$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/84f02f2f-ae84-308f-a582-83b183cb9f88.roa File: 84f02f2f-ae84-308f-a582-83b183cb9f88.roa (raw, json) Hash identifier: e2KxBXF4w9bxNt2TmvjyeNRRIslr8RlP/nVU/izyS1w= Subject key identifier: 2A:00:D9:06:02:AA:8F:5A:0D:02:D2:A0:B9:09:2A:EA:2C:BF:32:4A Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584EEEB759BB02F21D2E20E03480 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/84f02f2f-ae84-308f-a582-83b183cb9f88.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 23467 IP address blocks: 162.247.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:59:bb:02:f2:1d:2e:20:e0:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=b770649a-381d-47b1-8443-3b81635a0930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:86:0a:e7:c9:0b:21:23:43:b4:66:2b:5b:fd: 19:f2:50:e8:3d:56:99:ad:c5:48:71:6b:09:80:fe: bc:cf:17:08:9f:94:a4:09:d9:05:bf:8f:da:46:ab: ce:dd:d4:87:e3:7c:b1:6f:23:18:e2:c6:ec:3a:b4: d9:f8:e9:c9:01:83:be:2a:b2:85:6a:76:26:ba:a9: fc:fc:54:f1:1e:c2:94:47:58:bb:53:44:f4:d9:6e: ff:3a:3b:d8:a5:59:a9:1b:d6:a3:e5:0c:73:ba:ef: a2:82:91:24:ff:79:fc:16:8e:9a:c6:ea:ab:ba:4f: 1d:10:e4:c5:28:a3:05:17:d6:5e:89:b2:cc:48:58: f3:b5:94:01:e9:9b:d4:52:c8:dd:5d:1e:84:57:29: 32:ef:99:a4:05:19:9e:f8:f2:0f:02:19:92:1e:28: 88:6a:bd:d7:ea:9d:4d:de:9a:6d:b1:02:9a:f0:55: 2a:f1:3f:3a:51:12:00:09:3d:67:c6:7b:88:30:71: a5:7f:75:be:00:82:3a:1e:e2:55:04:84:91:52:c1: c9:02:35:41:9e:ff:79:79:b0:5c:be:72:84:a1:a4: b5:49:be:85:d2:41:b4:6c:0c:67:24:ab:75:5a:a9: 52:f7:7d:e2:01:c5:a6:84:88:5a:6c:e6:b5:80:bb: bf:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:00:D9:06:02:AA:8F:5A:0D:02:D2:A0:B9:09:2A:EA:2C:BF:32:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/84f02f2f-ae84-308f-a582-83b183cb9f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 162.247.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:9f:82:34:b0:b7:82:8b:a3:b8:8a:7f:46:e3:8a:f1:8d:19: 0e:db:7b:a6:e3:81:e2:00:3a:75:b6:42:e6:53:23:ec:5d:9f: 02:66:42:2a:89:8f:82:50:c8:a6:46:4c:e3:6a:e8:28:15:8f: 52:08:b7:21:b5:8a:bd:75:c8:7d:c4:44:8f:37:ce:ec:0e:84: 58:80:68:a3:76:74:e9:b7:46:45:5b:de:09:df:d2:65:04:a1: 48:9c:2f:6c:fb:43:12:8a:32:92:82:7a:c2:34:5c:6a:3c:a8: 58:24:1c:2b:3c:25:b2:ad:d8:c4:51:03:9e:a3:b1:6a:e4:0b: 9a:4f:f9:58:e6:48:f5:c9:52:47:f9:4c:4d:44:3b:ec:7c:bf: 5d:78:d7:27:df:f4:89:f0:8e:83:99:50:cb:6a:98:56:b1:23: c1:22:8e:b1:50:09:95:3f:f7:08:bd:99:48:f3:00:7e:50:33: fa:f2:55:ab:a8:90:50:87:59:0e:81:3e:aa:52:aa:64:03:11: 91:5e:ef:e9:1a:19:d4:02:28:69:f0:6b:73:a3:16:71:30:78: c3:c9:d4:77:99:14:8d:49:5d:d3:a1:6a:fb:e5:84:30:a3:6d: c9:0d:71:3a:8e:77:9a:5e:88:73:c7:6f:55:f4:92:95:f5:9e: 54:ba:e5:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut1m7AvIdLiDgNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk Yjc3MDY0OWEtMzgxZC00N2IxLTg0NDMtM2I4MTYzNWEwOTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoYK58kLISNDtGYrW/0Z8lDoPVaZrcVIcWsJ gP68zxcIn5SkCdkFv4/aRqvO3dSH43yxbyMY4sbsOrTZ+OnJAYO+KrKFanYmuqn8 /FTxHsKUR1i7U0T02W7/OjvYpVmpG9aj5Qxzuu+igpEk/3n8Fo6axuqruk8dEOTF KKMFF9ZeibLMSFjztZQB6ZvUUsjdXR6EVyky75mkBRme+PIPAhmSHiiIar3X6p1N 3pptsQKa8FUq8T86URIACT1nxnuIMHGlf3W+AII6HuJVBISRUsHJAjVBnv95ebBc vnKEoaS1Sb6F0kG0bAxnJKt1WqlS933iAcWmhIhabOa1gLu/EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoA2QYCqo9aDQLSoLkJKuosvzJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvODRmMDJmMmYtYWU4NC0z MDhmLWE1ODItODNiMTgzY2I5Zjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADufgjSwt4KLo7iKf0bjivGNGQ7be6bjgeIAOnW2QuZTI+xdnwJmQiqJ j4JQyKZGTONq6CgVj1IItyG1ir11yH3ERI83zuwOhFiAaKN2dOm3RkVb3gnf0mUE oUicL2z7QxKKMpKCesI0XGo8qFgkHCs8JbKt2MRRA56jsWrkC5pP+VjmSPXJUkf5 TE1EO+x8v1141yff9InwjoOZUMtqmFaxI8EijrFQCZU/9wi9mUjzAH5QM/ryVauo kFCHWQ6BPqpSqmQDEZFe7+kaGdQCKGnwa3OjFnEweMPJ1HeZFI1JXdOhavvlhDCj bckNcTqOd5peiHPHb1X0kpX1nlS65Y8= -----END CERTIFICATE-----Generated at Tue Sep 22 19:32:15 2026 by rpki-client