$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa File: 72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa (raw, json) Hash identifier: qK8TzREXOZqhnPkKwGyKIMHbhiEGhX41ShQ94jEvxIs= Subject key identifier: FB:AB:10:6C:E2:FB:C5:4D:84:6C:3C:8D:5C:AD:F7:B4:3C:F9:5C:52 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584DFA707CF07F6524954CCA3980 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 2615 IP address blocks: 147.1.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:7c:f0:7f:65:24:95:4c:ca:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=6594502c-448d-4a23-aa10-3b447935369b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:11:7f:26:9e:b3:07:9f:4a:f8:02:44:54:b6: 3f:49:96:71:72:83:06:f1:40:7b:4c:41:f4:98:c2: 72:bd:66:24:26:ad:16:a6:a2:77:d8:ac:ed:1c:ec: 48:4d:51:33:66:52:33:88:2b:3f:e2:dd:e5:f4:17: 9e:93:8e:3d:16:41:27:46:bb:75:db:e7:9c:3c:83: 11:b1:dd:38:eb:00:2f:8a:96:92:2f:ba:f7:20:8e: 53:65:69:d7:ad:fa:f0:c2:9e:df:e1:45:f7:e3:5f: b1:29:cb:af:9c:93:e8:85:79:fe:70:d4:98:3c:80: 62:1c:4d:68:5d:21:5d:5d:c7:e0:fe:ba:06:0c:0b: c5:72:23:56:74:72:a9:a4:48:31:26:40:1d:07:48: 02:b4:3c:3a:8d:87:06:65:11:47:e3:4b:7a:94:c5: c1:b6:50:4b:74:e3:43:ef:cd:1c:ab:72:77:e3:e1: be:7d:e3:73:88:2c:e9:7f:ae:d9:fe:a4:fd:b8:6d: 93:b8:38:95:41:44:7f:ab:42:df:1a:ca:12:d6:50: 21:d9:50:10:b9:7a:d5:4f:fd:df:63:9b:d0:1f:6d: 77:13:8a:05:23:a1:86:88:99:f4:32:8a:65:73:96: c1:e0:d7:ab:e8:91:bd:2f:07:cc:ee:f3:3e:6d:bf: 32:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AB:10:6C:E2:FB:C5:4D:84:6C:3C:8D:5C:AD:F7:B4:3C:F9:5C:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/72b9f4f0-0f22-3baa-899a-87b5e37f1f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f8:79:03:11:5e:c9:63:4c:19:27:92:df:31:07:1d:4f:6f: 25:9e:d6:8a:d4:e5:95:de:97:06:3d:19:8d:fe:c5:b4:6c:c2: 10:3a:77:1a:7d:c6:b7:75:bc:e6:4e:ff:24:ef:75:4c:1c:0d: 82:ec:bd:73:1b:1a:61:92:fa:e1:b1:e7:9c:aa:14:f9:b8:be: 1a:f0:2e:01:b0:bf:aa:02:4f:0a:e2:8f:d2:6f:2e:92:76:1b: 6d:b0:74:09:1d:e5:37:43:18:89:52:e6:19:05:dd:24:e1:36: 8e:8a:98:44:23:d3:e5:18:5c:1c:7d:d6:4b:da:31:82:45:c6: 48:0a:36:4f:45:6b:55:b3:7d:de:06:94:98:eb:9c:46:ff:ee: 6e:2d:4f:60:d3:90:57:66:03:81:5f:59:62:36:a4:eb:3a:ce: 2a:86:e4:83:6d:fe:b2:09:7a:d1:3e:a8:ad:21:1c:48:21:6a: 2d:7f:78:80:8c:b5:b4:85:ba:05:31:34:81:1f:13:cd:84:c8: 31:6f:d1:4a:a1:43:53:59:2f:af:0e:ca:56:19:86:a3:b0:76: bc:89:88:8a:43:44:a4:a9:d4:8a:1d:bf:ef:6c:49:11:f6:b6: de:b0:ec:de:36:15:3a:52:28:ad:13:19:e4:4f:8e:c5:c1:7e: 8a:e9:16:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cHzwf2UklUzKOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk NjU5NDUwMmMtNDQ4ZC00YTIzLWFhMTAtM2I0NDc5MzUzNjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xF/Jp6zB59K+AJEVLY/SZZxcoMG8UB7TEH0 mMJyvWYkJq0WpqJ32KztHOxITVEzZlIziCs/4t3l9Beek449FkEnRrt12+ecPIMR sd046wAvipaSL7r3II5TZWnXrfrwwp7f4UX341+xKcuvnJPohXn+cNSYPIBiHE1o XSFdXcfg/roGDAvFciNWdHKppEgxJkAdB0gCtDw6jYcGZRFH40t6lMXBtlBLdOND 780cq3J34+G+feNziCzpf67Z/qT9uG2TuDiVQUR/q0LfGsoS1lAh2VAQuXrVT/3f Y5vQH213E4oFI6GGiJn0Moplc5bB4Ner6JG9LwfM7vM+bb8ykwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPurEGzi+8VNhGw8jVyt97Q8+VxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNzJiOWY0ZjAtMGYyMi0z YmFhLTg5OWEtODdiNWUzN2YxZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH4eQMRXsljTBknkt8xBx1PbyWe1orU5ZXelwY9GY3+xbRswhA6dxp9 xrd1vOZO/yTvdUwcDYLsvXMbGmGS+uGx55yqFPm4vhrwLgGwv6oCTwrij9JvLpJ2 G22wdAkd5TdDGIlS5hkF3SThNo6KmEQj0+UYXBx91kvaMYJFxkgKNk9Fa1Wzfd4G lJjrnEb/7m4tT2DTkFdmA4FfWWI2pOs6ziqG5INt/rIJetE+qK0hHEghai1/eICM tbSFugUxNIEfE82EyDFv0UqhQ1NZL68OylYZhqOwdryJiIpDRKSp1Iodv+9sSRH2 tt6w7N42FTpSKK0TGeRPjsXBforpFmM= -----END CERTIFICATE-----Generated at Sat Jun 13 15:49:33 2026 by rpki-client