$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ec92f7f0-cbcc-4a37-9770-085f1f6721dd/8f140c36-fef5-3c5c-a6ba-4dc1756565b9.roa File: 8f140c36-fef5-3c5c-a6ba-4dc1756565b9.roa (raw, json) Hash identifier: xT2rXq2+v4G+kqfrh6b4J05TpcS2l61OWr0heCXt50w= Subject key identifier: 47:1A:E8:75:E7:64:BE:66:EE:9E:52:B2:4A:76:82:E9:E0:EA:CF:EF Certificate issuer: /CN=ec92f7f0-cbcc-4a37-9770-085f1f6721dd Certificate serial: 010D0C9F4328584F96D3C3ADC42F53D03AD25840 Authority key identifier: F7:87:37:90:14:E4:4B:C5:CE:97:8E:C6:6B:0E:F6:74:41:02:20:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ec92f7f0-cbcc-4a37-9770-085f1f6721dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ec92f7f0-cbcc-4a37-9770-085f1f6721dd/8f140c36-fef5-3c5c-a6ba-4dc1756565b9.roa Signing time: Thu 22 Oct 2026 18:13:23 +0000 ROA not before: Thu 22 Oct 2026 18:13:23 +0000 ROA not after: Wed 20 Jan 2027 19:13:23 +0000 asID: 62044 IP address blocks: 159.198.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ec92f7f0-cbcc-4a37-9770-085f1f6721dd/ec92f7f0-cbcc-4a37-9770-085f1f6721dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ec92f7f0-cbcc-4a37-9770-085f1f6721dd/ec92f7f0-cbcc-4a37-9770-085f1f6721dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ec92f7f0-cbcc-4a37-9770-085f1f6721dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:d3:c3:ad:c4:2f:53:d0:3a:d2:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec92f7f0-cbcc-4a37-9770-085f1f6721dd Validity Not Before: Oct 22 18:13:23 2026 GMT Not After : Jan 20 19:13:23 2027 GMT Subject: CN=047a96d4-7da6-4b41-a603-d2a133524fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3f:f6:f0:d6:28:d8:b8:85:3f:2c:c3:01:15: cc:87:31:ef:56:47:ad:ab:0f:6d:01:db:65:76:28: 99:a5:1c:4b:96:94:4d:c3:70:3f:e1:95:f0:0c:45: e9:e0:5a:f3:06:ab:c7:0a:c6:6a:22:48:9a:57:1d: 9f:38:24:68:04:99:0e:4c:ee:b2:75:46:66:8f:f4: 8f:30:90:9b:e4:8a:2f:a1:66:df:97:a8:d4:4f:15: 14:b1:e2:c1:df:0e:86:ae:3e:f8:57:80:03:cd:ce: ba:07:8e:5f:df:6e:67:36:1c:7a:87:90:bd:d5:35: 80:e5:13:99:b7:5a:69:f5:23:ec:8a:09:e2:9e:80: fa:a7:cc:fb:82:3b:b0:3e:37:3a:56:af:5d:cf:a3: d7:3e:21:4f:98:b6:c9:01:a5:65:5a:bf:38:08:b0: 36:57:2f:cb:f2:26:24:9d:39:92:c8:fb:f9:43:f0: 2f:51:c9:68:61:1e:57:ab:2e:36:c2:3b:c6:b6:c1: 48:67:cf:08:d7:90:b9:f3:df:44:7b:a1:46:69:33: e5:1d:f2:5b:56:e7:ca:19:05:9c:d2:38:0b:27:36: 13:bb:4a:e4:81:66:9a:f9:65:60:86:c4:a2:22:41: b6:6c:94:dc:af:7d:85:e8:42:0f:53:df:09:c0:d2: bd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1A:E8:75:E7:64:BE:66:EE:9E:52:B2:4A:76:82:E9:E0:EA:CF:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ec92f7f0-cbcc-4a37-9770-085f1f6721dd/8f140c36-fef5-3c5c-a6ba-4dc1756565b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ec92f7f0-cbcc-4a37-9770-085f1f6721dd/ec92f7f0-cbcc-4a37-9770-085f1f6721dd.crl X509v3 Authority Key Identifier: keyid:F7:87:37:90:14:E4:4B:C5:CE:97:8E:C6:6B:0E:F6:74:41:02:20:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/ec92f7f0-cbcc-4a37-9770-085f1f6721dd.cer sbgp-ipAddrBlock: critical IPv4: 159.198.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:74:25:87:6a:d5:ef:b7:8c:c9:3f:53:80:7c:64:60:c0:1e: 08:0b:6e:20:ec:0d:e0:9a:a4:e0:b3:25:f4:cf:f6:c1:73:ac: 1d:ff:5d:9c:52:d8:d6:d2:43:75:b0:d0:85:37:86:a4:20:74: bd:ab:12:67:e7:a4:03:21:bd:2b:a9:78:5b:a0:06:d9:bf:ca: d3:dc:df:fc:15:87:e0:18:71:3c:ba:81:87:b7:62:ed:35:62: 79:0e:45:91:4d:2a:6d:99:ae:b0:e6:05:c8:66:b4:21:14:2b: 67:1c:8f:3a:6e:4e:ff:30:92:b0:2f:25:cd:04:18:a1:42:9c: 5b:f2:af:fa:9b:8b:47:d6:e9:d7:92:5e:ed:05:ae:04:5d:70: ba:d3:17:50:ee:d3:69:0f:a4:42:82:d5:7f:45:4a:c4:25:e4: d3:3f:fa:15:29:e2:32:c3:9f:1d:63:e9:24:a7:6d:e1:d6:ea: dd:9a:3a:ed:74:63:e0:d2:60:68:f4:16:50:b6:4c:71:71:78: 85:69:a1:e1:a7:ef:ca:85:55:ec:ca:28:04:82:6f:cc:d3:0c: f9:ca:29:32:cc:01:30:d6:96:70:46:22:f6:28:11:15:0f:37: 4e:11:fe:bb:28:0b:08:8d:e1:6b:d2:af:f5:8a:fb:c8:21:d7: be:65:ea:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+W08OtxC9T0DrSWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM5MmY3ZjAtY2JjYy00YTM3LTk3NzAtMDg1ZjFmNjcy MWRkMB4XDTI2MTAyMjE4MTMyM1oXDTI3MDEyMDE5MTMyM1owLzEtMCsGA1UEAxMk MDQ3YTk2ZDQtN2RhNi00YjQxLWE2MDMtZDJhMTMzNTI0ZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD/28NYo2LiFPyzDARXMhzHvVketqw9tAdtl diiZpRxLlpRNw3A/4ZXwDEXp4FrzBqvHCsZqIkiaVx2fOCRoBJkOTO6ydUZmj/SP MJCb5IovoWbfl6jUTxUUseLB3w6Grj74V4ADzc66B45f325nNhx6h5C91TWA5ROZ t1pp9SPsigninoD6p8z7gjuwPjc6Vq9dz6PXPiFPmLbJAaVlWr84CLA2Vy/L8iYk nTmSyPv5Q/AvUcloYR5Xqy42wjvGtsFIZ88I15C5899Ee6FGaTPlHfJbVufKGQWc 0jgLJzYTu0rkgWaa+WVghsSiIkG2bJTcr32F6EIPU98JwNK9awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEca6HXnZL5m7p5Sskp2gung6s/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9lYzky ZjdmMC1jYmNjLTRhMzctOTc3MC0wODVmMWY2NzIxZGQvOGYxNDBjMzYtZmVmNS0z YzVjLWE2YmEtNGRjMTc1NjU2NWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZWM5MmY3ZjAtY2JjYy00YTM3LTk3 NzAtMDg1ZjFmNjcyMWRkL2VjOTJmN2YwLWNiY2MtNGEzNy05NzcwLTA4NWYxZjY3 MjFkZC5jcmwwHwYDVR0jBBgwFoAU94c3kBTkS8XOl47Gaw72dEECICYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9lYzkyZjdmMC1jYmNjLTRhMzctOTc3MC0wODVm MWY2NzIxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn8aZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE50JYdq1e+3jMk/U4B8ZGDAHggLbiDsDeCapOCzJfTP9sFzrB3/XZxS 2NbSQ3Ww0IU3hqQgdL2rEmfnpAMhvSupeFugBtm/ytPc3/wVh+AYcTy6gYe3Yu01 YnkORZFNKm2ZrrDmBchmtCEUK2ccjzpuTv8wkrAvJc0EGKFCnFvyr/qbi0fW6deS Xu0FrgRdcLrTF1Du02kPpEKC1X9FSsQl5NM/+hUp4jLDnx1j6SSnbeHW6t2aOu10 Y+DSYGj0FlC2THFxeIVpoeGn78qFVezKKASCb8zTDPnKKTLMATDWlnBGIvYoERUP N04R/rsoCwiN4WvSr/WK+8gh175l6h4= -----END CERTIFICATE-----Generated at Sat Oct 31 03:40:45 2026 by rpki-client