$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa File: ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa (raw, json) Hash identifier: gRSJz9x2pf6gUgYMZUQIKht94B809VP6IWZEeP+Xzww= Subject key identifier: D5:EE:81:69:3A:F7:90:20:BF:03:CF:AF:7F:07:25:A7:AB:FF:17:B8 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584F497513381C6CA0B32118CB00 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13009 IP address blocks: 147.249.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:13:38:1c:6c:a0:b3:21:18:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1cdbbced-14be-4017-bd57-f00ea7b61000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:43:4d:e4:53:99:c5:60:2b:39:aa:d9:bb:cc: d8:46:e6:3e:0b:aa:c3:38:03:e7:bc:15:cc:52:27: 74:36:6d:91:af:1a:60:ec:31:27:b8:87:69:f1:c7: 3c:68:eb:8e:a1:00:6e:b6:9c:7f:bb:8b:73:a2:d3: 80:7c:10:b9:63:3d:e1:d4:2b:f4:bf:8c:63:56:e7: 48:c8:bb:3f:69:ca:f1:19:b3:bf:81:c8:50:02:31: b5:c0:5b:a4:e7:a0:5d:78:81:cc:f6:8e:17:29:fe: b9:a0:d9:77:6d:dd:38:71:2d:24:e1:c4:9f:ce:ec: a0:45:8a:56:b3:b0:ca:ea:b9:d2:79:dd:6e:55:06: 22:03:2a:8c:20:90:33:11:fa:3b:aa:08:b6:5e:ff: b7:0e:44:5f:26:bf:78:45:d5:44:57:64:47:e6:d2: 37:bc:cd:a5:b7:52:71:12:ce:21:be:5b:8a:da:24: 36:cb:4f:47:ad:14:2b:3b:c6:1c:5d:15:91:aa:bb: 16:cb:24:15:33:81:d6:c8:bf:d0:90:bf:d8:6f:88: 5a:3b:18:94:a1:b3:bf:f3:a6:34:64:84:f9:f5:cc: ca:f9:52:3b:3d:c7:d1:88:3b:df:41:6b:75:f9:f1: 09:1f:3c:43:f3:d3:74:84:5a:8f:87:09:ed:a9:12: 33:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EE:81:69:3A:F7:90:20:BF:03:CF:AF:7F:07:25:A7:AB:FF:17:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/ee5ea7e9-31cc-3b18-9c75-4ec0decbcd5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:c5:af:79:2d:fd:a6:76:88:8a:d1:a3:e7:d1:86:00:07:f2: 95:78:f3:20:75:47:63:c2:a0:09:af:b4:67:22:f9:b3:46:b6: 4d:1f:b3:dc:48:29:c0:27:1c:5a:83:c3:b6:29:78:37:c3:8a: 9f:28:3a:2a:5c:44:97:5f:44:57:9f:87:50:45:ba:94:31:ff: 3e:36:bc:bd:9b:34:d3:e0:42:9f:90:a4:88:f4:e1:1a:ba:46: 9f:24:11:7a:2f:92:50:1e:43:74:29:69:95:9d:7d:fe:58:9f: 49:65:b6:3b:de:f9:60:ab:13:40:e3:4b:b1:28:54:19:a3:59: 1d:f7:97:19:b3:74:ac:a1:95:e4:0c:b9:89:c1:fb:09:0a:52: 3f:41:42:64:38:24:6d:41:d8:e7:08:68:01:90:64:68:80:14: 9f:29:0f:ed:cb:65:ff:b1:e4:f3:f1:36:ed:80:04:cb:0a:3d: 2f:56:ab:df:f0:bc:8e:9a:6a:5d:cf:5a:77:a0:d0:f5:7c:d5: 65:9e:dc:0e:2d:1c:52:0c:c5:be:d2:50:d1:58:b6:19:7b:ba: 17:f1:93:17:ee:29:09:c8:d8:c6:48:25:db:0c:b8:ba:7c:e5: 9b:b9:6d:8a:2e:d9:84:48:8c:1f:04:7a:c9:bf:d5:f4:f5:6d: b2:c6:d9:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdRM4HGygsyEYywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWNkYmJjZWQtMTRiZS00MDE3LWJkNTctZjAwZWE3YjYxMDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0NN5FOZxWArOarZu8zYRuY+C6rDOAPnvBXM Uid0Nm2Rrxpg7DEnuIdp8cc8aOuOoQButpx/u4tzotOAfBC5Yz3h1Cv0v4xjVudI yLs/acrxGbO/gchQAjG1wFuk56BdeIHM9o4XKf65oNl3bd04cS0k4cSfzuygRYpW s7DK6rnSed1uVQYiAyqMIJAzEfo7qgi2Xv+3DkRfJr94RdVEV2RH5tI3vM2lt1Jx Es4hvluK2iQ2y09HrRQrO8YcXRWRqrsWyyQVM4HWyL/QkL/Yb4haOxiUobO/86Y0 ZIT59czK+VI7PcfRiDvfQWt1+fEJHzxD89N0hFqPhwntqRIzEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXugWk695AgvwPPr38HJaer/xe4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvZWU1ZWE3ZTktMzFjYy0z YjE4LTljNzUtNGVjMGRlY2JjZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/lhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfFr3kt/aZ2iIrRo+fRhgAH8pV48yB1R2PCoAmvtGci+bNGtk0fs9xI KcAnHFqDw7YpeDfDip8oOipcRJdfRFefh1BFupQx/z42vL2bNNPgQp+QpIj04Rq6 Rp8kEXovklAeQ3QpaZWdff5Yn0lltjve+WCrE0DjS7EoVBmjWR33lxmzdKyhleQM uYnB+wkKUj9BQmQ4JG1B2OcIaAGQZGiAFJ8pD+3LZf+x5PPxNu2ABMsKPS9Wq9/w vI6aal3PWneg0PV81WWe3A4tHFIMxb7SUNFYthl7uhfxkxfuKQnI2MZIJdsMuLp8 5Zu5bYou2YRIjB8Eesm/1fT1bbLG2cc= -----END CERTIFICATE-----Generated at Fri Sep 25 07:01:36 2026 by rpki-client