysG2vxr7lg2j1T1kfVfqDqqUuFAUYRGNBBwL 1o1mO5G3qtQNfYLev36H5YBJ4j9s7V5bbVZVl6/Rp2JrY1O8KiJc5Z6+oPHj1/E4 jvOt+ji/nUEK/w8OCOxEo8hZpxKUxY9f1n6dW1TLFT9RqHCuyQmYsKqgvRTWaAXz 518/O41lTVQQIn4taRIVcPeDzBZuB6F4o4wzusK0F18nE47wvbK/x4Rra/L2mYdH cIcaBFU1UjSva4P8f8cQ/fSKcPOqH/PUsu897NkAW6/5nEL/0kL4gqniTASwhYUV +MJR84iyxwpUgmiKVQ8ozq+ObFEn/yblytwEzlCP9RrVA7uJVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKt3nNNIcDckF88oL55LplSCbg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMjJkMWNiMDctZGIyZC0z YzdkLTgyMDItZTYzZmY3YThmMGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRc6qKcBqFpBtu13i2iDnwGjbSSgqlkZr7TjZmhIYOpKesMLaeFsULv 4hsjCTRbiR8FiLjceoHp/AY3TbFCraZi+R2XMWUxzXym0SGH+8pgmQqT/pdkbwy0 OZ9B1gpnOqsbmWwu90jHeKh/XP7qyKeH5gLehZM7GqhZVaFDvIWnIwTva2yrqTs1 DI6R7KOJ/AJumMWlcUm7Rb3tmowTjgpbV+J7f4MhmlGharsUFbbfzQu5ZrKAlsHo StU3s2mPsEM4vfDI/AvRmSnxHJ1F3mlkvP2u9hUno1SIf7pMgV/gi6EQx8dBfNlx 8v3DXtI9G1LSvLdKCXxpiGpwNyfoIkI= -----END CERTIFICATE-----Generated at Sat Jun 13 15:44:17 2026 by rpki-client