$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/8772e1e2-8469-31f4-ba7a-299142b35b0c.roa File: 8772e1e2-8469-31f4-ba7a-299142b35b0c.roa (raw, json) Hash identifier: hPq+Ni2An+z5ayOeDeGehzFijZBFTD4N+uxmDNpwAHI= Subject key identifier: 20:97:6B:78:5D:6F:F0:8B:DF:C5:DA:38:3F:C0:F1:29:79:2E:E9:00 Certificate issuer: /CN=9050423a-b7ae-4879-a880-ea3be6e193a8 Certificate serial: 010D0C9F4328584F655D73EADCCAB795FE4612A0 Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/8772e1e2-8469-31f4-ba7a-299142b35b0c.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 22188 IP address blocks: 168.151.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:73:ea:dc:ca:b7:95:fe:46:12:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=fea4f57f-4d0c-42e1-a697-eae8426c0394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:19:10:a3:65:29:cc:9e:41:94:65:9d:e1:ff: df:ac:e6:52:58:e0:8a:aa:8c:24:3e:4b:f4:3b:75: 9e:0b:38:37:81:44:0d:23:47:58:87:28:71:5a:c1: 26:ee:6a:cb:ea:c7:83:54:ff:e6:0d:3e:38:b2:32: 0a:ef:63:ab:b5:95:50:41:ad:8a:31:f9:85:a0:1c: c7:82:5e:9d:02:db:4b:e4:98:21:18:d1:b2:56:e2: 15:7f:9f:ad:32:e4:fe:ec:92:74:fb:4d:fd:82:b1: 50:4c:08:dc:75:f5:f1:a9:3a:d6:51:8f:49:72:e6: 99:f4:59:db:f9:9e:16:a2:6b:cc:89:55:80:96:2e: 8a:4b:0c:ca:8f:fc:15:aa:4a:22:d6:01:f7:fc:91: 02:e7:8c:ac:ed:74:46:07:18:2d:74:c7:4f:f8:e9: 9a:8d:4c:21:f9:01:15:48:e3:94:24:6d:92:88:01: 9a:62:5c:4c:24:cd:a0:eb:da:47:bf:ee:22:cf:cc: dd:3f:b3:1a:9d:4f:49:2b:40:34:40:4d:02:4b:4d: 16:cb:fd:40:31:2d:6d:e4:25:18:d5:87:8e:fe:02: 63:0d:83:91:78:30:90:c1:1d:e2:31:b0:35:31:1f: d7:87:d4:69:25:c2:ad:f4:b1:2a:4a:c2:e5:0c:fb: 8e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:97:6B:78:5D:6F:F0:8B:DF:C5:DA:38:3F:C0:F1:29:79:2E:E9:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/8772e1e2-8469-31f4-ba7a-299142b35b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl X509v3 Authority Key Identifier: keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer sbgp-ipAddrBlock: critical IPv4: 168.151.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f9:ef:8d:7e:69:5a:88:c1:15:33:96:a5:eb:d1:d3:12:8e: 72:8a:1b:59:6b:8b:07:3a:90:41:1a:8c:e3:92:6a:df:79:fe: 2b:5c:58:d9:be:fc:de:6b:5c:83:58:56:9c:fe:5e:da:07:0b: ce:8e:7f:fb:d8:2a:57:7f:fe:97:0b:8c:22:ca:b7:33:c4:a0: 4a:48:fb:9c:0b:5e:1a:e6:e5:83:fc:b2:88:46:23:3c:b4:cd: 23:a5:72:56:30:97:91:ed:a5:aa:5b:8d:6d:e4:ca:56:d1:07: 76:8b:26:3c:52:61:18:09:a5:68:c6:ee:d6:45:60:35:de:10: ef:56:a8:c4:a0:d9:9b:08:9d:74:ba:97:7e:13:62:d8:31:35: 8f:79:28:6b:cf:5f:82:4b:da:51:a2:a3:b6:a4:3d:c2:8e:8b: b4:78:77:b1:9d:32:92:35:af:a9:05:b9:a3:f2:42:6a:31:a5: d7:43:a7:68:2e:22:e4:12:1f:fe:39:29:99:a1:f8:7a:2c:2f: c1:11:c4:3c:97:ba:9d:65:e1:d8:41:bf:cb:fa:ae:b6:2d:34: f4:23:1c:9e:9f:53:7c:b1:7b:2e:4d:87:83:62:16:14:48:85: a2:70:19:68:10:fb:22:49:63:41:91:60:22:0a:7a:90:12:68: 4d:1f:5e:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXXPq3Mq3lf5GEqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA1MDQyM2EtYjdhZS00ODc5LWE4ODAtZWEzYmU2ZTE5 M2E4MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk ZmVhNGY1N2YtNGQwYy00MmUxLWE2OTctZWFlODQyNmMwMzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRkQo2UpzJ5BlGWd4f/frOZSWOCKqowkPkv0 O3WeCzg3gUQNI0dYhyhxWsEm7mrL6seDVP/mDT44sjIK72OrtZVQQa2KMfmFoBzH gl6dAttL5JghGNGyVuIVf5+tMuT+7JJ0+039grFQTAjcdfXxqTrWUY9JcuaZ9Fnb +Z4WomvMiVWAli6KSwzKj/wVqkoi1gH3/JEC54ys7XRGBxgtdMdP+OmajUwh+QEV SOOUJG2SiAGaYlxMJM2g69pHv+4iz8zdP7ManU9JK0A0QE0CS00Wy/1AMS1t5CUY 1YeO/gJjDYOReDCQwR3iMbA1MR/Xh9RpJcKt9LEqSsLlDPuO+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCXa3hdb/CL38XaOD/A8Sl5LukAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDUw NDIzYS1iN2FlLTQ4NzktYTg4MC1lYTNiZTZlMTkzYTgvODc3MmUxZTItODQ2OS0z MWY0LWJhN2EtMjk5MTQyYjM1YjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA1MDQyM2EtYjdhZS00ODc5LWE4 ODAtZWEzYmU2ZTE5M2E4LzkwNTA0MjNhLWI3YWUtNDg3OS1hODgwLWVhM2JlNmUx OTNhOC5jcmwwHwYDVR0jBBgwFoAU58VCXqDfM4B3q4C4MBhJU0KltnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDUwNDIzYS1iN2FlLTQ4NzktYTg4MC1lYTNi ZTZlMTkzYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJcKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADb5741+aVqIwRUzlqXr0dMSjnKKG1lriwc6kEEajOOSat95/itcWNm+ /N5rXINYVpz+XtoHC86Of/vYKld//pcLjCLKtzPEoEpI+5wLXhrm5YP8sohGIzy0 zSOlclYwl5HtpapbjW3kylbRB3aLJjxSYRgJpWjG7tZFYDXeEO9WqMSg2ZsInXS6 l34TYtgxNY95KGvPX4JL2lGio7akPcKOi7R4d7GdMpI1r6kFuaPyQmoxpddDp2gu IuQSH/45KZmh+HosL8ERxDyXup1l4dhBv8v6rrYtNPQjHJ6fU3yxey5Nh4NiFhRI haJwGWgQ+yJJY0GRYCIKepASaE0fXok= -----END CERTIFICATE-----Generated at Wed Oct 7 00:02:47 2026 by rpki-client