$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c676d317-6e70-4795-948d-39355456008d/932c2db3-4e0e-3a22-85d7-f529e62fe877.roa File: 932c2db3-4e0e-3a22-85d7-f529e62fe877.roa (raw, json) Hash identifier: bX08fz3FAsONCniOUaaPpTgJd/5r+2jUECrDBUPOHKg= Subject key identifier: 9C:96:53:05:07:0D:F8:AB:98:DB:6F:43:3E:7B:17:50:1B:3A:8A:08 Certificate issuer: /CN=c676d317-6e70-4795-948d-39355456008d Certificate serial: 010D0C9F4328584FA0AA75FE4B0EB3B9AF766780 Authority key identifier: 47:1A:17:7F:E6:85:BD:C3:BE:F0:CC:37:AA:01:34:A7:E6:BE:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c676d317-6e70-4795-948d-39355456008d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c676d317-6e70-4795-948d-39355456008d/932c2db3-4e0e-3a22-85d7-f529e62fe877.roa Signing time: Mon 26 Oct 2026 06:48:15 +0000 ROA not before: Mon 26 Oct 2026 06:48:15 +0000 ROA not after: Sun 24 Jan 2027 07:48:15 +0000 asID: 198661 IP address blocks: 156.9.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c676d317-6e70-4795-948d-39355456008d/c676d317-6e70-4795-948d-39355456008d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c676d317-6e70-4795-948d-39355456008d/c676d317-6e70-4795-948d-39355456008d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c676d317-6e70-4795-948d-39355456008d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a0:aa:75:fe:4b:0e:b3:b9:af:76:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c676d317-6e70-4795-948d-39355456008d Validity Not Before: Oct 26 06:48:15 2026 GMT Not After : Jan 24 07:48:15 2027 GMT Subject: CN=ada678c6-d531-4838-896a-78e63e3fcd7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e6:d9:ad:4a:e5:06:72:72:a2:74:68:72:e5: 98:77:5b:25:90:d7:b0:4f:14:af:b7:a8:55:46:48: 40:87:12:07:9b:50:4c:31:2e:89:c3:4b:66:13:78: 2d:19:a0:ce:f7:2e:22:e5:b6:28:fe:89:c5:de:4c: ad:c7:ba:2d:e7:0d:90:e8:bc:28:00:d0:dc:5d:2b: 7a:6e:e5:32:5d:d7:f2:de:09:2a:07:48:43:f9:19: 62:41:25:dc:3f:23:b5:9a:ed:7d:74:e3:aa:ed:6e: fa:f2:07:e7:da:b4:e1:a9:c3:a1:22:83:ec:ac:c2: 04:92:47:94:04:7b:dd:77:eb:4a:1c:57:a2:cb:1f: 8a:48:11:b8:ae:62:0a:5e:12:dc:62:04:e8:2a:54: 86:31:e3:89:0f:69:39:e4:e5:86:e1:df:4a:fc:c9: a6:07:49:80:bd:55:54:0a:7f:b3:8d:41:3c:4e:99: ac:56:1d:16:1b:1b:40:6d:31:43:c1:6d:5d:18:b9: 84:e0:26:fa:f8:ce:d9:64:ea:06:e0:56:38:cd:4b: 4e:d3:ee:db:2d:b2:75:f6:b0:aa:53:8f:79:8e:8b: d1:cb:73:15:cf:bc:d1:60:db:5e:51:33:b1:2a:19: 24:d1:0d:9e:b4:e7:8d:de:3e:01:c7:46:9a:0a:1a: 78:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:96:53:05:07:0D:F8:AB:98:DB:6F:43:3E:7B:17:50:1B:3A:8A:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c676d317-6e70-4795-948d-39355456008d/932c2db3-4e0e-3a22-85d7-f529e62fe877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c676d317-6e70-4795-948d-39355456008d/c676d317-6e70-4795-948d-39355456008d.crl X509v3 Authority Key Identifier: keyid:47:1A:17:7F:E6:85:BD:C3:BE:F0:CC:37:AA:01:34:A7:E6:BE:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c676d317-6e70-4795-948d-39355456008d.cer sbgp-ipAddrBlock: critical IPv4: 156.9.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5f:42:1a:cc:1a:7c:7a:e3:f4:5c:48:ec:47:e6:80:61:83: c5:dd:a3:a4:45:59:be:72:33:a0:f2:0b:ed:72:6c:80:f6:eb: 09:2a:d4:46:92:a4:51:8d:16:f8:3b:79:54:a5:11:9a:9b:ab: be:9e:df:29:aa:64:39:3d:57:a5:62:dd:e0:d3:ad:12:ee:d6: b2:c7:02:69:bd:dc:fd:fe:d9:08:9e:3c:c1:3f:d4:f4:ed:cf: 88:69:cd:11:ef:11:90:46:68:83:81:d3:53:10:dd:6d:a9:41: e8:07:30:c1:5a:dd:1b:49:62:76:85:a1:4d:a1:fb:59:0a:59: 19:04:e2:97:f6:6e:9c:e7:e4:c8:5d:65:21:18:24:d0:6a:d8: 1d:0e:cb:5f:4a:bc:ad:df:36:a7:09:5c:ff:42:d6:11:2f:f4: 5b:1e:c5:88:4f:61:4c:17:b6:8b:fa:69:be:0c:36:f8:7c:33: b1:f8:75:7b:96:31:39:3f:eb:b9:60:5e:fb:90:f3:13:ba:f1: 2f:29:9c:c8:76:eb:01:1c:93:ed:40:07:3f:b3:61:25:6c:50: ca:8c:fd:4b:f0:b6:54:6d:b3:64:11:66:a6:92:1c:d3:82:87: 0f:cf:bd:92:92:45:aa:0d:3f:a9:ff:41:9a:63:0d:2f:cb:1b: 17:8c:c9:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+gqnX+Sw6zua92Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY3NmQzMTctNmU3MC00Nzk1LTk0OGQtMzkzNTU0NTYw MDhkMB4XDTI2MTAyNjA2NDgxNVoXDTI3MDEyNDA3NDgxNVowLzEtMCsGA1UEAxMk YWRhNjc4YzYtZDUzMS00ODM4LTg5NmEtNzhlNjNlM2ZjZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+bZrUrlBnJyonRocuWYd1slkNewTxSvt6hV RkhAhxIHm1BMMS6Jw0tmE3gtGaDO9y4i5bYo/onF3kytx7ot5w2Q6LwoANDcXSt6 buUyXdfy3gkqB0hD+RliQSXcPyO1mu19dOOq7W768gfn2rThqcOhIoPsrMIEkkeU BHvdd+tKHFeiyx+KSBG4rmIKXhLcYgToKlSGMeOJD2k55OWG4d9K/MmmB0mAvVVU Cn+zjUE8TpmsVh0WGxtAbTFDwW1dGLmE4Cb6+M7ZZOoG4FY4zUtO0+7bLbJ19rCq U495jovRy3MVz7zRYNteUTOxKhkk0Q2etOeN3j4Bx0aaChp4MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyWUwUHDfirmNtvQz57F1AbOooIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9jNjc2 ZDMxNy02ZTcwLTQ3OTUtOTQ4ZC0zOTM1NTQ1NjAwOGQvOTMyYzJkYjMtNGUwZS0z YTIyLTg1ZDctZjUyOWU2MmZlODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYzY3NmQzMTctNmU3MC00Nzk1LTk0 OGQtMzkzNTU0NTYwMDhkL2M2NzZkMzE3LTZlNzAtNDc5NS05NDhkLTM5MzU1NDU2 MDA4ZC5jcmwwHwYDVR0jBBgwFoAURxoXf+aFvcO+8Mw3qgE0p+a+HZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9jNjc2ZDMxNy02ZTcwLTQ3OTUtOTQ4ZC0zOTM1 NTQ1NjAwOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnAm1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtfQhrMGnx64/RcSOxH5oBhg8Xdo6RFWb5yM6DyC+1ybID26wkq1EaS pFGNFvg7eVSlEZqbq76e3ymqZDk9V6Vi3eDTrRLu1rLHAmm93P3+2QiePME/1PTt z4hpzRHvEZBGaIOB01MQ3W2pQegHMMFa3RtJYnaFoU2h+1kKWRkE4pf2bpzn5Mhd ZSEYJNBq2B0Oy19KvK3fNqcJXP9C1hEv9FsexYhPYUwXtov6ab4MNvh8M7H4dXuW MTk/67lgXvuQ8xO68S8pnMh26wEck+1ABz+zYSVsUMqM/UvwtlRts2QRZqaSHNOC hw/PvZKSRaoNP6n/QZpjDS/LGxeMyUk= -----END CERTIFICATE-----Generated at Tue Nov 3 23:11:44 2026 by rpki-client