$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa File: 00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa (raw, json) Hash identifier: 4cXd6jEDes748UNukehiBQgwG90ixXAMu+sqcrrE2rw= Subject key identifier: B9:7C:82:6B:00:3B:E1:A4:CA:27:FD:DF:2E:07:87:4D:86:C7:C4:71 Certificate issuer: /CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Certificate serial: 010D0C9F4328584F0D6CDE8DD7867B8524E81740 Authority key identifier: E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 22571 IP address blocks: 192.131.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:de:8d:d7:86:7b:85:24:e8:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=beb2bed3-27b4-43d6-a6bd-c46458a8455d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bb:70:b3:56:cf:62:44:ee:b5:26:fa:d9:71: f0:2a:f3:55:c5:ef:48:3c:30:35:97:99:38:9d:8f: b2:3f:c2:b5:09:f6:fa:a0:1d:61:73:e4:d4:40:b5: 11:3e:18:75:e4:f2:cb:01:91:db:fd:d4:3a:fc:84: e1:26:fb:23:e6:51:91:2f:e0:d4:cd:86:b5:90:fc: e2:b4:f3:59:af:2d:e4:88:4b:22:74:b7:66:fe:cd: 58:bb:47:d8:4d:08:3e:68:72:64:81:61:06:27:5a: d0:14:4b:2a:4b:39:f6:01:e3:92:af:02:36:08:20: ed:bf:92:e4:3e:4c:51:d4:ba:75:7d:33:9f:51:e2: 36:dd:94:cd:2d:e7:f9:8f:99:cf:e8:4a:be:cc:50: df:d6:11:1a:bc:7b:d0:3d:63:5f:ba:ab:ba:63:5a: 31:7d:fd:52:2e:e5:28:e3:ec:40:df:74:17:ed:49: dd:d5:3f:4d:3a:8b:e2:bf:6b:cf:eb:c3:2d:a2:54: 8a:a2:b5:c4:76:7f:42:0d:a8:62:5f:fc:94:b1:14: c9:aa:02:db:ca:d0:7a:8f:ff:85:da:7f:99:5b:11: d7:c0:58:78:ab:8d:ad:44:b2:d7:36:97:9f:9f:6c: d4:d7:60:bb:f1:b6:dd:d1:eb:5f:b7:60:a0:d0:7a: d8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7C:82:6B:00:3B:E1:A4:CA:27:FD:DF:2E:07:87:4D:86:C7:C4:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl X509v3 Authority Key Identifier: keyid:E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer sbgp-ipAddrBlock: critical IPv4: 192.131.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:59:70:a1:a6:c8:c8:c3:ed:ef:be:62:0c:45:1a:94:01:57: 4f:58:44:ae:23:21:d4:32:cb:ec:5d:10:35:a1:07:3a:93:8e: f6:4d:30:f7:fd:ed:fc:5a:81:3f:52:f9:aa:25:17:26:09:39: 68:59:f0:f8:ae:1d:60:e5:c3:da:21:a9:c4:59:3f:0f:c8:ec: a4:66:f4:e3:fd:df:28:1e:75:e7:2b:ab:80:b5:69:6e:78:3e: 03:f3:09:6d:99:04:ea:e4:7b:c1:7a:62:e6:d7:49:35:7a:f8: a6:69:01:72:a3:dd:87:eb:c4:95:ed:32:fe:49:7c:dc:cd:a4: c1:b6:e2:63:76:f7:fa:1d:95:e8:38:99:2d:31:e5:38:c7:2d: 3f:00:b9:52:ac:3b:73:e4:6a:40:7a:2a:e9:f9:37:60:50:7f: f4:ea:8a:9c:fd:9b:67:2d:25:da:44:5d:ae:17:6d:a8:a6:b8: 39:2b:41:59:d6:2a:b5:8b:27:a0:38:2e:6a:45:fb:a4:34:4d: 04:4c:cf:52:bc:2d:af:02:73:47:3c:e1:0b:bd:75:74:b9:de: 29:28:b7:32:61:8a:0e:e3:40:54:7c:26:59:4c:0b:7a:c0:50: b8:2b:46:d5:81:84:5d:d2:c8:f0:ee:4f:65:b7:d4:50:33:0a: 91:f4:39:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbN6N14Z7hSToF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU2ZDZiYWMtMWExNi00YjBjLWI1NzgtOTkyZmYxYjk0 NWM0MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk YmViMmJlZDMtMjdiNC00M2Q2LWE2YmQtYzQ2NDU4YTg0NTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rtws1bPYkTutSb62XHwKvNVxe9IPDA1l5k4 nY+yP8K1Cfb6oB1hc+TUQLURPhh15PLLAZHb/dQ6/IThJvsj5lGRL+DUzYa1kPzi tPNZry3kiEsidLdm/s1Yu0fYTQg+aHJkgWEGJ1rQFEsqSzn2AeOSrwI2CCDtv5Lk PkxR1Lp1fTOfUeI23ZTNLef5j5nP6Eq+zFDf1hEavHvQPWNfuqu6Y1oxff1SLuUo 4+xA33QX7Und1T9NOoviv2vP68MtolSKorXEdn9CDahiX/yUsRTJqgLbytB6j/+F 2n+ZWxHXwFh4q42tRLLXNpefn2zU12C78bbd0etft2Cg0HrYiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLl8gmsAO+Gkyif93y4Hh02Gx8RxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZk NmJhYy0xYTE2LTRiMGMtYjU3OC05OTJmZjFiOTQ1YzQvMDBhOWJlNzMtNmUwZC0z MWJhLWE1MTAtNmVlMmIzMjVmYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTU2ZDZiYWMtMWExNi00YjBjLWI1 NzgtOTkyZmYxYjk0NWM0LzE1NmQ2YmFjLTFhMTYtNGIwYy1iNTc4LTk5MmZmMWI5 NDVjNC5jcmwwHwYDVR0jBBgwFoAU53jqrc4KmjfoNgHD2ir7bXsaYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZkNmJhYy0xYTE2LTRiMGMtYjU3OC05OTJm ZjFiOTQ1YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwINYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhZcKGmyMjD7e++YgxFGpQBV09YRK4jIdQyy+xdEDWhBzqTjvZNMPf9 7fxagT9S+aolFyYJOWhZ8PiuHWDlw9ohqcRZPw/I7KRm9OP93ygedecrq4C1aW54 PgPzCW2ZBOrke8F6YubXSTV6+KZpAXKj3YfrxJXtMv5JfNzNpMG24mN29/odleg4 mS0x5TjHLT8AuVKsO3PkakB6Kun5N2BQf/Tqipz9m2ctJdpEXa4XbaimuDkrQVnW KrWLJ6A4LmpF+6Q0TQRMz1K8La8Cc0c84Qu9dXS53ikotzJhig7jQFR8JllMC3rA ULgrRtWBhF3SyPDuT2W31FAzCpH0ORY= -----END CERTIFICATE-----Generated at Sat Sep 26 05:03:13 2026 by rpki-client