$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/91d55642-0c47-39e6-9f01-b3db6078eb51.roa File: 91d55642-0c47-39e6-9f01-b3db6078eb51.roa (raw, json) Hash identifier: 5nv5jnM43SqVub9e0CrmnvOPMxkbdxA0C9vWxmM7DKI= Subject key identifier: EB:89:BD:86:53:25:C9:57:71:B3:2A:DB:76:BF:E7:E9:17:9E:10:AD Certificate issuer: /CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059 Certificate serial: 010D0C9F4328584EF87CBB88C358ABB6613EAE00 Authority key identifier: 54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/91d55642-0c47-39e6-9f01-b3db6078eb51.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 30165 IP address blocks: 147.253.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:bb:88:c3:58:ab:b6:61:3e:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=845c9974-ce15-4125-bd25-df7086eb8192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:07:ef:e5:9c:17:82:aa:4e:17:c7:88:b2:94: 02:fa:c4:d9:7d:a8:3c:13:f9:76:c8:f3:7a:d2:91: 4d:e7:f7:ef:a2:f6:e7:25:b0:f8:c0:2b:53:c2:d6: b3:1a:19:65:30:38:9a:3d:4f:16:e4:7a:40:a3:c8: c9:9e:7c:39:88:49:09:4f:81:c6:a9:8f:18:0e:a4: 29:2d:6c:56:a1:4a:0e:a9:35:8e:8e:29:50:17:bc: 6d:92:54:1d:3b:f4:be:48:3d:0f:a1:5f:7e:4f:12: be:a6:1e:55:bf:c8:55:72:4c:71:2a:e9:a3:40:18: d2:05:08:ac:3c:72:38:54:9c:ec:61:27:71:52:78: b0:5c:fd:7d:bf:22:b5:62:c9:a8:8a:d4:8d:1b:e7: 61:85:be:d4:53:e3:0f:ae:1e:76:66:02:ad:cd:21: 92:b7:df:09:74:46:9d:72:3a:97:cd:ad:26:8a:4c: 8a:43:c6:96:47:a9:46:af:71:d8:ae:95:51:3d:bd: d5:b5:d0:9c:55:7f:e1:01:a6:27:f5:05:6d:a2:28: 64:15:60:ad:5f:69:ff:43:46:5b:2d:04:10:0e:83: 7f:e4:54:ba:68:31:3a:11:83:00:af:7d:fa:89:8e: 81:31:10:f2:85:ed:18:13:32:29:71:68:92:9a:d9: 0d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:89:BD:86:53:25:C9:57:71:B3:2A:DB:76:BF:E7:E9:17:9E:10:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/91d55642-0c47-39e6-9f01-b3db6078eb51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl X509v3 Authority Key Identifier: keyid:54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer sbgp-ipAddrBlock: critical IPv4: 147.253.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c9:40:19:eb:0d:50:28:56:e7:3a:b3:5d:b6:7b:c8:44:55: 01:b1:ef:f3:2c:92:55:e0:9c:a2:b1:97:74:59:62:31:36:81: ec:fb:c3:da:ec:fb:02:94:4e:85:76:3b:0a:a7:d4:39:9e:df: b7:9c:a7:41:9f:0e:21:a2:9b:55:b8:82:52:f7:3c:c5:8a:8c: 16:73:09:d2:65:ab:fb:83:af:cf:fa:24:ac:0c:ef:64:48:33: 7b:ff:f5:6b:bd:e1:36:74:77:b5:39:5f:e8:7d:d4:19:f3:58: e1:a4:de:2f:37:39:5d:84:cd:06:ce:9d:ef:ca:08:07:0f:70: 97:90:48:27:8b:8f:e2:c0:45:2b:0b:a5:50:b2:3c:3f:62:46: b8:24:c6:29:3c:25:60:a2:8b:d6:2a:e2:48:01:e6:73:5e:b7: b9:a7:6d:3d:80:7e:6e:6d:f9:3b:24:6a:c6:14:a1:1d:7f:78: 6f:45:bc:f0:d1:9f:8d:ab:6e:a5:91:61:d3:61:a9:b2:eb:bd: 75:04:43:11:88:4f:26:32:51:ab:7d:48:67:15:1f:07:38:14: 26:6b:7e:c3:94:d9:d3:3c:3c:51:6d:2d:eb:3b:0a:17:35:bd: 0b:5f:9e:18:e7:69:8f:e3:99:e3:f4:1a:2a:ba:61:a0:cc:ea: 1a:40:6b:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fLuIw1irtmE+rgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU3YTBjZjUtZDk4Yi00Y2QzLWFkY2ItMTkzNmQxYWUx MDU5MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk ODQ1Yzk5NzQtY2UxNS00MTI1LWJkMjUtZGY3MDg2ZWI4MTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Qfv5ZwXgqpOF8eIspQC+sTZfag8E/l2yPN6 0pFN5/fvovbnJbD4wCtTwtazGhllMDiaPU8W5HpAo8jJnnw5iEkJT4HGqY8YDqQp LWxWoUoOqTWOjilQF7xtklQdO/S+SD0PoV9+TxK+ph5Vv8hVckxxKumjQBjSBQis PHI4VJzsYSdxUniwXP19vyK1YsmoitSNG+dhhb7UU+MPrh52ZgKtzSGSt98JdEad cjqXza0mikyKQ8aWR6lGr3HYrpVRPb3VtdCcVX/hAaYn9QVtoihkFWCtX2n/Q0Zb LQQQDoN/5FS6aDE6EYMAr336iY6BMRDyhe0YEzIpcWiSmtkNKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuJvYZTJclXcbMq23a/5+kXnhCtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZTdh MGNmNS1kOThiLTRjZDMtYWRjYi0xOTM2ZDFhZTEwNTkvOTFkNTU2NDItMGM0Ny0z OWU2LTlmMDEtYjNkYjYwNzhlYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmU3YTBjZjUtZDk4Yi00Y2QzLWFk Y2ItMTkzNmQxYWUxMDU5L2JlN2EwY2Y1LWQ5OGItNGNkMy1hZGNiLTE5MzZkMWFl MTA1OS5jcmwwHwYDVR0jBBgwFoAUVGkRqGspb2H7Xt4kILkqEedve0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZTdhMGNmNS1kOThiLTRjZDMtYWRjYi0xOTM2 ZDFhZTEwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFk/3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbJQBnrDVAoVuc6s122e8hEVQGx7/MsklXgnKKxl3RZYjE2gez7w9rs +wKUToV2Owqn1Dme37ecp0GfDiGim1W4glL3PMWKjBZzCdJlq/uDr8/6JKwM72RI M3v/9Wu94TZ0d7U5X+h91BnzWOGk3i83OV2EzQbOne/KCAcPcJeQSCeLj+LARSsL pVCyPD9iRrgkxik8JWCii9Yq4kgB5nNet7mnbT2Afm5t+TskasYUoR1/eG9FvPDR n42rbqWRYdNhqbLrvXUEQxGITyYyUat9SGcVHwc4FCZrfsOU2dM8PFFtLes7Chc1 vQtfnhjnaY/jmeP0Giq6YaDM6hpAa7Q= -----END CERTIFICATE-----Generated at Mon Sep 28 14:21:39 2026 by rpki-client