$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/3a277667-159c-31ef-a703-8ebf49ddb255.roa File: 3a277667-159c-31ef-a703-8ebf49ddb255.roa (raw, json) Hash identifier: JgegbIbFGbohxDq94+grv4lARYnf6P413ppZOVQOYdE= Subject key identifier: 6B:89:81:1C:D4:D4:87:01:AD:EA:58:82:92:CF:73:8D:DF:98:15:14 Certificate issuer: /CN=0a2d75f1-8f4b-49d3-9661-209643086151 Certificate serial: 010D0C9F4328584F024243076218E8E2E9490580 Authority key identifier: 0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/3a277667-159c-31ef-a703-8ebf49ddb255.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 11059 IP address blocks: 198.13.156.0/24 maxlen: 24 198.13.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:43:07:62:18:e8:e2:e9:49:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a2d75f1-8f4b-49d3-9661-209643086151 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=56817f89-128d-4c16-b18d-33cc378c1d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4a:26:0b:26:6a:37:34:4d:03:f3:aa:e8:6e: 8d:32:f9:d9:65:09:9d:c1:12:de:40:a4:09:55:c9: 41:74:dc:eb:e4:ca:72:3d:93:fb:d0:6b:ac:13:08: 12:de:b4:2e:df:40:59:d1:c7:6c:3d:7f:a4:d0:60: 4e:1e:62:bc:56:c8:60:c1:2e:78:e1:01:97:e9:ac: 15:cf:e2:e6:3e:22:02:2d:cb:0d:6b:53:38:d4:3c: ff:33:5e:32:64:a8:81:b6:c8:d1:0f:36:3f:8f:49: f1:d2:89:b9:60:a4:68:b9:32:47:bd:96:88:ca:8b: f4:63:05:16:20:c2:5a:ae:2a:21:3f:83:90:22:a4: 59:7f:fe:c6:ff:11:b0:15:a6:70:4f:64:bf:52:2e: df:41:45:2f:c5:a8:e4:95:e0:50:ff:6b:a2:7e:f1: a9:da:b1:63:9b:43:cc:47:b6:4e:fb:77:ae:33:e8: 1b:49:43:76:58:dd:7b:70:5b:62:bc:a4:f6:5c:ec: 81:2d:59:82:54:26:dd:60:2b:54:03:0d:27:79:a3: 5d:6f:1a:a2:e3:9d:41:64:69:f1:1e:58:a7:e1:39: 67:60:52:a2:03:2b:46:9a:a2:a7:1d:2b:9b:c9:37: 29:0e:df:74:f3:e0:21:7e:f1:e0:47:b6:f4:00:f5: ee:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:89:81:1C:D4:D4:87:01:AD:EA:58:82:92:CF:73:8D:DF:98:15:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/3a277667-159c-31ef-a703-8ebf49ddb255.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl X509v3 Authority Key Identifier: keyid:0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer sbgp-ipAddrBlock: critical IPv4: 198.13.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:07:ea:05:8e:f0:7d:03:3e:a1:f3:cb:53:e5:62:67:b9:af: 9a:a3:7e:1d:f0:1d:60:9a:c6:78:c6:0e:7f:91:18:4d:4a:3b: 3b:80:40:c6:8b:cb:dc:2b:e4:9f:c2:f5:e3:28:2c:a8:af:91: a0:d9:9d:14:21:ba:49:7f:5b:b0:bf:a2:40:b3:6a:7f:9c:d8: de:48:34:b3:79:b2:82:4d:36:0a:3b:a1:1e:fb:1c:ce:f5:cb: 15:e1:19:d1:22:9c:dd:a0:c8:0e:f2:1a:ab:39:e8:d4:62:84: f4:90:82:23:af:a8:36:b3:8f:f3:ef:ac:4e:ff:99:e1:f8:3f: 1a:db:92:37:86:aa:0b:87:49:b1:36:6e:6e:27:37:e0:85:20: 18:aa:f1:0f:31:35:09:2f:6f:5d:d3:c9:5e:a9:e1:35:68:bd: 73:49:57:22:93:03:b6:a0:d0:dd:2e:0c:70:9a:5e:8e:c7:2f: df:30:a0:6d:93:e9:cc:92:c9:4f:0f:1c:4d:ae:bc:db:d7:db: d0:67:08:6c:2e:18:bd:2e:4c:72:0a:7a:71:7d:81:9b:ed:6c: c6:fa:07:01:1c:dc:1e:6c:ab:38:5c:44:35:f3:b9:14:9c:e8: 5d:9b:df:00:e2:2e:c0:1c:9e:a3:c6:d8:fc:df:5a:2a:0a:cb: 0e:5c:21:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQkMHYhjo4ulJBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGEyZDc1ZjEtOGY0Yi00OWQzLTk2NjEtMjA5NjQzMDg2 MTUxMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk NTY4MTdmODktMTI4ZC00YzE2LWIxOGQtMzNjYzM3OGMxZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0omCyZqNzRNA/Oq6G6NMvnZZQmdwRLeQKQJ VclBdNzr5MpyPZP70GusEwgS3rQu30BZ0cdsPX+k0GBOHmK8VshgwS544QGX6awV z+LmPiICLcsNa1M41Dz/M14yZKiBtsjRDzY/j0nx0om5YKRouTJHvZaIyov0YwUW IMJariohP4OQIqRZf/7G/xGwFaZwT2S/Ui7fQUUvxajkleBQ/2uifvGp2rFjm0PM R7ZO+3euM+gbSUN2WN17cFtivKT2XOyBLVmCVCbdYCtUAw0neaNdbxqi451BZGnx Hlin4TlnYFKiAytGmqKnHSubyTcpDt908+AhfvHgR7b0APXuPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuJgRzU1IcBrepYgpLPc43fmBUUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTJk NzVmMS04ZjRiLTQ5ZDMtOTY2MS0yMDk2NDMwODYxNTEvM2EyNzc2NjctMTU5Yy0z MWVmLWE3MDMtOGViZjQ5ZGRiMjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGEyZDc1ZjEtOGY0Yi00OWQzLTk2 NjEtMjA5NjQzMDg2MTUxLzBhMmQ3NWYxLThmNGItNDlkMy05NjYxLTIwOTY0MzA4 NjE1MS5jcmwwHwYDVR0jBBgwFoAUDbM8/J5AXR7QSu6z+vGosBd4TH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTJkNzVmMS04ZjRiLTQ5ZDMtOTY2MS0yMDk2 NDMwODYxNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxg2cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4H6gWO8H0DPqHzy1PlYme5r5qjfh3wHWCaxnjGDn+RGE1KOzuAQMaL y9wr5J/C9eMoLKivkaDZnRQhukl/W7C/okCzan+c2N5INLN5soJNNgo7oR77HM71 yxXhGdEinN2gyA7yGqs56NRihPSQgiOvqDazj/PvrE7/meH4PxrbkjeGqguHSbE2 bm4nN+CFIBiq8Q8xNQkvb13TyV6p4TVovXNJVyKTA7ag0N0uDHCaXo7HL98woG2T 6cySyU8PHE2uvNvX29BnCGwuGL0uTHIKenF9gZvtbMb6BwEc3B5sqzhcRDXzuRSc 6F2b3wDiLsAcnqPG2PzfWioKyw5cIbA= -----END CERTIFICATE-----Generated at Tue Sep 8 10:10:50 2026 by rpki-client