$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/48c6e8d1-dee5-3898-91e3-14e4dc670580.roa File: 48c6e8d1-dee5-3898-91e3-14e4dc670580.roa (raw, json) Hash identifier: dRDSc5kI2/3hiYfW/ayYuTrsM7Pf0GH+zm0NY8LF0UQ= Subject key identifier: 5F:40:90:CD:C6:1F:11:A8:4C:50:2C:AF:D0:F7:20:92:6E:6C:98:00 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584F06722C88B8BACD602A6C6080 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/48c6e8d1-dee5-3898-91e3-14e4dc670580.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 2615 IP address blocks: 147.1.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:2c:88:b8:ba:cd:60:2a:6c:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=fd9497f1-944c-4642-8bec-22cd86aa0e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:58:64:50:92:2f:d1:7b:81:4c:76:97:47:fb: d7:21:d5:82:a1:4c:59:bd:ba:bc:8f:27:99:74:a6: d5:9a:9b:ec:46:77:10:64:77:d8:c5:79:17:dc:62: 72:a7:60:e5:e7:41:ad:5f:b1:5a:f4:e3:38:68:01: 54:c0:78:56:24:40:59:a4:09:3c:53:aa:37:78:2e: 62:91:c7:93:43:82:8f:11:83:ba:65:ca:6f:e6:97: 69:d6:fd:3b:a0:76:e5:8e:5c:40:8f:e1:41:1c:23: ed:a2:25:20:74:ac:1a:10:52:0e:ab:c5:dd:99:21: 7c:40:7b:3b:a0:15:51:5c:1e:0c:ff:20:52:29:f9: d9:cd:9d:7c:3d:4e:df:53:1f:9d:fd:b4:57:5e:ff: 4d:02:c4:14:95:4c:da:a5:6d:05:1f:92:30:96:fd: fc:7a:3f:9f:d7:9a:83:39:43:3f:3e:0c:ab:50:3a: 42:96:98:9b:6f:9d:fb:6b:32:e8:cf:80:c1:e9:eb: 6d:31:c8:a1:cd:a5:3e:53:4f:34:34:ad:c7:01:c0: 3f:7a:c1:13:31:25:68:08:99:17:d1:05:8e:e5:2b: bf:ef:f4:20:d5:6b:68:a4:1e:e4:c8:99:fa:4a:b1: cd:8e:62:fe:0b:eb:d3:73:e6:1c:e3:26:cc:42:70: b0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:40:90:CD:C6:1F:11:A8:4C:50:2C:AF:D0:F7:20:92:6E:6C:98:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/48c6e8d1-dee5-3898-91e3-14e4dc670580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:fa:56:a9:70:07:73:b3:db:b5:3e:65:9f:58:d1:00:88:19: 94:5b:e9:1b:9d:d4:9e:d6:f0:1c:eb:7a:a6:41:68:2f:01:f5: 5c:f3:67:27:6d:f1:df:d9:90:81:f8:92:07:b7:fd:a6:90:fb: 25:5e:15:24:98:a0:8b:84:f6:bb:a4:3b:ff:e7:96:c8:29:34: bd:f7:e7:85:47:a1:1a:52:39:11:3e:8f:12:92:22:9b:71:b6: 10:c3:6d:dd:0e:fa:66:da:bd:49:c2:6d:5d:97:d5:46:1f:b3: a1:d2:b9:a2:48:e8:a3:05:dd:fc:dd:fc:36:b4:8f:32:a4:f0: eb:a7:3f:fe:61:c6:40:52:86:4b:3e:83:b9:18:12:8e:5b:31: 3b:26:8d:3c:ad:5f:c6:57:df:2e:71:b3:4a:a1:c4:03:8b:3a: 7b:21:e3:9e:98:bf:9c:e1:d2:fe:cd:d7:cf:bb:c3:e2:e4:81: 3d:ed:ad:df:d6:21:d7:08:11:28:49:97:81:31:ef:3a:c4:73: a4:a5:52:4e:43:bf:e1:e2:13:2f:bf:7c:69:1d:92:88:fd:4c: 6b:17:4f:49:f0:7d:f2:62:2d:99:77:db:28:1a:c8:a2:6b:a7: 82:1f:db:a3:9e:12:a7:c2:5e:a5:8b:fd:9f:72:c6:da:68:5f: c6:08:a9:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GciyIuLrNYCpsYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZmQ5NDk3ZjEtOTQ0Yy00NjQyLThiZWMtMjJjZDg2YWEwZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVhkUJIv0XuBTHaXR/vXIdWCoUxZvbq8jyeZ dKbVmpvsRncQZHfYxXkX3GJyp2Dl50GtX7Fa9OM4aAFUwHhWJEBZpAk8U6o3eC5i kceTQ4KPEYO6Zcpv5pdp1v07oHbljlxAj+FBHCPtoiUgdKwaEFIOq8XdmSF8QHs7 oBVRXB4M/yBSKfnZzZ18PU7fUx+d/bRXXv9NAsQUlUzapW0FH5Iwlv38ej+f15qD OUM/PgyrUDpClpibb537azLoz4DB6ettMcihzaU+U080NK3HAcA/esETMSVoCJkX 0QWO5Su/7/Qg1WtopB7kyJn6SrHNjmL+C+vTc+Yc4ybMQnCwiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9AkM3GHxGoTFAsr9D3IJJubJgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNDhjNmU4ZDEtZGVlNS0z ODk4LTkxZTMtMTRlNGRjNjcwNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP6VqlwB3Oz27U+ZZ9Y0QCIGZRb6Rud1J7W8BzreqZBaC8B9VzzZydt 8d/ZkIH4kge3/aaQ+yVeFSSYoIuE9rukO//nlsgpNL3354VHoRpSORE+jxKSIptx thDDbd0O+mbavUnCbV2X1UYfs6HSuaJI6KMF3fzd/Da0jzKk8OunP/5hxkBShks+ g7kYEo5bMTsmjTytX8ZX3y5xs0qhxAOLOnsh456Yv5zh0v7N18+7w+LkgT3trd/W IdcIEShJl4Ex7zrEc6SlUk5Dv+HiEy+/fGkdkoj9TGsXT0nwffJiLZl32ygayKJr p4If26OeEqfCXqWL/Z9yxtpoX8YIqTs= -----END CERTIFICATE-----Generated at Thu Sep 24 22:56:15 2026 by rpki-client