$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/2c37b812-650d-315e-9e9c-8b8702ec7ec3.roa File: 2c37b812-650d-315e-9e9c-8b8702ec7ec3.roa (raw, json) Hash identifier: dMI6VDgFX7N/yJm2SA9++S6/aCAS58ntmCdmci2y5vg= Subject key identifier: DD:1F:E4:5F:EE:9E:B8:F8:1E:5C:8D:DE:39:B0:EF:06:41:EB:A4:62 Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584F698D6DD01AF8BEDF56D0D680 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/2c37b812-650d-315e-9e9c-8b8702ec7ec3.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 13511 IP address blocks: 192.155.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:6d:d0:1a:f8:be:df:56:d0:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=1a0f3570-0979-49dd-9a93-f738e09501a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b0:31:3a:2d:7d:a2:21:dc:bc:66:87:be:51: 21:ed:c6:2b:ea:6b:79:5f:28:7c:f1:21:f2:ce:bb: f1:35:4d:d2:8f:99:08:a7:c6:a1:43:d8:c3:a4:3d: 4e:2f:0d:0d:e9:fc:19:44:66:c2:8e:0d:a0:33:ae: e8:5f:c1:2f:91:98:b1:0f:a9:51:d0:2b:17:f3:e1: 09:b8:1b:3c:4d:bd:b9:cd:28:73:36:ea:0b:32:dc: 56:4d:89:f4:81:90:20:37:7d:05:47:58:16:8a:ae: 86:de:9f:4e:18:06:9c:e4:a3:3c:af:f3:cd:ca:b7: 50:34:c0:c2:b1:21:29:d5:97:c4:0a:e5:0f:db:12: f8:a1:78:6d:be:ef:96:72:9d:1e:a3:98:cc:84:b5: dd:8e:88:41:49:6b:44:67:c7:d1:32:08:0e:95:42: 43:07:84:14:0e:96:d5:a6:b7:ea:80:8a:44:48:f1: c1:9a:19:b0:1d:12:7e:9f:1a:95:64:e7:f5:eb:9c: 28:74:4a:d0:6c:07:c3:bb:e6:2e:27:e0:6c:f8:9e: 3c:76:99:2c:27:97:f6:d4:71:2c:7a:fb:e1:ae:c3: db:dc:e8:27:72:61:4c:5b:ab:b3:1e:8a:34:54:c1: 28:e2:bc:84:9b:44:58:9c:aa:c0:d1:18:f7:22:34: ac:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1F:E4:5F:EE:9E:B8:F8:1E:5C:8D:DE:39:B0:EF:06:41:EB:A4:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/2c37b812-650d-315e-9e9c-8b8702ec7ec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b8:4b:6b:ca:17:e9:77:0e:36:24:d6:3a:b6:55:b9:3f:76: 1d:7d:ab:9d:c5:6f:15:64:7d:b5:22:5b:69:36:eb:73:ea:55: bd:b2:60:9f:23:da:40:88:7e:96:3f:39:70:44:22:58:4e:71: 73:45:bc:94:c0:d6:f6:1e:d3:ef:e8:51:90:78:a4:ab:d4:85: a0:e3:91:ef:1c:56:63:14:02:9f:93:73:7e:14:2d:27:8a:fb: a7:b8:3b:7a:38:9d:92:fb:63:21:ec:6f:6e:37:d2:1a:13:e7: 5d:65:6d:6e:37:b2:46:09:a9:e5:d9:83:6e:6a:80:84:e2:c7: 4d:eb:23:c9:4d:34:f8:2d:58:e2:68:bf:9b:72:c0:8d:91:24: f5:49:20:1a:db:6e:65:7c:50:98:c3:3b:e1:f4:9d:d3:a9:41: 4c:2b:72:99:80:3c:93:f7:f5:c8:d5:9d:ad:18:06:d5:f3:6f: f8:71:8d:98:30:7c:98:14:21:6b:c3:51:4c:14:19:d4:c5:d5: cb:8c:f9:6f:68:8d:9b:22:b4:39:a4:d9:1e:52:41:c9:62:e5: ff:f2:a3:29:62:5f:74:07:90:d8:fb:b7:67:29:e5:39:e4:18: a9:7e:e8:3e:2b:ed:d4:db:67:db:00:ac:69:b7:de:80:3b:da: 07:a7:f3:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjW3QGvi+31bQ1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk MWEwZjM1NzAtMDk3OS00OWRkLTlhOTMtZjczOGUwOTUwMWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLAxOi19oiHcvGaHvlEh7cYr6mt5Xyh88SHy zrvxNU3Sj5kIp8ahQ9jDpD1OLw0N6fwZRGbCjg2gM67oX8EvkZixD6lR0CsX8+EJ uBs8Tb25zShzNuoLMtxWTYn0gZAgN30FR1gWiq6G3p9OGAac5KM8r/PNyrdQNMDC sSEp1ZfECuUP2xL4oXhtvu+Wcp0eo5jMhLXdjohBSWtEZ8fRMggOlUJDB4QUDpbV prfqgIpESPHBmhmwHRJ+nxqVZOf165wodErQbAfDu+YuJ+Bs+J48dpksJ5f21HEs evvhrsPb3OgncmFMW6uzHoo0VMEo4ryEm0RYnKrA0Rj3IjSsKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0f5F/unrj4HlyN3jmw7wZB66RiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvMmMzN2I4MTItNjUwZC0z MTVlLTllOWMtOGI4NzAyZWM3ZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJt/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACC4S2vKF+l3DjYk1jq2Vbk/dh19q53FbxVkfbUiW2k263PqVb2yYJ8j 2kCIfpY/OXBEIlhOcXNFvJTA1vYe0+/oUZB4pKvUhaDjke8cVmMUAp+Tc34ULSeK +6e4O3o4nZL7YyHsb2430hoT511lbW43skYJqeXZg25qgITix03rI8lNNPgtWOJo v5tywI2RJPVJIBrbbmV8UJjDO+H0ndOpQUwrcpmAPJP39cjVna0YBtXzb/hxjZgw fJgUIWvDUUwUGdTF1cuM+W9ojZsitDmk2R5SQcli5f/yoyliX3QHkNj7t2cp5Tnk GKl+6D4r7dTbZ9sArGm33oA72gen8xI= -----END CERTIFICATE-----Generated at Mon Oct 12 00:52:43 2026 by rpki-client