$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/858c308a-431a-38d2-bff9-7bcffc77a16b.roa File: 858c308a-431a-38d2-bff9-7bcffc77a16b.roa (raw, json) Hash identifier: DKVyDkPy7CfYAFwI0okRwMoYCQow0fLpQtd5VvT5CVA= Subject key identifier: 27:69:C5:8E:B4:D6:11:10:B0:2F:87:2A:14:AB:66:17:B6:B8:4E:1A Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584E0700915A03E908DCEEA5BB40 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/858c308a-431a-38d2-bff9-7bcffc77a16b.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 2615 IP address blocks: 147.1.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:91:5a:03:e9:08:dc:ee:a5:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=48365434-0386-484b-9464-6d43aeed8d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:08:9a:8c:aa:cf:f6:0e:40:a9:dd:d2:e7:ac: a6:82:d2:fa:6a:e5:fa:19:4d:09:d3:98:7d:c5:a1: a9:79:29:16:c4:dc:d0:18:82:a6:65:d8:4a:e2:1c: bc:5c:c5:1a:94:31:59:9e:05:c7:ae:67:d8:95:5b: 33:7a:f7:9e:79:37:c7:7c:e2:77:6f:74:a2:c0:7b: 74:ed:e8:3e:23:24:52:35:ad:01:94:4c:de:6f:74: ea:9a:3a:35:16:f3:9e:3a:7c:2c:75:2c:d4:c6:2e: 46:08:42:bc:1e:1f:6b:79:8f:c9:00:9d:c2:19:07: e4:4d:57:07:5a:12:62:fa:84:91:a1:ea:78:26:53: 81:ad:6f:f8:36:bd:42:af:f3:03:02:79:83:a2:5b: f5:82:f6:77:cd:e2:aa:28:24:ce:c9:3b:ca:b7:d3: b0:b3:b4:b1:10:85:1f:2b:05:bc:46:0e:7b:cf:d5: 93:bb:97:53:27:09:a5:20:de:af:2e:e9:20:65:d7: 2f:49:e3:49:aa:f5:cb:eb:42:f3:1e:4b:1c:85:1b: c8:27:84:6f:fe:8a:56:cf:42:cb:8b:66:84:91:c7: 10:87:ef:68:92:78:af:ff:c0:1b:89:83:ab:a3:61: 77:07:39:04:50:29:d8:fd:63:de:05:e2:9e:cf:dc: 77:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:69:C5:8E:B4:D6:11:10:B0:2F:87:2A:14:AB:66:17:B6:B8:4E:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/858c308a-431a-38d2-bff9-7bcffc77a16b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:19:d9:c8:27:78:94:40:6e:0d:16:7d:4c:ad:22:1c:5a:ce: 2d:f1:47:41:49:a1:94:5b:3b:1a:b0:65:cc:fd:03:cd:97:81: 36:00:17:af:35:19:e1:ca:1a:b3:87:36:45:52:e9:19:3b:a7: 37:d6:0d:cb:0f:c9:d9:01:79:79:33:be:58:6c:df:c4:48:07: b1:10:95:1e:d3:58:b6:e4:f9:85:ba:a7:a1:96:fe:9a:5b:0f: 10:63:9d:da:af:51:ea:93:37:a6:23:5f:ac:f4:2f:28:f2:73: 15:ea:c6:f7:08:1f:a9:fa:96:1f:1f:d9:76:85:a1:8e:d6:b8: 7d:8a:f2:37:d1:78:f7:96:85:e2:d5:0d:d2:76:61:43:93:3f: 45:00:85:38:8f:d0:a2:c3:15:fa:17:dd:19:72:8f:b6:c2:f0: b4:1f:84:1c:84:a4:72:c9:be:30:4e:01:9b:00:5e:b8:95:ac: 03:9c:cd:30:9d:9b:68:95:e3:7b:c4:73:72:04:e4:fa:ef:57: bf:0d:8b:9e:5b:c6:54:ea:36:e6:3d:a0:27:50:55:f3:c2:55: c6:36:ad:38:f2:b8:f8:5d:c8:eb:7b:4f:46:04:84:16:99:24: 91:91:f1:39:da:76:6b:0e:89:1f:09:d2:6f:9a:87:f8:a7:92: 40:33:05:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAJFaA+kI3O6lu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk NDgzNjU0MzQtMDM4Ni00ODRiLTk0NjQtNmQ0M2FlZWQ4ZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgiajKrP9g5Aqd3S56ymgtL6auX6GU0J05h9 xaGpeSkWxNzQGIKmZdhK4hy8XMUalDFZngXHrmfYlVszeveeeTfHfOJ3b3SiwHt0 7eg+IyRSNa0BlEzeb3Tqmjo1FvOeOnwsdSzUxi5GCEK8Hh9reY/JAJ3CGQfkTVcH WhJi+oSRoep4JlOBrW/4Nr1Cr/MDAnmDolv1gvZ3zeKqKCTOyTvKt9Ows7SxEIUf KwW8Rg57z9WTu5dTJwmlIN6vLukgZdcvSeNJqvXL60LzHkschRvIJ4Rv/opWz0LL i2aEkccQh+9okniv/8AbiYOro2F3BzkEUCnY/WPeBeKez9x3+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdpxY601hEQsC+HKhSrZhe2uE4aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvODU4YzMwOGEtNDMxYS0z OGQyLWJmZjktN2JjZmZjNzdhMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0Z2cgneJRAbg0WfUytIhxazi3xR0FJoZRbOxqwZcz9A82XgTYAF681 GeHKGrOHNkVS6Rk7pzfWDcsPydkBeXkzvlhs38RIB7EQlR7TWLbk+YW6p6GW/ppb DxBjndqvUeqTN6YjX6z0LyjycxXqxvcIH6n6lh8f2XaFoY7WuH2K8jfRePeWheLV DdJ2YUOTP0UAhTiP0KLDFfoX3Rlyj7bC8LQfhByEpHLJvjBOAZsAXriVrAOczTCd m2iV43vEc3IE5PrvV78Ni55bxlTqNuY9oCdQVfPCVcY2rTjyuPhdyOt7T0YEhBaZ JJGR8TnadmsOiR8J0m+ah/inkkAzBZU= -----END CERTIFICATE-----Generated at Sat Jun 13 15:48:32 2026 by rpki-client