$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa File: d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa (raw, json) Hash identifier: uo8L6JgD+clE4hZzLoWxrDQg/o6AhVC5fGUKaR9EQEI= Subject key identifier: 47:8D:68:BC:8E:86:2E:F5:41:5F:76:13:A7:29:78:10:15:BB:01:41 Certificate issuer: /CN=147f088f-ace0-45c8-9c73-f06e60d7debb Certificate serial: 010D0C9F4328584F4976A84D5CFD6B0AC8700400 Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 394321 IP address blocks: 216.147.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:a8:4d:5c:fd:6b:0a:c8:70:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cd8358c5-c76b-419a-8a76-f3c4a8ff53d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ad:f3:f4:dd:18:37:12:e4:d1:02:e0:8a:be: 73:9d:ea:df:fc:d7:3c:13:5c:b1:6b:48:ce:2d:e5: 05:17:dc:80:07:a4:9f:56:8a:4b:51:37:d7:4e:04: 2a:af:26:2a:5a:71:f7:c9:c7:51:bc:71:03:d3:95: 8a:93:13:13:59:28:7a:8d:50:58:ab:f0:1d:4a:08: 73:ac:fb:ce:d7:2f:43:39:73:2e:06:10:ce:e6:c4: 98:63:99:31:78:0b:d3:4e:9e:4e:f0:53:d4:db:b9: a5:1b:50:5b:9f:9b:74:d7:50:c5:33:39:01:9b:40: 4b:e5:97:fb:64:99:68:90:24:8f:d6:11:f2:a8:23: bf:cb:11:02:48:22:e7:f9:a7:bb:56:5e:4c:2a:9e: e8:12:eb:2a:e1:4a:f5:63:61:0c:36:95:c1:c5:1b: 0f:b6:1e:4a:e2:2e:95:b7:50:30:43:bc:3e:f6:7a: bb:ce:33:52:70:f1:d2:b4:f4:a8:76:1c:bf:d9:cf: 74:cb:e8:47:e0:81:d3:6f:dd:4e:d8:dc:60:30:41: ab:06:8b:fb:a4:3a:47:e1:f2:9e:ae:17:69:6e:51: d8:a7:a5:23:58:55:63:b1:40:5b:75:f6:fb:52:cd: 7a:20:b0:ca:c4:ac:3a:df:cc:c2:19:e9:e4:00:04: 15:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8D:68:BC:8E:86:2E:F5:41:5F:76:13:A7:29:78:10:15:BB:01:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl X509v3 Authority Key Identifier: keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer sbgp-ipAddrBlock: critical IPv4: 216.147.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:4b:90:26:06:4a:25:62:e6:64:88:d9:53:2a:0d:1c:13:e6: bc:75:ba:59:bc:92:84:d3:97:18:98:f1:e2:7b:53:fc:62:55: 7d:90:2c:35:59:cf:3c:63:87:a2:c3:c0:05:b9:0f:51:f1:53: 5e:d0:5d:bb:16:e9:b2:84:fe:c4:2b:ae:c2:89:50:06:1f:a5: d4:ae:19:60:7c:9d:98:6b:a1:9d:24:e3:00:82:5d:62:82:fb: e3:c7:32:09:7c:8b:34:76:a3:37:70:45:7d:14:18:70:17:35: a8:bc:93:50:70:df:7a:53:b2:b8:d5:42:ea:16:f9:3a:f5:39: 23:60:a3:b9:b8:21:01:55:a4:de:f9:aa:8a:a3:c0:a0:fb:9e: 35:a0:e5:f9:a4:d0:f4:cd:b9:3b:54:67:97:ae:60:67:fb:5b: 83:c4:ff:33:18:e2:03:cf:3a:d5:c4:5a:2b:5e:03:ce:0f:8c: a3:03:ce:1c:ca:70:c8:15:61:05:e2:39:5c:a6:1e:9a:18:a3: 49:fe:27:0c:fa:19:98:a0:15:16:74:00:16:1c:31:4b:87:38: e3:82:ef:e4:7d:30:f3:7e:d9:54:cf:d1:21:f6:e2:17:ea:13: db:86:52:41:02:6a:37:34:d9:dc:cd:fd:75:05:23:02:92:81: 86:6c:e0:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdqhNXP1rCshwBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ3ZjA4OGYtYWNlMC00NWM4LTljNzMtZjA2ZTYwZDdk ZWJiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2Q4MzU4YzUtYzc2Yi00MTlhLThhNzYtZjNjNGE4ZmY1M2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K3z9N0YNxLk0QLgir5znerf/Nc8E1yxa0jO LeUFF9yAB6SfVopLUTfXTgQqryYqWnH3ycdRvHED05WKkxMTWSh6jVBYq/AdSghz rPvO1y9DOXMuBhDO5sSYY5kxeAvTTp5O8FPU27mlG1Bbn5t011DFMzkBm0BL5Zf7 ZJlokCSP1hHyqCO/yxECSCLn+ae7Vl5MKp7oEusq4Ur1Y2EMNpXBxRsPth5K4i6V t1AwQ7w+9nq7zjNScPHStPSodhy/2c90y+hH4IHTb91O2NxgMEGrBov7pDpH4fKe rhdpblHYp6UjWFVjsUBbdfb7Us16ILDKxKw638zCGenkAAQV4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeNaLyOhi71QV92E6cpeBAVuwFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdm MDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBkN2RlYmIvZDliZDA2OGYtYTY1NS0z NTZiLWFlNTMtNWFkNzZiYThiZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTQ3ZjA4OGYtYWNlMC00NWM4LTlj NzMtZjA2ZTYwZDdkZWJiLzE0N2YwODhmLWFjZTAtNDVjOC05YzczLWYwNmU2MGQ3 ZGViYi5jcmwwHwYDVR0jBBgwFoAUoxrva0w2lGjtPSODrmMFH5s+HX8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZl NjBkN2RlYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JO4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1LkCYGSiVi5mSI2VMqDRwT5rx1ulm8koTTlxiY8eJ7U/xiVX2QLDVZ zzxjh6LDwAW5D1HxU17QXbsW6bKE/sQrrsKJUAYfpdSuGWB8nZhroZ0k4wCCXWKC ++PHMgl8izR2ozdwRX0UGHAXNai8k1Bw33pTsrjVQuoW+Tr1OSNgo7m4IQFVpN75 qoqjwKD7njWg5fmk0PTNuTtUZ5euYGf7W4PE/zMY4gPPOtXEWiteA84PjKMDzhzK cMgVYQXiOVymHpoYo0n+Jwz6GZigFRZ0ABYcMUuHOOOC7+R9MPN+2VTP0SH24hfq E9uGUkECajc02dzN/XUFIwKSgYZs4DI= -----END CERTIFICATE-----Generated at Sun Sep 27 08:33:05 2026 by rpki-client