$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa File: cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa (raw, json) Hash identifier: 6g7351tcxKPwlLkTWcfZPD6mEPhu0T22a5Fj5YsKrU8= Subject key identifier: CC:11:35:9A:33:52:40:31:BF:46:63:3C:37:A5:88:79:A1:F4:B0:5C Certificate issuer: /CN=994eeb97-12ef-4721-824f-9ba41ba67983 Certificate serial: 010D0C9F4328584F497604D8952271C6A3AB6A80 Authority key identifier: 1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23539 IP address blocks: 147.185.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:04:d8:95:22:71:c6:a3:ab:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994eeb97-12ef-4721-824f-9ba41ba67983 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=08e749bb-7064-45b6-88ee-7193e63b854e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1e:32:cc:d9:03:95:fe:cd:1b:f5:fb:9b:01: 9f:c6:fc:5e:0a:2f:01:d0:67:1a:b6:a9:42:61:2d: c2:6b:2a:af:c1:68:c7:5f:bd:09:ee:a4:0e:ae:e4: 10:61:cd:ea:b0:c9:9d:0a:9a:7a:d0:ed:82:29:3e: df:5d:6c:68:a4:0b:04:aa:bb:7f:21:35:90:58:1d: 7d:01:18:cd:b7:35:42:a1:04:3d:01:ab:c3:20:26: a1:a4:59:82:08:22:15:f0:8d:52:26:25:a2:c2:34: 33:61:09:88:23:bd:0b:7b:d5:60:65:f1:b3:92:d8: af:46:7a:c9:6e:2a:b8:8e:1b:f9:dc:c0:5f:e5:92: 7c:47:a7:66:10:ce:f5:f4:64:2c:84:6b:9c:1b:93: 09:b8:47:7e:66:1f:ba:63:f3:42:1e:5c:34:a7:28: f6:e9:70:82:53:61:fd:dd:47:18:97:c7:61:da:19: 39:05:22:e8:e9:a2:86:5e:d5:a3:fd:26:5f:24:0d: 27:60:f2:ba:1e:7f:64:ce:9b:41:d9:36:a2:46:fd: 15:b2:1a:7d:20:c1:74:46:28:f5:77:4b:2d:6e:a7: c1:ee:ea:a5:49:7b:c0:50:b9:ad:d9:b3:89:9a:60: 4c:ea:b3:ef:62:9b:40:5f:ce:3f:ab:5c:20:95:ca: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:11:35:9A:33:52:40:31:BF:46:63:3C:37:A5:88:79:A1:F4:B0:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/cdc55559-8ca0-32ae-9279-df33cf9ef5a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl X509v3 Authority Key Identifier: keyid:1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer sbgp-ipAddrBlock: critical IPv4: 147.185.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:dd:34:0a:b9:d2:b5:2a:3d:5f:9b:d4:f5:86:67:88:e4:88: 23:7a:9e:c1:4d:34:d8:6f:fa:9f:68:7f:16:91:99:53:31:2e: f3:1b:12:2b:e7:b5:2d:c2:54:d8:d6:80:ad:2b:ce:fa:13:b6: 1f:0b:57:1f:f4:20:2a:06:4f:ec:d4:71:fd:cc:8b:8b:4b:bb: 89:d8:ee:1a:17:1a:1d:e6:60:ff:1c:d7:43:ef:2b:d6:2b:fa: 7c:24:ed:9f:49:43:95:8f:2f:03:92:1b:2c:a8:28:9a:72:93: a5:11:e4:ba:44:72:34:61:e6:22:29:78:2f:1a:6c:f0:6e:c7: d0:6d:d3:1c:bb:34:5d:c1:cd:70:00:0e:7d:69:e1:e0:0d:05: 04:44:f3:0d:a5:5e:af:1e:91:29:d8:86:09:64:5f:a1:5e:6d: 34:24:7e:dc:1a:06:2e:11:3e:a5:09:74:76:24:ac:4b:05:6a: e8:87:71:01:24:0b:ea:b6:71:6c:c4:ae:d9:ee:3e:13:33:42: 88:08:5b:a9:ef:52:17:23:d5:46:8f:bb:5a:56:55:09:22:6e: 2a:a2:ae:10:84:44:82:b5:37:b8:2c:7a:23:b7:5b:7f:8a:65: 12:b7:76:d3:6b:64:a3:f5:60:67:91:c0:81:a1:2a:fc:da:7a: 27:d1:c4:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdgTYlSJxxqOraoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0ZWViOTctMTJlZi00NzIxLTgyNGYtOWJhNDFiYTY3 OTgzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDhlNzQ5YmItNzA2NC00NWI2LTg4ZWUtNzE5M2U2M2I4NTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR4yzNkDlf7NG/X7mwGfxvxeCi8B0GcatqlC YS3CayqvwWjHX70J7qQOruQQYc3qsMmdCpp60O2CKT7fXWxopAsEqrt/ITWQWB19 ARjNtzVCoQQ9AavDICahpFmCCCIV8I1SJiWiwjQzYQmII70Le9VgZfGzktivRnrJ biq4jhv53MBf5ZJ8R6dmEM719GQshGucG5MJuEd+Zh+6Y/NCHlw0pyj26XCCU2H9 3UcYl8dh2hk5BSLo6aKGXtWj/SZfJA0nYPK6Hn9kzptB2TaiRv0Vshp9IMF0Rij1 d0stbqfB7uqlSXvAULmt2bOJmmBM6rPvYptAX84/q1wglcra9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwRNZozUkAxv0ZjPDeliHmh9LBcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85OTRl ZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0MWJhNjc5ODMvY2RjNTU1NTktOGNhMC0z MmFlLTkyNzktZGYzM2NmOWVmNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTk0ZWViOTctMTJlZi00NzIxLTgy NGYtOWJhNDFiYTY3OTgzLzk5NGVlYjk3LTEyZWYtNDcyMS04MjRmLTliYTQxYmE2 Nzk4My5jcmwwHwYDVR0jBBgwFoAUHHbEf8LL+oxCYBMTd941QZrU5EQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85OTRlZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0 MWJhNjc5ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7m8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7dNAq50rUqPV+b1PWGZ4jkiCN6nsFNNNhv+p9ofxaRmVMxLvMbEivn tS3CVNjWgK0rzvoTth8LVx/0ICoGT+zUcf3Mi4tLu4nY7hoXGh3mYP8c10PvK9Yr +nwk7Z9JQ5WPLwOSGyyoKJpyk6UR5LpEcjRh5iIpeC8abPBux9Bt0xy7NF3BzXAA Dn1p4eANBQRE8w2lXq8ekSnYhglkX6FebTQkftwaBi4RPqUJdHYkrEsFauiHcQEk C+q2cWzErtnuPhMzQogIW6nvUhcj1UaPu1pWVQkibiqirhCERIK1N7gseiO3W3+K ZRK3dtNrZKP1YGeRwIGhKvzaeifRxAk= -----END CERTIFICATE-----Generated at Sun Oct 4 07:34:55 2026 by rpki-client