$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/d6e47bdb-24a9-3833-ab3d-13192e87f425.roa File: d6e47bdb-24a9-3833-ab3d-13192e87f425.roa (raw, json) Hash identifier: YtTj2jWBJRHfCxdA1AxrTipBc+Lb7GHc2am1KeRsrTc= Subject key identifier: 5A:EF:04:47:99:B7:9C:B4:C8:23:37:6A:EA:38:31:12:26:CE:D3:A5 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584F3A17DAF4686E9A4539876FE0 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/d6e47bdb-24a9-3833-ab3d-13192e87f425.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 2615 IP address blocks: 147.1.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:da:f4:68:6e:9a:45:39:87:6f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=37040e79-fc83-4481-9f6b-2fd72bcd35c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:5c:58:b7:f8:6f:49:bd:db:28:f1:b8:f3: 6c:90:47:2c:11:14:a0:3e:b0:c5:58:4a:97:e6:56: 31:78:31:3c:2a:15:da:a6:24:94:96:26:e5:75:9a: 44:75:0a:44:5a:eb:d8:85:9d:ef:af:e0:1b:1e:c5: a3:78:5b:9e:95:14:ed:aa:48:7d:b5:31:cf:fb:db: ad:a8:57:b1:f5:f0:1a:46:e6:da:3a:4d:6b:59:22: 9b:a1:11:cc:05:7c:be:05:08:dd:72:dc:69:bd:ab: a7:fb:70:c3:9f:70:5a:66:bf:96:14:1e:09:56:c7: c4:0e:fd:bd:fa:31:1d:1e:5b:96:d7:d7:4c:f6:65: d6:6b:59:f5:0a:b5:a0:26:62:0c:4f:92:3a:a7:a5: a8:66:d6:ab:e6:a9:33:33:d6:bd:e9:96:18:52:52: 7b:13:dd:98:d2:b4:5d:e2:32:70:98:6a:13:4d:29: cf:c7:00:db:2e:0f:9c:68:28:96:57:b7:9e:9d:0c: 9e:d7:69:32:7c:39:78:e7:f6:b4:56:05:49:8a:f4: ca:8f:33:94:b9:cb:cb:d8:0d:5e:2c:5a:e9:ba:9c: d2:84:65:c5:91:7c:bf:40:03:32:08:24:2b:ee:ac: 5f:d4:4d:8b:e1:e7:c6:47:0a:e3:e5:bd:57:ba:c4: 1a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EF:04:47:99:B7:9C:B4:C8:23:37:6A:EA:38:31:12:26:CE:D3:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/d6e47bdb-24a9-3833-ab3d-13192e87f425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a3:d7:d0:be:17:cc:bc:e2:35:05:0f:ea:02:a8:c0:b4:9f: 19:1a:49:2b:c9:34:f3:75:7e:4c:8a:a5:76:8e:51:ad:25:2e: 21:52:79:e7:a4:e6:4b:46:c9:a2:9c:65:fb:f5:b9:c1:55:fd: fc:6b:19:7f:c3:8d:23:53:11:17:0d:cb:17:61:7c:3c:c2:b5: a7:34:c5:07:0d:19:39:7d:cc:d5:d4:20:9b:f3:cc:9e:fe:e5: 45:5d:cb:50:17:b7:a1:cb:5e:a0:52:82:20:02:17:37:ad:16: be:35:f1:bc:27:38:a3:de:76:ad:5c:db:27:5b:54:03:64:fa: dd:14:93:9f:48:71:fd:9c:78:54:8d:c9:c2:76:36:77:3f:d9: 2d:de:9e:bf:7f:aa:e1:0b:1e:e3:50:77:69:4b:4c:e4:66:92: 62:21:dd:20:75:90:25:4e:ff:62:3e:0f:6a:e6:81:db:fd:f3: ae:a8:17:66:65:dc:ed:d2:2e:c5:a7:ff:01:9f:b3:a6:35:f0: 1d:ce:0d:4b:81:d2:41:db:5d:28:9f:3a:96:37:87:b7:e0:d8: 61:1e:70:85:2c:73:e7:ce:fa:72:33:2c:35:72:51:5e:4b:bb: 65:21:01:99:9c:af:77:45:25:57:05:3f:9e:88:80:5c:0b:b6: c7:37:34:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9r0aG6aRTmHb+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MzcwNDBlNzktZmM4My00NDgxLTlmNmItMmZkNzJiY2QzNWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5ZcWLf4b0m92yjxuPNskEcsERSgPrDFWEqX 5lYxeDE8KhXapiSUlibldZpEdQpEWuvYhZ3vr+AbHsWjeFuelRTtqkh9tTHP+9ut qFex9fAaRubaOk1rWSKboRHMBXy+BQjdctxpvaun+3DDn3BaZr+WFB4JVsfEDv29 +jEdHluW19dM9mXWa1n1CrWgJmIMT5I6p6WoZtar5qkzM9a96ZYYUlJ7E92Y0rRd 4jJwmGoTTSnPxwDbLg+caCiWV7eenQye12kyfDl45/a0VgVJivTKjzOUucvL2A1e LFrpupzShGXFkXy/QAMyCCQr7qxf1E2L4efGRwrj5b1XusQalQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrvBEeZt5y0yCM3auo4MRImztOlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvZDZlNDdiZGItMjRhOS0z ODMzLWFiM2QtMTMxOTJlODdmNDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWj19C+F8y84jUFD+oCqMC0nxkaSSvJNPN1fkyKpXaOUa0lLiFSeeek 5ktGyaKcZfv1ucFV/fxrGX/DjSNTERcNyxdhfDzCtac0xQcNGTl9zNXUIJvzzJ7+ 5UVdy1AXt6HLXqBSgiACFzetFr418bwnOKPedq1c2ydbVANk+t0Uk59Icf2ceFSN ycJ2Nnc/2S3enr9/quELHuNQd2lLTORmkmIh3SB1kCVO/2I+D2rmgdv9866oF2Zl 3O3SLsWn/wGfs6Y18B3ODUuB0kHbXSifOpY3h7fg2GEecIUsc+fO+nIzLDVyUV5L u2UhAZmcr3dFJVcFP56IgFwLtsc3NO0= -----END CERTIFICATE-----Generated at Tue Sep 22 22:27:53 2026 by rpki-client