$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa File: 2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa (raw, json) Hash identifier: RN8RBKF1HzVrjDKbF/bQU+5NpUbbXpPWYeExWx6vWiA= Subject key identifier: F2:2E:C9:31:EA:E6:8D:23:3B:84:2E:8D:22:D1:C6:9C:69:F2:58:8D Certificate issuer: /CN=147f088f-ace0-45c8-9c73-f06e60d7debb Certificate serial: 010D0C9F4328584B583CAA32EF171905B2E89380 Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 394321 IP address blocks: 66.97.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:aa:32:ef:17:19:05:b2:e8:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=3262241a-cc71-4407-8e32-18baeb62a4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:a5:77:04:56:38:b3:9f:fb:0a:b0:a9:88: 60:ab:c5:84:67:96:46:b9:5e:7a:0b:f1:8e:96:36: 97:7d:f8:d9:40:db:30:5a:8f:10:b6:91:22:9b:43: f9:f1:54:9a:21:d5:ca:3e:a1:12:a5:b1:bc:a5:af: 16:44:e6:af:d2:13:95:55:4b:d4:ba:44:09:45:42: 9b:60:53:70:08:95:09:6b:a5:92:39:df:ea:eb:94: 1d:97:7d:2a:62:52:7c:9b:8f:34:55:89:23:e4:26: 23:dd:25:32:a1:05:6e:4d:3e:36:44:5e:b5:ff:f5: 4e:9f:ea:8f:0e:07:2e:e6:f0:7d:7a:b4:c5:0e:48: 2f:30:2b:6a:88:29:36:41:06:8c:9e:65:73:53:48: 77:f4:4e:2f:4f:e1:48:88:8a:d5:d3:19:97:a5:65: 7d:f6:14:c8:2a:9e:82:6a:49:09:b4:89:b8:3f:76: ee:cd:0c:7e:e6:31:50:52:ca:05:6f:cf:1a:56:b8: ad:9a:f8:a8:83:6c:bd:1e:89:bb:64:e9:7f:c0:16: 16:4c:a4:a9:2a:32:b6:6e:85:18:da:30:47:bf:cf: cd:2b:94:15:5a:84:a9:05:31:5f:b4:d9:f8:33:3c: 3a:85:4d:c7:df:a2:75:bc:57:fd:3c:8e:c4:10:ee: e6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2E:C9:31:EA:E6:8D:23:3B:84:2E:8D:22:D1:C6:9C:69:F2:58:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl X509v3 Authority Key Identifier: keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer sbgp-ipAddrBlock: critical IPv4: 66.97.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:7d:bd:77:9b:b7:9b:6f:ba:cb:f1:02:c0:e4:8c:8e:9b:41: 28:54:fd:9a:c2:11:3d:e5:c0:a3:fa:60:ee:88:e9:56:ce:4e: 31:40:28:87:6c:89:cc:49:96:40:ff:be:f0:73:30:45:8d:7e: f8:ba:38:3f:25:5b:35:12:67:03:8d:42:ce:a1:2e:63:45:2b: fc:12:73:8d:7d:8b:72:38:82:b9:77:cd:65:9a:c7:a1:25:d2: b7:3d:ba:3e:ea:63:64:42:5f:ba:da:7d:72:a6:3f:8c:62:87: ee:32:2a:f6:11:5d:9c:4f:97:fc:71:f7:b0:0b:f4:7d:dc:a4: e9:1b:08:aa:34:ae:69:8e:15:9c:ac:10:4f:51:de:c9:d2:eb: 48:25:85:98:29:12:84:a3:24:d7:c0:a7:db:30:ec:5a:aa:bc: c3:ed:51:be:45:eb:ff:bc:2a:5f:02:1b:83:fd:7f:73:09:5a: 54:e8:6f:a8:25:d0:cd:bd:6f:c5:0c:3a:9d:67:6d:65:19:7b: f6:5e:81:57:39:e6:1a:31:f8:9a:bf:c4:fa:1c:97:16:b4:ba: d2:aa:3c:28:90:99:5d:94:cf:36:3f:57:5f:b5:9f:74:ff:12: 9d:c4:dd:79:f8:e2:7f:12:77:2e:f6:f8:80:56:3f:52:d1:a1: 39:ba:e7:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKoy7xcZBbLok4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ3ZjA4OGYtYWNlMC00NWM4LTljNzMtZjA2ZTYwZDdk ZWJiMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MzI2MjI0MWEtY2M3MS00NDA3LThlMzItMThiYWViNjJhNGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDmldwRWOLOf+wqwqYhgq8WEZ5ZGuV56C/GO ljaXffjZQNswWo8QtpEim0P58VSaIdXKPqESpbG8pa8WROav0hOVVUvUukQJRUKb YFNwCJUJa6WSOd/q65Qdl30qYlJ8m480VYkj5CYj3SUyoQVuTT42RF61//VOn+qP Dgcu5vB9erTFDkgvMCtqiCk2QQaMnmVzU0h39E4vT+FIiIrV0xmXpWV99hTIKp6C akkJtIm4P3buzQx+5jFQUsoFb88aVritmviog2y9Hom7ZOl/wBYWTKSpKjK2boUY 2jBHv8/NK5QVWoSpBTFftNn4Mzw6hU3H36J1vFf9PI7EEO7mFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIuyTHq5o0jO4QujSLRxpxp8liNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdm MDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBkN2RlYmIvMjE2NGYyZDItZTE0Ny0z YmUyLWEzOGItOTdiYjdhNjhkZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTQ3ZjA4OGYtYWNlMC00NWM4LTlj NzMtZjA2ZTYwZDdkZWJiLzE0N2YwODhmLWFjZTAtNDVjOC05YzczLWYwNmU2MGQ3 ZGViYi5jcmwwHwYDVR0jBBgwFoAUoxrva0w2lGjtPSODrmMFH5s+HX8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZl NjBkN2RlYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmHtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEF9vXebt5tvusvxAsDkjI6bQShU/ZrCET3lwKP6YO6I6VbOTjFAKIds icxJlkD/vvBzMEWNfvi6OD8lWzUSZwONQs6hLmNFK/wSc419i3I4grl3zWWax6El 0rc9uj7qY2RCX7rafXKmP4xih+4yKvYRXZxPl/xx97AL9H3cpOkbCKo0rmmOFZys EE9R3snS60glhZgpEoSjJNfAp9sw7FqqvMPtUb5F6/+8Kl8CG4P9f3MJWlTob6gl 0M29b8UMOp1nbWUZe/ZegVc55hox+Jq/xPoclxa0utKqPCiQmV2UzzY/V1+1n3T/ Ep3E3Xn44n8Sdy72+IBWP1LRoTm650U= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:31 2025 by rpki-client