$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/48c6e8d1-dee5-3898-91e3-14e4dc670580.roa File: 48c6e8d1-dee5-3898-91e3-14e4dc670580.roa (raw, json) Hash identifier: mEI2R7IM3/lRH8M/+uXz/2ljcoAr9QKrEMGe3Fy/2dQ= Subject key identifier: 22:0F:03:AC:98:A1:C2:FE:36:07:35:F8:61:B0:EC:32:67:F1:67:78 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584D83CA98E5019F933731543DBC Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/48c6e8d1-dee5-3898-91e3-14e4dc670580.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 2615 IP address blocks: 147.1.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:98:e5:01:9f:93:37:31:54:3d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=fde50097-0229-4448-bca1-ccad2c39eeff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:07:66:08:6e:6b:ca:42:b6:17:3e:38:74:fc: bb:b1:fd:fb:a7:30:f2:ac:67:11:46:3e:80:b2:02: 7a:79:4b:bf:28:60:96:7f:18:da:47:1d:d8:ab:02: d5:fe:70:0f:5b:42:8e:49:ab:a5:30:de:7c:5d:42: 38:39:25:a4:15:87:99:e6:64:04:1f:61:4c:a7:a6: 5a:c0:9d:6c:89:f3:f1:c8:f8:92:e9:46:e8:dd:4d: 15:09:0b:c1:a7:2a:76:6c:1a:4c:2b:c0:ee:1f:c0: a0:c9:52:42:ec:23:a0:04:56:16:c3:27:3e:09:5c: 65:97:75:9b:0d:ab:7e:45:7a:f8:69:77:8a:88:11: 85:5a:4e:ee:4f:8c:2b:2d:80:70:5a:48:f5:d7:09: c9:f2:53:e8:78:0a:09:8c:b7:89:37:80:ab:14:b6: 06:eb:3a:51:40:71:d9:df:c2:2a:f5:77:aa:3e:82: 14:9e:d2:f8:f3:d0:8a:5e:50:d9:02:4c:e2:d2:96: 2a:3f:fa:eb:c6:a6:a8:b4:ac:ef:2a:05:60:93:04: cb:f2:b8:1a:6f:d5:6b:f7:e5:8b:e7:f8:e3:40:fa: f6:c6:d9:e0:5e:b4:44:4b:46:38:5a:59:1a:86:5e: 75:a8:59:36:99:8d:cc:cf:55:f5:90:d6:2a:78:84: de:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0F:03:AC:98:A1:C2:FE:36:07:35:F8:61:B0:EC:32:67:F1:67:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/48c6e8d1-dee5-3898-91e3-14e4dc670580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:22:84:60:eb:e0:31:60:7f:3b:76:d4:b9:44:7a:81:1d:03: 57:3a:9e:7a:c0:d5:0d:5b:1d:c1:9b:fb:c8:11:24:9c:c1:36: b5:63:9a:6b:51:d8:df:0b:71:0d:86:f2:99:e2:f1:4f:04:28: 27:a1:ad:aa:74:08:d4:9b:52:0c:76:3d:cf:1e:b7:3d:17:61: 02:81:ae:9b:b9:57:23:d7:8d:b3:f0:53:1f:5e:35:2e:71:61: 28:01:db:ed:9a:9b:7b:e1:15:8d:a2:7c:94:3a:26:49:ea:a3: 2f:f0:33:f8:0c:5d:68:3f:7e:08:d8:8f:a2:25:ed:68:ef:94: d9:05:a7:5f:13:7b:d2:35:96:a6:1d:71:1b:bf:ae:d1:cc:67: d0:e2:bd:a2:11:70:b9:d9:97:1b:7a:f3:ce:12:29:4d:9b:86: 0a:4a:24:9b:eb:ae:54:5c:8c:ed:ee:16:64:24:bc:72:e8:76: 74:7b:4b:0a:a3:78:78:b9:0d:25:a2:75:d4:2e:76:19:2c:64: 0b:b5:cf:fb:0f:b3:d1:2a:ef:eb:e2:93:c8:f9:a1:26:cd:ac: ea:df:6e:e0:47:98:d9:79:bc:9f:d0:0b:1f:63:a2:90:da:5d: e9:e0:25:9e:7d:86:c0:a5:89:ee:3e:2c:94:f0:7e:84:6e:e5: 25:9d:2c:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DypjlAZ+TNzFUPbwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk ZmRlNTAwOTctMDIyOS00NDQ4LWJjYTEtY2NhZDJjMzllZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQdmCG5rykK2Fz44dPy7sf37pzDyrGcRRj6A sgJ6eUu/KGCWfxjaRx3YqwLV/nAPW0KOSaulMN58XUI4OSWkFYeZ5mQEH2FMp6Za wJ1sifPxyPiS6Ubo3U0VCQvBpyp2bBpMK8DuH8CgyVJC7COgBFYWwyc+CVxll3Wb Dat+RXr4aXeKiBGFWk7uT4wrLYBwWkj11wnJ8lPoeAoJjLeJN4CrFLYG6zpRQHHZ 38Iq9XeqPoIUntL489CKXlDZAkzi0pYqP/rrxqaotKzvKgVgkwTL8rgab9Vr9+WL 5/jjQPr2xtngXrRES0Y4Wlkahl51qFk2mY3Mz1X1kNYqeITe8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIPA6yYocL+Ngc1+GGw7DJn8Wd4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNDhjNmU4ZDEtZGVlNS0z ODk4LTkxZTMtMTRlNGRjNjcwNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUihGDr4DFgfzt21LlEeoEdA1c6nnrA1Q1bHcGb+8gRJJzBNrVjmmtR 2N8LcQ2G8pni8U8EKCehrap0CNSbUgx2Pc8etz0XYQKBrpu5VyPXjbPwUx9eNS5x YSgB2+2am3vhFY2ifJQ6Jknqoy/wM/gMXWg/fgjYj6Il7WjvlNkFp18Te9I1lqYd cRu/rtHMZ9DivaIRcLnZlxt6884SKU2bhgpKJJvrrlRcjO3uFmQkvHLodnR7Swqj eHi5DSWiddQudhksZAu1z/sPs9Eq7+vik8j5oSbNrOrfbuBHmNl5vJ/QCx9jopDa XengJZ59hsClie4+LJTwfoRu5SWdLPA= -----END CERTIFICATE-----Generated at Sun Apr 19 14:06:29 2026 by rpki-client