$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21448658-54a1-4eec-b12a-23e5d9a05694/f23cc454-3a36-3109-8f61-f72fb5b92682.roa File: f23cc454-3a36-3109-8f61-f72fb5b92682.roa (raw, json) Hash identifier: vWwtJkfXOnQ1FBsMveP9kZhyTaHnSPSPHYnK5wCAfK8= Subject key identifier: CA:34:C4:77:3F:CC:BE:AC:21:D6:D3:30:1D:4E:CA:3F:76:DC:C5:26 Certificate issuer: /CN=21448658-54a1-4eec-b12a-23e5d9a05694 Certificate serial: 010D0C9F4328584F7E8219CB93B23ECCE6107580 Authority key identifier: 4F:E0:ED:7F:85:08:20:25:59:E4:D4:25:0F:61:DA:3C:3B:78:9C:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21448658-54a1-4eec-b12a-23e5d9a05694.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21448658-54a1-4eec-b12a-23e5d9a05694/f23cc454-3a36-3109-8f61-f72fb5b92682.roa Signing time: Wed 14 Oct 2026 01:09:26 +0000 ROA not before: Wed 14 Oct 2026 01:09:26 +0000 ROA not after: Tue 12 Jan 2027 02:09:26 +0000 asID: 402631 IP address blocks: 156.9.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21448658-54a1-4eec-b12a-23e5d9a05694/21448658-54a1-4eec-b12a-23e5d9a05694.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21448658-54a1-4eec-b12a-23e5d9a05694/21448658-54a1-4eec-b12a-23e5d9a05694.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21448658-54a1-4eec-b12a-23e5d9a05694.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:82:19:cb:93:b2:3e:cc:e6:10:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21448658-54a1-4eec-b12a-23e5d9a05694 Validity Not Before: Oct 14 01:09:26 2026 GMT Not After : Jan 12 02:09:26 2027 GMT Subject: CN=cf393bf1-8ae2-47ea-ba15-a8ae2428df31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4b:bb:0d:cd:94:12:c2:62:8d:fa:21:c8:46: a6:24:71:b0:f1:31:2e:2b:de:e6:7f:2e:3e:1e:a3: 1a:06:c9:29:c7:e5:fd:80:fd:a1:38:0c:1d:c8:eb: 91:7f:58:06:1a:b3:f7:52:1e:ee:c7:33:39:0b:fd: 7b:75:a6:6d:fb:ba:ed:72:1e:aa:ca:00:01:48:bd: 88:54:54:59:53:d1:ea:dc:13:62:df:4e:11:00:a7: 5b:66:c7:57:84:7b:2a:cd:6a:df:a9:32:fb:de:2f: 9c:4a:4d:c4:37:c8:33:09:5e:25:7e:0b:7f:32:e0: a4:a9:cf:f2:a8:58:50:52:96:bd:ed:b8:4d:53:db: c1:e1:b4:62:55:72:e6:83:79:b6:9e:b2:08:e2:6b: 03:af:b9:2e:1b:12:1f:31:36:0d:d6:e7:cc:74:7f: 97:07:69:ee:c4:79:48:10:33:66:58:0c:5b:65:04: 60:fb:1a:2c:32:0e:2f:7b:5a:a8:29:05:10:19:fe: 6e:53:b6:c5:e3:45:5e:42:8f:7a:67:49:1a:32:a5: 32:2c:a4:4c:cf:cc:73:7a:ac:37:ce:5a:56:87:12: 1e:ba:ae:72:ed:43:33:6b:40:1e:67:b8:af:e8:4d: 44:c9:a1:1a:a2:77:62:bd:23:eb:54:fb:d1:0c:ff: 5d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:34:C4:77:3F:CC:BE:AC:21:D6:D3:30:1D:4E:CA:3F:76:DC:C5:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21448658-54a1-4eec-b12a-23e5d9a05694/f23cc454-3a36-3109-8f61-f72fb5b92682.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21448658-54a1-4eec-b12a-23e5d9a05694/21448658-54a1-4eec-b12a-23e5d9a05694.crl X509v3 Authority Key Identifier: keyid:4F:E0:ED:7F:85:08:20:25:59:E4:D4:25:0F:61:DA:3C:3B:78:9C:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/21448658-54a1-4eec-b12a-23e5d9a05694.cer sbgp-ipAddrBlock: critical IPv4: 156.9.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:93:aa:90:1d:fa:7c:be:c2:0b:6a:85:6b:31:54:96:16:66: f8:e9:d8:b8:a3:9e:d6:9e:d5:91:58:21:ca:7d:13:76:ff:8c: 3b:12:9b:55:f4:4e:e8:d3:4a:39:ca:93:3c:29:cc:0f:43:aa: 6b:0d:15:58:2b:5b:85:55:4e:6a:77:35:a6:4e:c9:46:70:3b: 3a:87:86:b1:da:1f:4c:cf:5b:9c:d7:14:84:16:a7:6b:89:67: 98:ad:e8:43:7e:f8:95:11:1e:41:66:60:67:62:11:eb:85:b9: 29:9f:d2:9e:b0:53:bc:3f:67:d7:6e:84:89:00:92:ee:74:95: 62:c4:ef:c2:8e:90:90:34:49:61:4a:56:eb:5c:69:dd:e5:9f: 8b:e7:93:d0:ca:ce:d6:7c:14:00:c6:7a:8e:ce:ab:22:ca:9e: 3c:34:d1:ea:70:a0:f5:a4:d3:80:e0:e3:a0:1e:ec:20:79:5b: 60:a4:2a:c0:25:7c:79:f9:19:52:9f:77:dd:93:7f:52:46:a8: 90:c0:b0:8e:0d:a6:23:57:d0:fe:41:e5:91:88:f7:94:41:48: 82:13:56:d0:2c:99:f8:69:ec:26:ad:6a:13:ca:2b:71:75:00: fe:29:5b:7e:97:41:ac:37:48:98:af:86:fb:4b:2f:6a:25:90: d8:46:be:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+ghnLk7I+zOYQdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0NDg2NTgtNTRhMS00ZWVjLWIxMmEtMjNlNWQ5YTA1 Njk0MB4XDTI2MTAxNDAxMDkyNloXDTI3MDExMjAyMDkyNlowLzEtMCsGA1UEAxMk Y2YzOTNiZjEtOGFlMi00N2VhLWJhMTUtYThhZTI0MjhkZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUu7Dc2UEsJijfohyEamJHGw8TEuK97mfy4+ HqMaBskpx+X9gP2hOAwdyOuRf1gGGrP3Uh7uxzM5C/17daZt+7rtch6qygABSL2I VFRZU9Hq3BNi304RAKdbZsdXhHsqzWrfqTL73i+cSk3EN8gzCV4lfgt/MuCkqc/y qFhQUpa97bhNU9vB4bRiVXLmg3m2nrII4msDr7kuGxIfMTYN1ufMdH+XB2nuxHlI EDNmWAxbZQRg+xosMg4ve1qoKQUQGf5uU7bF40VeQo96Z0kaMqUyLKRMz8xzeqw3 zlpWhxIeuq5y7UMza0AeZ7iv6E1EyaEaondivSPrVPvRDP9doQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo0xHc/zL6sIdbTMB1Oyj923MUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8yMTQ0 ODY1OC01NGExLTRlZWMtYjEyYS0yM2U1ZDlhMDU2OTQvZjIzY2M0NTQtM2EzNi0z MTA5LThmNjEtZjcyZmI1YjkyNjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMjE0NDg2NTgtNTRhMS00ZWVjLWIx MmEtMjNlNWQ5YTA1Njk0LzIxNDQ4NjU4LTU0YTEtNGVlYy1iMTJhLTIzZTVkOWEw NTY5NC5jcmwwHwYDVR0jBBgwFoAUT+Dtf4UIICVZ5NQlD2HaPDt4nO0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8yMTQ0ODY1OC01NGExLTRlZWMtYjEyYS0yM2U1 ZDlhMDU2OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnAkMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmTqpAd+ny+wgtqhWsxVJYWZvjp2Lijntae1ZFYIcp9E3b/jDsSm1X0 TujTSjnKkzwpzA9DqmsNFVgrW4VVTmp3NaZOyUZwOzqHhrHaH0zPW5zXFIQWp2uJ Z5it6EN++JURHkFmYGdiEeuFuSmf0p6wU7w/Z9duhIkAku50lWLE78KOkJA0SWFK Vutcad3ln4vnk9DKztZ8FADGeo7OqyLKnjw00epwoPWk04Dg46Ae7CB5W2CkKsAl fHn5GVKfd92Tf1JGqJDAsI4NpiNX0P5B5ZGI95RBSIITVtAsmfhp7CatahPKK3F1 AP4pW36XQaw3SJivhvtLL2olkNhGvvQ= -----END CERTIFICATE-----Generated at Sat Oct 24 01:58:49 2026 by rpki-client