$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3e389885-f4bd-367c-9b4e-da0810223811.roa File: 3e389885-f4bd-367c-9b4e-da0810223811.roa (raw, json) Hash identifier: wTwuaK9gpL5okEtDi0lzmgUv0xCJ0oGe/yXvcUiILdc= Subject key identifier: 87:C1:1E:89:90:B9:51:16:6D:17:39:1B:54:1A:DA:DA:0D:01:81:50 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F3CE27A6C2A97CA0CE4A41100 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3e389885-f4bd-367c-9b4e-da0810223811.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 147.53.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:7a:6c:2a:97:ca:0c:e4:a4:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=765ca431-f41c-4e36-bf37-3b5f16f4ea98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:33:fe:fb:ea:7a:74:89:fc:a5:12:45:73:d5: e9:8d:46:af:bd:cb:67:1f:10:b7:ab:5d:21:bf:0f: d4:b0:42:af:0a:b6:43:06:3d:8a:54:5e:81:56:ce: 73:93:0d:af:9d:ff:fe:0c:24:90:b2:c6:5c:c9:6c: 21:de:9f:7c:2d:04:97:74:79:05:b4:f0:50:d8:60: 0e:1a:67:77:a8:a6:42:17:fc:f0:9c:06:9a:10:9e: 95:ff:cb:43:f7:4e:b1:68:ab:85:49:2e:d0:4d:7f: 66:b6:e9:0a:74:a1:3b:82:20:07:91:05:70:bb:de: 37:f7:93:fc:f4:01:25:af:e3:27:20:0c:4e:75:1a: 68:33:7b:dd:a8:eb:86:e8:e9:2a:4f:3e:68:d7:41: e8:18:63:5f:41:e9:2d:92:13:2a:e4:b1:c9:02:1c: a7:63:6e:46:7c:74:59:2b:23:a6:d3:32:69:1a:47: 6f:36:05:ea:b1:b8:55:4b:fe:2c:65:ce:2c:ba:e3: 83:66:ca:12:e3:4a:d0:5e:9d:44:a3:00:2e:cd:ef: 6b:2c:d8:66:c3:73:3d:30:06:4c:88:8f:fe:6f:84: 27:4d:04:11:5d:33:06:07:88:75:b0:88:2c:cd:34: 08:f2:26:d6:90:bd:fc:81:30:bf:c8:e9:cb:9f:f4: 82:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C1:1E:89:90:B9:51:16:6D:17:39:1B:54:1A:DA:DA:0D:01:81:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3e389885-f4bd-367c-9b4e-da0810223811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 147.53.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:30:45:20:40:47:b7:cd:1e:6d:83:44:aa:78:ef:93:34:f7: ab:c1:f1:83:ca:ef:04:f4:44:fa:0d:eb:3b:43:03:86:20:c1: c2:f5:6a:e2:52:5f:c0:16:8a:27:51:7a:a1:05:e7:39:c9:3c: a0:83:a6:dc:38:06:88:f1:7e:0a:97:ad:d4:3b:47:28:2e:24: 64:a4:03:cf:c2:2e:ce:f3:f4:07:a5:2b:d3:06:26:73:58:1c: 50:bf:e8:2f:7c:e2:e1:cf:d2:29:c4:96:9f:44:50:2c:26:bd: 39:79:5b:a6:30:26:61:62:f5:0c:2a:87:40:25:7e:5b:85:d5: 55:3b:db:5c:4c:cb:8d:68:3b:12:b5:50:bd:51:b8:e5:91:25: 4e:44:34:4c:3f:35:36:bd:83:cc:c0:22:45:6a:af:f1:05:37: 2d:4f:15:75:76:19:82:ed:e6:e1:16:3a:ce:ef:62:5d:3e:f1: 47:41:74:4f:22:9f:e7:1b:5e:d4:8c:b3:2c:a1:04:70:09:b2: 9d:ad:07:3a:aa:91:e7:51:23:4f:08:9c:b2:37:0b:07:c9:49: e0:41:7d:48:6e:c2:1c:b3:3b:d5:b2:86:36:19:8f:f4:94:4e: 23:d2:ed:17:e9:70:08:c4:b3:40:f5:cc:a2:6a:91:e1:10:13: a7:7d:77:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884npsKpfKDOSkEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk NzY1Y2E0MzEtZjQxYy00ZTM2LWJmMzctM2I1ZjE2ZjRlYTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzP+++p6dIn8pRJFc9XpjUavvctnHxC3q10h vw/UsEKvCrZDBj2KVF6BVs5zkw2vnf/+DCSQssZcyWwh3p98LQSXdHkFtPBQ2GAO Gmd3qKZCF/zwnAaaEJ6V/8tD906xaKuFSS7QTX9mtukKdKE7giAHkQVwu94395P8 9AElr+MnIAxOdRpoM3vdqOuG6OkqTz5o10HoGGNfQektkhMq5LHJAhynY25GfHRZ KyOm0zJpGkdvNgXqsbhVS/4sZc4suuODZsoS40rQXp1EowAuze9rLNhmw3M9MAZM iI/+b4QnTQQRXTMGB4h1sIgszTQI8ibWkL38gTC/yOnLn/SC8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfBHomQuVEWbRc5G1Qa2toNAYFQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvM2UzODk4ODUtZjRiZC0z NjdjLTliNGUtZGEwODEwMjIzODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzV5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIwRSBAR7fNHm2DRKp475M096vB8YPK7wT0RPoN6ztDA4YgwcL1auJS X8AWiidReqEF5znJPKCDptw4BojxfgqXrdQ7RyguJGSkA8/CLs7z9AelK9MGJnNY HFC/6C984uHP0inElp9EUCwmvTl5W6YwJmFi9Qwqh0AlfluF1VU721xMy41oOxK1 UL1RuOWRJU5ENEw/NTa9g8zAIkVqr/EFNy1PFXV2GYLt5uEWOs7vYl0+8UdBdE8i n+cbXtSMsyyhBHAJsp2tBzqqkedRI08InLI3CwfJSeBBfUhuwhyzO9WyhjYZj/SU TiPS7RfpcAjEs0D1zKJqkeEQE6d9d7k= -----END CERTIFICATE-----Generated at Sun Oct 4 10:28:20 2026 by rpki-client