$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa File: 4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa (raw, json) Hash identifier: TD1ZvGjcrIIT4CctJbs5aBQ/OSn6X8Ejj195IJohV7g= Subject key identifier: DC:C7:A4:84:39:F8:34:0C:DD:F1:25:D9:F0:33:83:64:47:C3:33:93 Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Certificate serial: 010D0C9F4328584EA7873A902E52DA022E417600 Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 25697 IP address blocks: 209.151.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:3a:90:2e:52:da:02:2e:41:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=aaa20be1-5b07-4955-affc-64f110166382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:af:40:03:bb:d4:20:e3:62:18:a3:78:87:3c: 84:23:8f:84:3f:d3:f2:9a:96:63:f6:a6:a2:cd:d6: 59:e5:b3:a8:05:b2:8e:4e:bf:40:0b:a5:c7:4e:fe: a0:df:f3:ff:41:4a:de:6c:8f:62:ae:dc:11:54:99: d9:95:87:13:e0:84:55:7e:bb:af:bc:cd:0f:1e:5a: 11:6c:f0:f7:04:dd:7b:4d:dc:34:15:04:a8:80:0d: 3a:20:e5:b7:f2:0f:29:8f:78:99:69:8c:8f:63:38: 0a:44:33:1b:26:89:33:d2:82:4d:3e:81:7a:95:ec: 48:8e:da:4e:5a:5b:fc:39:da:68:e7:41:83:c7:4e: 57:99:a6:ff:53:b9:95:b0:46:c4:ae:ec:ec:4f:3f: b4:2a:56:43:44:eb:ad:ba:06:63:e8:e2:2b:15:5d: 43:36:b2:12:5a:bf:9b:b7:85:5b:2c:03:6e:5b:d4: e0:99:ef:31:a4:16:b3:3c:86:e1:bb:8c:89:9d:40: 1e:04:e5:6b:3b:e0:7d:0c:15:f7:da:62:a8:96:35: f9:dd:ff:84:4b:7b:4e:24:b4:d1:ed:ec:dc:66:0a: 1a:5c:d4:a2:01:30:df:7b:1e:30:c1:b5:62:3e:5c: 5e:82:67:0a:a5:1d:39:ef:ad:43:bd:a3:27:4e:86: 4e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C7:A4:84:39:F8:34:0C:DD:F1:25:D9:F0:33:83:64:47:C3:33:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/4d33ad72-cd69-3b39-af54-bb7f634a0f9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl X509v3 Authority Key Identifier: keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer sbgp-ipAddrBlock: critical IPv4: 209.151.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:5a:c1:6e:af:33:2a:bc:f4:bb:ec:ad:d5:11:b7:b2:99:12: a3:0e:da:28:cd:0b:cd:73:da:aa:10:32:e0:fd:6b:be:1f:17: 79:fe:06:9a:a8:63:6a:3e:61:e7:e2:56:f2:f3:2d:2e:c5:4c: a7:a7:63:11:ae:5f:fa:ca:cf:f7:3b:be:bf:50:11:07:33:65: 44:88:2b:63:bc:ae:8a:e6:90:a9:33:d4:91:11:27:40:c1:3e: 5b:77:72:ef:0d:9b:fe:4d:c2:82:ed:23:05:27:ea:9e:1d:d7: e9:71:93:25:02:9e:a3:08:ea:03:96:0b:7c:93:94:e7:f8:23: 55:7f:85:d1:68:ac:d2:88:ee:cb:71:74:5d:ee:ee:88:b4:03: 17:bb:d5:99:d7:ad:1e:f4:72:81:43:c4:d2:cf:be:d6:fb:39: 71:a5:19:3a:51:29:d1:01:90:52:0e:c5:fb:cd:f6:c2:75:68: bd:bc:04:88:d2:5d:99:b9:ab:fa:f7:fb:75:4f:44:9a:f8:65: 6e:e1:da:c1:d3:83:67:84:9a:6f:a3:df:43:f7:c2:51:73:61: 2e:95:8c:b1:f7:a5:ff:24:46:07:07:57:5f:ef:c4:3b:86:e0: f0:d7:a8:6c:cd:75:b3:e4:0b:da:8c:a0:d2:5e:68:8b:cf:90: c1:93:25:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhzqQLlLaAi5BdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx MzExMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWFhMjBiZTEtNWIwNy00OTU1LWFmZmMtNjRmMTEwMTY2MzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga9AA7vUIONiGKN4hzyEI4+EP9PympZj9qai zdZZ5bOoBbKOTr9AC6XHTv6g3/P/QUrebI9irtwRVJnZlYcT4IRVfruvvM0PHloR bPD3BN17Tdw0FQSogA06IOW38g8pj3iZaYyPYzgKRDMbJokz0oJNPoF6lexIjtpO Wlv8Odpo50GDx05Xmab/U7mVsEbEruzsTz+0KlZDROutugZj6OIrFV1DNrISWr+b t4VbLANuW9Tgme8xpBazPIbhu4yJnUAeBOVrO+B9DBX32mKoljX53f+ES3tOJLTR 7ezcZgoaXNSiATDfex4wwbViPlxegmcKpR05761DvaMnToZOKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzHpIQ5+DQM3fEl2fAzg2RHwzOTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvNGQzM2FkNzItY2Q2OS0z YjM5LWFmNTQtYmI3ZjYzNGEwZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2 MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ZecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdawW6vMyq89LvsrdURt7KZEqMO2ijNC81z2qoQMuD9a74fF3n+Bpqo Y2o+YefiVvLzLS7FTKenYxGuX/rKz/c7vr9QEQczZUSIK2O8rormkKkz1JERJ0DB Plt3cu8Nm/5NwoLtIwUn6p4d1+lxkyUCnqMI6gOWC3yTlOf4I1V/hdForNKI7stx dF3u7oi0Axe71ZnXrR70coFDxNLPvtb7OXGlGTpRKdEBkFIOxfvN9sJ1aL28BIjS XZm5q/r3+3VPRJr4ZW7h2sHTg2eEmm+j30P3wlFzYS6VjLH3pf8kRgcHV1/vxDuG 4PDXqGzNdbPkC9qMoNJeaIvPkMGTJWI= -----END CERTIFICATE-----Generated at Thu Sep 10 20:17:54 2026 by rpki-client