$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/159ace5d-d880-38ca-9296-22d7f83d3cb6.roa File: 159ace5d-d880-38ca-9296-22d7f83d3cb6.roa (raw, json) Hash identifier: Ws2seNtnnNdjFOfaPAhKps/+6fPnsqPp2lwiIXElgOM= Subject key identifier: DA:D8:A9:DC:FB:28:26:DA:E4:B6:09:8A:07:D1:C7:00:4B:11:D8:C5 Certificate issuer: /CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Certificate serial: 010D0C9F4328584EF2E75BC5A4696FE90C00D580 Authority key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/159ace5d-d880-38ca-9296-22d7f83d3cb6.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 92 IP address blocks: 128.153.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:5b:c5:a4:69:6f:e9:0c:00:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=c9faf8d7-c78c-48a9-baf2-d0b6329f7902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fa:1a:66:68:b3:17:10:39:7f:66:28:8a:77: 4c:8c:34:d3:cb:9b:9c:40:cc:29:05:fd:6f:74:b8: 3e:d9:88:2c:2f:0e:d9:85:35:87:d9:62:8b:ed:91: 6d:cc:fd:3a:7a:04:c9:b3:a8:65:c5:07:86:8a:37: ca:06:bf:03:36:cf:53:63:9e:a9:d2:44:04:03:e8: 82:d9:48:ad:a5:cb:13:79:89:6d:9a:59:62:09:84: 36:74:af:f5:9c:42:05:ad:c4:8a:99:55:8c:1e:05: d1:f1:df:27:9e:a9:c8:34:d0:65:82:59:d2:6f:ce: f2:14:58:fa:14:c8:aa:f0:78:d7:fb:fb:6f:0e:7c: 19:d2:68:11:92:b4:ed:65:9c:d6:4b:e9:3e:b1:4a: aa:58:25:ad:e9:e9:93:ad:bd:da:a3:e9:14:f1:80: 57:5c:14:cf:81:d9:dd:c8:dc:4d:7a:83:ce:b8:7f: 7b:67:42:d2:a6:9e:ef:c6:bd:55:0b:08:bb:80:32: 46:b3:7a:00:c5:51:3e:60:e9:c9:e6:b4:fe:58:87: 3d:34:cd:dd:4a:ca:a7:27:71:06:7c:8e:28:6c:1a: e5:6a:fc:d8:3b:76:fd:38:46:da:c7:31:45:5a:93: a0:bf:dd:dc:ef:e0:41:de:a6:f6:2f:09:f9:3e:bf: f8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D8:A9:DC:FB:28:26:DA:E4:B6:09:8A:07:D1:C7:00:4B:11:D8:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/159ace5d-d880-38ca-9296-22d7f83d3cb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl X509v3 Authority Key Identifier: keyid:92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer sbgp-ipAddrBlock: critical IPv4: 128.153.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:56:e1:c2:56:77:d8:4e:e3:c8:95:f2:33:67:1a:bb:1f:16: 53:87:aa:6b:a5:f1:f3:12:85:1f:95:84:a7:e9:d6:94:ea:c2: 93:3a:e0:7e:5b:df:eb:05:41:c6:b5:21:0e:b9:b3:24:5c:55: eb:60:f7:70:f8:67:35:05:aa:f6:46:54:6a:fb:a5:b1:4c:eb: 2b:e1:2f:7a:58:db:0f:cc:86:32:29:de:06:52:a1:2c:33:0c: 74:60:e0:49:4b:83:a5:39:a3:58:99:63:b4:76:9f:d1:22:e0: 78:d3:7e:5b:c6:e5:9f:1b:cb:bd:95:b6:15:b4:d6:68:83:b6: de:3f:9f:6d:59:3d:69:17:ca:d8:7b:7d:6e:b1:ce:6d:1d:06: e6:69:d6:73:04:0e:fd:92:86:35:c6:9e:d2:98:b7:d5:a2:ec: f6:7b:a6:32:64:6c:9c:ea:3d:d9:dc:19:bb:4b:87:90:a9:68: ce:19:ba:64:ea:2c:e5:b6:38:3b:2e:13:dd:1b:28:27:29:01: 36:70:4b:97:06:e4:a4:7a:7e:c4:11:3d:2a:61:00:c9:d0:2e: 0a:06:e4:70:1a:96:76:f1:a3:bd:f8:f0:9c:96:60:79:fa:62: 6a:24:85:cb:ed:b3:f3:36:16:47:3b:48:0b:19:06:89:78:fa: b2:cb:93:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y51vFpGlv6QwA1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAwOGFmYjgtYzkxMy00MjZmLWE3MmQtZWE3NDFhYjFl YjdhMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk YzlmYWY4ZDctYzc4Yy00OGE5LWJhZjItZDBiNjMyOWY3OTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/oaZmizFxA5f2YoindMjDTTy5ucQMwpBf1v dLg+2YgsLw7ZhTWH2WKL7ZFtzP06egTJs6hlxQeGijfKBr8DNs9TY56p0kQEA+iC 2UitpcsTeYltmlliCYQ2dK/1nEIFrcSKmVWMHgXR8d8nnqnINNBlglnSb87yFFj6 FMiq8HjX+/tvDnwZ0mgRkrTtZZzWS+k+sUqqWCWt6emTrb3ao+kU8YBXXBTPgdnd yNxNeoPOuH97Z0LSpp7vxr1VCwi7gDJGs3oAxVE+YOnJ5rT+WIc9NM3dSsqnJ3EG fI4obBrlavzYO3b9OEbaxzFFWpOgv93c7+BB3qb2Lwn5Pr/4hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrYqdz7KCba5LYJigfRxwBLEdjFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4 YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0MWFiMWViN2EvMTU5YWNlNWQtZDg4MC0z OGNhLTkyOTYtMjJkN2Y4M2QzY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjAwOGFmYjgtYzkxMy00MjZmLWE3 MmQtZWE3NDFhYjFlYjdhLzYwMDhhZmI4LWM5MTMtNDI2Zi1hNzJkLWVhNzQxYWIx ZWI3YS5jcmwwHwYDVR0jBBgwFoAUkkya7J2xWNrUBrBWHjmf0mFJSvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0 MWFiMWViN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgJmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBW4cJWd9hO48iV8jNnGrsfFlOHqmul8fMShR+VhKfp1pTqwpM64H5b 3+sFQca1IQ65syRcVetg93D4ZzUFqvZGVGr7pbFM6yvhL3pY2w/MhjIp3gZSoSwz DHRg4ElLg6U5o1iZY7R2n9Ei4HjTflvG5Z8by72VthW01miDtt4/n21ZPWkXyth7 fW6xzm0dBuZp1nMEDv2ShjXGntKYt9Wi7PZ7pjJkbJzqPdncGbtLh5CpaM4ZumTq LOW2ODsuE90bKCcpATZwS5cG5KR6fsQRPSphAMnQLgoG5HAalnbxo7348JyWYHn6 Ymokhcvts/M2Fkc7SAsZBol4+rLLk9k= -----END CERTIFICATE-----Generated at Wed Aug 26 20:26:07 2026 by rpki-client