$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa File: 8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa (raw, json) Hash identifier: AOVZ5WnS1EdCKKfMHinWBWVWLovGiOQXixoPVjaMis4= Subject key identifier: FF:94:57:17:B1:E3:2A:E5:E4:D8:DE:9F:0A:EB:8E:AB:22:E7:E9:C0 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584F1897995AA6100C6EA9384180 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 18434 IP address blocks: 147.249.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:99:5a:a6:10:0c:6e:a9:38:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=f614ec17-4b38-483e-885c-7acae47aa357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:3a:7b:8e:9f:94:1b:a5:da:c8:e8:c1:97: 1d:1a:e1:d4:c9:fa:a6:fa:8f:d6:7d:13:19:8e:db: 9b:04:16:9d:2e:ed:e2:f0:c4:31:e7:b9:59:5b:dd: c6:26:06:9e:d7:c5:6c:16:f0:55:57:95:0c:c2:c9: fd:67:82:9c:83:4b:f2:4c:8e:4b:66:84:f2:2d:8a: 2c:e6:55:22:af:40:05:f5:ce:37:95:9c:8e:54:b7: 26:f6:a5:5f:57:9c:21:d1:3c:3f:fa:54:43:58:91: 5c:1d:1d:d0:76:74:8e:94:5f:64:62:20:3a:5a:53: b1:d8:9f:1d:8e:bf:09:06:91:1b:e2:30:44:89:c8: 91:34:fa:cd:d2:8f:1c:2c:27:b8:8d:e8:3a:9d:3f: bf:23:25:48:f2:9e:99:de:13:d4:49:6d:c9:29:28: 3e:5e:e1:a0:a7:45:d0:b1:77:9a:91:df:95:00:a8: ba:9f:62:7e:57:43:48:10:4f:8a:fe:1b:01:89:9d: 03:10:d0:0c:d2:17:81:b5:b5:b6:c6:a5:c2:1e:e5: 12:1f:ae:52:65:d5:f0:aa:eb:e6:19:d9:df:86:8c: 02:13:3b:cb:e3:02:e7:df:fa:ef:ca:14:44:6f:9a: f3:08:6f:8e:2a:34:bc:dc:76:da:df:9b:10:b2:36: 93:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:94:57:17:B1:E3:2A:E5:E4:D8:DE:9F:0A:EB:8E:AB:22:E7:E9:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8ac52e6a-ab73-358a-bc6f-eababed89fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:2e:95:9a:67:e3:0c:b7:3d:6b:3c:7a:9e:67:71:1c:d2:17: a6:35:e5:e9:2d:db:78:c8:3c:d0:77:f4:00:6a:f3:f1:5f:1e: 78:c0:12:0d:d1:a5:de:e7:e3:d1:4b:30:59:5d:3d:c9:cc:71: c9:1d:fb:07:61:12:bb:a4:cc:b0:18:20:7a:b1:d8:2c:30:4a: 0e:28:33:9a:83:5a:cb:35:10:26:c3:d2:86:ee:76:97:c7:ac: c0:28:d9:98:fb:1d:83:8a:a2:b4:11:59:76:ae:24:0c:90:1c: 91:9f:19:b9:1e:13:52:3c:0b:5b:8e:83:d6:ab:fe:69:11:e3: 12:da:3b:7b:ee:26:13:a0:fb:9b:69:43:65:58:ec:6f:79:6e: f8:29:9a:91:49:c3:df:5a:24:62:6a:ed:8a:6f:81:b6:79:b9: 94:c5:d9:6e:fe:fd:c9:fe:da:21:e3:c1:3c:e5:ca:43:9f:e7: 38:d2:49:45:96:4a:e4:8d:6e:63:57:cb:98:af:af:1d:d6:dd: 6c:84:e0:15:06:b5:f4:88:58:a2:28:56:a1:06:cc:73:42:a9: 1b:84:7f:d7:89:fb:ca:9e:25:63:6f:94:3a:d1:51:e5:a6:49: d7:b4:49:b3:26:80:ed:71:a0:41:cd:e7:47:f2:02:ec:cc:ba: cb:b7:d6:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5laphAMbqk4QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjYxNGVjMTctNGIzOC00ODNlLTg4NWMtN2FjYWU0N2FhMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOM6e46flBul2sjowZcdGuHUyfqm+o/WfRMZ jtubBBadLu3i8MQx57lZW93GJgae18VsFvBVV5UMwsn9Z4Kcg0vyTI5LZoTyLYos 5lUir0AF9c43lZyOVLcm9qVfV5wh0Tw/+lRDWJFcHR3QdnSOlF9kYiA6WlOx2J8d jr8JBpEb4jBEiciRNPrN0o8cLCe4jeg6nT+/IyVI8p6Z3hPUSW3JKSg+XuGgp0XQ sXeakd+VAKi6n2J+V0NIEE+K/hsBiZ0DENAM0heBtbW2xqXCHuUSH65SZdXwquvm GdnfhowCEzvL4wLn3/rvyhREb5rzCG+OKjS83Hba35sQsjaTuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+UVxex4yrl5Njenwrrjqsi5+nAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvOGFjNTJlNmEtYWI3My0z NThhLWJjNmYtZWFiYWJlZDg5ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/nIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8ulZpn4wy3PWs8ep5ncRzSF6Y15ekt23jIPNB39ABq8/FfHnjAEg3R pd7n49FLMFldPcnMcckd+wdhErukzLAYIHqx2CwwSg4oM5qDWss1ECbD0obudpfH rMAo2Zj7HYOKorQRWXauJAyQHJGfGbkeE1I8C1uOg9ar/mkR4xLaO3vuJhOg+5tp Q2VY7G95bvgpmpFJw99aJGJq7YpvgbZ5uZTF2W7+/cn+2iHjwTzlykOf5zjSSUWW SuSNbmNXy5ivrx3W3WyE4BUGtfSIWKIoVqEGzHNCqRuEf9eJ+8qeJWNvlDrRUeWm Sde0SbMmgO1xoEHN50fyAuzMusu31v0= -----END CERTIFICATE-----Generated at Wed Sep 23 07:35:21 2026 by rpki-client