$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa File: d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa (raw, json) Hash identifier: y0roHh25GHeMk9pr7z9Cw15LzXgNPO0KI8+Cr8M/ltM= Subject key identifier: F7:24:08:38:EC:AB:66:9E:35:FC:E5:21:23:BB:BA:5A:66:14:BE:CE Certificate issuer: /CN=147f088f-ace0-45c8-9c73-f06e60d7debb Certificate serial: 010D0C9F4328584EA788991A7F58869B1CC48000 Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 394321 IP address blocks: 216.147.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:99:1a:7f:58:86:9b:1c:c4:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=90e93dc5-586f-41ad-9031-f86d2dc992a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:76:e4:01:4c:d3:d5:74:09:b1:e3:55:ac:72: 58:54:03:3d:b7:b6:8a:7c:69:f5:f8:de:78:35:70: ed:27:b8:1b:c9:48:8a:3c:06:9e:ce:95:cc:d1:6d: 02:d8:90:d9:d5:32:5f:4f:fb:65:bd:0d:39:ad:44: 7f:d9:d2:f6:5a:cf:3d:a8:e3:65:a1:b1:e5:23:91: 64:e9:3d:da:83:53:c6:86:a3:bd:78:d9:71:27:e6: 42:ac:91:87:e3:9e:a2:ca:48:a9:ae:27:18:a7:5b: 40:8c:0d:5a:cd:3b:cf:ac:d4:1c:35:54:45:1b:cc: 1b:75:a6:4a:96:f9:97:6b:52:12:0f:39:de:2c:a6: db:c9:2a:de:06:c3:d9:4b:96:5c:e9:6e:82:fd:8a: 60:7b:48:3e:6e:f6:f6:ba:a5:7c:fc:cd:50:67:37: 3d:de:26:42:a6:82:4f:f0:6c:22:e5:0b:fc:84:37: f7:11:09:e5:1f:b2:3a:c6:bf:e0:a8:9b:e8:da:76: 70:c3:e7:aa:f1:58:ac:74:ff:a1:9e:62:6d:06:82: db:de:17:a8:12:54:96:a4:cc:7c:c3:30:95:9e:c1: a5:1a:b8:c9:a6:e6:d9:e2:01:10:c3:4e:47:b4:c0: 61:23:9f:54:e2:6d:d7:c9:c9:00:21:12:5c:cf:f6: 68:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:24:08:38:EC:AB:66:9E:35:FC:E5:21:23:BB:BA:5A:66:14:BE:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/d9bd068f-a655-356b-ae53-5ad76ba8bd14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl X509v3 Authority Key Identifier: keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer sbgp-ipAddrBlock: critical IPv4: 216.147.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:b8:37:0c:95:10:45:f8:67:48:e5:23:b2:3b:c2:5b:b8:f8: 5d:36:92:3c:95:83:bc:bc:a0:ed:1e:4f:90:54:1c:83:ad:59: fe:9c:8d:8d:03:d5:0b:a4:ce:e9:92:7c:39:13:84:a0:b4:74: 28:c0:c1:f3:69:f5:d4:a9:f3:18:28:a2:61:59:3e:2c:7a:24: c6:95:68:62:3b:1c:ac:fd:32:fc:8e:80:3d:e4:c2:87:c2:40: 6f:61:80:c1:e4:ec:d5:0c:c0:ba:09:f6:67:94:ae:17:0e:de: d9:3c:c6:ff:e1:de:eb:8c:7c:28:8b:04:b6:ea:97:c9:84:86: f9:9b:16:51:82:14:29:1c:43:8e:4a:16:c0:d3:99:ea:23:d5: fd:d4:6b:35:f6:d5:07:7a:2a:ab:f3:db:0e:79:ba:3e:4c:37: 10:e7:ee:be:71:fd:b5:d3:8c:d0:f6:b4:14:5b:b9:48:1d:32: 0a:29:a4:ae:d6:e6:7f:02:3b:51:47:2b:96:7b:3e:36:06:89: cc:97:42:e9:32:80:15:e7:2a:7a:76:69:23:5c:cd:e9:47:dd: 64:ed:40:5f:e2:6c:66:bc:fe:51:9a:c3:ab:89:67:42:58:cb: 00:ad:6c:c3:92:33:47:36:e6:28:68:4d:5b:0b:63:fc:bf:68: a3:b0:ff:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niJkaf1iGmxzEgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ3ZjA4OGYtYWNlMC00NWM4LTljNzMtZjA2ZTYwZDdk ZWJiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTBlOTNkYzUtNTg2Zi00MWFkLTkwMzEtZjg2ZDJkYzk5MmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HbkAUzT1XQJseNVrHJYVAM9t7aKfGn1+N54 NXDtJ7gbyUiKPAaezpXM0W0C2JDZ1TJfT/tlvQ05rUR/2dL2Ws89qONlobHlI5Fk 6T3ag1PGhqO9eNlxJ+ZCrJGH456iykipricYp1tAjA1azTvPrNQcNVRFG8wbdaZK lvmXa1ISDzneLKbbySreBsPZS5Zc6W6C/Ypge0g+bvb2uqV8/M1QZzc93iZCpoJP 8Gwi5Qv8hDf3EQnlH7I6xr/gqJvo2nZww+eq8VisdP+hnmJtBoLb3heoElSWpMx8 wzCVnsGlGrjJpubZ4gEQw05HtMBhI59U4m3XyckAIRJcz/ZoLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPckCDjsq2aeNfzlISO7ulpmFL7OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdm MDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBkN2RlYmIvZDliZDA2OGYtYTY1NS0z NTZiLWFlNTMtNWFkNzZiYThiZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTQ3ZjA4OGYtYWNlMC00NWM4LTlj NzMtZjA2ZTYwZDdkZWJiLzE0N2YwODhmLWFjZTAtNDVjOC05YzczLWYwNmU2MGQ3 ZGViYi5jcmwwHwYDVR0jBBgwFoAUoxrva0w2lGjtPSODrmMFH5s+HX8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZl NjBkN2RlYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JO4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACO4NwyVEEX4Z0jlI7I7wlu4+F02kjyVg7y8oO0eT5BUHIOtWf6cjY0D 1QukzumSfDkThKC0dCjAwfNp9dSp8xgoomFZPix6JMaVaGI7HKz9MvyOgD3kwofC QG9hgMHk7NUMwLoJ9meUrhcO3tk8xv/h3uuMfCiLBLbql8mEhvmbFlGCFCkcQ45K FsDTmeoj1f3UazX21Qd6Kqvz2w55uj5MNxDn7r5x/bXTjND2tBRbuUgdMgoppK7W 5n8CO1FHK5Z7PjYGicyXQukygBXnKnp2aSNczelH3WTtQF/ibGa8/lGaw6uJZ0JY ywCtbMOSM0c25ihoTVsLY/y/aKOw/xQ= -----END CERTIFICATE-----Generated at Tue Aug 11 12:20:35 2026 by rpki-client