$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/5ea321b3-1e58-32f5-92d0-b56040ab0daa.roa File: 5ea321b3-1e58-32f5-92d0-b56040ab0daa.roa (raw, json) Hash identifier: fm/obz/CzLf/eATkxaq3SZoZRArnWspHyEfcaMOdtbc= Subject key identifier: 83:21:64:49:85:65:45:BC:4D:7A:C0:EB:B0:DB:50:08:EF:19:B6:11 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584E9A7FBB3FE2192DDF9845DD80 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/5ea321b3-1e58-32f5-92d0-b56040ab0daa.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 18434 IP address blocks: 147.249.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:bb:3f:e2:19:2d:df:98:45:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=1fd6e1f1-8703-4b1c-b086-b0a656e520b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:2d:66:9f:d0:39:c8:69:45:fe:76:62:f7: cb:ec:66:58:90:1a:ec:74:3a:3c:b3:d6:28:14:2b: 43:c0:04:47:47:35:ef:ad:b2:f0:4f:bc:45:1e:f5: 7d:6e:88:28:dd:39:ce:8d:ea:ed:09:3a:36:25:09: df:33:e0:4e:21:d2:03:04:53:9f:b2:7c:4a:9c:1e: 1b:a3:76:da:de:31:ad:64:c2:e3:26:2f:21:48:af: 03:c7:f2:49:b0:0b:1a:6d:bf:c1:a5:ee:c0:8f:85: 60:1d:a9:75:a5:b2:0d:e4:21:80:c4:b0:16:27:8f: 88:09:33:e2:3f:f4:2e:80:fb:b8:d4:4a:d5:0a:1e: 07:55:0e:80:db:86:e5:dd:c0:d3:e8:c9:04:a3:e8: b7:d7:ba:ab:82:e1:17:63:b9:58:d2:de:19:87:bb: 58:e5:d0:83:93:68:29:73:05:aa:52:ea:50:8b:87: 89:5e:92:90:49:9f:8b:17:47:eb:cf:df:1f:aa:f1: aa:c9:fd:7d:e2:35:74:5a:16:ee:ec:9a:7b:d8:26: 17:f0:54:1c:85:e4:d2:df:68:d6:ea:35:eb:5a:29: bd:4c:17:29:01:68:4c:50:52:b4:e0:a8:8a:a9:d9: 1f:b5:cc:bd:c0:b9:41:e7:97:1f:aa:c4:0e:5d:6a: 7e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:21:64:49:85:65:45:BC:4D:7A:C0:EB:B0:DB:50:08:EF:19:B6:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/5ea321b3-1e58-32f5-92d0-b56040ab0daa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a3:a0:e1:ad:13:c1:db:07:c5:d7:da:dd:7b:63:bc:40:c0: e2:55:5c:19:fc:3f:f1:27:22:25:12:d9:cb:7c:02:b1:e1:0c: 56:ab:6e:0e:e2:f6:b6:cc:8b:3e:07:aa:69:af:b9:5f:dd:2b: 63:9a:06:f2:9b:65:08:15:94:ca:7e:73:b3:3e:6a:1e:66:23: d4:a7:ff:cc:0f:cf:cb:e2:6f:ae:b3:7f:66:cc:aa:0e:6c:ac: d3:6d:b5:0c:3f:b6:74:16:9a:2e:df:2d:86:f7:a5:b3:cc:b7: fb:82:fd:18:f1:e6:b5:35:1b:09:b7:2a:6d:41:e3:a4:70:ef: 31:bb:4e:10:7b:e9:78:0f:19:4a:f9:ae:12:d8:97:39:e8:eb: 45:b7:1f:c6:e4:08:42:94:71:05:38:2f:05:30:b0:49:d8:a7: 33:b7:aa:25:57:a0:e3:86:2a:5e:1a:6b:86:91:e6:2d:38:20: 7b:b1:95:85:55:7e:af:60:50:bd:65:27:6b:39:2b:e4:87:49: be:aa:3d:57:1b:9f:3b:54:38:64:73:37:0d:7b:3e:26:ce:38: 61:10:6f:cf:cd:38:73:8d:72:25:1b:4e:d7:c0:33:b6:01:a5: 53:3b:e6:8d:24:72:7a:ac:8d:a5:53:1f:11:55:7b:3a:3f:b5: f0:bb:b9:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af7s/4hkt35hF3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk MWZkNmUxZjEtODcwMy00YjFjLWIwODYtYjBhNjU2ZTUyMGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLEtZp/QOchpRf52YvfL7GZYkBrsdDo8s9Yo FCtDwARHRzXvrbLwT7xFHvV9bogo3TnOjertCTo2JQnfM+BOIdIDBFOfsnxKnB4b o3ba3jGtZMLjJi8hSK8Dx/JJsAsabb/Bpe7Aj4VgHal1pbIN5CGAxLAWJ4+ICTPi P/QugPu41ErVCh4HVQ6A24bl3cDT6MkEo+i317qrguEXY7lY0t4Zh7tY5dCDk2gp cwWqUupQi4eJXpKQSZ+LF0frz98fqvGqyf194jV0Whbu7Jp72CYX8FQcheTS32jW 6jXrWim9TBcpAWhMUFK04KiKqdkftcy9wLlB55cfqsQOXWp+gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMhZEmFZUW8TXrA67DbUAjvGbYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvNWVhMzIxYjMtMWU1OC0z MmY1LTkyZDAtYjU2MDQwYWIwZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/ksMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6joOGtE8HbB8XX2t17Y7xAwOJVXBn8P/EnIiUS2ct8ArHhDFarbg7i 9rbMiz4HqmmvuV/dK2OaBvKbZQgVlMp+c7M+ah5mI9Sn/8wPz8vib66zf2bMqg5s rNNttQw/tnQWmi7fLYb3pbPMt/uC/Rjx5rU1Gwm3Km1B46Rw7zG7ThB76XgPGUr5 rhLYlzno60W3H8bkCEKUcQU4LwUwsEnYpzO3qiVXoOOGKl4aa4aR5i04IHuxlYVV fq9gUL1lJ2s5K+SHSb6qPVcbnztUOGRzNw17PibOOGEQb8/NOHONciUbTtfAM7YB pVM75o0kcnqsjaVTHxFVezo/tfC7uSc= -----END CERTIFICATE-----Generated at Fri Jul 24 12:09:44 2026 by rpki-client