$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/c8713f02-b7e1-3a51-b7b8-44e1a122b8e8.roa File: c8713f02-b7e1-3a51-b7b8-44e1a122b8e8.roa (raw, json) Hash identifier: KVgY7o33oX20b6eleZiBJEZiaCmta+WidaSPYhYxz3E= Subject key identifier: 5A:76:D8:4F:46:A7:27:05:D3:A4:00:9D:8B:7F:42:02:99:78:B8:64 Certificate issuer: /CN=6a4a98a7-67a3-40bb-b253-b11d6ed77f7a Certificate serial: 010D0C9F4328584F99417944E0ED0CE02EDE5C60 Authority key identifier: 47:4E:F2:AE:AB:DC:F5:0E:EF:CA:87:51:88:BF:5F:36:6F:A5:80:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/c8713f02-b7e1-3a51-b7b8-44e1a122b8e8.roa Signing time: Fri 23 Oct 2026 15:06:03 +0000 ROA not before: Fri 23 Oct 2026 15:06:03 +0000 ROA not after: Thu 21 Jan 2027 16:06:03 +0000 asID: 402971 IP address blocks: 156.9.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:99:41:79:44:e0:ed:0c:e0:2e:de:5c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a4a98a7-67a3-40bb-b253-b11d6ed77f7a Validity Not Before: Oct 23 15:06:03 2026 GMT Not After : Jan 21 16:06:03 2027 GMT Subject: CN=b49aa02e-6dfa-41d6-a5ad-31413ae2a0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:7c:4f:8a:58:b9:a8:8f:66:4e:e2:8a:7b: 2b:19:b6:2b:41:00:19:0d:a4:84:d5:58:c1:81:d2: b8:55:8d:3e:23:5c:8b:47:e4:16:0b:bd:9c:e7:38: 0f:15:20:30:b0:26:61:08:a6:9b:1b:d5:f8:05:75: 6c:0d:07:2d:15:8f:25:82:00:93:06:e3:98:97:43: f8:1c:59:1f:ad:25:0b:ce:d5:10:77:28:f2:87:4b: 23:e5:40:0f:32:9b:a5:41:0d:b8:ce:25:41:39:58: 1b:30:11:23:0a:dc:35:2b:05:53:6c:6e:bd:f1:9a: e2:d1:22:c8:a3:8c:70:a2:d5:aa:94:29:ec:8f:94: 48:f6:37:cc:14:de:f5:9f:58:2b:5a:24:5e:08:46: 3a:f4:42:0c:97:62:40:77:e1:be:c2:c0:a1:06:b3: dd:bf:cf:1b:36:0c:25:a9:bd:ef:3a:89:64:8d:02: 26:e8:7d:aa:86:20:e4:fa:67:6c:bd:e1:2d:9f:7f: b9:5e:86:9e:2a:cc:60:44:50:8a:9c:08:b0:92:c0: ac:79:42:da:93:18:e1:7a:16:76:61:6e:e0:8c:6e: 25:e0:99:ba:99:6a:09:fa:80:c8:6a:92:af:f4:15: 6c:fd:80:dd:d6:6c:48:cb:aa:10:51:3d:04:81:ca: 8b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:76:D8:4F:46:A7:27:05:D3:A4:00:9D:8B:7F:42:02:99:78:B8:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/c8713f02-b7e1-3a51-b7b8-44e1a122b8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.crl X509v3 Authority Key Identifier: keyid:47:4E:F2:AE:AB:DC:F5:0E:EF:CA:87:51:88:BF:5F:36:6F:A5:80:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6a4a98a7-67a3-40bb-b253-b11d6ed77f7a.cer sbgp-ipAddrBlock: critical IPv4: 156.9.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f9:13:75:9f:5c:99:8f:71:2f:23:2e:43:c1:a0:bf:bc:4a: a8:1b:38:bf:92:25:df:84:26:3a:81:09:a9:a1:e8:d4:d7:1b: 3b:7a:c7:58:cc:50:60:fd:fa:c5:dd:34:b7:75:88:fa:dd:65: ac:f5:a9:c5:2f:1e:37:ef:08:29:7d:e0:ac:6e:e7:0b:27:a6: 01:06:6c:c2:2a:0b:28:9b:75:79:0d:f2:fd:7b:81:78:24:0a: 62:b9:bd:8e:ad:e5:b0:17:54:f9:7e:3e:ca:39:da:b8:00:64: 4b:8e:67:40:90:4d:aa:3c:cb:20:63:9f:a1:e1:f7:c6:11:b3: 4f:be:47:03:f4:44:70:60:f0:98:2c:d8:ba:bc:b0:8f:41:e8: 42:d2:3a:86:78:36:75:f2:b4:95:db:4f:15:39:d9:7d:99:3c: 35:2e:ab:e5:78:32:e8:51:db:13:38:85:08:c1:50:b0:ae:9a: fd:fa:e9:40:52:7a:d4:97:ab:8c:42:08:05:0e:bf:dc:78:09: 91:7b:af:78:f9:59:0f:27:d7:d2:0e:d2:c0:7a:ef:1d:ce:4f: ea:22:51:d9:4c:af:ee:62:08:08:a6:61:cf:5b:82:89:a4:a1: d1:ca:08:f4:37:6b:5f:c4:70:95:36:bd:8a:b8:37:e9:94:52: 43:bb:e6:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+ZQXlE4O0M4C7eXGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmE0YTk4YTctNjdhMy00MGJiLWIyNTMtYjExZDZlZDc3 ZjdhMB4XDTI2MTAyMzE1MDYwM1oXDTI3MDEyMTE2MDYwM1owLzEtMCsGA1UEAxMk YjQ5YWEwMmUtNmRmYS00MWQ2LWE1YWQtMzE0MTNhZTJhMGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Z8T4pYuaiPZk7iinsrGbYrQQAZDaSE1VjB gdK4VY0+I1yLR+QWC72c5zgPFSAwsCZhCKabG9X4BXVsDQctFY8lggCTBuOYl0P4 HFkfrSULztUQdyjyh0sj5UAPMpulQQ24ziVBOVgbMBEjCtw1KwVTbG698Zri0SLI o4xwotWqlCnsj5RI9jfMFN71n1grWiReCEY69EIMl2JAd+G+wsChBrPdv88bNgwl qb3vOolkjQIm6H2qhiDk+mdsveEtn3+5XoaeKsxgRFCKnAiwksCseULakxjhehZ2 YW7gjG4l4Jm6mWoJ+oDIapKv9BVs/YDd1mxIy6oQUT0EgcqLbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFp22E9GpycF06QAnYt/QgKZeLhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS82YTRh OThhNy02N2EzLTQwYmItYjI1My1iMTFkNmVkNzdmN2EvYzg3MTNmMDItYjdlMS0z YTUxLWI3YjgtNDRlMWExMjJiOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNmE0YTk4YTctNjdhMy00MGJiLWIy NTMtYjExZDZlZDc3ZjdhLzZhNGE5OGE3LTY3YTMtNDBiYi1iMjUzLWIxMWQ2ZWQ3 N2Y3YS5jcmwwHwYDVR0jBBgwFoAUR07yrqvc9Q7vyodRiL9fNm+lgAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS82YTRhOThhNy02N2EzLTQwYmItYjI1My1iMTFk NmVkNzdmN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnAktMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB35E3WfXJmPcS8jLkPBoL+8SqgbOL+SJd+EJjqBCamh6NTXGzt6x1jM UGD9+sXdNLd1iPrdZaz1qcUvHjfvCCl94Kxu5wsnpgEGbMIqCyibdXkN8v17gXgk CmK5vY6t5bAXVPl+Pso52rgAZEuOZ0CQTao8yyBjn6Hh98YRs0++RwP0RHBg8Jgs 2Lq8sI9B6ELSOoZ4NnXytJXbTxU52X2ZPDUuq+V4MuhR2xM4hQjBULCumv366UBS etSXq4xCCAUOv9x4CZF7r3j5WQ8n19IO0sB67x3OT+oiUdlMr+5iCAimYc9bgomk odHKCPQ3a1/EcJU2vYq4N+mUUkO75jk= -----END CERTIFICATE-----Generated at Sat Oct 31 09:49:34 2026 by rpki-client