$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/5ea321b3-1e58-32f5-92d0-b56040ab0daa.roa File: 5ea321b3-1e58-32f5-92d0-b56040ab0daa.roa (raw, json) Hash identifier: 7SgAjtXcdnQpwuVD+kMU2rGhkWl2yxU8eNDIqQwBeKw= Subject key identifier: 68:BB:43:8F:68:DF:80:82:5D:CB:7B:BC:84:E8:47:70:C3:9C:E8:07 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584F3CE28726BB99E67D31506C00 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/5ea321b3-1e58-32f5-92d0-b56040ab0daa.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 18434 IP address blocks: 147.249.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:87:26:bb:99:e6:7d:31:50:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=6cc7f83e-851e-4681-ab26-19ae793ff2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:94:83:e7:0f:17:e8:bc:39:da:4f:23:84:7c: 6d:6b:28:3e:78:ad:ad:ef:95:2b:19:83:30:dc:d7: b5:85:e3:96:9c:e8:df:95:0a:1b:8d:da:85:e0:ca: 34:78:57:e1:a3:dc:6f:33:d7:be:37:2d:8f:f3:a9: 83:a5:ed:57:59:88:1e:10:20:c3:35:a4:5f:2a:97: 71:97:d8:75:27:97:9f:f1:54:a0:7e:58:7f:33:3a: 92:0f:7a:b6:45:d8:bb:42:14:c7:0f:6e:a3:5b:17: e1:98:61:65:17:84:fc:a7:74:b0:2e:84:df:ad:9e: 59:8b:88:c5:f9:dd:45:0f:f0:3a:14:3e:0e:e9:ae: e0:27:bd:ff:ef:97:68:5a:44:fa:62:2b:19:b0:0a: 5f:a5:67:20:36:3f:41:40:67:38:cf:f3:92:e3:c2: 6f:97:c7:c0:68:fe:dc:01:b7:85:d6:eb:64:18:9f: d3:eb:63:ff:be:a9:1c:b6:97:1d:93:13:06:a7:2e: 1e:91:30:61:b4:27:58:c6:fe:01:cd:f9:6a:a0:fe: 3f:83:27:1d:50:d3:0e:32:a3:b5:35:6a:9e:5b:50: e5:0c:01:4c:70:25:de:63:1d:42:f3:0c:0e:cc:81: 44:4e:27:48:7b:e5:38:4b:33:2c:e2:af:4e:b4:9d: 21:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BB:43:8F:68:DF:80:82:5D:CB:7B:BC:84:E8:47:70:C3:9C:E8:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/5ea321b3-1e58-32f5-92d0-b56040ab0daa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:02:08:1e:fe:5e:71:85:49:ac:3e:73:24:29:ac:a4:d4:f1: e9:68:93:6f:ec:40:8e:bb:55:ba:de:78:13:5c:7a:77:2c:ba: 4e:08:c4:4a:3e:c3:9a:e8:dd:c0:93:de:16:bc:1f:ed:f3:6f: b3:b7:bd:db:33:04:db:99:07:66:b5:bc:d8:58:2c:c5:1a:1e: 9a:fd:56:8c:3e:ec:c5:95:d4:ad:97:0a:0c:09:b0:8c:62:94: f9:4a:6a:4c:66:c5:4f:a3:34:eb:84:5b:d2:bd:c0:d4:5e:41: 82:6e:a0:03:6e:12:0d:79:94:d5:cd:64:a3:27:27:d9:25:d6: 94:3c:d7:fc:3b:91:5b:3e:13:5a:af:df:06:f0:1e:bb:02:5f: 77:e1:01:03:ba:41:62:60:cb:c1:93:a4:da:9e:f0:0d:1e:e7: 3e:ed:e5:c9:c5:28:b0:5f:74:34:03:12:80:3a:00:55:41:af: d7:58:89:76:3c:da:cd:31:dd:24:07:db:40:4d:42:54:24:64: 31:92:2d:3a:a9:22:16:79:6d:ba:19:cc:99:0c:3a:3f:74:09: 95:bc:3a:dd:28:59:6d:07:ca:a0:08:44:81:7f:c9:7e:58:02: 08:dd:31:51:e5:7c:fd:87:7a:26:bb:76:3c:69:cf:e6:67:65: 97:e1:f7:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884ocmu5nmfTFQbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk NmNjN2Y4M2UtODUxZS00NjgxLWFiMjYtMTlhZTc5M2ZmMmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5SD5w8X6Lw52k8jhHxtayg+eK2t75UrGYMw 3Ne1heOWnOjflQobjdqF4Mo0eFfho9xvM9e+Ny2P86mDpe1XWYgeECDDNaRfKpdx l9h1J5ef8VSgflh/MzqSD3q2Rdi7QhTHD26jWxfhmGFlF4T8p3SwLoTfrZ5Zi4jF +d1FD/A6FD4O6a7gJ73/75doWkT6YisZsApfpWcgNj9BQGc4z/OS48Jvl8fAaP7c AbeF1utkGJ/T62P/vqkctpcdkxMGpy4ekTBhtCdYxv4BzflqoP4/gycdUNMOMqO1 NWqeW1DlDAFMcCXeYx1C8wwOzIFETidIe+U4SzMs4q9OtJ0h0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGi7Q49o34CCXct7vIToR3DDnOgHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvNWVhMzIxYjMtMWU1OC0z MmY1LTkyZDAtYjU2MDQwYWIwZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/ksMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoCCB7+XnGFSaw+cyQprKTU8elok2/sQI67VbreeBNcencsuk4IxEo+ w5ro3cCT3ha8H+3zb7O3vdszBNuZB2a1vNhYLMUaHpr9Vow+7MWV1K2XCgwJsIxi lPlKakxmxU+jNOuEW9K9wNReQYJuoANuEg15lNXNZKMnJ9kl1pQ81/w7kVs+E1qv 3wbwHrsCX3fhAQO6QWJgy8GTpNqe8A0e5z7t5cnFKLBfdDQDEoA6AFVBr9dYiXY8 2s0x3SQH20BNQlQkZDGSLTqpIhZ5bboZzJkMOj90CZW8Ot0oWW0HyqAIRIF/yX5Y AgjdMVHlfP2Heia7djxpz+ZnZZfh98A= -----END CERTIFICATE-----Generated at Tue Sep 22 18:05:03 2026 by rpki-client