$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa File: df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa (raw, json) Hash identifier: iL7p+mgpps1WBdUjtZTUzmHalutq9j62NO9iHwNzRYI= Subject key identifier: C0:E6:75:AD:F6:48:D0:6B:4D:17:30:3F:03:B6:79:E4:76:01:D9:68 Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Certificate serial: 010D0C9F4328584EA78F74AB9D47F8E81F37BD00 Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 18434 IP address blocks: 147.249.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:74:ab:9d:47:f8:e8:1f:37:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ff6211ee-cf57-42ab-90a4-6edef88cafe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:65:08:d1:2f:33:2b:0a:e9:32:e4:eb:e3:57: 25:af:2e:6a:a5:20:f2:eb:e0:99:c7:b1:1c:59:ee: 03:d7:08:06:f4:1b:99:e1:21:0a:5f:60:f9:04:a0: e1:ae:f9:65:61:cb:07:78:35:28:9d:35:72:19:1d: 94:72:13:5b:2d:90:16:a5:94:e1:24:4c:f3:c2:6e: f8:21:73:5e:a5:e9:8b:11:a3:fd:f3:7d:2c:17:5c: 43:a1:89:13:1a:19:4f:bd:b4:08:54:a4:c4:f9:5b: 3c:83:3b:ff:ea:88:06:0c:17:22:74:0e:b2:91:0a: 10:50:54:e4:d9:c7:6b:8d:42:bc:b7:19:d8:0a:3f: db:20:dd:6c:fa:2f:ac:aa:bd:9e:40:23:3c:81:b1: 7a:f9:d6:0d:59:c3:ff:67:59:5d:cd:d8:16:16:f4: 54:48:1d:ce:e7:a8:a1:1d:84:a8:9c:ed:8e:b4:51: ed:31:2a:77:21:e1:32:08:3e:f9:fc:47:da:6a:da: 04:10:64:d1:e1:0b:d1:70:d3:63:e1:f6:4b:c6:3a: 74:3c:29:ce:6a:b7:db:24:fd:06:f1:75:10:29:6a: d2:e8:c4:a3:70:7c:41:03:76:00:7f:b7:22:fa:c2: cc:a8:39:d7:3e:a9:74:4a:2d:9e:5d:2c:cc:0e:b9: f2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E6:75:AD:F6:48:D0:6B:4D:17:30:3F:03:B6:79:E4:76:01:D9:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/df02ad1d-21e2-39d7-bf02-44aff45b84b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl X509v3 Authority Key Identifier: keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer sbgp-ipAddrBlock: critical IPv4: 147.249.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:23:25:19:19:ca:13:a3:8b:54:e0:43:f7:20:64:7d:72:b6: 74:ea:0d:0b:9e:d7:ba:4c:4c:1d:a1:52:b5:bc:c4:c2:96:89: 3a:8c:af:dc:40:d8:ad:54:e7:d4:d4:d2:d2:02:dc:58:f3:ae: 0e:7f:d4:08:9c:1b:b1:9c:07:af:62:29:a4:83:4f:c2:7f:2c: 4d:1d:9d:92:6a:fa:d8:c6:74:cd:6c:a4:5a:da:22:7a:bc:75: 52:72:98:aa:40:b8:d4:f5:6e:89:f4:e6:f4:91:77:1f:75:e7: bd:52:f1:d7:19:5a:a6:e7:45:f6:7a:a4:38:db:2f:3f:a2:c5: b3:ba:3f:64:b2:8e:73:84:af:10:12:ee:92:58:b6:48:e2:ff: cb:71:c3:5f:d4:5f:ad:ef:15:02:5b:a3:f4:7a:25:e3:44:fb: 9c:8b:f4:b9:ff:36:aa:7c:ca:f6:74:e5:90:bc:21:0b:36:24: ce:35:e1:6a:d2:ab:22:35:d2:9b:8a:fb:a6:79:cd:0f:73:d7: a9:e0:56:e7:8f:68:41:ce:61:83:fe:7a:48:5f:13:ef:11:a9: 58:3b:3d:ad:35:c1:b1:bb:a4:0e:e0:d8:36:c3:44:8c:66:e8: 65:98:e2:84:ea:f8:a4:a2:81:07:2d:0e:2e:3a:ea:2c:3f:d3: 27:ca:ab:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj3SrnUf46B83vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli OTcxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZmY2MjExZWUtY2Y1Ny00MmFiLTkwYTQtNmVkZWY4OGNhZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWUI0S8zKwrpMuTr41clry5qpSDy6+CZx7Ec We4D1wgG9BuZ4SEKX2D5BKDhrvllYcsHeDUonTVyGR2UchNbLZAWpZThJEzzwm74 IXNepemLEaP9830sF1xDoYkTGhlPvbQIVKTE+Vs8gzv/6ogGDBcidA6ykQoQUFTk 2cdrjUK8txnYCj/bIN1s+i+sqr2eQCM8gbF6+dYNWcP/Z1ldzdgWFvRUSB3O56ih HYSonO2OtFHtMSp3IeEyCD75/EfaatoEEGTR4QvRcNNj4fZLxjp0PCnOarfbJP0G 8XUQKWrS6MSjcHxBA3YAf7ci+sLMqDnXPql0Si2eXSzMDrny2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDmda32SNBrTRcwPwO2eeR2AdloMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvZGYwMmFkMWQtMjFlMi0z OWQ3LWJmMDItNDRhZmY0NWI4NGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5 Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2 MWExOWI5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk/lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4jJRkZyhOji1TgQ/cgZH1ytnTqDQue17pMTB2hUrW8xMKWiTqMr9xA 2K1U59TU0tIC3Fjzrg5/1AicG7GcB69iKaSDT8J/LE0dnZJq+tjGdM1spFraInq8 dVJymKpAuNT1bon05vSRdx91571S8dcZWqbnRfZ6pDjbLz+ixbO6P2SyjnOErxAS 7pJYtkji/8txw1/UX63vFQJbo/R6JeNE+5yL9Ln/Nqp8yvZ05ZC8IQs2JM414WrS qyI10puK+6Z5zQ9z16ngVuePaEHOYYP+ekhfE+8RqVg7Pa01wbG7pA7g2DbDRIxm 6GWY4oTq+KSigQctDi466iw/0yfKq80= -----END CERTIFICATE-----Generated at Sat Aug 15 04:23:29 2026 by rpki-client