$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa File: 97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa (raw, json) Hash identifier: iH2iFcOyBNKw2bt+fXaI+UACc21B1D2ERNgDmwDKrOQ= Subject key identifier: BE:E1:8C:76:7C:B4:08:70:02:FF:D0:D9:1E:F9:2B:E4:31:CA:6C:74 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584F1897994E21F2A85B9978AB70 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 18434 IP address blocks: 147.249.0.0/24 maxlen: 24 147.249.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:99:4e:21:f2:a8:5b:99:78:ab:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=b6e29f6f-c18e-42d3-babf-d66900b8d7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bc:7e:21:21:f2:62:11:36:a0:6f:46:6d:99: 0f:07:11:55:3a:c8:33:2b:b5:6e:cf:87:a4:df:51: 3a:8d:13:4a:4f:8c:38:61:a6:a3:48:9b:aa:62:e8: a8:c2:41:26:ff:4e:f6:d0:c0:94:37:72:e3:28:5a: e7:0f:2c:ed:d5:2f:9d:33:18:dd:13:c8:61:76:f5: f6:80:30:d2:21:c7:dd:dd:fa:09:84:73:7a:b3:db: 46:d6:6a:14:b8:76:6b:fb:f8:76:a2:7c:b3:4c:b8: 15:38:ea:30:18:d1:85:05:e1:1b:3b:5a:42:c0:49: 92:71:e8:72:60:89:42:ae:3c:b3:6a:e0:99:b9:19: f8:f6:05:a5:ab:25:8e:5c:f0:51:0f:c7:d1:40:44: c1:d7:62:9d:b1:85:0e:bc:b1:32:e5:84:38:d7:b1: 07:ad:d5:17:21:51:06:8e:ce:c6:8d:48:5d:4e:75: 80:49:3d:0b:be:88:aa:79:c4:a0:11:e0:e0:5f:65: a2:56:f0:c1:2c:7a:e4:f7:f7:a7:67:6b:fa:42:9f: 8b:4f:95:7b:df:f1:e8:0d:0d:cf:51:b9:2c:f0:3e: e5:31:57:51:f8:bf:78:1f:99:3c:9a:e0:15:fc:43: ae:10:26:37:fe:4d:1a:a8:1d:60:fd:fd:d3:7b:e3: 38:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E1:8C:76:7C:B4:08:70:02:FF:D0:D9:1E:F9:2B:E4:31:CA:6C:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/97c1b74b-68ff-38ca-a7bc-f2801767ec54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:41:db:ef:54:a0:c9:23:28:86:5b:50:04:10:5a:ae:9e:bb: aa:1d:c4:62:a1:a4:ca:67:c6:ae:ba:e9:48:7f:c1:e5:d9:46: 68:05:90:56:6d:92:bb:4a:6a:62:79:63:05:69:1c:c7:a9:ee: c1:a2:d6:7f:42:e0:7a:61:92:59:22:59:5a:6c:4e:e2:b3:e7: fb:c3:0d:b2:fa:50:a5:ad:f2:11:3d:1a:0b:6c:da:1a:db:af: 9d:01:1e:92:77:2e:7e:c8:98:8f:98:80:d0:c2:66:aa:2c:dd: 27:6c:50:2d:e6:c7:5a:b8:e4:04:ed:c0:66:1c:24:7a:d3:48: a4:0c:39:1a:10:da:62:fc:51:a4:5d:48:ad:c2:3d:7f:3a:dc: da:3f:cd:7d:ee:80:a2:f2:5b:3e:7e:f3:9e:e2:55:53:78:2e: 03:c0:2b:84:57:a6:d8:cb:92:8f:86:c0:85:f2:df:ea:16:03: 88:f3:d0:9e:f3:07:05:59:77:76:fa:e8:55:64:da:b5:2f:f2: f4:34:7f:09:13:36:b0:97:06:93:b6:c8:b6:e1:3b:68:62:ae: 96:96:0b:1b:df:f8:90:5b:af:e5:49:b9:1e:53:d0:e9:be:19: df:c8:84:07:4e:f5:c2:28:4c:e8:5a:37:d7:b9:d5:8c:ea:73: 20:94:6f:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5lOIfKoW5l4q3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk YjZlMjlmNmYtYzE4ZS00MmQzLWJhYmYtZDY2OTAwYjhkN2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbx+ISHyYhE2oG9GbZkPBxFVOsgzK7Vuz4ek 31E6jRNKT4w4YaajSJuqYuiowkEm/0720MCUN3LjKFrnDyzt1S+dMxjdE8hhdvX2 gDDSIcfd3foJhHN6s9tG1moUuHZr+/h2onyzTLgVOOowGNGFBeEbO1pCwEmScehy YIlCrjyzauCZuRn49gWlqyWOXPBRD8fRQETB12KdsYUOvLEy5YQ417EHrdUXIVEG js7GjUhdTnWAST0LvoiqecSgEeDgX2WiVvDBLHrk9/enZ2v6Qp+LT5V73/HoDQ3P Ubks8D7lMVdR+L94H5k8muAV/EOuECY3/k0aqB1g/f3Te+M4GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7hjHZ8tAhwAv/Q2R75K+Qxymx0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvOTdjMWI3NGItNjhmZi0z OGNhLWE3YmMtZjI4MDE3NjdlYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk/kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFB2+9UoMkjKIZbUAQQWq6eu6odxGKhpMpnxq666Uh/weXZRmgFkFZt krtKamJ5YwVpHMep7sGi1n9C4HphklkiWVpsTuKz5/vDDbL6UKWt8hE9Ggts2hrb r50BHpJ3Ln7ImI+YgNDCZqos3SdsUC3mx1q45ATtwGYcJHrTSKQMORoQ2mL8UaRd SK3CPX863No/zX3ugKLyWz5+857iVVN4LgPAK4RXptjLko+GwIXy3+oWA4jz0J7z BwVZd3b66FVk2rUv8vQ0fwkTNrCXBpO2yLbhO2hirpaWCxvf+JBbr+VJuR5T0Om+ Gd/IhAdO9cIoTOhaN9e51YzqcyCUb+0= -----END CERTIFICATE-----Generated at Sat Sep 26 03:04:08 2026 by rpki-client