$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/9d20ee29-516f-3930-b849-ad0ee8b7e392.roa File: 9d20ee29-516f-3930-b849-ad0ee8b7e392.roa (raw, json) Hash identifier: hFd69mPhBti6YdoDM6VlX1KSxOGIB6QkhFfvi/G/41A= Subject key identifier: CF:51:07:61:C7:C7:A8:8B:1A:59:1F:6E:48:17:4A:B4:FE:4D:CD:FB Certificate issuer: /CN=e8253a5c-5822-44df-8846-56b6c0450bbe Certificate serial: 010D0C9F4328584EB2B1BAAC9E4C01280A8B6080 Authority key identifier: 8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/9d20ee29-516f-3930-b849-ad0ee8b7e392.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 33362 IP address blocks: 158.222.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:ba:ac:9e:4c:01:28:0a:8b:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8253a5c-5822-44df-8846-56b6c0450bbe Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=bb5922c1-678d-463b-9e8d-1a15890b5e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:76:10:ca:8d:a5:c8:47:53:d2:0e:5d:ae: 26:37:e6:2a:b8:27:57:3e:5c:e5:04:78:6d:0b:42: 97:af:7a:19:bf:b5:e3:df:c4:6a:bd:be:20:8f:d6: ec:2a:e2:49:17:c3:16:65:84:82:18:87:a2:97:1a: a3:b6:31:ed:1d:be:be:88:8b:08:3d:cc:f5:5d:aa: c3:cb:24:73:7b:5c:7c:42:2b:48:ae:9c:d6:c0:81: da:3b:67:f0:3b:af:29:0e:75:d2:17:59:76:16:a4: e4:3a:77:4d:42:39:1c:84:8d:03:1f:eb:c3:72:33: 3a:ed:cb:50:f2:f6:e6:12:a4:09:1c:5a:ec:db:76: c9:74:c1:eb:6f:58:28:28:6d:80:83:f6:9a:9b:fa: 73:47:07:5a:05:15:5c:32:82:77:f9:08:99:f3:de: 67:af:a0:d8:07:e4:3b:b3:c8:f0:26:ae:5f:89:57: 5f:93:9a:8a:8f:6f:c1:01:93:8c:3f:fb:8c:89:e6: 1b:25:61:f8:1b:93:b2:d2:26:e6:9d:16:4d:a5:01: bd:e7:a7:39:76:c8:e8:62:e8:4f:14:db:6f:eb:15: 2c:85:f4:f9:bd:6e:27:dd:2b:00:5f:e4:b0:c6:8b: 7e:97:ef:16:e9:cf:4c:cb:fa:46:84:e1:eb:18:ca: 45:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:51:07:61:C7:C7:A8:8B:1A:59:1F:6E:48:17:4A:B4:FE:4D:CD:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/9d20ee29-516f-3930-b849-ad0ee8b7e392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe/e8253a5c-5822-44df-8846-56b6c0450bbe.crl X509v3 Authority Key Identifier: keyid:8C:04:51:41:EF:65:44:0D:8D:BF:17:38:32:1A:7E:73:4A:4D:EA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e8253a5c-5822-44df-8846-56b6c0450bbe.cer sbgp-ipAddrBlock: critical IPv4: 158.222.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:58:93:2c:7d:55:0d:20:33:14:46:44:e6:2f:92:91:af:b4: 9a:f5:b5:e0:4d:6c:bf:6e:35:e7:ee:c5:50:a2:a9:d0:a9:28: 4a:ff:78:f0:86:3f:7d:2d:15:cb:c3:6e:0e:fc:53:77:a3:99: 90:8a:aa:fe:ca:7f:d9:e1:1b:4e:66:d7:41:1e:9c:97:f3:6c: 28:b0:cb:c4:fa:56:f3:79:1b:c6:ca:16:de:24:84:a4:29:ed: ad:e0:6c:91:df:07:e0:4e:cc:d3:00:9c:0f:23:b1:2e:9c:35: 6d:5b:5d:20:71:6a:84:0f:40:01:d4:35:2c:97:6b:f4:ea:9b: fc:84:b1:e1:c8:57:16:c4:b7:6b:35:61:84:a7:1c:c1:cf:b1: b7:80:5b:9e:e8:a8:9e:b2:2f:86:cc:c9:eb:0a:ad:68:86:82: 17:37:62:36:3c:dd:cb:37:e3:6b:6c:71:42:c3:e2:c0:67:ae: 30:3b:80:fc:9c:1e:04:9f:19:fd:ae:7c:f8:de:f1:2e:4b:08: 8d:09:7f:67:c4:4b:72:6e:23:ab:b6:5a:eb:5c:f7:ae:01:3e: 5c:78:6f:cc:96:73:e8:09:ce:00:2e:3b:a4:b2:17:ee:d7:32: cc:cf:c5:71:19:e9:cc:32:f1:ca:aa:d7:6a:f0:53:34:e8:01: ae:99:e5:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysbqsnkwBKAqLYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgyNTNhNWMtNTgyMi00NGRmLTg4NDYtNTZiNmMwNDUw YmJlMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk YmI1OTIyYzEtNjc4ZC00NjNiLTllOGQtMWExNTg5MGI1ZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdB2EMqNpchHU9IOXa4mN+YquCdXPlzlBHht C0KXr3oZv7Xj38Rqvb4gj9bsKuJJF8MWZYSCGIeilxqjtjHtHb6+iIsIPcz1XarD yyRze1x8QitIrpzWwIHaO2fwO68pDnXSF1l2FqTkOndNQjkchI0DH+vDcjM67ctQ 8vbmEqQJHFrs23bJdMHrb1goKG2Ag/aam/pzRwdaBRVcMoJ3+QiZ895nr6DYB+Q7 s8jwJq5fiVdfk5qKj2/BAZOMP/uMieYbJWH4G5Oy0ibmnRZNpQG956c5dsjoYuhP FNtv6xUshfT5vW4n3SsAX+Swxot+l+8W6c9My/pGhOHrGMpFWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9RB2HHx6iLGlkfbkgXSrT+Tc37MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lODI1 M2E1Yy01ODIyLTQ0ZGYtODg0Ni01NmI2YzA0NTBiYmUvOWQyMGVlMjktNTE2Zi0z OTMwLWI4NDktYWQwZWU4YjdlMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTgyNTNhNWMtNTgyMi00NGRmLTg4 NDYtNTZiNmMwNDUwYmJlL2U4MjUzYTVjLTU4MjItNDRkZi04ODQ2LTU2YjZjMDQ1 MGJiZS5jcmwwHwYDVR0jBBgwFoAUjARRQe9lRA2Nvxc4Mhp+c0pN6gowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lODI1M2E1Yy01ODIyLTQ0ZGYtODg0Ni01NmI2 YzA0NTBiYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnt5eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1Ykyx9VQ0gMxRGROYvkpGvtJr1teBNbL9uNefuxVCiqdCpKEr/ePCG P30tFcvDbg78U3ejmZCKqv7Kf9nhG05m10EenJfzbCiwy8T6VvN5G8bKFt4khKQp 7a3gbJHfB+BOzNMAnA8jsS6cNW1bXSBxaoQPQAHUNSyXa/Tqm/yEseHIVxbEt2s1 YYSnHMHPsbeAW57oqJ6yL4bMyesKrWiGghc3YjY83cs342tscULD4sBnrjA7gPyc HgSfGf2ufPje8S5LCI0Jf2fES3JuI6u2Wutc964BPlx4b8yWc+gJzgAuO6SyF+7X MszPxXEZ6cwy8cqq12rwUzToAa6Z5eI= -----END CERTIFICATE-----Generated at Sat Sep 5 08:14:35 2026 by rpki-client