$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa File: da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa (raw, json) Hash identifier: bJB4oeDMNlQA3h/ngsxKDwDrb+oLWRhUUcJWnb3pPzM= Subject key identifier: 8B:54:6B:D0:2D:57:DA:40:28:FF:9D:13:A1:D2:4F:5A:09:7B:3F:68 Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584DFA707BDA5E380CBD117A7260 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 2615 IP address blocks: 147.1.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:7b:da:5e:38:0c:bd:11:7a:72:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=9b2d2f7d-5219-41a2-a2fa-a0bac4bbd88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b6:83:1b:62:ec:02:91:15:b2:fe:02:0a:cd: d1:a3:40:8e:f0:e2:ad:d7:84:62:e6:a6:17:3e:02: 2b:cd:a0:a7:d4:d9:20:11:e8:8d:6d:7c:3e:01:42: 3e:e4:25:3e:03:48:35:47:34:ca:06:18:53:85:97: f1:d2:c2:a2:18:a0:91:21:cf:10:23:36:a8:57:d4: 41:0b:62:6c:4e:56:b9:ff:8b:3c:04:ad:30:f9:db: 10:51:cf:52:94:20:ce:04:90:70:5f:f1:ae:c6:b6: 92:6e:aa:91:d7:1f:cb:42:7c:3f:d4:d6:c7:55:61: 24:80:24:fa:58:f6:a5:40:8c:57:e7:46:36:1c:2e: f8:54:2e:7e:e8:dd:f3:ac:44:2a:d9:ab:68:04:30: 45:e3:2d:62:f6:21:24:c7:cf:11:5b:ef:10:0d:44: 6b:df:6c:93:4b:f9:f3:fb:89:4b:81:47:c1:ab:ad: 6f:c8:ee:97:fc:06:21:1b:1a:43:b1:f8:00:38:ae: 60:20:a8:92:0b:70:6d:79:b5:27:bd:70:1b:15:2f: 5d:cf:fc:2c:49:61:2c:df:73:6e:a9:57:82:f7:66: fe:a5:16:85:73:a3:c8:f3:e0:cb:5f:ed:a4:52:eb: 21:21:ea:d3:ac:e9:55:0d:c7:74:cf:a3:a3:bb:22: a3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:54:6B:D0:2D:57:DA:40:28:FF:9D:13:A1:D2:4F:5A:09:7B:3F:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/da49e8a7-09f5-3562-98b7-2e28be0e8acb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c6:c5:ea:96:d1:ad:80:5a:cc:ee:28:da:3a:78:b2:7e:37: 13:46:63:fd:ba:ed:2f:15:80:05:6f:85:87:7c:c5:17:be:fe: b3:3c:73:36:d2:ac:be:92:2f:54:b0:b3:ea:9c:f5:be:29:dc: 14:ff:cd:98:74:bc:42:1e:4b:ed:04:86:42:1b:92:8d:a4:55: 26:51:aa:5b:dc:3b:91:ca:d8:79:53:28:82:88:49:fb:17:16: 2a:bb:de:47:70:d7:a8:74:89:99:33:1b:8c:37:b1:c6:45:10: 7a:6b:74:45:04:0d:21:2c:41:04:94:bb:be:24:0b:fb:ef:17: bf:ac:6d:0b:4b:c1:f8:46:39:dd:cc:7b:e3:ab:ae:fb:d4:93: 7f:d1:8a:4c:f1:e9:f5:a3:15:e5:fe:36:23:b2:ef:85:d1:f4: bb:e4:da:8d:e3:a9:86:ae:88:e0:03:41:b6:4c:a0:0e:96:83: af:44:5d:f0:55:ea:61:e5:78:22:33:cd:dc:80:fc:5c:43:e3: 88:e4:91:88:a2:0f:c5:5a:0e:f9:53:b6:ec:c2:16:41:ac:42: fb:56:d9:22:78:99:39:d9:68:a7:b8:e2:a2:a1:a2:eb:74:46: c5:3d:6e:c9:47:fe:bb:f9:79:8a:b7:bb:57:cd:03:a0:d2:a6: 22:5a:1b:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cHvaXjgMvRF6cmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk OWIyZDJmN2QtNTIxOS00MWEyLWEyZmEtYTBiYWM0YmJkODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7aDG2LsApEVsv4CCs3Ro0CO8OKt14Ri5qYX PgIrzaCn1NkgEeiNbXw+AUI+5CU+A0g1RzTKBhhThZfx0sKiGKCRIc8QIzaoV9RB C2JsTla5/4s8BK0w+dsQUc9SlCDOBJBwX/GuxraSbqqR1x/LQnw/1NbHVWEkgCT6 WPalQIxX50Y2HC74VC5+6N3zrEQq2atoBDBF4y1i9iEkx88RW+8QDURr32yTS/nz +4lLgUfBq61vyO6X/AYhGxpDsfgAOK5gIKiSC3BtebUnvXAbFS9dz/wsSWEs33Nu qVeC92b+pRaFc6PI8+DLX+2kUushIerTrOlVDcd0z6OjuyKjcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItUa9AtV9pAKP+dE6HST1oJez9oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvZGE0OWU4YTctMDlmNS0z NTYyLTk4YjctMmUyOGJlMGU4YWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzGxeqW0a2AWszuKNo6eLJ+NxNGY/267S8VgAVvhYd8xRe+/rM8czbS rL6SL1Sws+qc9b4p3BT/zZh0vEIeS+0EhkIbko2kVSZRqlvcO5HK2HlTKIKISfsX Fiq73kdw16h0iZkzG4w3scZFEHprdEUEDSEsQQSUu74kC/vvF7+sbQtLwfhGOd3M e+OrrvvUk3/Rikzx6fWjFeX+NiOy74XR9Lvk2o3jqYauiOADQbZMoA6Wg69EXfBV 6mHleCIzzdyA/FxD44jkkYiiD8VaDvlTtuzCFkGsQvtW2SJ4mTnZaKe44qKhout0 RsU9bslH/rv5eYq3u1fNA6DSpiJaG2E= -----END CERTIFICATE-----Generated at Sat Jun 13 15:47:39 2026 by rpki-client