$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/8eab7ec4-4254-3787-9d17-1b4bcf9b7330.roa File: 8eab7ec4-4254-3787-9d17-1b4bcf9b7330.roa (raw, json) Hash identifier: VDe3qiSP4EAM7M5MYBx12Bf2qh4UYGHbf+PNZ+8mNn8= Subject key identifier: D7:1D:28:84:8C:BE:B9:20:00:44:24:33:AC:2E:E6:9E:87:FB:54:CA Certificate issuer: /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0 Certificate serial: 010D0C9F4328584F5E62F79FF17F6D7998052200 Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/8eab7ec4-4254-3787-9d17-1b4bcf9b7330.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 10996 IP address blocks: 192.154.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:f7:9f:f1:7f:6d:79:98:05:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=4a99159e-bc7f-4636-b375-79ff4432a0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7b:b2:22:a1:18:ff:4f:ac:92:e2:b7:4d:7b: 29:9d:70:97:07:5b:58:e7:be:99:25:66:43:5f:c0: 64:de:71:cc:78:b2:2d:c9:cc:93:eb:ec:36:5a:03: e5:c4:0f:08:2c:7b:3c:88:7e:10:68:00:20:73:3b: 09:46:94:55:84:41:5b:67:16:95:f2:3e:16:d8:65: 15:d8:c7:0d:35:87:26:fe:14:f0:49:b0:96:c0:16: 6c:c8:b2:54:0c:98:df:d0:b6:87:87:bc:b7:59:4a: 8c:5d:86:bc:50:3c:28:e3:6b:7a:5a:94:fd:e8:07: 93:09:2f:df:b9:c8:1d:1f:88:a7:60:11:c2:2f:b7: 7c:83:1c:a7:c2:d4:46:22:90:c5:97:fe:e1:f2:b9: f8:ca:49:35:c5:d8:8c:b4:4f:f5:e0:22:2f:72:29: 65:d7:8f:2e:b7:81:19:13:ab:3b:53:75:6a:68:93: b5:0b:b4:dd:26:eb:6a:a0:76:6f:ff:a6:e6:af:ef: 9c:92:bc:e0:78:ba:4b:27:ef:b6:62:eb:b6:8c:18: 0a:5d:39:94:0f:85:f9:17:a8:69:a6:b7:9c:ca:75: 1f:38:7f:59:17:11:f1:67:b3:ac:fb:6c:1e:06:e5: 03:be:5d:08:56:50:2d:7f:d6:89:c3:a2:67:dc:46: 3a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1D:28:84:8C:BE:B9:20:00:44:24:33:AC:2E:E6:9E:87:FB:54:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/8eab7ec4-4254-3787-9d17-1b4bcf9b7330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl X509v3 Authority Key Identifier: keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer sbgp-ipAddrBlock: critical IPv4: 192.154.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:17:fa:74:a5:ae:15:67:c1:18:39:9b:90:ef:b8:4b:83:38: f7:d5:42:6c:31:b4:32:6b:f1:a8:ad:70:07:e1:82:85:c9:16: 2f:e8:56:ab:26:a4:ea:ff:11:e0:af:c2:50:00:36:f1:c0:34: 0c:02:e7:1d:04:df:ab:8c:93:b8:1d:4e:30:2b:9c:a3:d6:11: c8:c6:04:fd:ef:35:d5:6a:41:f2:52:3f:5a:1e:92:bf:a8:70: b3:2b:81:29:a4:b9:52:b0:59:21:27:56:14:35:72:79:29:6d: a6:89:44:c5:4d:b7:8f:db:3d:77:81:c9:bb:ac:db:43:5e:7e: 30:bf:a0:fc:02:c3:c2:12:6c:0e:d9:c8:72:64:d7:8c:a9:43: 03:88:0c:30:7e:a1:be:d1:c6:4e:88:54:43:60:66:b2:18:11: ef:82:50:19:72:c6:ce:17:78:14:d6:29:fc:d2:95:28:d2:67: 03:fd:cd:75:1b:d2:a1:5b:ca:f7:ac:78:f3:66:64:d5:3f:6b: 9a:67:f5:01:20:c4:8a:25:8f:06:84:bb:91:bd:69:33:03:41: 19:5c:30:17:19:9d:6e:59:01:02:c8:77:49:26:a7:fa:d7:87: b5:75:28:5c:49:7f:d3:ce:da:ad:b5:df:7a:51:19:8d:70:de: 85:eb:39:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYvef8X9teZgFIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwYmNiNWQtOWUwNy00NGEzLWFmNjEtMjVlN2YwMjQy YWQwMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NGE5OTE1OWUtYmM3Zi00NjM2LWIzNzUtNzlmZjQ0MzJhMGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3uyIqEY/0+skuK3TXspnXCXB1tY576ZJWZD X8Bk3nHMeLItycyT6+w2WgPlxA8ILHs8iH4QaAAgczsJRpRVhEFbZxaV8j4W2GUV 2McNNYcm/hTwSbCWwBZsyLJUDJjf0LaHh7y3WUqMXYa8UDwo42t6WpT96AeTCS/f ucgdH4inYBHCL7d8gxynwtRGIpDFl/7h8rn4ykk1xdiMtE/14CIvcill148ut4EZ E6s7U3VqaJO1C7TdJutqoHZv/6bmr++ckrzgeLpLJ++2Yuu2jBgKXTmUD4X5F6hp precynUfOH9ZFxHxZ7Os+2weBuUDvl0IVlAtf9aJw6Jn3EY6vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcdKISMvrkgAEQkM6wu5p6H+1TKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MDBi Y2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3ZjAyNDJhZDAvOGVhYjdlYzQtNDI1NC0z Nzg3LTlkMTctMWI0YmNmOWI3MzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTAwYmNiNWQtOWUwNy00NGEzLWFm NjEtMjVlN2YwMjQyYWQwLzkwMGJjYjVkLTllMDctNDRhMy1hZjYxLTI1ZTdmMDI0 MmFkMC5jcmwwHwYDVR0jBBgwFoAUsWEfsEw1NKJ6ktKh1nWmALbAQ3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85MDBiY2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3 ZjAyNDJhZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwJqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUX+nSlrhVnwRg5m5DvuEuDOPfVQmwxtDJr8aitcAfhgoXJFi/oVqsm pOr/EeCvwlAANvHANAwC5x0E36uMk7gdTjArnKPWEcjGBP3vNdVqQfJSP1oekr+o cLMrgSmkuVKwWSEnVhQ1cnkpbaaJRMVNt4/bPXeBybus20NefjC/oPwCw8ISbA7Z yHJk14ypQwOIDDB+ob7Rxk6IVENgZrIYEe+CUBlyxs4XeBTWKfzSlSjSZwP9zXUb 0qFbyvesePNmZNU/a5pn9QEgxIoljwaEu5G9aTMDQRlcMBcZnW5ZAQLId0kmp/rX h7V1KFxJf9PO2q2133pRGY1w3oXrOf8= -----END CERTIFICATE-----Generated at Tue Oct 13 12:52:22 2026 by rpki-client