$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa File: 97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa (raw, json) Hash identifier: xwCGev6Jrh7/7zxV2eIovNomUVvzBUEHR6x0/o7Cfso= Subject key identifier: E2:6D:99:AF:4A:98:5D:4B:7C:13:7F:93:5B:F5:57:B9:73:A3:73:3B Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584E7634CF8D06D20FAD8E42D400 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 18434 IP address blocks: 147.249.0.0/24 maxlen: 24 147.249.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:cf:8d:06:d2:0f:ad:8e:42:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=b091d828-b39f-4ae2-a22e-7c9828afceba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:13:53:dd:bc:7b:f9:15:53:2b:2f:fd:99:43: 4f:ec:76:66:ee:d7:3b:26:fa:8f:81:58:cd:be:46: 3f:83:17:0a:57:ae:f3:00:23:ca:83:3e:1e:82:a8: 42:dd:31:b7:46:00:43:b5:8f:b5:13:2f:19:f1:c6: 05:1f:d4:82:4d:bb:21:28:9f:62:c3:55:07:78:0a: 13:aa:c7:b3:47:bb:1e:06:d3:aa:98:97:fd:11:25: c9:48:80:8a:d4:08:d4:eb:ae:cd:07:5d:fe:33:58: 77:51:15:aa:9a:86:83:54:77:71:da:06:ea:c4:fd: 4d:93:94:81:f2:e5:19:32:7f:55:d1:9e:f1:9c:05: 96:ce:32:26:73:d7:8e:77:87:a0:fa:87:84:9d:9f: ed:3a:84:a8:1e:dc:7e:c5:42:ba:d5:20:4f:bb:6f: 93:1f:06:3a:fa:1c:0d:87:95:a5:45:c2:3f:76:ec: 6d:23:f3:0a:18:8b:11:44:1e:90:72:37:0e:fb:6a: 9e:49:74:f2:95:c2:6f:dd:e0:21:70:e2:29:43:e2: ca:96:d3:f9:15:2f:80:85:b1:7c:d9:b1:aa:8f:15: 1d:58:f2:c5:84:27:9c:ef:1d:42:86:f2:3e:56:4d: 65:24:1d:e7:e4:39:20:22:5c:c1:3d:fc:b8:5d:9e: 27:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6D:99:AF:4A:98:5D:4B:7C:13:7F:93:5B:F5:57:B9:73:A3:73:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e7:63:4b:22:ea:da:86:6c:6a:cd:20:39:05:34:7e:09:4b: b3:a7:d9:5f:be:06:c9:f2:30:f0:38:64:62:09:b8:da:e8:0a: 65:8a:89:00:2a:d0:70:29:fc:cd:a1:0d:43:38:9b:35:1c:c7: e4:2a:64:5d:e3:b8:5d:19:e1:7f:44:19:f8:44:1a:ff:3a:c5: d9:60:50:12:fa:3d:55:ba:e0:38:ea:3d:ff:f0:40:7f:9b:1b: 2e:bc:9d:df:32:ed:5d:18:d9:3a:97:d0:b2:7c:11:47:0a:c4: 8b:2f:89:58:9b:84:6b:7d:8d:26:f5:6e:24:fd:c8:d2:af:4e: 6f:88:e1:bf:6e:dc:1b:1b:71:b9:54:30:10:d3:d3:a0:c5:6c: 29:e6:a6:2d:78:83:ac:f3:4d:fc:b2:ae:55:1d:ca:e7:9d:55: e2:f0:f7:bc:a8:75:88:01:64:5d:45:09:e2:d7:b5:22:c5:12: 1b:3c:d6:b3:45:91:62:49:99:52:f5:7e:36:f6:42:79:53:fc: 11:5e:3c:25:e3:b9:7c:52:95:ef:99:01:6b:33:0c:32:b8:42: 7b:a4:c8:aa:49:7a:ce:52:a3:d6:05:dd:b1:bf:3f:cc:f3:f5: f4:f3:78:0e:f7:d1:5a:bc:ea:d2:2d:f7:6a:d2:58:c3:2f:bd: ff:3e:d5:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NM+NBtIPrY5C1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk YjA5MWQ4MjgtYjM5Zi00YWUyLWEyMmUtN2M5ODI4YWZjZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxNT3bx7+RVTKy/9mUNP7HZm7tc7JvqPgVjN vkY/gxcKV67zACPKgz4egqhC3TG3RgBDtY+1Ey8Z8cYFH9SCTbshKJ9iw1UHeAoT qsezR7seBtOqmJf9ESXJSICK1AjU667NB13+M1h3URWqmoaDVHdx2gbqxP1Nk5SB 8uUZMn9V0Z7xnAWWzjImc9eOd4eg+oeEnZ/tOoSoHtx+xUK61SBPu2+THwY6+hwN h5WlRcI/duxtI/MKGIsRRB6QcjcO+2qeSXTylcJv3eAhcOIpQ+LKltP5FS+AhbF8 2bGqjxUdWPLFhCec7x1ChvI+Vk1lJB3n5DkgIlzBPfy4XZ4nPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJtma9KmF1LfBN/k1v1V7lzo3M7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvOTdjMWI3NGItNjhmZi0z OGNhLWE3YmMtZjI4MDE3NjdlYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk/kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEznY0si6tqGbGrNIDkFNH4JS7On2V++BsnyMPA4ZGIJuNroCmWKiQAq 0HAp/M2hDUM4mzUcx+QqZF3juF0Z4X9EGfhEGv86xdlgUBL6PVW64DjqPf/wQH+b Gy68nd8y7V0Y2TqX0LJ8EUcKxIsviVibhGt9jSb1biT9yNKvTm+I4b9u3BsbcblU MBDT06DFbCnmpi14g6zzTfyyrlUdyuedVeLw97yodYgBZF1FCeLXtSLFEhs81rNF kWJJmVL1fjb2QnlT/BFePCXjuXxSle+ZAWszDDK4QnukyKpJes5So9YF3bG/P8zz 9fTzeA730Vq86tIt92rSWMMvvf8+1Vk= -----END CERTIFICATE-----Generated at Fri Jul 24 10:22:45 2026 by rpki-client