$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/67f904de-0911-32b9-bf9c-27f543b6f323.roa File: 67f904de-0911-32b9-bf9c-27f543b6f323.roa (raw, json) Hash identifier: 6s7E2ILJ21w1/zytRyuFHh/LqDKLdysZLg0DaV9ocX4= Subject key identifier: 81:67:11:A2:70:BE:40:6C:78:D6:55:CC:35:47:7F:39:DA:23:3A:6E Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584F45428307EB80165DFBACE660 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/67f904de-0911-32b9-bf9c-27f543b6f323.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 54113 IP address blocks: 162.247.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:83:07:eb:80:16:5d:fb:ac:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=5d4c9997-d0be-4ec9-8b5c-7f9268774006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:39:a5:07:46:96:7b:4c:0e:90:7c:0d:e1:7e: dd:82:50:6e:d3:cf:69:fa:15:0d:61:66:90:43:8b: d5:7b:f2:01:8d:e7:f3:53:80:0b:86:76:18:13:9e: ca:ef:82:26:6c:64:68:4d:26:da:85:68:2d:9b:75: ad:f7:83:93:6e:30:20:d1:46:05:25:94:b8:26:24: 13:6b:2f:01:90:dc:8c:ad:79:7b:75:a5:6b:7f:6b: d2:4e:1a:96:01:1d:67:f4:3f:34:a0:cb:aa:76:01: 86:0f:39:67:21:11:7e:15:06:11:f6:31:47:89:0a: f3:8b:99:70:59:f3:92:3a:f0:be:e1:7f:7f:6e:6b: 0d:b5:10:ed:c0:33:97:c5:e7:99:8d:2b:9d:86:92: 04:28:f5:b9:12:bc:d9:1c:c3:31:0a:67:7c:18:2e: 0a:86:15:3a:a0:a7:90:be:fb:7a:cb:07:d5:bf:43: fd:01:4c:bd:ad:19:8a:df:49:73:96:5c:19:d2:ae: 6d:59:e9:2a:42:de:b4:ce:fe:a7:b5:3c:a1:c9:f2: 02:99:34:68:98:b2:84:9a:d5:45:c4:1b:0c:6d:90: 53:cf:73:49:81:1c:aa:3c:d3:ab:a8:4f:ae:59:8b: 00:16:7b:0a:61:1e:c2:26:8e:b1:b8:f8:6d:67:ba: 55:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:67:11:A2:70:BE:40:6C:78:D6:55:CC:35:47:7F:39:DA:23:3A:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/67f904de-0911-32b9-bf9c-27f543b6f323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 162.247.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ec:82:e0:bc:ec:a0:ca:c9:03:95:be:e2:0b:f7:00:da:11: 56:03:f0:e8:bd:7d:52:81:f0:50:fa:91:0f:33:a5:a6:56:7e: 43:fc:25:8a:18:f1:59:cd:a4:b4:75:6f:b7:51:9e:db:f1:7d: fe:9c:4a:45:d5:07:5b:72:3b:30:19:63:53:e1:f5:34:36:0e: 4c:16:c2:69:d4:60:64:93:99:8b:53:37:bd:7d:02:d1:df:c1: 91:4a:bb:da:3c:da:3a:81:8f:64:51:0b:36:34:a2:7c:b7:eb: 00:d2:e3:ad:15:3c:9a:f8:ad:4b:86:6d:81:bb:27:2f:22:85: 6a:df:a3:e3:38:d7:6e:c3:fd:2a:a6:07:9c:03:c4:a1:6c:8a: 1f:58:5e:4c:61:4e:0c:a6:76:5a:d9:e9:4e:ec:e4:75:8d:a8: 9f:c4:fb:12:b0:8a:43:7b:46:22:0f:90:d4:e4:a5:81:e7:08: 94:90:a9:df:23:58:64:5f:37:22:5f:6e:cd:cd:84:55:63:6d: 44:7b:77:c0:a2:53:39:85:9c:f6:62:bc:68:c7:64:b6:6c:8d: ee:e1:48:4b:7a:3e:ee:cd:5f:bd:ed:b5:37:ae:63:36:d3:0f: 68:ef:6b:47:5e:ed:e6:ad:76:39:82:45:1a:f0:dd:56:16:49: aa:5c:d8:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQoMH64AWXfus5mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk NWQ0Yzk5OTctZDBiZS00ZWM5LThiNWMtN2Y5MjY4Nzc0MDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjmlB0aWe0wOkHwN4X7dglBu089p+hUNYWaQ Q4vVe/IBjefzU4ALhnYYE57K74ImbGRoTSbahWgtm3Wt94OTbjAg0UYFJZS4JiQT ay8BkNyMrXl7daVrf2vSThqWAR1n9D80oMuqdgGGDzlnIRF+FQYR9jFHiQrzi5lw WfOSOvC+4X9/bmsNtRDtwDOXxeeZjSudhpIEKPW5ErzZHMMxCmd8GC4KhhU6oKeQ vvt6ywfVv0P9AUy9rRmK30lzllwZ0q5tWekqQt60zv6ntTyhyfICmTRomLKEmtVF xBsMbZBTz3NJgRyqPNOrqE+uWYsAFnsKYR7CJo6xuPhtZ7pVxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFnEaJwvkBseNZVzDVHfznaIzpuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvNjdmOTA0ZGUtMDkxMS0z MmI5LWJmOWMtMjdmNTQzYjZmMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovfzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXsguC87KDKyQOVvuIL9wDaEVYD8Oi9fVKB8FD6kQ8zpaZWfkP8JYoY 8VnNpLR1b7dRntvxff6cSkXVB1tyOzAZY1Ph9TQ2DkwWwmnUYGSTmYtTN719AtHf wZFKu9o82jqBj2RRCzY0ony36wDS460VPJr4rUuGbYG7Jy8ihWrfo+M4127D/Sqm B5wDxKFsih9YXkxhTgymdlrZ6U7s5HWNqJ/E+xKwikN7RiIPkNTkpYHnCJSQqd8j WGRfNyJfbs3NhFVjbUR7d8CiUzmFnPZivGjHZLZsje7hSEt6Pu7NX73ttTeuYzbT D2jva0de7eatdjmCRRrw3VYWSapc2JM= -----END CERTIFICATE-----Generated at Thu Sep 24 12:27:51 2026 by rpki-client