$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/03311caa-eedc-35f5-b4a3-a502fc212a0b.roa File: 03311caa-eedc-35f5-b4a3-a502fc212a0b.roa (raw, json) Hash identifier: fMDqrn9XPtVrJ1IUDCkiIN/9K/gLRhmEmd2tY9RBb8g= Subject key identifier: 94:B0:58:78:76:A4:B8:CD:63:8A:1B:72:B1:86:15:AB:3B:98:DC:E7 Certificate issuer: /CN=7c6c4fe4-5642-4ad0-8325-69940b2ed04d Certificate serial: 010D0C9F4328584F506D5471D5BC589AAB35A000 Authority key identifier: 83:EA:7B:A7:EC:EF:C3:78:8A:A5:E9:EE:2C:4B:B3:1B:73:73:BC:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/03311caa-eedc-35f5-b4a3-a502fc212a0b.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 8075 IP address blocks: 156.20.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:54:71:d5:bc:58:9a:ab:35:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c6c4fe4-5642-4ad0-8325-69940b2ed04d Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=3898d880-ddd2-4d2d-b934-01a82ce8a168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:97:9b:85:5f:7a:8a:67:4c:15:54:6f:85:ac: 5c:7d:2c:a2:7f:c9:cc:c6:e2:e6:3b:49:96:7d:4c: a2:92:bc:35:e7:cd:25:88:87:2d:32:db:f0:16:63: 75:4b:b0:5f:c5:e0:ba:95:70:11:4b:38:43:c8:5e: ec:50:33:41:28:90:fe:26:79:3b:d7:b7:77:b7:43: 84:66:4a:3f:b8:eb:ad:7c:54:d3:40:8e:4a:d1:75: f0:69:4e:fd:51:77:1b:4c:e8:a1:55:b2:da:db:80: 39:56:de:8d:82:72:10:fb:0f:5e:9d:77:ba:1e:d5: 88:7e:e3:38:6f:0a:1d:74:45:73:d6:fb:e4:0b:0a: d2:10:05:dd:02:7e:c4:c4:13:60:65:93:09:40:4f: 0e:0c:44:4a:de:be:95:b0:d6:2f:28:d6:99:b4:84: d6:85:c9:d4:11:c4:23:48:7b:d7:f4:c6:4e:31:5a: 72:47:4f:ec:31:a9:6c:dd:87:0d:af:c2:0e:6c:ba: ab:60:69:02:fe:4e:71:64:de:31:27:df:04:71:30: 24:5a:19:2c:3e:5a:5a:42:a3:00:ca:3a:64:e9:38: 83:f0:27:07:7d:e2:db:06:26:76:ac:34:71:31:db: 41:93:b9:b4:43:5a:21:45:45:3c:cd:88:49:27:75: bf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B0:58:78:76:A4:B8:CD:63:8A:1B:72:B1:86:15:AB:3B:98:DC:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/03311caa-eedc-35f5-b4a3-a502fc212a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.crl X509v3 Authority Key Identifier: keyid:83:EA:7B:A7:EC:EF:C3:78:8A:A5:E9:EE:2C:4B:B3:1B:73:73:BC:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c6c4fe4-5642-4ad0-8325-69940b2ed04d.cer sbgp-ipAddrBlock: critical IPv4: 156.20.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:6a:73:b6:2b:54:6b:62:96:69:ac:48:7c:0e:d0:36:5b:7f: cf:00:bd:2f:c6:41:6a:a4:1e:25:d3:52:cd:6b:2b:76:92:13: e9:63:93:ec:3c:59:ad:5d:df:2e:9e:1e:f2:f7:80:cd:93:9d: 82:dc:44:e1:e4:7c:97:50:72:76:3a:99:87:7c:46:55:97:3c: 6f:0f:52:09:fd:03:47:96:42:36:4f:ce:20:38:75:bc:e0:00: 3b:8f:9f:2e:85:96:b5:63:8e:77:9b:64:db:ce:84:e6:0f:d1: bf:4b:98:13:81:1f:25:59:54:94:d0:21:f3:dc:44:7f:ca:7f: 61:90:73:ff:66:00:4a:d6:19:cc:34:16:b9:72:fe:f4:f1:8b: c0:a7:c5:ff:02:ce:61:e6:18:f2:20:8b:6f:15:84:0f:89:2a: 75:dd:f2:fa:58:bf:8d:26:c7:f8:d6:7c:cf:09:2d:71:0f:2a: 9c:1c:f5:a7:55:8d:79:62:da:70:a7:eb:80:4f:b8:8b:f8:4e: c3:e3:09:e6:0f:b6:fc:38:0b:a1:b1:51:9b:6b:e3:ba:80:ad: 46:29:5b:49:da:14:f0:e7:79:6a:a8:b2:f8:53:1d:43:40:0f: d0:8b:0c:66:54:cc:6e:eb:d6:24:eb:28:60:27:2e:46:78:ee: 3a:a0:18:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVRx1bxYmqs1oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2M2YzRmZTQtNTY0Mi00YWQwLTgzMjUtNjk5NDBiMmVk MDRkMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk Mzg5OGQ4ODAtZGRkMi00ZDJkLWI5MzQtMDFhODJjZThhMTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJebhV96imdMFVRvhaxcfSyif8nMxuLmO0mW fUyikrw1580liIctMtvwFmN1S7BfxeC6lXARSzhDyF7sUDNBKJD+Jnk717d3t0OE Zko/uOutfFTTQI5K0XXwaU79UXcbTOihVbLa24A5Vt6NgnIQ+w9enXe6HtWIfuM4 bwoddEVz1vvkCwrSEAXdAn7ExBNgZZMJQE8ODERK3r6VsNYvKNaZtITWhcnUEcQj SHvX9MZOMVpyR0/sMals3YcNr8IObLqrYGkC/k5xZN4xJ98EcTAkWhksPlpaQqMA yjpk6TiD8CcHfeLbBiZ2rDRxMdtBk7m0Q1ohRUU8zYhJJ3W/qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSwWHh2pLjNY4obcrGGFas7mNznMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83YzZj NGZlNC01NjQyLTRhZDAtODMyNS02OTk0MGIyZWQwNGQvMDMzMTFjYWEtZWVkYy0z NWY1LWI0YTMtYTUwMmZjMjEyYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2M2YzRmZTQtNTY0Mi00YWQwLTgz MjUtNjk5NDBiMmVkMDRkLzdjNmM0ZmU0LTU2NDItNGFkMC04MzI1LTY5OTQwYjJl ZDA0ZC5jcmwwHwYDVR0jBBgwFoAUg+p7p+zvw3iKpenuLEuzG3NzvFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83YzZjNGZlNC01NjQyLTRhZDAtODMyNS02OTk0 MGIyZWQwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnBQWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNqc7YrVGtilmmsSHwO0DZbf88AvS/GQWqkHiXTUs1rK3aSE+ljk+w8 Wa1d3y6eHvL3gM2TnYLcROHkfJdQcnY6mYd8RlWXPG8PUgn9A0eWQjZPziA4dbzg ADuPny6FlrVjjnebZNvOhOYP0b9LmBOBHyVZVJTQIfPcRH/Kf2GQc/9mAErWGcw0 Frly/vTxi8Cnxf8CzmHmGPIgi28VhA+JKnXd8vpYv40mx/jWfM8JLXEPKpwc9adV jXli2nCn64BPuIv4TsPjCeYPtvw4C6GxUZtr47qArUYpW0naFPDneWqosvhTHUNA D9CLDGZUzG7r1iTrKGAnLkZ47jqgGJI= -----END CERTIFICATE-----Generated at Thu Oct 22 05:06:44 2026 by rpki-client