$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/735101e4-50b1-35da-bf0c-29f588e0e152.roa File: 735101e4-50b1-35da-bf0c-29f588e0e152.roa (raw, json) Hash identifier: gcb9JIZR1flarfmetWMfNWrnUHnarwBh05JrA7aGrUQ= Subject key identifier: 4B:DA:13:F8:FA:38:8A:B5:B2:D6:15:C6:4F:4B:79:2A:06:2F:24:4D Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584F698D9B2B5ED8CAE15C6BE580 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/735101e4-50b1-35da-bf0c-29f588e0e152.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 13511 IP address blocks: 192.155.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:9b:2b:5e:d8:ca:e1:5c:6b:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=29817e3b-efc0-48b6-8e51-a29d1f80b370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:56:0f:f7:93:ed:a3:e7:f0:df:2b:3a:9b:99: 7c:b9:e6:d8:3b:30:a3:80:a8:0b:26:b9:29:1a:1c: 5d:c7:02:5c:c0:84:ba:51:50:ad:b4:ad:d3:29:06: 5d:e9:04:89:da:05:82:bc:ac:c1:7c:37:f9:d1:78: 2a:5d:a1:b1:50:b1:8f:11:e4:29:14:ef:ca:16:b2: 13:5f:e4:27:78:f0:68:66:0d:cf:6a:2a:b0:cd:4d: ac:e0:8c:b7:7a:43:20:22:72:64:93:d3:d9:23:37: 09:b5:a1:f6:38:a6:9b:47:14:95:a5:26:14:15:b5: 04:fd:e9:55:72:39:f3:d8:c1:e5:e1:5c:3f:74:e9: 3c:5c:16:60:94:09:ac:82:05:98:df:8c:d1:32:20: ba:21:17:ec:71:3d:34:88:3e:0d:01:4a:e8:98:91: f2:c2:b5:d4:db:5f:aa:ce:67:d7:52:92:48:85:8c: 33:59:0d:a1:54:53:ef:27:57:f7:82:23:97:a1:0e: ba:31:15:32:dc:a3:73:a5:48:f3:ac:37:46:0b:2f: 34:e9:a8:98:61:24:68:20:e2:c3:e8:8a:e1:dd:59: 7a:f4:f5:30:2d:4c:09:6c:57:78:d6:fa:e1:65:b1: f3:52:e1:66:7e:63:e1:c6:4b:b7:fe:61:72:fe:73: 5c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DA:13:F8:FA:38:8A:B5:B2:D6:15:C6:4F:4B:79:2A:06:2F:24:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/735101e4-50b1-35da-bf0c-29f588e0e152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:22:a8:6a:58:57:ea:26:59:cc:f7:87:b3:45:75:4d:ef:30: 19:d4:a3:04:9d:59:1a:9e:73:d6:69:d3:f9:8e:4f:0f:5c:9b: 05:d3:6b:3c:30:62:86:5c:df:38:33:60:a8:7c:3d:f7:c0:60: 7c:f1:3b:ef:89:ea:fe:aa:ea:3d:e9:8e:43:2e:98:98:30:05: 58:d9:09:a6:63:0b:af:5a:9d:97:1c:a7:bb:09:04:2e:6d:e8: 6b:31:79:5a:20:85:42:e7:70:00:ef:17:e3:db:df:c6:ac:16: ef:69:c7:17:42:74:19:ba:5a:9e:c5:7b:f7:60:22:79:a0:7d: 21:dc:5f:52:fa:ea:87:a5:88:3e:46:cc:1c:3f:47:f7:88:92: 81:61:4c:d5:0d:b0:60:1f:36:c1:3b:51:d3:98:f4:24:48:aa: ad:7e:2e:b7:63:ff:17:34:e0:3c:b7:ab:29:c0:9a:15:32:cb: f0:23:24:e6:08:77:81:33:a0:0c:ed:f6:c4:dc:11:58:f6:17: af:6a:f9:9c:0c:d7:20:01:a8:57:1c:7b:08:bc:5c:65:2a:fc: 7b:e4:7d:7b:58:1e:f9:01:14:27:03:59:56:98:c2:ae:39:9c: 0c:f5:1e:d0:f2:0e:32:ea:81:e5:b1:86:ca:03:bf:11:19:1b: 9a:37:c9:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjZsrXtjK4Vxr5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk Mjk4MTdlM2ItZWZjMC00OGI2LThlNTEtYTI5ZDFmODBiMzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVYP95Pto+fw3ys6m5l8uebYOzCjgKgLJrkp GhxdxwJcwIS6UVCttK3TKQZd6QSJ2gWCvKzBfDf50XgqXaGxULGPEeQpFO/KFrIT X+QnePBoZg3PaiqwzU2s4Iy3ekMgInJkk9PZIzcJtaH2OKabRxSVpSYUFbUE/elV cjnz2MHl4Vw/dOk8XBZglAmsggWY34zRMiC6IRfscT00iD4NAUromJHywrXU21+q zmfXUpJIhYwzWQ2hVFPvJ1f3giOXoQ66MRUy3KNzpUjzrDdGCy806aiYYSRoIOLD 6Irh3Vl69PUwLUwJbFd41vrhZbHzUuFmfmPhxku3/mFy/nNcpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvaE/j6OIq1stYVxk9LeSoGLyRNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvNzM1MTAxZTQtNTBiMS0z NWRhLWJmMGMtMjlmNTg4ZTBlMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwJt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0iqGpYV+omWcz3h7NFdU3vMBnUowSdWRqec9Zp0/mOTw9cmwXTazww YoZc3zgzYKh8PffAYHzxO++J6v6q6j3pjkMumJgwBVjZCaZjC69anZccp7sJBC5t 6GsxeVoghULncADvF+Pb38asFu9pxxdCdBm6Wp7Fe/dgInmgfSHcX1L66oeliD5G zBw/R/eIkoFhTNUNsGAfNsE7UdOY9CRIqq1+Lrdj/xc04Dy3qynAmhUyy/AjJOYI d4EzoAzt9sTcEVj2F69q+ZwM1yABqFccewi8XGUq/HvkfXtYHvkBFCcDWVaYwq45 nAz1HtDyDjLqgeWxhsoDvxEZG5o3yZ4= -----END CERTIFICATE-----Generated at Tue Oct 13 08:11:41 2026 by rpki-client