$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/d6e47bdb-24a9-3833-ab3d-13192e87f425.roa File: d6e47bdb-24a9-3833-ab3d-13192e87f425.roa (raw, json) Hash identifier: kTktld6/7SbL19XLCJV+s2CH5wRZk0hK1oSEIfnXbeQ= Subject key identifier: 3C:D5:48:CD:BD:35:49:47:CF:80:D4:F6:7A:36:DF:C4:0D:5A:A7:67 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584CD6D218A21E97C0F53B7DC600 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/d6e47bdb-24a9-3833-ab3d-13192e87f425.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 2615 IP address blocks: 147.1.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:18:a2:1e:97:c0:f5:3b:7d:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=cfc6b7ad-1bad-4790-961d-bd4c3289b68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:57:ae:65:43:58:31:6e:4b:cd:1f:53:d4:2a: 35:ac:cc:0a:e3:91:a5:f3:3f:26:fd:44:2c:59:60: 5e:55:02:32:29:cd:94:db:74:8a:d3:0a:60:0b:94: f5:33:aa:fe:1c:e6:33:c5:91:6c:a3:48:9e:c3:f3: be:22:fd:32:aa:ec:24:6e:a5:0a:9a:b0:8f:88:10: e8:4e:cc:65:0c:6e:08:b2:00:0e:1e:9a:8e:88:a4: 8c:4f:6f:7f:05:71:2d:df:98:e9:74:ca:66:a7:4a: e0:05:42:2d:5c:c3:80:d7:3f:18:82:77:68:0d:0e: c4:95:01:d5:cb:08:a7:9d:c4:0e:87:c3:c0:48:b6: 8d:35:4d:c7:b1:74:ca:a0:7c:23:57:6d:6d:e7:c8: f4:b2:2c:15:26:50:0e:ff:59:75:3d:6d:ba:c7:6d: 4f:23:fd:1e:45:2e:f9:cc:42:14:17:bc:bf:bb:33: e6:f7:bb:a3:fb:26:63:ad:73:d8:fc:ee:22:f9:25: de:18:09:ed:63:c8:f8:f2:64:3c:bb:02:8c:b6:79: 8c:7d:ba:8b:d8:a0:77:52:14:35:00:9e:58:8e:2d: 42:49:6f:07:a2:fc:e2:14:aa:45:08:e7:ce:25:d6: 8c:c6:86:c0:fe:19:39:9c:83:ad:f3:80:a6:94:23: 9d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D5:48:CD:BD:35:49:47:CF:80:D4:F6:7A:36:DF:C4:0D:5A:A7:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/d6e47bdb-24a9-3833-ab3d-13192e87f425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:62:5a:9c:51:ed:a0:f5:d3:ef:30:3e:3d:f5:5b:29:98:12: 0f:3c:97:b1:50:38:00:9a:dc:0f:e9:54:61:74:49:92:15:c8: 21:26:a3:4c:98:1b:e5:e1:c2:c4:6b:85:a0:98:75:24:19:53: d6:c1:17:8a:07:70:b5:0a:d2:be:81:14:4a:5e:15:71:b4:f0: e6:bf:f9:43:f8:d0:6c:76:f0:8e:b3:1b:ef:af:cf:8d:f6:2f: c6:5c:57:8a:2d:5d:f3:44:14:67:fa:2c:e7:95:dd:60:26:2d: 3b:0b:cc:c5:a6:a2:36:d8:c7:66:32:a8:89:82:37:68:cf:9c: 35:4b:6c:15:6f:e4:c4:a6:a4:62:0a:50:a2:d2:7a:df:53:84: 56:42:18:33:97:dc:4d:08:ad:b5:5b:72:7e:a9:43:09:fd:51: a4:d6:7d:74:3a:2f:65:6c:9a:5d:77:17:c5:6f:b5:76:45:58: d2:66:b2:10:a7:43:42:e2:3a:78:30:90:96:fb:2e:16:59:15: e4:4d:04:14:73:1e:9b:1f:c9:c8:6e:c2:5a:79:ec:6a:b4:73: 79:30:37:96:a7:23:93:fa:f8:91:44:eb:1a:95:ab:01:8f:c5: 59:a6:30:11:71:cf:1f:3b:b4:6e:85:c1:c1:47:2f:ca:02:3b: 18:20:e6:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0hiiHpfA9Tt9xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk Y2ZjNmI3YWQtMWJhZC00NzkwLTk2MWQtYmQ0YzMyODliNjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVeuZUNYMW5LzR9T1Co1rMwK45Gl8z8m/UQs WWBeVQIyKc2U23SK0wpgC5T1M6r+HOYzxZFso0iew/O+Iv0yquwkbqUKmrCPiBDo TsxlDG4IsgAOHpqOiKSMT29/BXEt35jpdMpmp0rgBUItXMOA1z8YgndoDQ7ElQHV ywinncQOh8PASLaNNU3HsXTKoHwjV21t58j0siwVJlAO/1l1PW26x21PI/0eRS75 zEIUF7y/uzPm97uj+yZjrXPY/O4i+SXeGAntY8j48mQ8uwKMtnmMfbqL2KB3UhQ1 AJ5Yji1CSW8HovziFKpFCOfOJdaMxobA/hk5nIOt84CmlCOdowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzVSM29NUlHz4DU9no238QNWqdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvZDZlNDdiZGItMjRhOS0z ODMzLWFiM2QtMTMxOTJlODdmNDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFiWpxR7aD10+8wPj31WymYEg88l7FQOACa3A/pVGF0SZIVyCEmo0yY G+XhwsRrhaCYdSQZU9bBF4oHcLUK0r6BFEpeFXG08Oa/+UP40Gx28I6zG++vz432 L8ZcV4otXfNEFGf6LOeV3WAmLTsLzMWmojbYx2YyqImCN2jPnDVLbBVv5MSmpGIK UKLSet9ThFZCGDOX3E0IrbVbcn6pQwn9UaTWfXQ6L2Vsml13F8VvtXZFWNJmshCn Q0LiOngwkJb7LhZZFeRNBBRzHpsfychuwlp57Gq0c3kwN5anI5P6+JFE6xqVqwGP xVmmMBFxzx87tG6FwcFHL8oCOxgg5pM= -----END CERTIFICATE-----Generated at Tue Mar 3 02:21:18 2026 by rpki-client