$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/bc2bcadd-3b70-3c35-aa79-dbb2ba52fd8b.roa File: bc2bcadd-3b70-3c35-aa79-dbb2ba52fd8b.roa (raw, json) Hash identifier: auq4korteOxxKdUICBVoSugOY7NpiWVfNM3mr5mxy/U= Subject key identifier: 4E:7A:05:45:99:76:8C:59:24:5A:66:94:7D:C3:82:80:0E:6F:A4:84 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584D83CB02FB300518192C992040 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/bc2bcadd-3b70-3c35-aa79-dbb2ba52fd8b.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 2615 IP address blocks: 147.1.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:cb:02:fb:30:05:18:19:2c:99:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=217dcb48-7a3e-4b3f-883e-d02662937561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7c:7b:c9:8d:f5:60:a5:17:f8:3d:0c:46:65: d5:95:f8:10:cd:31:55:d6:74:6b:bb:d1:b1:e1:1f: 7d:56:6d:c9:d1:81:f0:d6:8d:60:61:d0:e4:13:c4: f0:fb:f2:1d:97:e1:b0:db:df:b5:2f:d8:d0:2d:37: fa:38:fd:bd:27:d4:25:67:65:d7:db:4a:81:49:fb: 3a:4f:2b:37:30:3f:7d:eb:e5:2e:aa:1e:93:5d:b5: 4f:72:66:94:77:76:f6:a4:c6:d6:25:35:64:8f:bc: dc:23:04:12:3e:c9:11:eb:87:77:35:47:c2:87:b0: 6b:5b:eb:53:d7:60:e9:76:b1:30:77:80:7f:b0:8f: c2:06:3b:d7:69:c3:b3:4b:cd:29:89:ce:6e:b7:ab: af:27:45:e3:4a:d4:56:86:eb:14:82:2e:17:64:14: 78:ea:f7:0a:69:5a:9d:ab:6e:e1:a4:bd:18:8c:cf: 6a:6b:67:21:b4:67:e9:e3:78:55:a0:95:ae:fa:80: 9a:86:ba:2e:2e:a2:b7:77:35:f2:da:ec:35:f0:a4: 9f:b5:24:b8:37:ec:55:e4:5f:1f:4f:5a:bc:f9:44: 69:a9:65:06:25:ab:02:a6:da:2e:fe:f2:02:fa:36: 2d:b1:c9:53:9c:01:aa:3a:35:b8:c1:e6:c1:e7:f2: 95:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7A:05:45:99:76:8C:59:24:5A:66:94:7D:C3:82:80:0E:6F:A4:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/bc2bcadd-3b70-3c35-aa79-dbb2ba52fd8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:6f:10:45:db:29:38:fb:13:87:4a:ac:6d:fa:48:e0:d6:2a: b0:20:72:bb:5a:7d:1e:71:a3:c9:9c:c9:3e:1d:d8:78:72:fa: b3:80:ef:b8:52:a1:77:d8:9b:c9:ff:f3:a4:3b:42:25:03:67: 9e:c2:37:72:28:4e:cd:25:c4:89:13:a0:17:cc:08:b1:c6:7d: 0a:71:ce:ea:48:4d:97:53:cd:86:62:4c:b6:55:a9:d3:65:d9: 1c:2d:01:63:88:35:c8:4d:4c:13:bf:7c:80:9c:b0:1e:6c:bc: aa:83:de:bf:93:bc:04:9d:b8:cf:86:0a:8f:46:3d:57:32:12: 0c:c7:76:10:7d:40:c4:98:cd:bd:f1:05:47:ef:56:94:57:f4: 24:bc:33:83:0c:42:fe:a6:66:00:20:3e:29:68:bf:8f:9b:f6: da:d8:e7:a8:90:bb:b6:b4:ca:bc:70:b1:0d:a9:b7:f3:84:97: 33:d4:93:42:d8:d6:17:0d:c7:e0:bd:ab:ca:bd:83:b2:2a:b1: 64:76:65:85:8d:22:2d:99:7d:21:16:95:91:c5:e2:32:34:ce: 49:42:67:f6:89:a8:d8:8a:ad:d5:30:62:95:c7:f7:94:5c:68: 88:f0:1d:54:0e:9a:2f:a1:1c:77:0b:c7:63:2b:ac:42:ea:a7: 10:0a:84:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DywL7MAUYGSyZIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk MjE3ZGNiNDgtN2EzZS00YjNmLTg4M2UtZDAyNjYyOTM3NTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHx7yY31YKUX+D0MRmXVlfgQzTFV1nRru9Gx 4R99Vm3J0YHw1o1gYdDkE8Tw+/Idl+Gw29+1L9jQLTf6OP29J9QlZ2XX20qBSfs6 Tys3MD996+Uuqh6TXbVPcmaUd3b2pMbWJTVkj7zcIwQSPskR64d3NUfCh7BrW+tT 12DpdrEwd4B/sI/CBjvXacOzS80pic5ut6uvJ0XjStRWhusUgi4XZBR46vcKaVqd q27hpL0YjM9qa2chtGfp43hVoJWu+oCahrouLqK3dzXy2uw18KSftSS4N+xV5F8f T1q8+URpqWUGJasCptou/vIC+jYtsclTnAGqOjW4webB5/KV+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE56BUWZdoxZJFpmlH3DgoAOb6SEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvYmMyYmNhZGQtM2I3MC0z YzM1LWFhNzktZGJiMmJhNTJmZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwHhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJvEEXbKTj7E4dKrG36SODWKrAgcrtafR5xo8mcyT4d2Hhy+rOA77hS oXfYm8n/86Q7QiUDZ57CN3IoTs0lxIkToBfMCLHGfQpxzupITZdTzYZiTLZVqdNl 2RwtAWOINchNTBO/fICcsB5svKqD3r+TvASduM+GCo9GPVcyEgzHdhB9QMSYzb3x BUfvVpRX9CS8M4MMQv6mZgAgPilov4+b9trY56iQu7a0yrxwsQ2pt/OElzPUk0LY 1hcNx+C9q8q9g7IqsWR2ZYWNIi2ZfSEWlZHF4jI0zklCZ/aJqNiKrdUwYpXH95Rc aIjwHVQOmi+hHHcLx2MrrELqpxAKhGg= -----END CERTIFICATE-----Generated at Sun Apr 19 16:44:33 2026 by rpki-client