$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/1bb690cd-2388-3eaf-881d-f9de6ab12a96.roa File: 1bb690cd-2388-3eaf-881d-f9de6ab12a96.roa (raw, json) Hash identifier: BhqoBDwflnVkGNgU1vUC/bAs6iiqJ2Y+t7IqcJh/rfg= Subject key identifier: 0D:C8:99:22:E6:14:23:A6:A6:47:DC:D4:D0:6D:6F:1A:47:16:0B:DC Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584F1B624F7938A681AF64479B80 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/1bb690cd-2388-3eaf-881d-f9de6ab12a96.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 23467 IP address blocks: 162.247.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4f:79:38:a6:81:af:64:47:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=47619d3d-e944-4bef-8dab-102020f68e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:26:b9:da:39:e9:10:94:b6:32:85:40:8c: 74:2c:62:47:f3:52:23:20:f2:05:3f:85:af:0d:7a: 69:21:b8:4b:9f:32:30:a8:53:87:34:88:a2:81:fe: 36:eb:78:aa:89:c8:f9:8b:09:1e:19:e4:0b:93:7b: 06:07:3d:2d:6d:c6:8d:13:2c:ee:ea:4c:85:d7:21: 1e:8f:cb:24:85:16:49:3d:25:3d:d7:ec:d2:08:c5: eb:d9:5d:9c:2f:db:6a:14:08:9b:61:61:00:68:25: 78:eb:2a:9c:02:d9:75:21:aa:88:9c:d6:a4:f5:62: 1b:7b:2a:2c:b3:c5:33:ea:66:6f:67:85:4a:0e:86: 0f:0e:44:a2:4f:3c:bc:ca:76:7a:ea:27:23:d3:d3: cd:ad:f1:0e:39:8b:85:6a:e1:bf:bb:32:03:e4:34: 0a:a2:5c:09:05:2d:0c:45:eb:a6:65:05:d1:d8:d2: 56:c9:e2:bd:5d:a9:d8:ae:5b:20:c4:ef:aa:17:7b: be:a2:97:ce:12:b5:e3:1a:55:0e:51:5c:bd:b0:33: ca:75:ad:fd:c5:7a:5c:cd:89:a6:46:f3:4b:78:ca: 67:49:12:9a:32:d7:77:02:18:d2:b5:2d:c4:35:b9: e2:ec:dd:ce:b8:ec:f9:2d:3d:2d:a1:37:e5:99:4f: fc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C8:99:22:E6:14:23:A6:A6:47:DC:D4:D0:6D:6F:1A:47:16:0B:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/1bb690cd-2388-3eaf-881d-f9de6ab12a96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 162.247.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ad:13:71:51:8f:3a:38:a9:65:36:b0:3d:23:67:4e:32:54: be:16:17:8c:f7:63:f4:a0:9a:03:b6:44:07:d6:cd:56:7a:41: 0d:18:25:48:06:66:8f:4e:d3:3d:e4:e2:ac:17:e6:e5:b7:ca: e3:60:26:98:f5:0d:c4:aa:8b:25:81:5b:c9:41:9c:38:3f:6c: 87:58:68:b5:bd:f4:22:69:8e:fa:4b:d4:33:dc:65:73:21:0b: 67:12:0a:c2:1a:dc:26:5d:b5:b0:71:42:37:83:af:28:e1:23: fc:0f:a8:b9:14:48:e3:8a:94:67:b1:0f:7c:55:e3:a6:86:00: 4c:de:ac:4c:91:d3:94:00:b1:47:42:cc:83:a8:84:8c:ae:ec: a1:1f:f0:3b:6a:a8:74:de:9c:d4:3d:96:a1:bc:59:88:e1:54: 0e:e9:1a:7b:49:68:30:98:32:2e:e6:4c:1d:01:01:02:25:15: c8:d6:e4:a7:63:92:88:05:50:27:a4:f8:63:a7:6e:72:3c:c4: a5:1c:fc:b4:3c:e5:c5:6d:58:14:c5:5e:26:86:80:10:bd:e7: 23:39:44:f9:2c:33:70:70:c5:ed:56:1e:29:2c:56:ff:93:f8: 33:47:5f:6d:43:93:bc:d7:03:77:da:cb:99:e2:b7:e6:5e:b8: 6f:ac:b0:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYk95OKaBr2RHm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk NDc2MTlkM2QtZTk0NC00YmVmLThkYWItMTAyMDIwZjY4ZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD0mudo56RCUtjKFQIx0LGJH81IjIPIFP4Wv DXppIbhLnzIwqFOHNIiigf4263iqicj5iwkeGeQLk3sGBz0tbcaNEyzu6kyF1yEe j8skhRZJPSU91+zSCMXr2V2cL9tqFAibYWEAaCV46yqcAtl1IaqInNak9WIbeyos s8Uz6mZvZ4VKDoYPDkSiTzy8ynZ66icj09PNrfEOOYuFauG/uzID5DQKolwJBS0M ReumZQXR2NJWyeK9XanYrlsgxO+qF3u+opfOErXjGlUOUVy9sDPKda39xXpczYmm RvNLeMpnSRKaMtd3AhjStS3ENbni7N3OuOz5LT0toTflmU/8rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3ImSLmFCOmpkfc1NBtbxpHFgvcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMWJiNjkwY2QtMjM4OC0z ZWFmLTg4MWQtZjlkZTZhYjEyYTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqtE3FRjzo4qWU2sD0jZ04yVL4WF4z3Y/SgmgO2RAfWzVZ6QQ0YJUgG Zo9O0z3k4qwX5uW3yuNgJpj1DcSqiyWBW8lBnDg/bIdYaLW99CJpjvpL1DPcZXMh C2cSCsIa3CZdtbBxQjeDryjhI/wPqLkUSOOKlGexD3xV46aGAEzerEyR05QAsUdC zIOohIyu7KEf8DtqqHTenNQ9lqG8WYjhVA7pGntJaDCYMi7mTB0BAQIlFcjW5Kdj kogFUCek+GOnbnI8xKUc/LQ85cVtWBTFXiaGgBC95yM5RPksM3Bwxe1WHiksVv+T +DNHX21Dk7zXA3fay5nit+ZeuG+ssME= -----END CERTIFICATE-----Generated at Thu Sep 24 23:51:11 2026 by rpki-client