$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/bac70ac4-0056-3f19-b0a5-1ec7e4f69a5d.roa File: bac70ac4-0056-3f19-b0a5-1ec7e4f69a5d.roa (raw, json) Hash identifier: sdACpxrRSQ/U3caZdwI3rByYCfMc5QrbW+G6VlvonG0= Subject key identifier: E4:30:8B:20:34:6C:0D:20:2D:67:CB:59:F6:8B:01:A9:CD:19:4F:C6 Certificate issuer: /CN=6a4a98a7-67a3-40bb-b253-b11d6ed77f7a Certificate serial: 010D0C9F4328584F99417951E80860F2FFB17300 Authority key identifier: 47:4E:F2:AE:AB:DC:F5:0E:EF:CA:87:51:88:BF:5F:36:6F:A5:80:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/bac70ac4-0056-3f19-b0a5-1ec7e4f69a5d.roa Signing time: Fri 23 Oct 2026 15:06:03 +0000 ROA not before: Fri 23 Oct 2026 15:06:03 +0000 ROA not after: Thu 21 Jan 2027 16:06:03 +0000 asID: 402971 IP address blocks: 156.9.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:99:41:79:51:e8:08:60:f2:ff:b1:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a4a98a7-67a3-40bb-b253-b11d6ed77f7a Validity Not Before: Oct 23 15:06:03 2026 GMT Not After : Jan 21 16:06:03 2027 GMT Subject: CN=bfddff7c-19aa-4070-8806-2cbf279682f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f1:d9:0b:fd:87:04:b3:f0:09:42:de:95:79: 25:36:d2:93:2c:6a:e5:32:41:88:a5:9f:0e:5a:62: 75:f4:78:e0:9f:40:21:3e:51:d0:8c:86:7b:81:6e: 26:89:30:97:80:8d:33:88:1e:71:69:b6:a8:62:8c: 79:cc:14:d4:cd:78:58:7e:06:a2:de:56:45:e0:d1: 07:4f:a3:52:ca:41:22:bb:20:44:94:c9:5d:e9:26: 4f:79:cb:49:b9:92:ce:82:ca:fd:b0:19:0b:4b:79: ff:d8:5c:1e:c0:8d:33:dd:ab:a9:91:1c:94:d0:c6: 6b:95:46:e8:ab:99:26:cd:d8:d1:ff:9d:40:20:52: 9d:31:fa:04:0c:da:94:46:e8:c3:b1:31:f4:f1:5b: 1e:82:86:f0:e3:89:78:2b:3f:fa:a6:3e:e8:2e:ee: 09:91:79:a6:58:a8:9d:3d:c4:29:32:e9:18:dd:6c: 7d:cf:9d:8c:49:74:03:68:a3:8a:12:d1:f1:6a:9f: a9:c3:8f:02:5a:42:bf:1a:4c:e7:86:35:be:24:ab: 7c:b4:8d:15:ea:a5:35:2b:b0:83:69:57:9f:a7:cc: 3c:ea:d1:f8:10:ab:a5:f8:60:19:ec:0f:bf:2f:0f: e4:49:2a:4e:64:c5:23:13:5a:85:01:f3:51:b7:3f: 15:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:30:8B:20:34:6C:0D:20:2D:67:CB:59:F6:8B:01:A9:CD:19:4F:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/bac70ac4-0056-3f19-b0a5-1ec7e4f69a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.crl X509v3 Authority Key Identifier: keyid:47:4E:F2:AE:AB:DC:F5:0E:EF:CA:87:51:88:BF:5F:36:6F:A5:80:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.cer sbgp-ipAddrBlock: critical IPv4: 156.9.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:96:68:fc:db:10:cc:96:b1:5c:24:9e:ea:8e:12:47:b7:ad: 86:ed:d4:5b:1b:b3:f2:eb:8a:63:3d:aa:7e:98:23:c2:71:38: 10:0d:93:99:cf:a8:cd:c3:a9:16:17:73:57:69:57:84:04:b8: 5d:3b:66:d5:e9:97:00:a6:73:f7:14:18:ac:83:ad:39:4b:d9: 0d:2e:04:4d:7c:ba:5c:7a:1d:dc:6a:a7:dc:80:5a:e0:35:d3: 61:5c:84:3d:be:bf:ec:19:27:3c:5f:1d:8e:fa:54:f0:8f:eb: 89:3a:50:92:a0:20:d3:1d:c3:45:07:43:5d:fa:ea:56:e2:4b: 4c:0b:25:36:1e:d9:4e:41:14:6e:d1:f5:f7:f5:f2:8f:fc:11: dc:30:45:dc:ea:d8:ca:bb:1e:13:ab:64:fb:52:fd:24:8c:1b: 3b:e5:3a:c2:88:9c:35:dc:b7:35:21:70:40:45:56:99:90:0c: 46:e5:5c:e2:6c:25:4f:53:f5:f3:07:ea:a2:a2:0c:74:a1:c3: c4:12:da:d7:99:02:25:1e:62:d8:ab:63:64:fe:78:a8:20:a5: ec:26:e2:78:b2:09:31:63:32:71:d8:5e:6e:53:ac:6d:67:47: 46:aa:c0:2a:91:d5:95:a2:f7:15:c5:f8:aa:b8:46:c6:12:5a: b0:ef:5e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+ZQXlR6Ahg8v+xcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmE0YTk4YTctNjdhMy00MGJiLWIyNTMtYjExZDZlZDc3 ZjdhMB4XDTI2MTAyMzE1MDYwM1oXDTI3MDEyMTE2MDYwM1owLzEtMCsGA1UEAxMk YmZkZGZmN2MtMTlhYS00MDcwLTg4MDYtMmNiZjI3OTY4MmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvHZC/2HBLPwCULelXklNtKTLGrlMkGIpZ8O WmJ19Hjgn0AhPlHQjIZ7gW4miTCXgI0ziB5xabaoYox5zBTUzXhYfgai3lZF4NEH T6NSykEiuyBElMld6SZPectJuZLOgsr9sBkLS3n/2FwewI0z3aupkRyU0MZrlUbo q5kmzdjR/51AIFKdMfoEDNqURujDsTH08Vsegobw44l4Kz/6pj7oLu4JkXmmWKid PcQpMukY3Wx9z52MSXQDaKOKEtHxap+pw48CWkK/GkznhjW+JKt8tI0V6qU1K7CD aVefp8w86tH4EKul+GAZ7A+/Lw/kSSpOZMUjE1qFAfNRtz8V3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQwiyA0bA0gLWfLWfaLAanNGU/GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS82YTRh OThhNy02N2EzLTQwYmItYjI1My1iMTFkNmVkNzdmN2EvYmFjNzBhYzQtMDA1Ni0z ZjE5LWIwYTUtMWVjN2U0ZjY5YTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNmE0YTk4YTctNjdhMy00MGJiLWIy NTMtYjExZDZlZDc3ZjdhLzZhNGE5OGE3LTY3YTMtNDBiYi1iMjUzLWIxMWQ2ZWQ3 N2Y3YS5jcmwwHwYDVR0jBBgwFoAUR07yrqvc9Q7vyodRiL9fNm+lgAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS82YTRhOThhNy02N2EzLTQwYmItYjI1My1iMTFk NmVkNzdmN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnAkuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGWaPzbEMyWsVwknuqOEke3rYbt1Fsbs/LrimM9qn6YI8JxOBANk5nP qM3DqRYXc1dpV4QEuF07ZtXplwCmc/cUGKyDrTlL2Q0uBE18ulx6Hdxqp9yAWuA1 02FchD2+v+wZJzxfHY76VPCP64k6UJKgINMdw0UHQ1366lbiS0wLJTYe2U5BFG7R 9ff18o/8EdwwRdzq2Mq7HhOrZPtS/SSMGzvlOsKInDXctzUhcEBFVpmQDEblXOJs JU9T9fMH6qKiDHShw8QS2teZAiUeYtirY2T+eKggpewm4niyCTFjMnHYXm5TrG1n R0aqwCqR1ZWi9xXF+Kq4RsYSWrDvXng= -----END CERTIFICATE-----Generated at Sat Oct 31 09:49:35 2026 by rpki-client