$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa File: 8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa (raw, json) Hash identifier: CCnosVWQoeiYUxMYhZPlhxs24dAXK0z4OP0MpK3b2BQ= Subject key identifier: AB:FB:AC:AC:51:4E:DF:DD:CB:D0:EC:8E:5E:1C:23:8E:C9:3B:2E:93 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584FBAA11190FEF5E6AF53075880 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa Signing time: Wed 04 Nov 2026 14:00:13 +0000 ROA not before: Wed 04 Nov 2026 14:00:13 +0000 ROA not after: Tue 02 Feb 2027 14:00:13 +0000 asID: 18434 IP address blocks: 147.249.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ba:a1:11:90:fe:f5:e6:af:53:07:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Nov 4 14:00:13 2026 GMT Not After : Feb 2 14:00:13 2027 GMT Subject: CN=add39d99-2387-40b9-aba0-8a5d14afea91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:de:e5:34:6a:b9:86:89:c8:6d:68:3f:9d:5e: 70:e5:6d:92:b3:12:0a:49:4a:25:65:b3:dd:95:7c: 23:79:eb:eb:48:41:75:5e:64:e0:21:d3:82:ab:33: 52:6f:62:e2:b0:06:13:13:59:d4:b3:26:aa:4e:0e: 7a:cb:84:35:c4:10:e6:fc:ab:d1:5f:f8:cb:08:4b: c4:33:b4:82:cf:c5:d2:25:76:b7:b1:8d:b6:f2:29: 4a:7a:6a:87:54:91:e0:d0:ee:68:ec:eb:d3:2f:8b: 06:81:69:45:52:86:47:72:0d:81:2e:8d:ea:15:da: 8d:14:75:75:44:76:47:36:f7:05:57:fd:76:d1:78: 8e:8b:f2:02:29:c4:13:b9:0e:d6:63:5e:f2:63:97: e4:65:fa:cf:3e:17:0d:cc:fa:68:4c:13:29:13:f9: 95:60:54:a3:21:c4:da:64:84:bf:3a:58:d8:b0:d9: 0c:1b:f8:76:77:59:19:9d:dd:b0:18:d7:62:bd:64: 04:ef:b4:f5:d2:7b:ba:7e:56:32:ae:ad:31:c8:2e: df:11:c7:a3:b9:d5:b6:f3:a0:70:83:c4:d2:2f:c8: 57:89:35:b5:72:69:95:5d:ad:72:c4:82:62:9b:fa: bb:2e:0d:55:cf:e9:81:97:67:ea:e1:90:cc:9f:dc: 57:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FB:AC:AC:51:4E:DF:DD:CB:D0:EC:8E:5E:1C:23:8E:C9:3B:2E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:f4:da:a5:de:08:ae:b6:c3:83:5f:21:78:2e:7b:34:62:2c: c3:8f:57:ff:76:4f:3b:34:b4:b6:4e:da:a5:83:c2:9c:b2:ac: 8a:9f:3b:c4:c9:bb:3b:44:bc:c5:2e:c1:c3:f3:9f:47:14:cf: 4b:19:4e:6b:e1:d3:0d:29:fe:8e:6a:73:91:0b:29:b8:e4:b3: d9:fe:80:6b:6e:21:a9:bc:af:ac:f8:ce:d5:b9:ca:cf:dd:ae: 2f:22:42:88:ca:85:a0:06:39:e9:b6:9f:08:84:dc:16:0b:92: 09:41:aa:df:a3:2b:9d:b9:5b:2c:b6:6d:26:17:9f:13:fa:b4: ce:b5:82:5b:e4:a3:da:57:ca:fc:63:f8:7b:8b:d9:6b:08:15: 58:d6:54:51:66:c3:2f:fc:c2:fe:f3:7c:08:15:e1:f3:0d:00: a9:aa:dd:a4:1a:9d:e0:3b:19:97:79:c8:bf:71:58:98:f4:f2: fb:15:55:7f:80:62:ae:3f:6d:6e:94:c7:aa:8b:05:71:b9:fc: 3c:68:78:65:83:12:e7:11:25:f1:4e:e4:ee:32:f1:1e:17:db: 2f:2a:92:81:38:ad:9a:56:1d:0f:17:de:5a:96:7d:24:e0:94: 24:07:11:6d:74:dc:27:98:48:64:05:7c:8c:e1:f6:49:d5:a9: 4c:ac:dd:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+6oRGQ/vXmr1MHWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI2MTEwNDE0MDAxM1oXDTI3MDIwMjE0MDAxM1owLzEtMCsGA1UEAxMk YWRkMzlkOTktMjM4Ny00MGI5LWFiYTAtOGE1ZDE0YWZlYTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt7lNGq5honIbWg/nV5w5W2SsxIKSUolZbPd lXwjeevrSEF1XmTgIdOCqzNSb2LisAYTE1nUsyaqTg56y4Q1xBDm/KvRX/jLCEvE M7SCz8XSJXa3sY228ilKemqHVJHg0O5o7OvTL4sGgWlFUoZHcg2BLo3qFdqNFHV1 RHZHNvcFV/120XiOi/ICKcQTuQ7WY17yY5fkZfrPPhcNzPpoTBMpE/mVYFSjIcTa ZIS/OljYsNkMG/h2d1kZnd2wGNdivWQE77T10nu6flYyrq0xyC7fEcejudW286Bw g8TSL8hXiTW1cmmVXa1yxIJim/q7Lg1Vz+mBl2fq4ZDMn9xXyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKv7rKxRTt/dy9Dsjl4cI47JOy6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvOGFjNTJlNmEtYWI3My0z NThhLWJjNmYtZWFiYWJlZDg5ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/nIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIb02qXeCK62w4NfIXguezRiLMOPV/92Tzs0tLZO2qWDwpyyrIqfO8TJ uztEvMUuwcPzn0cUz0sZTmvh0w0p/o5qc5ELKbjks9n+gGtuIam8r6z4ztW5ys/d ri8iQojKhaAGOem2nwiE3BYLkglBqt+jK525Wyy2bSYXnxP6tM61glvko9pXyvxj +HuL2WsIFVjWVFFmwy/8wv7zfAgV4fMNAKmq3aQaneA7GZd5yL9xWJj08vsVVX+A Yq4/bW6Ux6qLBXG5/DxoeGWDEucRJfFO5O4y8R4X2y8qkoE4rZpWHQ8X3lqWfSTg lCQHEW103CeYSGQFfIzh9knVqUys3ZQ= -----END CERTIFICATE-----Generated at Sun Nov 15 21:04:16 2026 by rpki-client