$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/790e5dac-5e1e-3b20-b382-a2541e1b07e7.roa File: 790e5dac-5e1e-3b20-b382-a2541e1b07e7.roa (raw, json) Hash identifier: Dsu8IZcBX3tCOv6TghzEvCOzCnUpP9AIIECkkj3HQVo= Subject key identifier: 9D:83:38:A5:E8:CB:3A:AA:41:97:18:53:87:D5:C8:BF:91:2B:18:E4 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584D83CA98932C7B0CD080A9D980 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/790e5dac-5e1e-3b20-b382-a2541e1b07e7.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 2615 IP address blocks: 147.1.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:98:93:2c:7b:0c:d0:80:a9:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=6ec378f5-1828-446a-8458-f094c33fde6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1d:41:d0:f2:ea:fe:e2:88:5e:58:b3:51:57: 72:d6:dc:16:37:b4:34:a6:1e:c1:97:ad:51:d2:25: c1:b1:43:6f:35:bc:6f:c8:6c:1e:35:a3:89:e3:bd: be:60:11:d2:b3:6e:f3:ec:3a:be:e3:62:04:66:76: c6:d7:1a:85:5a:04:36:1a:e4:e1:c6:9a:1e:90:99: 70:36:7c:cc:1c:9c:f7:9e:97:68:28:16:21:33:29: 11:b1:1a:20:7c:95:9f:bc:df:02:58:f5:c7:d1:eb: 9b:14:f8:78:2f:24:4f:e4:04:77:fc:2f:0a:05:2e: 60:b4:31:20:b2:09:e0:e9:59:fd:75:51:ea:85:aa: 98:00:f1:57:7e:75:b8:29:a9:12:7c:7f:52:4d:7f: 1a:f9:da:17:ff:2c:84:75:90:dc:7b:31:f9:43:00: 2a:45:34:d9:87:89:b5:3e:b0:be:35:8e:5e:fc:bf: 4a:0c:fc:8e:db:d2:c8:0f:b7:2f:51:82:4f:13:11: d3:5e:e5:bc:f9:10:fe:9f:c6:2e:54:6b:66:b4:6a: 95:0c:8a:59:c2:e3:95:4c:b5:6b:b6:10:f0:11:48: 5e:61:0e:13:37:56:19:9e:9a:c2:dd:15:80:19:b4: 35:5d:25:38:7a:1c:14:73:8e:28:80:c0:1a:af:04: 74:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:83:38:A5:E8:CB:3A:AA:41:97:18:53:87:D5:C8:BF:91:2B:18:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/790e5dac-5e1e-3b20-b382-a2541e1b07e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:91:54:a9:56:38:33:8f:a8:a1:1c:33:78:f9:fc:9c:a1:4a: de:5b:c7:04:cf:7b:06:7b:be:c8:3e:48:d7:07:78:50:38:bf: 30:57:6f:75:4f:60:5e:ef:ff:13:0a:1c:92:ae:c1:40:26:a9: 4f:6f:d8:70:30:d5:63:30:4b:06:05:12:c4:05:21:d2:1b:93: 2c:a8:8f:35:49:9b:20:8a:97:bb:c0:f6:5c:2d:90:00:7a:ec: 21:51:ef:0d:d3:32:7e:12:6d:62:1d:7f:d3:d2:ca:12:8d:44: d7:40:f1:aa:6c:11:1e:4c:f4:31:98:46:18:b7:f6:ca:99:df: 6f:be:30:50:22:80:f5:63:1a:6a:ee:f6:80:3f:92:19:62:b0: ff:b4:3e:24:06:28:59:73:73:66:44:ff:7d:29:e3:90:39:d7: 00:09:5f:fd:45:c6:c7:2b:64:69:c2:59:33:7e:64:0d:c3:1a: c0:d9:7a:01:a6:f4:03:05:d6:47:55:3b:09:39:f5:3f:b4:af: 7c:bc:f6:f2:f1:28:29:f5:6c:10:25:11:dc:a4:e2:94:ae:4a: e2:18:0f:50:d7:68:71:78:4e:bd:20:b0:23:b2:41:06:b3:1d: ee:f0:9b:e4:92:89:33:39:1e:62:b5:e4:a6:18:bc:8e:d9:15: 9f:d4:70:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DypiTLHsM0ICp2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk NmVjMzc4ZjUtMTgyOC00NDZhLTg0NTgtZjA5NGMzM2ZkZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx1B0PLq/uKIXlizUVdy1twWN7Q0ph7Bl61R 0iXBsUNvNbxvyGweNaOJ472+YBHSs27z7Dq+42IEZnbG1xqFWgQ2GuThxpoekJlw NnzMHJz3npdoKBYhMykRsRogfJWfvN8CWPXH0eubFPh4LyRP5AR3/C8KBS5gtDEg sgng6Vn9dVHqhaqYAPFXfnW4KakSfH9STX8a+doX/yyEdZDcezH5QwAqRTTZh4m1 PrC+NY5e/L9KDPyO29LID7cvUYJPExHTXuW8+RD+n8YuVGtmtGqVDIpZwuOVTLVr thDwEUheYQ4TN1YZnprC3RWAGbQ1XSU4ehwUc44ogMAarwR0rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2DOKXoyzqqQZcYU4fVyL+RKxjkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvNzkwZTVkYWMtNWUxZS0z YjIwLWIzODItYTI1NDFlMWIwN2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGRVKlWODOPqKEcM3j5/JyhSt5bxwTPewZ7vsg+SNcHeFA4vzBXb3VP YF7v/xMKHJKuwUAmqU9v2HAw1WMwSwYFEsQFIdIbkyyojzVJmyCKl7vA9lwtkAB6 7CFR7w3TMn4SbWIdf9PSyhKNRNdA8apsER5M9DGYRhi39sqZ32++MFAigPVjGmru 9oA/khlisP+0PiQGKFlzc2ZE/30p45A51wAJX/1FxscrZGnCWTN+ZA3DGsDZegGm 9AMF1kdVOwk59T+0r3y89vLxKCn1bBAlEdyk4pSuSuIYD1DXaHF4Tr0gsCOyQQaz He7wm+SSiTM5HmK15KYYvI7ZFZ/UcK4= -----END CERTIFICATE-----Generated at Sun Apr 19 16:45:57 2026 by rpki-client