$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/479a1499-01f2-33d8-9fd0-4b709b1a8666.roa File: 479a1499-01f2-33d8-9fd0-4b709b1a8666.roa (raw, json) Hash identifier: GrXQp+uTSBZ37lAeT71XE98SEE1LDmdrD1PDK4Allng= Subject key identifier: F8:F8:61:48:48:34:38:F5:35:E2:6E:40:B7:38:6C:86:07:6A:F9:B8 Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584F698D97D5896F44373E42C940 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/479a1499-01f2-33d8-9fd0-4b709b1a8666.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 13511 IP address blocks: 192.155.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:97:d5:89:6f:44:37:3e:42:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=673ada60-ca4f-414e-b96c-1073998a031c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b4:4c:c6:ed:3e:5e:13:54:5a:77:e8:dc:c0: 47:28:f8:a9:fc:28:ae:2b:21:f2:ad:e0:28:0f:1d: 0e:fc:97:15:a0:4e:9a:28:42:ac:79:69:1b:db:93: 5a:4c:22:98:b7:8f:3a:64:c1:14:c2:da:75:18:29: 0f:6b:83:3a:bf:e7:59:44:1b:24:b8:1d:f0:cb:f5: 47:21:16:19:6c:5c:24:f9:93:7b:97:e0:c8:6f:d4: d0:58:10:1a:87:9f:2b:72:db:46:d9:d1:b1:b5:ab: 5c:51:aa:00:51:5c:3c:f3:26:a9:7a:c2:45:fa:c9: 72:f0:e9:1d:60:cf:bb:23:5b:6e:47:ea:39:f0:63: c2:86:0b:3b:c2:91:18:c1:3b:0c:95:1f:41:03:59: c4:cf:7d:3e:11:2d:bb:f9:5f:13:fe:db:7c:cf:53: 9a:d3:28:31:87:05:96:01:c7:87:32:f3:11:36:d9: 9c:b9:84:a6:cf:56:55:36:e9:a9:db:ef:cb:64:26: 38:33:61:2e:a6:91:66:b9:e0:a3:6b:98:53:0c:44: d4:f9:5c:20:4a:5e:ae:7a:7e:1c:64:a6:55:9d:6d: ab:bf:c0:34:ea:18:93:90:dc:21:eb:81:bb:01:fe: 69:17:cd:84:63:00:1e:3e:8b:43:1b:2f:75:6b:c2: d1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F8:61:48:48:34:38:F5:35:E2:6E:40:B7:38:6C:86:07:6A:F9:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/479a1499-01f2-33d8-9fd0-4b709b1a8666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:92:5b:18:be:cf:71:10:2b:97:63:5a:dc:b1:b2:f7:69:6b: b0:49:86:37:fc:4b:31:45:25:d5:f8:e5:0c:89:e3:1b:44:48: d6:69:62:2b:7e:46:e7:3c:c1:76:f4:6e:98:0c:2d:69:fb:e8: 3e:78:47:37:af:63:90:1e:70:6b:da:62:f6:5f:f5:9c:75:d2: 48:2a:f4:ea:88:ff:2d:4e:7d:d9:36:ab:cc:6d:9c:7a:e2:60: ee:fe:0c:a4:d9:08:e0:ee:56:13:d5:30:d2:99:63:4b:e3:a5: 39:c2:f5:d8:6b:b3:6e:22:d7:36:90:41:c9:0c:5f:cc:15:f6: 1a:dc:48:de:5e:53:9e:eb:2f:16:40:60:ce:ce:ed:1d:e4:97: da:11:9e:48:8d:61:09:79:9d:3e:12:c4:91:81:7d:70:6f:72: b3:0c:a8:37:82:0f:26:cd:15:d8:5e:7d:2a:21:96:8b:66:f2: 59:47:c4:89:98:92:62:f4:f2:47:03:f2:30:2c:76:fd:53:38: 45:6b:cd:ad:0b:7d:0e:da:4f:40:f0:ac:ba:66:a6:c9:05:02: da:fd:71:9e:1e:10:61:56:6b:81:ea:92:f1:e2:c6:7a:f7:54: a8:b5:c0:b6:1b:47:c6:35:01:cc:25:2f:2a:9d:5e:fc:c9:34: 67:35:02:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjZfViW9ENz5CyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk NjczYWRhNjAtY2E0Zi00MTRlLWI5NmMtMTA3Mzk5OGEwMzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLRMxu0+XhNUWnfo3MBHKPip/CiuKyHyreAo Dx0O/JcVoE6aKEKseWkb25NaTCKYt486ZMEUwtp1GCkPa4M6v+dZRBskuB3wy/VH IRYZbFwk+ZN7l+DIb9TQWBAah58rcttG2dGxtatcUaoAUVw88yapesJF+sly8Okd YM+7I1tuR+o58GPChgs7wpEYwTsMlR9BA1nEz30+ES27+V8T/tt8z1Oa0ygxhwWW AceHMvMRNtmcuYSmz1ZVNump2+/LZCY4M2EuppFmueCja5hTDETU+VwgSl6uen4c ZKZVnW2rv8A06hiTkNwh64G7Af5pF82EYwAePotDGy91a8LR/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPj4YUhINDj1NeJuQLc4bIYHavm4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvNDc5YTE0OTktMDFmMi0z M2Q4LTlmZDAtNGI3MDliMWE4NjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuSWxi+z3EQK5djWtyxsvdpa7BJhjf8SzFFJdX45QyJ4xtESNZpYit+ Ruc8wXb0bpgMLWn76D54RzevY5AecGvaYvZf9Zx10kgq9OqI/y1Ofdk2q8xtnHri YO7+DKTZCODuVhPVMNKZY0vjpTnC9dhrs24i1zaQQckMX8wV9hrcSN5eU57rLxZA YM7O7R3kl9oRnkiNYQl5nT4SxJGBfXBvcrMMqDeCDybNFdhefSohlotm8llHxImY kmL08kcD8jAsdv1TOEVrza0LfQ7aT0DwrLpmpskFAtr9cZ4eEGFWa4HqkvHixnr3 VKi1wLYbR8Y1AcwlLyqdXvzJNGc1Aro= -----END CERTIFICATE-----Generated at Mon Oct 12 19:07:51 2026 by rpki-client