$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa File: 2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa (raw, json) Hash identifier: W0+M1Wffd0w4RJDZN3ixQL+dnTOx97cKimjZ4ixCkig= Subject key identifier: 20:9E:67:CF:5A:27:57:B4:01:C9:F4:E3:DF:0A:B5:E7:5D:AF:9E:09 Certificate issuer: /CN=147f088f-ace0-45c8-9c73-f06e60d7debb Certificate serial: 010D0C9F4328584F498B3E5D8F589DA8C8436600 Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 394321 IP address blocks: 66.97.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:3e:5d:8f:58:9d:a8:c8:43:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=511879b3-3f64-4536-bf73-ef0bbe14c821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:05:cf:ee:2b:25:c4:28:26:9a:fa:4d:1a:20: 0c:83:b0:0b:c8:5c:b4:1d:ec:e2:5a:25:5f:bb:43: 10:44:de:b4:36:4b:b3:ac:65:2b:5b:89:c8:b9:e3: 48:99:7e:ef:8b:4d:e7:ca:45:26:4e:ff:06:47:b6: 1e:87:7f:48:00:e9:57:76:d6:e4:b9:4b:61:37:39: 41:63:6a:ee:46:39:10:b1:8c:c8:76:9b:fc:14:02: bc:83:01:cf:62:c4:e9:8b:30:f7:e3:63:b6:49:a4: 02:97:44:db:e1:e7:be:f9:d8:70:94:b8:3e:00:1b: dd:d7:e8:e1:34:c2:4f:84:ba:e3:b2:13:6f:1f:31: fd:25:f1:70:c5:31:75:ba:2c:e9:44:b8:3c:9a:c8: 45:44:c9:87:51:b1:6c:7e:cf:a5:a8:2e:ea:73:d8: 30:4b:b2:ba:ff:84:59:ce:f2:6f:db:cf:e2:67:46: 32:e4:3d:9c:4a:11:9c:a4:3d:19:18:07:b8:bd:4c: cd:73:28:84:12:a4:95:fa:16:5a:9b:58:6f:4c:31: a0:fb:aa:da:c7:4f:26:ac:4a:5d:52:bf:f7:9b:f9: 7d:1c:3c:8f:af:22:d6:d5:9b:a9:dc:d0:f9:99:da: 26:5c:16:1b:2a:19:2b:8f:46:3f:04:28:23:7f:65: b6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9E:67:CF:5A:27:57:B4:01:C9:F4:E3:DF:0A:B5:E7:5D:AF:9E:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/2164f2d2-e147-3be2-a38b-97bb7a68dd06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl X509v3 Authority Key Identifier: keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer sbgp-ipAddrBlock: critical IPv4: 66.97.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:06:f3:53:ab:04:72:7a:dd:d3:98:14:81:6f:0f:5a:f0:12: cd:db:7e:11:cf:fa:e2:cb:5d:14:6d:09:5b:3f:1b:4d:8c:fb: 2b:20:f9:5a:44:68:87:24:06:8c:d0:09:85:20:87:d6:b2:a1: 4c:00:84:16:c3:c9:fc:88:9f:df:6a:3f:7b:3b:a7:f6:c0:cf: 3b:d6:7d:18:66:f7:6f:83:94:9c:cf:91:41:5a:e5:b0:8d:d9: 1a:f1:59:8f:70:88:45:14:82:40:f2:31:cd:ef:27:21:c9:8d: 5a:5a:25:01:56:24:cc:bb:96:d3:16:15:18:4c:5f:2a:a4:c0: 22:85:70:8f:1b:fb:22:6c:23:0e:06:03:42:72:ae:c3:0e:ee: b4:18:4a:8a:98:aa:ee:34:4e:c6:54:8c:e8:ff:98:d9:2a:aa: 77:d3:fc:86:fa:f1:d7:ed:26:07:9b:cc:2d:17:80:e5:97:07: 26:3d:26:fc:0a:fa:6e:44:60:80:43:cd:9f:eb:88:61:31:84: 5a:87:69:c1:09:4b:19:e6:52:a4:a4:62:44:4a:98:ca:6e:4b: 2c:64:de:a2:1d:61:a8:3d:bb:77:95:9e:ec:2d:00:f6:23:52: 4f:46:4a:e8:cc:6b:36:61:6c:24:ed:18:21:0a:b8:9b:c8:b9: 57:ae:2d:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jiz5dj1idqMhDZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ3ZjA4OGYtYWNlMC00NWM4LTljNzMtZjA2ZTYwZDdk ZWJiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTExODc5YjMtM2Y2NC00NTM2LWJmNzMtZWYwYmJlMTRjODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAXP7islxCgmmvpNGiAMg7ALyFy0HeziWiVf u0MQRN60NkuzrGUrW4nIueNImX7vi03nykUmTv8GR7Yeh39IAOlXdtbkuUthNzlB Y2ruRjkQsYzIdpv8FAK8gwHPYsTpizD342O2SaQCl0Tb4ee++dhwlLg+ABvd1+jh NMJPhLrjshNvHzH9JfFwxTF1uizpRLg8mshFRMmHUbFsfs+lqC7qc9gwS7K6/4RZ zvJv28/iZ0Yy5D2cShGcpD0ZGAe4vUzNcyiEEqSV+hZam1hvTDGg+6rax08mrEpd Ur/3m/l9HDyPryLW1Zup3ND5mdomXBYbKhkrj0Y/BCgjf2W2gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCeZ89aJ1e0Acn0498Kteddr54JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdm MDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBkN2RlYmIvMjE2NGYyZDItZTE0Ny0z YmUyLWEzOGItOTdiYjdhNjhkZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTQ3ZjA4OGYtYWNlMC00NWM4LTlj NzMtZjA2ZTYwZDdkZWJiLzE0N2YwODhmLWFjZTAtNDVjOC05YzczLWYwNmU2MGQ3 ZGViYi5jcmwwHwYDVR0jBBgwFoAUoxrva0w2lGjtPSODrmMFH5s+HX8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZl NjBkN2RlYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQmHtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8G81OrBHJ63dOYFIFvD1rwEs3bfhHP+uLLXRRtCVs/G02M+ysg+VpE aIckBozQCYUgh9ayoUwAhBbDyfyIn99qP3s7p/bAzzvWfRhm92+DlJzPkUFa5bCN 2RrxWY9wiEUUgkDyMc3vJyHJjVpaJQFWJMy7ltMWFRhMXyqkwCKFcI8b+yJsIw4G A0JyrsMO7rQYSoqYqu40TsZUjOj/mNkqqnfT/Ib68dftJgebzC0XgOWXByY9JvwK +m5EYIBDzZ/riGExhFqHacEJSxnmUqSkYkRKmMpuSyxk3qIdYag9u3eVnuwtAPYj Uk9GSujMazZhbCTtGCEKuJvIuVeuLUY= -----END CERTIFICATE-----Generated at Sun Sep 27 10:20:31 2026 by rpki-client