$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8c35e725-cb7a-34fc-b8dd-3626efeea859.roa File: 8c35e725-cb7a-34fc-b8dd-3626efeea859.roa (raw, json) Hash identifier: aux91bgKO7pOm6PNFYMg9WYIDWvE3iUr+hAK7sHf1l4= Subject key identifier: F9:AA:58:77:C4:9E:6C:43:16:FC:34:73:B9:F0:1A:B8:9D:29:77:E7 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584F3A17CB14D131540265993820 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8c35e725-cb7a-34fc-b8dd-3626efeea859.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 2615 IP address blocks: 147.1.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:cb:14:d1:31:54:02:65:99:38:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=3db13341-bdd0-4043-b21a-c899832e6ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a3:4c:e1:40:7f:de:d5:c6:12:f0:87:28:81: 1e:7c:42:eb:a6:ba:8d:70:15:8d:7e:b9:2f:7b:bc: ef:bd:d7:b4:7c:e1:3c:ef:4d:be:a3:47:52:5e:4c: f7:92:a8:37:17:1f:9c:0d:d9:89:4b:42:55:58:ee: 71:fb:a5:89:28:44:79:eb:50:77:f9:d2:8b:80:20: ad:24:ba:8a:e3:0c:b3:4e:a8:4a:00:fd:73:44:66: de:61:cd:61:9f:e1:3c:78:5e:07:cb:6e:89:31:dd: 5c:f2:0d:99:f2:c5:ff:c1:69:7f:45:d3:27:6d:68: 65:69:08:82:f0:24:fc:c3:fc:96:b5:d9:94:b7:7e: 63:b8:a5:84:13:3b:ec:71:de:fb:03:80:73:34:63: 11:94:58:97:91:a6:0b:1e:4c:85:a9:78:1b:99:51: 7b:28:4b:a7:f5:ad:8b:9e:6d:3e:b1:ad:4f:77:1b: 4a:df:0f:4e:2c:74:e6:83:6c:be:b8:dd:c5:5c:79: 6a:64:d1:8c:98:17:5c:42:1f:37:fb:ed:8f:74:5a: f6:c7:bf:7e:61:36:05:b6:9b:b6:15:a8:af:8b:bf: 27:c5:46:65:97:08:bb:63:40:7c:9a:16:56:c2:bb: 27:d0:00:a3:de:2b:6b:f9:b2:2b:18:51:42:0d:5c: 35:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AA:58:77:C4:9E:6C:43:16:FC:34:73:B9:F0:1A:B8:9D:29:77:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/8c35e725-cb7a-34fc-b8dd-3626efeea859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:bd:30:02:22:30:89:df:cf:70:86:3d:7a:62:17:79:cc:51: 50:17:e7:9d:0b:ae:ad:5f:56:fe:1a:63:a4:72:86:3b:c8:63: 19:32:c4:38:81:0b:79:66:5e:5a:74:bd:c8:62:f2:e8:ed:e2: 38:b5:ab:4a:2f:6c:12:c6:21:89:db:9a:4c:81:78:40:40:17: 05:75:67:c6:af:c3:6e:57:00:87:1f:90:df:71:57:34:a3:25: 63:0d:c9:a4:6c:cf:9a:9e:4d:a6:d9:0b:62:ec:a5:17:40:68: 88:12:46:11:71:d2:b4:d3:a5:c4:0a:58:64:7d:ea:78:65:ce: bf:c9:e1:d1:bd:9e:fc:ec:e0:62:b7:f3:f3:0b:ee:85:47:81: 86:90:f8:57:60:53:cd:95:42:11:f6:6b:c0:56:be:9d:00:b3: ab:fc:48:a5:d9:08:87:44:e9:4f:21:08:02:21:a9:60:02:15: bb:b8:eb:62:e4:38:5f:3e:e8:d5:bd:04:9e:1a:a4:cf:32:14: 8f:c3:3e:30:ed:eb:3b:b7:20:92:61:e9:47:f6:2b:e8:db:1c: 0b:24:e0:ec:00:7b:91:fd:f7:f7:56:7f:ec:d1:1a:da:04:ad: 7c:59:a3:80:d1:37:ef:5c:24:0f:5e:74:8d:3d:c0:b3:63:60: 97:c9:5b:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8sU0TFUAmWZOCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk M2RiMTMzNDEtYmRkMC00MDQzLWIyMWEtYzg5OTgzMmU2ZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaNM4UB/3tXGEvCHKIEefELrprqNcBWNfrkv e7zvvde0fOE8702+o0dSXkz3kqg3Fx+cDdmJS0JVWO5x+6WJKER561B3+dKLgCCt JLqK4wyzTqhKAP1zRGbeYc1hn+E8eF4Hy26JMd1c8g2Z8sX/wWl/RdMnbWhlaQiC 8CT8w/yWtdmUt35juKWEEzvscd77A4BzNGMRlFiXkaYLHkyFqXgbmVF7KEun9a2L nm0+sa1PdxtK3w9OLHTmg2y+uN3FXHlqZNGMmBdcQh83++2PdFr2x79+YTYFtpu2 Faivi78nxUZllwi7Y0B8mhZWwrsn0ACj3itr+bIrGFFCDVw1JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmqWHfEnmxDFvw0c7nwGridKXfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvOGMzNWU3MjUtY2I3YS0z NGZjLWI4ZGQtMzYyNmVmZWVhODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+9MAIiMInfz3CGPXpiF3nMUVAX550Lrq1fVv4aY6RyhjvIYxkyxDiB C3lmXlp0vchi8ujt4ji1q0ovbBLGIYnbmkyBeEBAFwV1Z8avw25XAIcfkN9xVzSj JWMNyaRsz5qeTabZC2LspRdAaIgSRhFx0rTTpcQKWGR96nhlzr/J4dG9nvzs4GK3 8/ML7oVHgYaQ+FdgU82VQhH2a8BWvp0As6v8SKXZCIdE6U8hCAIhqWACFbu462Lk OF8+6NW9BJ4apM8yFI/DPjDt6zu3IJJh6Uf2K+jbHAsk4OwAe5H99/dWf+zRGtoE rXxZo4DRN+9cJA9edI09wLNjYJfJWw4= -----END CERTIFICATE-----Generated at Wed Sep 23 10:46:35 2026 by rpki-client