$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/4535fdd9-0d95-3ccc-b3b8-2f021f9040f1.roa File: 4535fdd9-0d95-3ccc-b3b8-2f021f9040f1.roa (raw, json) Hash identifier: fdqWXxmIh/HkN2+Ipot7WHi308OzGj5OI/OHf9yjvVQ= Subject key identifier: 54:F2:5D:C7:78:6B:6F:A8:FB:CE:B3:AC:16:D5:A5:B3:3C:B5:DE:93 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584D5024EE05DBD205D5D20CEAC0 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/4535fdd9-0d95-3ccc-b3b8-2f021f9040f1.roa Signing time: Sat 28 Mar 2026 01:00:31 +0000 ROA not before: Sat 28 Mar 2026 01:00:31 +0000 ROA not after: Fri 26 Jun 2026 01:00:31 +0000 asID: 2615 IP address blocks: 147.1.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:50:24:ee:05:db:d2:05:d5:d2:0c:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Mar 28 01:00:31 2026 GMT Not After : Jun 26 01:00:31 2026 GMT Subject: CN=5e34818c-8614-4e4d-a005-dde4b1a8bfe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:3c:c7:7b:22:ac:e7:49:03:aa:10:b7:17: d3:12:ad:e7:90:cd:85:94:c1:84:07:91:9e:e2:aa: 19:e1:2a:75:54:07:1b:1a:a5:0f:24:b4:f9:31:80: a7:40:0d:b0:69:c7:e7:b5:c4:53:54:84:1c:5e:ea: 30:bc:2b:ac:8e:51:97:0f:a8:c2:b0:71:74:a6:28: c6:b5:4d:21:68:2e:f9:7a:02:d2:ff:6d:bb:e8:f8: c4:49:cf:71:33:31:48:ee:99:fe:5a:ab:c7:f2:5f: da:aa:f3:8d:76:c9:df:75:34:47:48:0e:65:88:e6: 2e:16:ba:b2:2a:5f:b3:6b:6e:97:d8:09:93:7b:90: 72:3f:d6:5e:10:f1:55:1d:bd:16:bf:ce:39:38:0d: 34:65:65:8b:98:d4:96:92:a3:6c:0f:5c:84:6d:5a: 86:71:b2:6d:2e:3e:50:c6:ad:7f:36:67:1b:7a:d1: 0b:ab:de:ef:d2:59:a2:57:9e:0d:71:79:0c:02:28: 0b:86:db:e7:30:e6:c3:93:dc:21:cc:b0:d7:7c:01: a8:e6:56:02:e1:51:5a:b0:2b:9e:b4:23:da:c9:9c: d2:b6:1b:b2:e7:36:f4:8e:a7:e5:7c:1d:f9:ae:23: f6:d7:0a:c2:18:3a:07:5c:ca:13:06:93:65:ca:8b: 61:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F2:5D:C7:78:6B:6F:A8:FB:CE:B3:AC:16:D5:A5:B3:3C:B5:DE:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/4535fdd9-0d95-3ccc-b3b8-2f021f9040f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:0f:09:e3:82:7c:b8:51:f7:d1:8c:d3:e6:2a:bc:6c:0a:4f: 22:a7:a5:ce:0c:45:a0:45:67:fb:69:42:e6:ec:ac:55:36:9e: 2c:85:d4:54:f4:29:60:2d:b3:a3:35:46:56:31:a4:3b:30:73: 5c:fd:3e:72:0d:52:9d:88:3e:cb:a1:e2:23:a9:fb:8a:e2:1a: e6:c3:24:96:bc:1d:d7:44:75:14:be:2e:28:77:d9:91:78:c3: 94:08:7f:b3:c0:3c:1e:88:95:18:80:80:5f:bf:03:38:5f:de: 22:05:88:0d:88:44:e5:63:47:60:14:f3:3b:06:8b:b8:cf:cb: 60:70:05:04:83:86:68:c1:59:a6:83:2b:83:11:b5:91:fe:b1: 9b:b3:a5:a2:a9:0e:06:eb:13:cf:7e:6b:0a:72:b8:90:ba:f8: d1:30:13:92:54:a7:53:2e:59:b2:0f:a5:7c:02:f6:9c:c4:ea: 2d:88:27:96:b4:96:b1:02:cd:a1:47:6c:49:24:dc:24:7e:f6: cb:89:c2:bb:79:b6:19:a3:80:0d:2d:de:d1:e8:87:c1:96:54: be:dd:71:43:74:21:7b:b9:a9:a5:f9:8c:58:b2:95:d2:65:d0: 0a:26:6f:33:63:2a:32:f0:dd:fe:c5:5f:6e:b1:7d:ea:da:2b: 91:4f:40:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1QJO4F29IF1dIM6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDMyODAxMDAzMVoXDTI2MDYyNjAxMDAzMVowLzEtMCsGA1UEAxMk NWUzNDgxOGMtODYxNC00ZTRkLWEwMDUtZGRlNGIxYThiZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6k8x3sirOdJA6oQtxfTEq3nkM2FlMGEB5Ge 4qoZ4Sp1VAcbGqUPJLT5MYCnQA2wacfntcRTVIQcXuowvCusjlGXD6jCsHF0pijG tU0haC75egLS/2276PjESc9xMzFI7pn+WqvH8l/aqvONdsnfdTRHSA5liOYuFrqy Kl+za26X2AmTe5ByP9ZeEPFVHb0Wv845OA00ZWWLmNSWkqNsD1yEbVqGcbJtLj5Q xq1/NmcbetELq97v0lmiV54NcXkMAigLhtvnMObDk9whzLDXfAGo5lYC4VFasCue tCPayZzSthuy5zb0jqflfB35riP21wrCGDoHXMoTBpNlyothxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTyXcd4a2+o+86zrBbVpbM8td6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNDUzNWZkZDktMGQ5NS0z Y2NjLWIzYjgtMmYwMjFmOTA0MGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMPCeOCfLhR99GM0+YqvGwKTyKnpc4MRaBFZ/tpQubsrFU2niyF1FT0 KWAts6M1RlYxpDswc1z9PnINUp2IPsuh4iOp+4riGubDJJa8HddEdRS+Lih32ZF4 w5QIf7PAPB6IlRiAgF+/Azhf3iIFiA2IROVjR2AU8zsGi7jPy2BwBQSDhmjBWaaD K4MRtZH+sZuzpaKpDgbrE89+awpyuJC6+NEwE5JUp1MuWbIPpXwC9pzE6i2IJ5a0 lrECzaFHbEkk3CR+9suJwrt5thmjgA0t3tHoh8GWVL7dcUN0IXu5qaX5jFiyldJl 0AombzNjKjLw3f7FX26xferaK5FPQI4= -----END CERTIFICATE-----Generated at Sun Apr 19 16:45:31 2026 by rpki-client