$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa File: df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa (raw, json) Hash identifier: 9bgM5tJP7mhvrdSzP15r3aI9aLQxSoX2c2J4BHn9AVU= Subject key identifier: C6:C2:57:A1:48:D1:60:45:40:ED:4B:CB:19:A8:A0:EE:9F:78:FD:D6 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584F497681FC9597D00AB38E8380 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 18434 IP address blocks: 147.249.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:81:fc:95:97:d0:0a:b3:8e:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e6b009bb-dcb1-44de-afab-5ef83588013a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1d:1f:11:62:d6:0a:10:8c:80:dd:48:12:89: 25:e0:8a:40:7e:d5:7f:65:49:8d:e7:7a:2d:74:15: 3d:55:8e:d8:0c:29:05:bd:e4:d9:0c:0c:97:9f:98: a8:dd:36:89:8a:d8:d1:b2:b2:ee:1f:96:ca:1e:3d: ee:15:4d:de:7e:7a:62:c0:5d:c3:ae:16:fc:2f:a0: 4c:79:32:2b:b2:b3:92:1b:1f:90:1b:ca:05:d4:8f: ca:13:21:0a:1e:99:e2:9b:dc:f1:57:f9:4e:f1:c0: b8:8e:0f:0e:88:d8:ef:9e:fc:35:ed:10:39:0b:a1: b4:c4:30:5b:51:40:b4:dc:d1:9f:00:d2:32:96:63: 54:d3:b9:84:09:36:90:3d:03:88:a5:79:72:e2:32: 0d:60:a1:49:95:d9:9f:db:4a:f7:ab:bb:08:8a:56: 76:32:fd:64:5f:e5:a5:85:52:aa:a0:43:ca:e3:5e: 48:82:d0:c7:a5:33:21:0d:26:36:e1:0c:29:e0:5c: bd:cc:e9:82:d4:9e:63:5a:d8:df:18:1e:53:7b:1d: b1:ec:b2:ad:af:15:34:f2:e8:86:16:fb:65:5d:1f: 10:58:2c:ad:79:53:96:27:42:56:e6:3d:b1:6e:62: a8:39:6c:e1:13:1e:12:4a:2a:12:79:65:9a:ee:8a: 2d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C2:57:A1:48:D1:60:45:40:ED:4B:CB:19:A8:A0:EE:9F:78:FD:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:9e:c0:a1:6f:2d:a7:87:71:56:2d:af:8b:1a:d9:db:33:b0: d8:7b:c5:29:8b:de:d0:fe:93:f0:56:20:51:47:dd:96:d7:24: 1d:33:6e:6b:e6:38:77:2e:27:f3:19:8d:8c:b9:fe:f7:69:a3: 49:6b:c7:f6:27:1b:e6:ff:8f:92:b8:f3:01:9b:97:6f:ee:f3: 6b:bb:d5:97:f7:57:a3:a1:2f:d2:e6:d8:f0:f2:5d:2a:33:14: 37:1a:b6:2c:06:81:73:23:6d:0c:22:da:98:00:6d:3b:1f:03: 61:5f:77:22:36:22:db:6f:4a:5a:06:51:0c:ac:fa:54:84:88: 1f:b8:3c:88:12:48:c5:3a:24:18:07:9e:c6:86:86:86:a8:f8: 24:91:c9:c1:71:e4:63:dc:be:28:92:96:cc:25:3e:17:ce:7d: 36:60:f9:e2:18:bd:78:c5:dc:8d:f8:96:04:b5:ac:24:71:ce: 98:97:6a:9f:d7:4c:f4:ad:9c:95:86:ce:fc:d6:44:33:0a:74: ff:d4:9b:74:13:7a:9e:85:ed:f0:32:be:e0:d4:75:c2:f4:9c: 6f:6b:39:42:34:40:bb:fc:4c:95:2a:a2:9d:fb:a8:dc:48:7d: a3:9e:9f:a0:86:ba:e3:1e:3d:b1:ca:5d:35:15:de:c7:18:3b: 61:2d:45:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdoH8lZfQCrOOg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTZiMDA5YmItZGNiMS00NGRlLWFmYWItNWVmODM1ODgwMTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh0fEWLWChCMgN1IEokl4IpAftV/ZUmN53ot dBU9VY7YDCkFveTZDAyXn5io3TaJitjRsrLuH5bKHj3uFU3efnpiwF3Drhb8L6BM eTIrsrOSGx+QG8oF1I/KEyEKHpnim9zxV/lO8cC4jg8OiNjvnvw17RA5C6G0xDBb UUC03NGfANIylmNU07mECTaQPQOIpXly4jINYKFJldmf20r3q7sIilZ2Mv1kX+Wl hVKqoEPK415IgtDHpTMhDSY24Qwp4Fy9zOmC1J5jWtjfGB5Tex2x7LKtrxU08uiG FvtlXR8QWCyteVOWJ0JW5j2xbmKoOWzhEx4SSioSeWWa7ootCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbCV6FI0WBFQO1LyxmooO6feP3WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvZGYwMmFkMWQtMjFlMi0z OWQ3LWJmMDItNDRhZmY0NWI4NGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWewKFvLaeHcVYtr4sa2dszsNh7xSmL3tD+k/BWIFFH3ZbXJB0zbmvm OHcuJ/MZjYy5/vdpo0lrx/YnG+b/j5K48wGbl2/u82u71Zf3V6OhL9Lm2PDyXSoz FDcatiwGgXMjbQwi2pgAbTsfA2FfdyI2IttvSloGUQys+lSEiB+4PIgSSMU6JBgH nsaGhoao+CSRycFx5GPcviiSlswlPhfOfTZg+eIYvXjF3I34lgS1rCRxzpiXap/X TPStnJWGzvzWRDMKdP/Um3QTep6F7fAyvuDUdcL0nG9rOUI0QLv8TJUqop37qNxI faOen6CGuuMePbHKXTUV3scYO2EtRfs= -----END CERTIFICATE-----Generated at Sat Sep 26 12:53:04 2026 by rpki-client