$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/9f48b662-32d4-39d1-86c7-bb4f4f6ae937.roa File: 9f48b662-32d4-39d1-86c7-bb4f4f6ae937.roa (raw, json) Hash identifier: oDxDZ40JRzJzNiOFnsaiAl/K0GrM0yPnkOyEVTymqj4= Subject key identifier: 6D:62:D1:0A:7D:5F:39:12:C7:45:B0:CD:A3:08:4A:0F:9E:78:56:D4 Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584F698D75278A8E71B7F7D6F280 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/9f48b662-32d4-39d1-86c7-bb4f4f6ae937.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 13511 IP address blocks: 192.155.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:75:27:8a:8e:71:b7:f7:d6:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=47a942f9-ac2d-4a6c-bf2c-033b296f3a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:27:1a:dc:52:6f:df:d4:d1:4d:f7:31:4f:7b: 5e:d5:ef:32:88:32:4e:ac:1a:5d:d8:d3:4a:e0:41: 84:a4:b0:98:81:e1:df:da:26:fa:4c:99:6b:6c:1d: d6:ae:c5:75:52:26:f7:2a:31:0f:c9:15:11:5a:2d: 7d:4f:49:71:67:ce:03:69:46:1d:76:8d:31:e8:9e: 35:91:81:48:a4:72:b9:8e:76:a3:1f:c4:db:4d:6e: 79:a2:d2:bf:f1:5e:7d:21:84:ff:e0:5a:bd:05:11: d2:4b:be:55:d8:50:29:51:40:c0:97:36:c1:b4:d8: 3f:d1:3e:fe:db:62:91:d4:01:d6:1e:4b:23:be:e7: 7f:1d:80:ca:8f:13:3c:af:40:52:5f:16:41:fc:fb: 30:98:c2:29:4d:5c:58:51:4a:7a:56:d8:2b:62:4d: 40:33:55:75:1c:b4:49:54:05:d7:86:01:36:bc:b0: 64:b8:1e:f3:11:0f:8e:31:85:92:89:43:cd:3b:52: 5a:cf:a6:0a:dd:f2:d0:75:f3:ed:3d:82:3a:dc:2c: cf:5e:a8:ac:b8:b5:f1:7a:87:87:35:25:bc:7e:16: e3:79:f6:d6:ec:2d:ee:45:b5:69:70:ed:a7:3e:9a: 50:99:2d:c5:ee:1f:dc:0b:19:86:cb:98:ac:35:c1: 9e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:62:D1:0A:7D:5F:39:12:C7:45:B0:CD:A3:08:4A:0F:9E:78:56:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/9f48b662-32d4-39d1-86c7-bb4f4f6ae937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:1f:35:25:50:f0:df:1e:ca:84:7c:29:63:c7:27:bc:86:02: 2d:c9:ec:16:fe:c9:5f:1b:b2:7d:8c:75:ef:52:e4:bd:f1:c8: 77:ab:85:b7:09:31:39:2c:c9:15:ac:3b:ff:51:15:eb:bb:e0: 4b:ef:f4:9e:d8:44:d9:40:66:2d:32:cf:60:d1:23:c6:fb:d0: ca:ba:e1:20:90:ab:22:33:b6:03:1a:05:5b:1c:12:f4:d0:0c: 69:85:04:46:be:28:04:66:6a:53:20:f4:92:80:74:64:b6:6f: 9c:ad:89:54:d5:5c:7a:54:c1:3d:bd:54:51:78:2f:a5:4d:77: 30:c2:65:b0:94:25:52:6b:e6:1d:97:d5:39:3a:ef:ec:dc:cc: 07:34:79:8b:00:41:f2:b7:15:7f:0d:0f:9d:64:73:b7:48:1c: ce:8a:59:8c:42:7e:49:11:ce:62:65:3b:5e:d5:c4:c4:54:6d: 40:b1:0f:6f:7b:1c:c8:62:19:fd:9a:a8:1b:c3:f6:6d:34:39: c3:f8:7a:e8:4d:55:cb:21:8f:97:8e:49:2f:da:6e:2b:d4:9b: 79:d9:ab:9e:0a:b9:1e:cf:32:19:00:aa:00:4b:c8:22:8e:00: 59:90:8b:35:93:b9:eb:5c:5b:7a:56:ad:77:0c:e4:f1:87:c7: c6:e3:95:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjXUnio5xt/fW8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk NDdhOTQyZjktYWMyZC00YTZjLWJmMmMtMDMzYjI5NmYzYTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCca3FJv39TRTfcxT3te1e8yiDJOrBpd2NNK 4EGEpLCYgeHf2ib6TJlrbB3WrsV1Uib3KjEPyRURWi19T0lxZ84DaUYddo0x6J41 kYFIpHK5jnajH8TbTW55otK/8V59IYT/4Fq9BRHSS75V2FApUUDAlzbBtNg/0T7+ 22KR1AHWHksjvud/HYDKjxM8r0BSXxZB/PswmMIpTVxYUUp6VtgrYk1AM1V1HLRJ VAXXhgE2vLBkuB7zEQ+OMYWSiUPNO1Jaz6YK3fLQdfPtPYI63CzPXqisuLXxeoeH NSW8fhbjefbW7C3uRbVpcO2nPppQmS3F7h/cCxmGy5isNcGe4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1i0Qp9XzkSx0WwzaMISg+eeFbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvOWY0OGI2NjItMzJkNC0z OWQxLTg2YzctYmI0ZjRmNmFlOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwJt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACofNSVQ8N8eyoR8KWPHJ7yGAi3J7Bb+yV8bsn2Mde9S5L3xyHerhbcJ MTksyRWsO/9RFeu74Evv9J7YRNlAZi0yz2DRI8b70Mq64SCQqyIztgMaBVscEvTQ DGmFBEa+KARmalMg9JKAdGS2b5ytiVTVXHpUwT29VFF4L6VNdzDCZbCUJVJr5h2X 1Tk67+zczAc0eYsAQfK3FX8ND51kc7dIHM6KWYxCfkkRzmJlO17VxMRUbUCxD297 HMhiGf2aqBvD9m00OcP4euhNVcshj5eOSS/abivUm3nZq54KuR7PMhkAqgBLyCKO AFmQizWTuetcW3pWrXcM5PGHx8bjlag= -----END CERTIFICATE-----Generated at Tue Oct 13 08:11:45 2026 by rpki-client