$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/bda2f7a7-dee6-3527-9211-66fbad31be85.roa File: bda2f7a7-dee6-3527-9211-66fbad31be85.roa (raw, json) Hash identifier: uY5zgZA9oN1Ix/oVeF3GPYeg/jjWli7UyfESLwsGhGY= Subject key identifier: 7F:54:06:5F:04:D6:C3:BD:7C:07:61:0A:46:18:C8:CB:9D:B4:7F:4F Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584F698D68D2E326B1B293FAE780 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/bda2f7a7-dee6-3527-9211-66fbad31be85.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 13511 IP address blocks: 192.155.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:68:d2:e3:26:b1:b2:93:fa:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=eb47733f-47f7-4457-b9dc-7d7b7c4ce273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b1:d3:b2:60:8c:25:df:10:01:47:36:21:44: 01:d4:e3:d7:f3:35:c0:b1:59:96:0d:aa:e0:4d:3c: 9d:8f:2b:d3:c3:1b:15:d6:81:37:18:0b:fb:1a:7c: 54:92:4e:87:24:46:0d:52:47:ac:8c:9d:67:20:75: 16:08:59:66:5a:19:41:12:01:78:35:d0:c4:a3:9d: ad:42:ec:e8:12:52:ab:40:37:9e:84:e5:f1:63:e6: 7c:9b:2f:c9:8c:0a:b1:2e:05:b0:f1:60:8a:92:da: d2:c1:a7:41:1e:b4:11:77:32:c2:9b:7d:45:65:22: d9:8c:65:f1:02:e1:83:5b:ed:e5:fa:57:f6:e7:69: a5:2f:03:a5:da:8e:35:2e:9a:ef:0f:71:ab:14:1b: 24:8c:cb:f8:2a:29:28:3f:05:0e:95:68:a6:f2:22: 97:de:74:ff:4f:cb:7c:86:ac:85:8c:ad:67:33:dd: 9e:51:ad:e8:fb:27:7f:d3:d7:40:85:b0:92:41:f7: 19:da:82:32:b3:88:6d:ac:4e:68:ec:9f:5f:3c:4c: 02:21:05:66:12:17:58:74:a6:b5:d3:40:04:50:ea: 45:e8:a7:1f:9b:2b:2d:43:e0:22:c5:2f:14:c3:f9: a4:82:4a:94:9c:f2:91:8f:76:29:a4:eb:c6:85:14: 2b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:54:06:5F:04:D6:C3:BD:7C:07:61:0A:46:18:C8:CB:9D:B4:7F:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/bda2f7a7-dee6-3527-9211-66fbad31be85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ca:98:c2:90:ee:86:1e:74:e5:bf:b1:67:29:b2:71:ad:e9: 41:96:18:b8:23:5b:b7:0c:61:95:89:09:05:6a:c5:03:b7:da: c8:fe:e3:ef:b7:72:06:ae:ec:2d:5d:73:f9:a1:49:ff:3e:e8: f3:06:ac:37:64:b1:c1:66:88:47:5f:3f:4d:da:f0:2d:7b:02: 65:6d:98:e1:d8:76:c6:94:27:0d:a2:36:72:75:1c:df:df:8e: 63:b5:58:d8:58:b5:48:a7:56:27:f5:61:8e:1b:0c:c9:e2:d4: 2b:5c:86:9e:c9:6f:58:a0:26:6d:fb:33:63:1e:b4:0c:e6:29: 4e:ea:a5:5e:ce:2d:d3:85:46:f1:8a:4b:0f:0d:d1:00:c4:38: 09:58:b9:bc:bc:1a:6b:e1:69:2b:1a:6b:00:ab:3d:e6:f9:3c: 33:64:9b:88:6c:b8:f5:35:76:f1:05:ce:1c:95:53:4e:36:0c: 77:c8:5d:6e:9b:c2:2e:29:83:16:f1:f3:78:e2:45:a7:88:4d: bb:19:32:68:fe:a9:bf:3c:a6:54:cc:ca:20:ee:b0:78:df:20: 39:71:90:97:f2:4f:f8:2f:53:76:27:d7:08:75:b8:b4:50:ff: 6c:68:c3:c7:87:70:3e:5c:1a:e6:90:42:0b:9e:ac:97:37:29: 6b:91:c2:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjWjS4yaxspP654AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZWI0NzczM2YtNDdmNy00NDU3LWI5ZGMtN2Q3YjdjNGNlMjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7HTsmCMJd8QAUc2IUQB1OPX8zXAsVmWDarg TTydjyvTwxsV1oE3GAv7GnxUkk6HJEYNUkesjJ1nIHUWCFlmWhlBEgF4NdDEo52t QuzoElKrQDeehOXxY+Z8my/JjAqxLgWw8WCKktrSwadBHrQRdzLCm31FZSLZjGXx AuGDW+3l+lf252mlLwOl2o41LprvD3GrFBskjMv4KikoPwUOlWim8iKX3nT/T8t8 hqyFjK1nM92eUa3o+yd/09dAhbCSQfcZ2oIys4htrE5o7J9fPEwCIQVmEhdYdKa1 00AEUOpF6KcfmystQ+AixS8Uw/mkgkqUnPKRj3YppOvGhRQrSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9UBl8E1sO9fAdhCkYYyMudtH9PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvYmRhMmY3YTctZGVlNi0z NTI3LTkyMTEtNjZmYmFkMzFiZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJt2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbKmMKQ7oYedOW/sWcpsnGt6UGWGLgjW7cMYZWJCQVqxQO32sj+4++3 cgau7C1dc/mhSf8+6PMGrDdkscFmiEdfP03a8C17AmVtmOHYdsaUJw2iNnJ1HN/f jmO1WNhYtUinVif1YY4bDMni1Ctchp7Jb1igJm37M2MetAzmKU7qpV7OLdOFRvGK Sw8N0QDEOAlYuby8GmvhaSsaawCrPeb5PDNkm4hsuPU1dvEFzhyVU042DHfIXW6b wi4pgxbx83jiRaeITbsZMmj+qb88plTMyiDusHjfIDlxkJfyT/gvU3Yn1wh1uLRQ /2xow8eHcD5cGuaQQguerJc3KWuRwjc= -----END CERTIFICATE-----Generated at Mon Oct 12 00:52:48 2026 by rpki-client