$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c2216585-71fc-34f0-bfb6-1c152fd66dba.roa File: c2216585-71fc-34f0-bfb6-1c152fd66dba.roa (raw, json) Hash identifier: VNeA79HWGQbr/zj5dqMqySJ4j4bwz2X3xcDexdQYglE= Subject key identifier: 9E:05:AE:1C:98:C0:12:86:BD:56:27:D4:77:28:A4:B1:94:AC:39:BB Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584F1CC79F9FDB817728F6486840 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c2216585-71fc-34f0-bfb6-1c152fd66dba.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 18659 IP address blocks: 147.249.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:9f:9f:db:81:77:28:f6:48:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=1393a77a-9aa8-4363-b0ad-05053c1fde27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:49:52:b8:55:cb:65:8e:0c:b5:77:0f:a7:2b: f3:e7:34:bd:a2:df:a2:83:ca:34:39:a3:f9:05:9a: 9c:ae:96:e9:9d:59:41:42:0c:ef:fe:58:59:20:69: c0:bc:0f:c7:43:37:10:74:a2:a7:24:8d:7e:00:50: 91:e9:7a:35:a8:3c:d0:ee:de:71:af:e5:26:39:84: 45:18:91:27:ee:61:62:40:4c:2d:04:68:e5:fb:c6: 08:28:8b:9e:19:4e:ac:36:b6:ca:81:ab:e1:23:49: 3b:dc:5b:57:e2:df:2d:31:d9:f2:50:85:f5:eb:b7: b5:1d:87:26:eb:94:bb:31:a1:89:d3:f8:fe:ac:5c: 25:db:a5:cb:f7:6c:8b:85:26:58:07:d2:48:36:85: f2:79:43:96:c1:62:09:ee:d2:cd:05:a4:6c:cd:db: 25:2c:6f:c6:a6:3f:d1:98:95:f5:1a:7d:c6:a7:f1: f4:78:1b:27:4a:2d:19:29:27:12:2e:b1:35:d1:c9: b9:25:0f:e6:fb:60:30:20:03:01:33:79:2d:e7:6a: 63:6e:23:35:65:11:cb:64:1c:0b:09:92:d5:ee:e7: 72:1c:d2:60:f3:a4:7f:66:72:75:86:2a:a7:6b:1b: 17:ec:67:93:75:f6:2b:96:9e:a4:76:71:38:be:a3: a7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:05:AE:1C:98:C0:12:86:BD:56:27:D4:77:28:A4:B1:94:AC:39:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c2216585-71fc-34f0-bfb6-1c152fd66dba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:9d:02:ce:7d:69:91:2b:9a:3f:8d:77:e7:7e:e0:ad:f9:7d: 28:7d:5d:46:c9:6c:47:d4:52:19:36:ce:02:50:24:7d:53:b6: 78:38:9b:b3:da:6e:54:2c:7b:b5:5b:62:ce:54:87:50:26:87: e3:9f:7f:35:8b:ff:86:31:e8:48:ca:f0:8c:b1:0c:43:c4:98: f4:bc:4d:c8:b7:b0:44:79:45:d4:84:db:db:5e:44:36:e0:d2: 44:79:89:ef:cf:45:94:48:a9:47:4c:07:e4:b8:ee:09:cf:ed: 40:98:00:cb:0a:02:40:bc:d5:01:97:37:e5:36:24:07:e0:91: 2d:66:d1:23:30:c8:7a:67:2f:a3:4e:ef:2e:73:1f:f7:e4:05: b0:5e:72:e2:77:8f:1b:e1:9c:b8:3c:e5:f8:96:db:9d:d0:7d: 1b:18:bd:45:1b:b4:d7:26:23:0d:35:9b:9c:1f:8c:cb:81:c2: 04:1c:52:1e:14:9f:ce:33:72:62:27:4a:78:7e:fa:22:2b:3a: 43:db:09:33:c1:5f:6e:85:21:22:7a:31:04:76:c7:6b:ac:34: 66:87:c5:0c:7b:31:d5:42:d3:de:73:73:9c:6a:d6:47:c5:00: 9c:c5:e1:1b:f8:9f:b4:0d:56:a2:38:d2:c6:0d:d3:cd:6c:cb: 7a:57:7a:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx5+f24F3KPZIaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk MTM5M2E3N2EtOWFhOC00MzYzLWIwYWQtMDUwNTNjMWZkZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0lSuFXLZY4MtXcPpyvz5zS9ot+ig8o0OaP5 BZqcrpbpnVlBQgzv/lhZIGnAvA/HQzcQdKKnJI1+AFCR6Xo1qDzQ7t5xr+UmOYRF GJEn7mFiQEwtBGjl+8YIKIueGU6sNrbKgavhI0k73FtX4t8tMdnyUIX167e1HYcm 65S7MaGJ0/j+rFwl26XL92yLhSZYB9JINoXyeUOWwWIJ7tLNBaRszdslLG/Gpj/R mJX1Gn3Gp/H0eBsnSi0ZKScSLrE10cm5JQ/m+2AwIAMBM3kt52pjbiM1ZRHLZBwL CZLV7udyHNJg86R/ZnJ1hiqnaxsX7GeTdfYrlp6kdnE4vqOnYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4FrhyYwBKGvVYn1HcopLGUrDm7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvYzIyMTY1ODUtNzFmYy0z NGYwLWJmYjYtMWMxNTJmZDY2ZGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/kYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJidAs59aZErmj+Nd+d+4K35fSh9XUbJbEfUUhk2zgJQJH1Ttng4m7Pa blQse7VbYs5Uh1Amh+OffzWL/4Yx6EjK8IyxDEPEmPS8Tci3sER5RdSE29teRDbg 0kR5ie/PRZRIqUdMB+S47gnP7UCYAMsKAkC81QGXN+U2JAfgkS1m0SMwyHpnL6NO 7y5zH/fkBbBecuJ3jxvhnLg85fiW253QfRsYvUUbtNcmIw01m5wfjMuBwgQcUh4U n84zcmInSnh++iIrOkPbCTPBX26FISJ6MQR2x2usNGaHxQx7MdVC095zc5xq1kfF AJzF4Rv4n7QNVqI40sYN081sy3pXemI= -----END CERTIFICATE-----Generated at Tue Sep 22 14:38:13 2026 by rpki-client