$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa File: 59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa (raw, json) Hash identifier: k01d9pdb/26VrJfEU0dM8OO1aINumxveC7axJ8cjP0o= Subject key identifier: 60:27:F7:D4:46:A2:5B:96:7A:29:47:31:3D:C3:E2:B5:CA:74:3B:28 Certificate issuer: /CN=8e5312d0-770c-4d40-8042-53d0eadc436b Certificate serial: 010D0C9F4328584F4C3D527B325C373266B3E700 Authority key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 21976 IP address blocks: 192.150.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:52:7b:32:5c:37:32:66:b3:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5312d0-770c-4d40-8042-53d0eadc436b Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=8b07ef02-934d-4ce8-86ee-15e2ef1c808c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:96:61:ff:f3:c2:49:fe:02:31:d4:cf:8e:bb: 0f:a8:58:fc:49:ed:c9:9a:3a:24:eb:9f:4a:4f:89: dd:0c:0e:d1:28:7d:4c:c4:e5:cd:e4:17:06:52:43: 8a:22:38:89:e0:6e:98:da:03:8c:7a:e8:96:61:b7: c7:98:8b:77:00:d6:86:62:44:56:88:c4:4b:b8:67: aa:2c:b1:89:35:77:3f:38:f8:b6:92:cc:1b:4b:ee: 59:ca:66:d0:32:e4:97:8a:f4:48:f6:84:aa:74:f8: 79:82:32:53:f8:b7:c6:f0:30:7e:8b:a0:50:c3:c2: 4c:d4:7a:88:a5:bd:90:0c:e1:3b:d5:91:f5:30:8b: 1d:4b:f4:2a:e7:6c:e4:ab:7e:1b:2b:01:1f:95:26: d2:77:c8:0c:be:7a:b5:ec:49:08:79:6d:aa:1e:3c: f5:dd:b1:45:f9:29:c0:7c:cb:a7:a7:98:54:34:f6: 7a:ab:e8:bf:3d:23:a1:34:d7:bf:5a:49:83:8e:c3: a5:a8:f8:78:d8:4a:49:74:48:5f:52:58:12:fd:df: c1:af:69:72:7e:ea:c7:f4:5c:c9:13:54:3f:72:99: 2a:d8:3b:d5:85:d0:d3:f5:f0:de:77:d3:4d:ee:9b: 33:79:b4:0f:dc:61:99:b8:e0:12:5a:58:f8:f7:ae: 60:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:27:F7:D4:46:A2:5B:96:7A:29:47:31:3D:C3:E2:B5:CA:74:3B:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/59deb3be-4cc8-3fcd-91ed-e8503c8b3154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl X509v3 Authority Key Identifier: keyid:3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer sbgp-ipAddrBlock: critical IPv4: 192.150.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:11:6e:6a:48:04:17:66:25:af:f7:06:be:bf:21:42:39:d0: 13:52:75:4f:97:4d:f2:2c:ae:f3:05:22:07:50:5b:fd:4c:7b: 63:c9:4c:32:43:ea:f7:f9:a7:d6:71:78:d3:3a:e0:66:f8:05: d2:a0:83:22:76:3c:b8:4a:74:da:b7:a6:87:0a:f9:91:68:bf: a2:30:2b:04:c9:0e:cb:b5:7d:62:a3:2f:d5:d3:7e:79:68:bc: 38:e9:b1:39:ff:bd:87:61:b8:00:35:7a:78:2e:36:20:0e:f3: c7:ef:04:a0:12:4d:e4:f4:40:eb:52:f2:15:51:fb:bc:c7:68: 4a:91:27:0d:85:69:2e:2c:99:e6:30:f4:2e:bd:a7:12:d8:d1: c6:51:eb:16:7f:80:cf:bc:21:ab:da:32:1f:50:d6:1a:0b:14: 2b:63:0c:42:2e:1a:89:36:07:37:0a:2e:e9:c5:51:70:60:4b: 46:f0:56:03:b3:ab:28:46:6b:c5:97:02:82:8e:22:f6:10:ac: 51:4a:5b:ab:8f:d0:d4:e0:26:8d:18:01:77:22:fa:a2:e8:52: 1a:57:d4:18:03:0d:41:1a:0c:fa:39:e5:cc:8a:80:b1:44:9f: 39:89:00:d8:f9:64:56:e2:77:4c:a8:95:9d:0f:62:64:ea:88: 86:e4:54:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVJ7Mlw3Mmaz5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MzEyZDAtNzcwYy00ZDQwLTgwNDItNTNkMGVhZGM0 MzZiMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OGIwN2VmMDItOTM0ZC00Y2U4LTg2ZWUtMTVlMmVmMWM4MDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZZh//PCSf4CMdTPjrsPqFj8Se3Jmjok659K T4ndDA7RKH1MxOXN5BcGUkOKIjiJ4G6Y2gOMeuiWYbfHmIt3ANaGYkRWiMRLuGeq LLGJNXc/OPi2kswbS+5ZymbQMuSXivRI9oSqdPh5gjJT+LfG8DB+i6BQw8JM1HqI pb2QDOE71ZH1MIsdS/Qq52zkq34bKwEflSbSd8gMvnq17EkIeW2qHjz13bFF+SnA fMunp5hUNPZ6q+i/PSOhNNe/WkmDjsOlqPh42EpJdEhfUlgS/d/Br2lyfurH9FzJ E1Q/cpkq2DvVhdDT9fDed9NN7pszebQP3GGZuOASWlj4965gnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAn99RGoluWeilHMT3D4rXKdDsoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUz MTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFkYzQzNmIvNTlkZWIzYmUtNGNjOC0z ZmNkLTkxZWQtZTg1MDNjOGIzMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU1MzEyZDAtNzcwYy00ZDQwLTgw NDItNTNkMGVhZGM0MzZiLzhlNTMxMmQwLTc3MGMtNGQ0MC04MDQyLTUzZDBlYWRj NDM2Yi5jcmwwHwYDVR0jBBgwFoAUP3aJvQwX92PDUxjSibUKRzfWiQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2Qw ZWFkYzQzNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMRbmpIBBdmJa/3Br6/IUI50BNSdU+XTfIsrvMFIgdQW/1Me2PJTDJD 6vf5p9ZxeNM64Gb4BdKggyJ2PLhKdNq3pocK+ZFov6IwKwTJDsu1fWKjL9XTfnlo vDjpsTn/vYdhuAA1enguNiAO88fvBKASTeT0QOtS8hVR+7zHaEqRJw2FaS4smeYw 9C69pxLY0cZR6xZ/gM+8IavaMh9Q1hoLFCtjDEIuGok2BzcKLunFUXBgS0bwVgOz qyhGa8WXAoKOIvYQrFFKW6uP0NTgJo0YAXci+qLoUhpX1BgDDUEaDPo55cyKgLFE nzmJANj5ZFbid0yolZ0PYmTqiIbkVCs= -----END CERTIFICATE-----Generated at Sat Sep 26 13:59:37 2026 by rpki-client