$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/159ace5d-d880-38ca-9296-22d7f83d3cb6.roa File: 159ace5d-d880-38ca-9296-22d7f83d3cb6.roa (raw, json) Hash identifier: /E14PgY398Gd+M+n0zH4EORQsklV7FdJLTXpRv0yxwU= Subject key identifier: BA:8B:95:BF:38:7B:FB:D6:D9:32:2E:F2:2D:CC:37:DF:75:27:6F:58 Certificate issuer: /CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Certificate serial: 010D0C9F4328584F94D33E548ACCB6F7A4C4A44C Authority key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/159ace5d-d880-38ca-9296-22d7f83d3cb6.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 92 IP address blocks: 128.153.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:3e:54:8a:cc:b6:f7:a4:c4:a4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=3311aba3-a0f9-4416-aed0-b938410e75dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b2:1d:48:30:7d:02:0e:c9:ce:30:97:fb:c1: af:08:68:40:10:48:c8:01:c3:5a:7a:e9:4e:6a:e1: c0:bd:b5:95:d8:56:81:de:23:18:34:3c:9b:83:e3: 25:01:df:a5:25:53:46:66:12:c2:50:6e:63:65:51: 78:d2:07:39:3c:cd:48:0d:53:0c:53:11:92:81:0d: 92:75:a9:32:f3:1e:d3:2c:3f:c0:fc:bd:fe:1a:27: 1b:b1:58:e5:af:10:17:18:da:19:03:87:49:f5:95: 35:7d:1f:68:51:d0:49:8a:77:0d:99:b3:76:40:f5: 5c:15:8c:60:df:b7:be:c6:11:73:e6:3f:71:31:4b: 3d:33:a2:fa:1e:44:3f:f9:fe:5a:7f:3f:8c:a9:0e: dd:68:91:97:a2:3b:f8:53:b0:58:7d:09:eb:8e:05: db:7b:2d:9b:bb:71:46:b6:70:70:f7:c1:3e:56:44: 5a:e2:17:d2:f8:62:bc:c9:9f:80:15:85:20:7c:98: 20:a7:e8:a4:7b:1a:84:cf:7b:3f:91:62:63:ab:bb: fa:4d:d1:ac:bc:68:b1:af:99:a0:e1:8d:ed:f8:30: 32:b7:db:ec:27:9a:97:41:ff:37:b7:4c:a7:61:22: 2d:be:cc:18:4e:e9:2d:de:f7:a5:d6:51:96:14:85: 5b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8B:95:BF:38:7B:FB:D6:D9:32:2E:F2:2D:CC:37:DF:75:27:6F:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/159ace5d-d880-38ca-9296-22d7f83d3cb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.crl X509v3 Authority Key Identifier: keyid:92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer sbgp-ipAddrBlock: critical IPv4: 128.153.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:fb:df:fb:f8:a6:6f:6d:3d:60:99:36:0b:49:56:e7:70:31: 77:66:ba:f8:95:5f:69:2e:4d:23:b9:e5:55:de:57:02:b4:5b: d9:ec:9d:49:fd:f1:bf:e3:3a:2a:39:64:09:14:1d:21:ac:dd: 1a:93:04:5e:6b:e3:1c:9d:5b:96:13:ff:80:cb:02:52:03:5e: 48:e0:75:ea:6f:32:50:8b:df:3a:d8:f9:40:99:21:44:e8:d4: 71:fb:c8:04:af:a1:9e:ed:35:9a:34:86:47:13:5f:f9:c3:63: d5:88:0e:dd:dd:9b:fc:82:78:fe:2b:63:8a:25:56:c5:23:8f: c2:66:0c:41:65:ab:92:4a:0d:ea:67:84:eb:dc:e3:a6:1b:76: 4d:f9:a5:f3:5c:21:85:12:f6:de:1b:e2:8e:df:d3:a9:72:5b: eb:a0:68:27:41:27:08:28:72:08:9c:a6:cc:c4:5e:92:6c:e9: c8:c8:d3:18:f5:0f:50:55:96:7c:db:43:4f:1f:e4:54:d6:d4: 06:a1:e6:61:dd:7a:96:db:1e:8d:e4:c5:85:c9:8c:5d:f6:15: 3e:f2:5f:b1:c5:02:bf:b6:67:07:3f:f4:d0:e6:cb:23:40:70: f9:71:c7:25:4b:26:61:b5:ac:14:2e:20:c1:45:bf:d0:e2:3d: 45:18:0b:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0z5Uisy296TEpEwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAwOGFmYjgtYzkxMy00MjZmLWE3MmQtZWE3NDFhYjFl YjdhMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MzMxMWFiYTMtYTBmOS00NDE2LWFlZDAtYjkzODQxMGU3NWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbIdSDB9Ag7JzjCX+8GvCGhAEEjIAcNaeulO auHAvbWV2FaB3iMYNDybg+MlAd+lJVNGZhLCUG5jZVF40gc5PM1IDVMMUxGSgQ2S daky8x7TLD/A/L3+GicbsVjlrxAXGNoZA4dJ9ZU1fR9oUdBJincNmbN2QPVcFYxg 37e+xhFz5j9xMUs9M6L6HkQ/+f5afz+MqQ7daJGXojv4U7BYfQnrjgXbey2bu3FG tnBw98E+VkRa4hfS+GK8yZ+AFYUgfJggp+ikexqEz3s/kWJjq7v6TdGsvGixr5mg 4Y3t+DAyt9vsJ5qXQf83t0ynYSItvswYTukt3vel1lGWFIVbjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqLlb84e/vW2TIu8i3MN991J29YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4 YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0MWFiMWViN2EvMTU5YWNlNWQtZDg4MC0z OGNhLTkyOTYtMjJkN2Y4M2QzY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjAwOGFmYjgtYzkxMy00MjZmLWE3 MmQtZWE3NDFhYjFlYjdhLzYwMDhhZmI4LWM5MTMtNDI2Zi1hNzJkLWVhNzQxYWIx ZWI3YS5jcmwwHwYDVR0jBBgwFoAUkkya7J2xWNrUBrBWHjmf0mFJSvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDA4YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0 MWFiMWViN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgJmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv73/v4pm9tPWCZNgtJVudwMXdmuviVX2kuTSO55VXeVwK0W9nsnUn9 8b/jOio5ZAkUHSGs3RqTBF5r4xydW5YT/4DLAlIDXkjgdepvMlCL3zrY+UCZIUTo 1HH7yASvoZ7tNZo0hkcTX/nDY9WIDt3dm/yCeP4rY4olVsUjj8JmDEFlq5JKDepn hOvc46Ybdk35pfNcIYUS9t4b4o7f06lyW+ugaCdBJwgocgicpszEXpJs6cjI0xj1 D1BVlnzbQ08f5FTW1Aah5mHdepbbHo3kxYXJjF32FT7yX7HFAr+2Zwc/9NDmyyNA cPlxxyVLJmG1rBQuIMFFv9DiPUUYCxk= -----END CERTIFICATE-----Generated at Mon Oct 26 14:45:31 2026 by rpki-client