$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/48c6e8d1-dee5-3898-91e3-14e4dc670580.roa File: 48c6e8d1-dee5-3898-91e3-14e4dc670580.roa (raw, json) Hash identifier: 7bLRBINHcSh957izagkwdVVpVPCJOe1KGeLgUGL5N1s= Subject key identifier: 39:CB:22:6A:65:AE:80:89:FF:4F:49:DB:B9:E1:3D:50:17:71:1A:BD Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584CA32CFA8AE47C4152004EF320 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/48c6e8d1-dee5-3898-91e3-14e4dc670580.roa Signing time: Sun 25 Jan 2026 02:00:31 +0000 ROA not before: Sun 25 Jan 2026 02:00:31 +0000 ROA not after: Sat 25 Apr 2026 01:00:31 +0000 asID: 2615 IP address blocks: 147.1.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a3:2c:fa:8a:e4:7c:41:52:00:4e:f3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jan 25 02:00:31 2026 GMT Not After : Apr 25 01:00:31 2026 GMT Subject: CN=25eb96fc-5a46-43a0-b33c-d55729ad21cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bb:8d:1b:74:e4:e3:01:e4:dc:b8:e0:9e:27: 63:90:f8:a8:f9:26:e0:df:44:3b:9f:ec:a1:83:62: 28:4f:da:51:b5:11:92:db:97:b1:70:58:1e:ae:df: f2:f4:ac:a8:a1:8d:a0:a1:e4:ae:ce:2a:c5:03:56: 56:0e:c3:98:51:f1:24:b1:17:40:3c:33:d0:0c:b6: ab:4f:4f:b2:9e:e0:26:6b:fd:18:b8:60:13:64:fc: 09:11:51:3f:4a:38:28:01:39:4f:e9:78:49:ac:c7: 49:a9:b5:a3:98:19:01:8d:69:cd:46:4a:7a:0a:a8: 32:ca:81:c1:68:4e:dc:10:c6:37:8f:4e:d5:e0:53: 40:fc:f9:f3:a2:cc:99:0a:a8:f6:1f:88:45:8f:b0: 69:ae:32:bf:2d:7f:db:cf:6a:4d:4b:fb:7c:a4:90: 48:0a:3c:4e:a0:c1:1a:33:8e:21:bc:31:38:13:e6: 28:9e:43:71:57:9d:51:ea:1e:7e:06:69:91:c2:27: 6e:87:d2:6e:90:ca:ac:4c:b8:5c:b4:38:2b:6d:5a: 7e:95:01:e8:65:55:1e:fd:8e:0f:3b:7d:14:ae:05: 98:e8:dd:da:d1:99:45:07:45:37:a9:ca:cf:e8:df: 0f:c4:c9:95:50:33:1b:ee:64:f9:89:9e:c2:a4:40: 5a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CB:22:6A:65:AE:80:89:FF:4F:49:DB:B9:E1:3D:50:17:71:1A:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/48c6e8d1-dee5-3898-91e3-14e4dc670580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:93:12:15:1b:d2:21:a4:43:d8:6e:91:1b:5a:bd:c1:92:6f: 36:49:f3:b5:b4:ee:03:8c:ba:a0:0d:80:f7:8f:3e:c3:22:e5: bf:52:39:ce:d6:57:46:d2:de:d3:27:22:f0:83:08:95:02:d6: c0:0b:9c:08:0c:54:13:32:be:51:7c:ad:f5:5e:65:c1:f7:29: a2:17:5b:3c:90:22:6f:8a:a5:19:f1:cd:06:0c:97:28:9e:2b: e1:42:32:57:77:08:2b:3a:49:b8:8b:43:af:23:ea:cc:5d:e2: 20:4d:63:20:56:5f:54:c0:ce:b0:cf:71:bf:e1:02:51:f3:d1: 8b:be:65:36:b0:a3:d4:7f:51:e9:ab:84:7b:66:74:23:87:3f: 34:31:a0:0f:d0:42:c1:c5:29:00:f0:1d:41:31:13:74:d0:f2: 17:66:e4:a5:46:e2:51:e0:ef:41:0d:fd:57:80:82:c9:e3:d5: 6a:d1:d6:90:6a:f6:df:2a:3c:99:1f:95:48:27:c1:9a:d8:c1: 5a:0d:e0:2a:be:cf:29:3c:41:b1:b9:bb:c0:89:68:eb:f3:b8: 7a:63:b5:34:8d:f1:39:a1:cf:03:42:8b:b3:15:72:d3:bf:b9: b3:cc:13:a1:df:35:a3:fd:0d:18:6c:58:93:ff:a6:b8:e4:ca: 17:fb:c1:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyjLPqK5HxBUgBO8yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDEyNTAyMDAzMVoXDTI2MDQyNTAxMDAzMVowLzEtMCsGA1UEAxMk MjVlYjk2ZmMtNWE0Ni00M2EwLWIzM2MtZDU1NzI5YWQyMWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybuNG3Tk4wHk3LjgnidjkPio+Sbg30Q7n+yh g2IoT9pRtRGS25excFgert/y9KyooY2goeSuzirFA1ZWDsOYUfEksRdAPDPQDLar T0+ynuAma/0YuGATZPwJEVE/SjgoATlP6XhJrMdJqbWjmBkBjWnNRkp6CqgyyoHB aE7cEMY3j07V4FNA/PnzosyZCqj2H4hFj7BprjK/LX/bz2pNS/t8pJBICjxOoMEa M44hvDE4E+YonkNxV51R6h5+BmmRwiduh9JukMqsTLhctDgrbVp+lQHoZVUe/Y4P O30UrgWY6N3a0ZlFB0U3qcrP6N8PxMmVUDMb7mT5iZ7CpEBaFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnLImplroCJ/09J27nhPVAXcRq9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNDhjNmU4ZDEtZGVlNS0z ODk4LTkxZTMtMTRlNGRjNjcwNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+TEhUb0iGkQ9hukRtavcGSbzZJ87W07gOMuqANgPePPsMi5b9SOc7W V0bS3tMnIvCDCJUC1sALnAgMVBMyvlF8rfVeZcH3KaIXWzyQIm+KpRnxzQYMlyie K+FCMld3CCs6SbiLQ68j6sxd4iBNYyBWX1TAzrDPcb/hAlHz0Yu+ZTawo9R/Uemr hHtmdCOHPzQxoA/QQsHFKQDwHUExE3TQ8hdm5KVG4lHg70EN/VeAgsnj1WrR1pBq 9t8qPJkflUgnwZrYwVoN4Cq+zyk8QbG5u8CJaOvzuHpjtTSN8TmhzwNCi7MVctO/ ubPME6HfNaP9DRhsWJP/prjkyhf7wf8= -----END CERTIFICATE-----Generated at Mon Mar 2 18:08:23 2026 by rpki-client