$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/d311ea91-f079-380f-a5bf-8adfe8c9a212.roa File: d311ea91-f079-380f-a5bf-8adfe8c9a212.roa (raw, json) Hash identifier: gtKeN48EZ2nfP23DoNc6l93eZINEV7sTnHLe4XKUCHM= Subject key identifier: F2:1C:B1:AB:C2:3B:D2:B2:B3:4C:C9:E5:B2:32:71:D0:22:AC:A7:87 Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584F698D99A6AB95C8312FECA400 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/d311ea91-f079-380f-a5bf-8adfe8c9a212.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 13511 IP address blocks: 192.155.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:99:a6:ab:95:c8:31:2f:ec:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=f6539631-43a1-4dc3-9e0d-692268684ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:26:82:37:b1:26:55:6c:fd:a5:be:be:dc:21: 8a:9e:a9:84:a3:10:e5:4b:f5:59:e8:84:bc:c9:ad: 64:58:26:31:4f:5d:96:bd:73:ee:cb:ee:6f:43:65: ec:39:c0:71:05:39:d4:24:ec:a7:df:67:bf:78:54: 1e:0d:18:47:90:c9:9a:f8:e6:1e:82:3b:73:12:df: 29:b5:b1:26:53:17:2a:70:f0:91:24:84:64:11:d9: 1c:06:45:2d:c2:be:9c:64:7d:57:73:f3:a0:6a:72: ed:e9:08:08:e1:dd:c9:71:72:56:6e:e1:37:ef:2a: bb:8a:fc:70:c0:2f:e0:79:53:3c:c7:86:4f:79:71: 72:07:96:11:73:41:e9:41:ed:5e:75:3f:d0:12:26: f7:59:5e:41:0d:c9:63:b3:08:77:97:d7:75:17:d8: 68:4a:5a:4c:ac:dd:94:42:1a:40:c1:35:aa:40:18: 24:c4:da:db:a1:d7:9e:71:41:34:54:60:d8:80:df: cd:6c:33:8d:ff:95:74:f9:02:17:00:25:26:1f:2b: 99:62:c9:32:1a:7e:a4:44:06:0f:3c:6d:5c:0c:a2: 05:ae:0e:0f:3d:61:13:0e:c3:4a:2f:98:b6:93:e4: a5:12:d5:11:f5:32:62:61:49:74:c6:ab:45:a2:b7: ba:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1C:B1:AB:C2:3B:D2:B2:B3:4C:C9:E5:B2:32:71:D0:22:AC:A7:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/d311ea91-f079-380f-a5bf-8adfe8c9a212.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:c6:42:5d:57:1b:6e:57:86:54:5e:6c:c2:66:de:ba:b9:12: 72:d7:65:d1:76:db:87:33:f0:a5:2f:3c:70:d7:d9:c6:c3:dd: 4d:3c:b0:5d:2b:4b:c9:c6:a8:a4:c4:61:90:d4:4d:88:2e:b8: 51:dc:ed:a6:10:89:a0:78:fb:19:61:4c:fd:bd:cf:06:ee:9c: 3c:4b:b1:f9:c6:0b:1f:52:19:45:f9:f1:77:26:32:59:f6:71: 9f:30:7b:50:b9:84:c2:c8:7a:a2:60:0d:18:3e:e6:e0:95:cd: 40:82:e6:ab:de:b3:36:62:38:87:6b:6a:16:a4:0f:1f:95:58: f3:7d:b3:7f:23:c9:8c:41:d4:25:61:61:fe:ab:a3:03:2d:a1: 26:c8:dc:dc:0f:dc:4f:f8:68:1a:fa:4c:3c:b5:5f:92:78:dd: fe:45:64:22:32:08:03:7d:0d:3a:16:7d:5e:ef:d5:ac:0e:46: 1b:37:bd:91:43:12:e6:57:db:de:c1:97:60:05:d5:25:f8:a9: 67:b9:8e:69:26:4f:65:73:9f:a8:22:f7:86:d2:92:1d:a5:53: 76:86:20:45:d3:4d:77:46:32:3d:5e:8b:03:3a:56:a7:64:61: e3:5c:a4:3b:25:8e:bc:2b:a7:d7:40:eb:a3:30:c1:d4:fd:ad: 2b:4f:03:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjZmmq5XIMS/spAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZjY1Mzk2MzEtNDNhMS00ZGMzLTllMGQtNjkyMjY4Njg0YWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCaCN7EmVWz9pb6+3CGKnqmEoxDlS/VZ6IS8 ya1kWCYxT12WvXPuy+5vQ2XsOcBxBTnUJOyn32e/eFQeDRhHkMma+OYegjtzEt8p tbEmUxcqcPCRJIRkEdkcBkUtwr6cZH1Xc/OganLt6QgI4d3JcXJWbuE37yq7ivxw wC/geVM8x4ZPeXFyB5YRc0HpQe1edT/QEib3WV5BDcljswh3l9d1F9hoSlpMrN2U QhpAwTWqQBgkxNrbodeecUE0VGDYgN/NbDON/5V0+QIXACUmHyuZYskyGn6kRAYP PG1cDKIFrg4PPWETDsNKL5i2k+SlEtUR9TJiYUl0xqtFore6PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIcsavCO9Kys0zJ5bIycdAirKeHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvZDMxMWVhOTEtZjA3OS0z ODBmLWE1YmYtOGFkZmU4YzlhMjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/GQl1XG25XhlRebMJm3rq5EnLXZdF224cz8KUvPHDX2cbD3U08sF0r S8nGqKTEYZDUTYguuFHc7aYQiaB4+xlhTP29zwbunDxLsfnGCx9SGUX58XcmMln2 cZ8we1C5hMLIeqJgDRg+5uCVzUCC5qveszZiOIdrahakDx+VWPN9s38jyYxB1CVh Yf6rowMtoSbI3NwP3E/4aBr6TDy1X5J43f5FZCIyCAN9DToWfV7v1awORhs3vZFD EuZX297Bl2AF1SX4qWe5jmkmT2Vzn6gi94bSkh2lU3aGIEXTTXdGMj1eiwM6Vqdk YeNcpDsljrwrp9dA66MwwdT9rStPA7Y= -----END CERTIFICATE-----Generated at Wed Oct 14 13:04:57 2026 by rpki-client