$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/790e5dac-5e1e-3b20-b382-a2541e1b07e7.roa File: 790e5dac-5e1e-3b20-b382-a2541e1b07e7.roa (raw, json) Hash identifier: Ht1Wc7qSxYCra3uLFLjW0GQPHP8A1uafauGxjdBI4J4= Subject key identifier: 06:10:47:87:56:C8:9A:36:E8:4C:75:F5:EF:07:A8:00:45:84:78:6C Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584F06722C3BB2E3527AF4CC8EA4 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/790e5dac-5e1e-3b20-b382-a2541e1b07e7.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 2615 IP address blocks: 147.1.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:2c:3b:b2:e3:52:7a:f4:cc:8e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=39b743ca-8576-492f-8507-da6daa932581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ac:a2:e3:bc:7b:62:58:26:8a:8a:5a:f5:1c: ab:ac:b2:5a:50:51:5b:54:82:55:bf:c6:e3:b7:7e: b4:10:66:41:2b:32:02:a5:58:99:48:f2:4e:11:3d: f0:b9:80:2b:1d:9d:cd:ce:f4:cd:88:85:f2:00:57: 16:3d:5b:9c:7c:87:86:1d:c5:a4:67:e4:a5:82:34: e5:80:5f:e9:9a:b6:a6:0a:c3:e1:59:f1:3f:96:b3: c7:d6:94:10:62:a9:b6:5e:cd:c0:72:60:ab:01:34: a2:16:a8:fb:7c:57:67:3a:fc:39:03:0b:69:e5:8a: 3c:7d:f7:24:f9:5f:e2:89:77:ec:3f:ff:97:27:4c: 82:45:48:a3:99:e1:dc:e3:f7:d0:85:07:17:3a:ff: ec:f6:11:ea:97:56:98:51:1a:4a:79:4b:23:b7:b8: 9a:3b:a0:95:cd:3a:60:32:ef:d8:b8:5b:65:b5:00: e6:b1:f6:1e:1e:9b:e8:f5:75:9d:7e:8f:c6:48:58: b0:1c:ce:bb:8f:98:47:6b:de:88:dc:00:b4:f2:b7: 18:ff:cf:1b:01:5b:3a:20:ce:6f:bb:3c:f8:68:97: ff:3f:66:eb:07:6d:d6:b5:20:bc:d7:64:51:18:a6: cb:81:4c:f5:14:c7:d3:d2:7d:92:9d:75:0f:a5:99: 46:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:10:47:87:56:C8:9A:36:E8:4C:75:F5:EF:07:A8:00:45:84:78:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/790e5dac-5e1e-3b20-b382-a2541e1b07e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6a:e8:4b:97:2e:d6:15:fd:54:ea:bb:ea:27:4a:08:60:e6: be:a5:3e:c7:63:59:d6:91:f2:c9:a0:56:40:c8:32:d7:1e:f4: 8f:66:d4:ea:43:cd:3f:a6:35:17:e0:ea:09:e9:52:10:db:d7: a1:64:ff:d1:85:15:c1:57:b3:0f:ea:98:a0:06:44:20:0d:65: 28:6b:ac:32:fa:aa:88:a9:ee:e2:ff:46:b3:13:b9:d1:c4:9e: 5c:55:6b:2a:78:94:83:1f:9c:7e:25:41:19:e8:66:bf:63:46: fc:5e:11:b8:e1:9f:c4:6b:83:7a:67:56:60:a6:5b:fb:93:11: 89:2b:7a:23:34:60:19:a4:6c:1f:56:c6:6a:1b:94:71:89:bc: 21:29:c6:86:9f:6c:ef:d6:ae:d9:db:a8:4a:18:65:3a:e5:2e: 49:08:ff:23:d9:ae:2c:35:99:33:a0:d0:50:db:9f:77:1a:c3: af:d5:00:bb:fb:e8:18:0f:30:4e:ea:ee:a1:4d:11:5e:58:c7: d5:53:82:09:82:3b:dd:5b:4c:44:7a:e3:a3:ff:ca:a6:17:0f: 77:14:c1:27:29:40:de:6f:d5:03:13:fe:90:ef:41:50:50:70: 5b:ae:b6:12:db:66:df:20:60:0e:83:2e:32:ed:6d:a3:1d:3f: 75:96:ba:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Gciw7suNSevTMjqQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MzliNzQzY2EtODU3Ni00OTJmLTg1MDctZGE2ZGFhOTMyNTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6yi47x7Ylgmiopa9RyrrLJaUFFbVIJVv8bj t360EGZBKzICpViZSPJOET3wuYArHZ3NzvTNiIXyAFcWPVucfIeGHcWkZ+SlgjTl gF/pmramCsPhWfE/lrPH1pQQYqm2Xs3AcmCrATSiFqj7fFdnOvw5Awtp5Yo8ffck +V/iiXfsP/+XJ0yCRUijmeHc4/fQhQcXOv/s9hHql1aYURpKeUsjt7iaO6CVzTpg Mu/YuFtltQDmsfYeHpvo9XWdfo/GSFiwHM67j5hHa96I3AC08rcY/88bAVs6IM5v uzz4aJf/P2brB23WtSC812RRGKbLgUz1FMfT0n2SnXUPpZlGwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYQR4dWyJo26Ex19e8HqABFhHhsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNzkwZTVkYWMtNWUxZS0z YjIwLWIzODItYTI1NDFlMWIwN2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpq6EuXLtYV/VTqu+onSghg5r6lPsdjWdaR8smgVkDIMtce9I9m1OpD zT+mNRfg6gnpUhDb16Fk/9GFFcFXsw/qmKAGRCANZShrrDL6qoip7uL/RrMTudHE nlxVayp4lIMfnH4lQRnoZr9jRvxeEbjhn8Rrg3pnVmCmW/uTEYkreiM0YBmkbB9W xmoblHGJvCEpxoafbO/WrtnbqEoYZTrlLkkI/yPZriw1mTOg0FDbn3caw6/VALv7 6BgPME7q7qFNEV5Yx9VTggmCO91bTER646P/yqYXD3cUwScpQN5v1QMT/pDvQVBQ cFuuthLbZt8gYA6DLjLtbaMdP3WWupQ= -----END CERTIFICATE-----Generated at Tue Sep 22 20:56:23 2026 by rpki-client