$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/deec6331-58d2-37d0-96a6-10e13651e662.roa File: deec6331-58d2-37d0-96a6-10e13651e662.roa (raw, json) Hash identifier: ZRWZn4V1P6qJJADkTcLDvjWP5lsTFllFWs7q4MTstLg= Subject key identifier: 95:0B:E9:A5:FC:52:6A:D6:66:8D:13:31:D7:61:92:F0:08:B5:8C:0B Certificate issuer: /CN=be7d7ab4-136a-4b57-94de-4d26121783f3 Certificate serial: 010D0C9F4328584F679958B8B8AB59EE03894360 Authority key identifier: AE:9F:AA:9B:68:F3:00:6B:A6:83:5A:D3:93:07:D5:25:AA:84:6C:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/deec6331-58d2-37d0-96a6-10e13651e662.roa Signing time: Mon 05 Oct 2026 20:12:41 +0000 ROA not before: Mon 05 Oct 2026 20:12:41 +0000 ROA not after: Sun 03 Jan 2027 21:12:41 +0000 asID: 402584 IP address blocks: 147.153.0.0/17 maxlen: 17 147.153.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/be7d7ab4-136a-4b57-94de-4d26121783f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/be7d7ab4-136a-4b57-94de-4d26121783f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:67:99:58:b8:b8:ab:59:ee:03:89:43:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be7d7ab4-136a-4b57-94de-4d26121783f3 Validity Not Before: Oct 5 20:12:41 2026 GMT Not After : Jan 3 21:12:41 2027 GMT Subject: CN=7c5bbc9d-92f5-4725-aca1-ac9f1d71fdf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d3:22:2a:ec:11:f6:11:19:e2:2a:12:9d:c0: b2:e6:c4:3e:09:76:c7:fd:06:26:1a:a5:50:15:6a: 75:15:a6:60:ca:a1:ac:ec:2b:67:92:02:54:34:27: f3:ec:cb:f4:f0:17:3a:aa:91:45:33:ed:74:45:f0: d9:38:a3:e8:fe:74:12:71:df:72:a3:6b:68:f0:a5: 1f:97:26:03:ef:ea:ca:27:a0:3e:21:ca:f5:05:04: 30:b2:82:c2:d6:50:e5:41:18:f2:f3:1a:5a:8c:ab: b9:80:68:1c:b0:73:aa:20:d1:89:09:42:b0:72:21: a3:0f:9f:8d:e6:d1:f0:1e:c5:88:81:4d:89:ad:60: 01:d2:d4:61:7b:f0:5a:8f:ba:c6:a8:c3:fa:04:1d: 74:f3:28:4a:eb:11:59:2f:a3:97:7f:b4:f4:b0:cd: 88:08:88:ee:9f:8c:95:5a:80:54:b3:0e:43:e5:e9: 00:68:73:23:5f:d3:c6:c2:e8:ec:2c:5e:c9:80:b3: 64:76:8b:ea:4d:5a:cf:38:42:99:38:68:31:17:64: 7b:55:0e:06:29:c3:c7:fc:cf:26:7c:bd:ac:b5:6a: 3d:5f:d4:a7:fe:32:c7:00:55:d4:be:81:ee:61:b6: 95:f3:47:4e:47:47:2c:f2:67:e8:7b:33:14:db:dc: 52:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0B:E9:A5:FC:52:6A:D6:66:8D:13:31:D7:61:92:F0:08:B5:8C:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/deec6331-58d2-37d0-96a6-10e13651e662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/be7d7ab4-136a-4b57-94de-4d26121783f3.crl X509v3 Authority Key Identifier: keyid:AE:9F:AA:9B:68:F3:00:6B:A6:83:5A:D3:93:07:D5:25:AA:84:6C:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3.cer sbgp-ipAddrBlock: critical IPv4: 147.153.0.0-147.153.191.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:35:51:bb:d6:88:d9:e0:b9:4e:60:7f:bb:c8:55:5d:77:79: 44:e4:73:73:17:6c:76:9d:c0:f6:5f:b8:36:3e:9a:48:9e:c7: 50:8c:05:94:78:82:37:53:38:ed:51:de:03:7a:36:0b:9c:ad: 06:d4:44:7c:2f:b6:3b:53:b6:d4:d5:f0:76:2b:c3:f9:e7:3f: d2:8a:22:87:da:52:4a:2c:45:84:44:28:83:f6:f2:2d:29:61: b3:d5:0d:2d:5b:81:7a:60:06:dd:81:20:ff:84:95:79:b4:d4: fa:33:6c:07:6d:04:87:f3:9c:86:0d:d8:fe:11:8a:ac:07:df: ff:f5:b9:c9:c2:bf:d0:b3:f8:b6:83:22:d0:a7:d6:33:e3:20: 33:82:de:ed:44:3d:02:24:dd:fb:3a:7e:28:67:24:2c:0b:f3: 79:a9:6b:b5:84:fb:ed:60:48:75:2f:cd:be:72:eb:33:c2:bc: 2b:ae:13:7e:06:b8:d9:7e:b5:5c:1b:98:cf:4f:0a:cd:e3:8d: c9:32:44:f2:32:fe:be:d5:11:b9:d2:33:30:0f:92:21:e2:c1: 75:50:64:2a:08:39:cd:76:8f:9c:e0:18:9d:32:0d:44:71:b8: e5:25:b6:1c:a0:f7:59:66:76:ea:52:a9:43:bf:bb:75:66:13: 9a:fa:2f:e6 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE9nmVi4uKtZ7gOJQ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU3ZDdhYjQtMTM2YS00YjU3LTk0ZGUtNGQyNjEyMTc4 M2YzMB4XDTI2MTAwNTIwMTI0MVoXDTI3MDEwMzIxMTI0MVowLzEtMCsGA1UEAxMk N2M1YmJjOWQtOTJmNS00NzI1LWFjYTEtYWM5ZjFkNzFmZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtMiKuwR9hEZ4ioSncCy5sQ+CXbH/QYmGqVQ FWp1FaZgyqGs7CtnkgJUNCfz7Mv08Bc6qpFFM+10RfDZOKPo/nQScd9yo2to8KUf lyYD7+rKJ6A+Icr1BQQwsoLC1lDlQRjy8xpajKu5gGgcsHOqINGJCUKwciGjD5+N 5tHwHsWIgU2JrWAB0tRhe/Baj7rGqMP6BB108yhK6xFZL6OXf7T0sM2ICIjun4yV WoBUsw5D5ekAaHMjX9PGwujsLF7JgLNkdovqTVrPOEKZOGgxF2R7VQ4GKcPH/M8m fL2stWo9X9Sn/jLHAFXUvoHuYbaV80dOR0cs8mfoezMU29xSIwIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFJUL6aX8UmrWZo0TMddhkvAItYwLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZTdk N2FiNC0xMzZhLTRiNTctOTRkZS00ZDI2MTIxNzgzZjMvZGVlYzYzMzEtNThkMi0z N2QwLTk2YTYtMTBlMTM2NTFlNjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmU3ZDdhYjQtMTM2YS00YjU3LTk0 ZGUtNGQyNjEyMTc4M2YzL2JlN2Q3YWI0LTEzNmEtNGI1Ny05NGRlLTRkMjYxMjE3 ODNmMy5jcmwwHwYDVR0jBBgwFoAUrp+qm2jzAGumg1rTkwfVJaqEbGUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZTdkN2FiNC0xMzZhLTRiNTctOTRkZS00ZDI2 MTIxNzgzZjMuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwCTmQME BpOZgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAnNVG71ojZ4LlOYH+7yFVdd3lE5HNzF2x2ncD2X7g2PppI nsdQjAWUeII3UzjtUd4DejYLnK0G1ER8L7Y7U7bU1fB2K8P55z/SiiKH2lJKLEWE RCiD9vItKWGz1Q0tW4F6YAbdgSD/hJV5tNT6M2wHbQSH85yGDdj+EYqsB9//9bnJ wr/Qs/i2gyLQp9Yz4yAzgt7tRD0CJN37On4oZyQsC/N5qWu1hPvtYEh1L82+cusz wrwrrhN+BrjZfrVcG5jPTwrN443JMkTyMv6+1RG50jMwD5Ih4sF1UGQqCDnNdo+c 4BidMg1EcbjlJbYcoPdZZnbqUqlDv7t1ZhOa+i/m -----END CERTIFICATE-----Generated at Thu Nov 5 02:48:11 2026 by rpki-client