$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/6b16f94d-5d0c-32bf-8103-7b6ea3e50af0.roa File: 6b16f94d-5d0c-32bf-8103-7b6ea3e50af0.roa (raw, json) Hash identifier: 3FJc1xdp/wcTS1hRxh/HvJquy07ItNZjk2GgcOm274o= Subject key identifier: 13:AF:91:0E:0F:03:11:75:41:78:69:1C:B6:B7:BF:51:74:48:48:30 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584CA32CFAEA54DCEFA848D46E00 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/6b16f94d-5d0c-32bf-8103-7b6ea3e50af0.roa Signing time: Sun 25 Jan 2026 02:00:31 +0000 ROA not before: Sun 25 Jan 2026 02:00:31 +0000 ROA not after: Sat 25 Apr 2026 01:00:31 +0000 asID: 2615 IP address blocks: 147.1.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a3:2c:fa:ea:54:dc:ef:a8:48:d4:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jan 25 02:00:31 2026 GMT Not After : Apr 25 01:00:31 2026 GMT Subject: CN=aefe39a9-f4fc-4385-acff-44f3f70816de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:84:cc:30:7b:b1:1e:ee:52:e2:80:87:9b:ff: 50:e5:a1:c2:b3:e7:7f:9a:60:c6:ca:96:52:4c:ac: f5:d5:57:72:00:41:c9:67:b5:dd:33:09:0c:4c:0e: 93:03:ff:01:78:ae:98:11:87:3f:6c:ef:4f:fd:6a: cd:8e:ea:a7:6c:6d:17:0a:2c:dc:8f:51:2f:06:79: 3c:bb:c2:c3:55:76:c3:ae:a5:64:02:7c:bc:20:59: af:29:7b:23:d0:6d:75:ef:44:e0:61:d5:72:51:1d: e8:cc:31:ca:bd:84:9c:97:4c:ee:1d:6e:29:0d:91: 2d:d1:15:a4:10:23:df:9e:8d:26:f3:97:64:d0:cf: 36:da:00:ab:ab:e1:25:8f:d2:30:13:d4:87:91:f6: 71:c4:2f:e9:b3:17:c3:7a:56:85:3c:a2:4c:aa:dd: 89:a3:81:da:85:94:e1:c1:74:18:6a:f4:3a:01:c0: 36:86:ed:b0:b2:12:4d:88:2b:a7:94:8a:b3:40:f6: 56:9c:45:ac:13:ce:9c:d1:80:71:70:41:c6:11:78: 9c:cd:48:95:87:c8:f1:27:43:d2:3d:15:5d:16:df: 44:f7:81:cd:cb:4e:c7:bc:61:97:eb:e7:25:1e:bb: ff:8f:07:aa:df:4a:9d:4e:74:bd:b4:84:5f:88:69: d1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AF:91:0E:0F:03:11:75:41:78:69:1C:B6:B7:BF:51:74:48:48:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/6b16f94d-5d0c-32bf-8103-7b6ea3e50af0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:de:1b:63:eb:e9:aa:4b:ce:01:43:c8:70:ec:de:d3:5e:e1: 15:70:9a:c5:70:3d:13:4c:95:31:25:f4:a4:66:f2:b9:9b:4d: 99:09:9e:18:d5:12:85:70:a0:ea:63:6d:03:b6:30:15:ff:ef: ad:88:37:96:e2:79:d4:0a:3a:1e:04:c7:ba:b4:e2:2d:97:99: cd:47:44:c0:50:60:c7:e0:fd:1c:da:12:83:9c:9d:cd:78:84: c9:31:22:1c:13:84:ed:6d:de:e7:70:ab:fd:90:b6:08:00:8b: 75:38:ca:62:4a:8a:26:d1:f5:99:7d:d9:7d:aa:71:9a:f0:a4: 77:96:08:9f:09:92:88:ce:92:1e:fc:ab:26:d4:ea:05:ce:1b: de:07:91:80:5d:0c:66:27:e9:92:d7:41:63:80:92:df:7c:9c: 65:8f:d2:bd:2d:06:df:f4:d7:d3:e2:ba:db:4a:29:9a:02:70: 3b:e3:b1:1e:c8:a7:2b:5c:ab:36:6a:91:23:16:b7:9c:97:d4: 8f:45:85:e9:59:4c:8a:f3:48:db:a7:40:3f:f1:6e:2d:1d:6a: db:02:4d:7e:69:fb:52:d1:7d:08:f3:64:19:6a:fa:24:db:15: 5a:06:41:58:0d:59:ef:cc:20:4c:19:ce:a0:a9:c0:09:34:68: e9:c5:ac:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyjLPrqVNzvqEjUbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDEyNTAyMDAzMVoXDTI2MDQyNTAxMDAzMVowLzEtMCsGA1UEAxMk YWVmZTM5YTktZjRmYy00Mzg1LWFjZmYtNDRmM2Y3MDgxNmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4TMMHuxHu5S4oCHm/9Q5aHCs+d/mmDGypZS TKz11VdyAEHJZ7XdMwkMTA6TA/8BeK6YEYc/bO9P/WrNjuqnbG0XCizcj1EvBnk8 u8LDVXbDrqVkAny8IFmvKXsj0G1170TgYdVyUR3ozDHKvYScl0zuHW4pDZEt0RWk ECPfno0m85dk0M822gCrq+Elj9IwE9SHkfZxxC/psxfDelaFPKJMqt2Jo4HahZTh wXQYavQ6AcA2hu2wshJNiCunlIqzQPZWnEWsE86c0YBxcEHGEXiczUiVh8jxJ0PS PRVdFt9E94HNy07HvGGX6+clHrv/jweq30qdTnS9tIRfiGnRNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOvkQ4PAxF1QXhpHLa3v1F0SEgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNmIxNmY5NGQtNWQwYy0z MmJmLTgxMDMtN2I2ZWEzZTUwYWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwHsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDeG2Pr6apLzgFDyHDs3tNe4RVwmsVwPRNMlTEl9KRm8rmbTZkJnhjV EoVwoOpjbQO2MBX/762IN5biedQKOh4Ex7q04i2Xmc1HRMBQYMfg/RzaEoOcnc14 hMkxIhwThO1t3udwq/2QtggAi3U4ymJKiibR9Zl92X2qcZrwpHeWCJ8JkojOkh78 qybU6gXOG94HkYBdDGYn6ZLXQWOAkt98nGWP0r0tBt/019PiuttKKZoCcDvjsR7I pytcqzZqkSMWt5yX1I9FhelZTIrzSNunQD/xbi0datsCTX5p+1LRfQjzZBlq+iTb FVoGQVgNWe/MIEwZzqCpwAk0aOnFrGE= -----END CERTIFICATE-----Generated at Tue Mar 3 00:40:16 2026 by rpki-client