$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/606e21bf-b2c9-3c8f-b9bb-e286f720248e.roa File: 606e21bf-b2c9-3c8f-b9bb-e286f720248e.roa (raw, json) Hash identifier: tONCXcqFcqxNkTsdlI3YPG+o9asjjBavoVTy5nVgLW0= Subject key identifier: 99:DE:74:94:CB:5B:90:C8:5C:5F:A6:B4:64:C5:0D:CD:85:A4:14:49 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584F3E47FE3BE29B2AE231674D00 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/606e21bf-b2c9-3c8f-b9bb-e286f720248e.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 54113 IP address blocks: 157.52.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:fe:3b:e2:9b:2a:e2:31:67:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=101c1500-14b1-4e3f-977f-38c7809edcad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:17:87:29:7d:f7:30:72:a6:07:41:55:f1:84: 5f:b6:2b:f7:a1:ad:81:e2:2f:41:66:0e:f0:06:c6: c8:de:da:0f:ae:ac:db:d1:84:4e:77:6d:78:ea:a9: 23:2f:c3:10:f1:bb:e9:94:c1:b9:e0:0d:d9:9c:b2: 41:93:d3:07:7f:1c:3c:ea:36:10:90:a4:3f:a5:45: 89:85:d6:fd:28:e7:86:a2:83:88:5b:eb:4f:18:e1: 69:f7:2f:e2:73:94:48:d2:31:5e:f1:ae:89:29:5b: 10:8f:dc:47:91:53:59:b1:b8:62:08:06:48:46:4b: 7e:bf:16:c1:83:10:0b:8b:37:20:53:55:0e:7c:36: 3d:cc:14:53:b4:53:46:71:f3:4a:be:9c:2a:b5:c9: 28:31:0b:0f:1d:dd:0f:34:72:a3:23:ac:aa:31:00: f5:f6:c4:c3:65:0f:c4:79:ef:77:79:f5:c2:30:03: e1:e0:43:2e:7b:30:80:bb:66:5d:4e:5c:b6:22:44: ab:e4:2f:3e:0c:77:e1:9c:18:5e:58:a2:c3:2b:59: f4:0a:0d:46:95:df:8e:ed:64:ce:10:0e:b3:51:e7: 10:be:12:de:0c:60:10:d7:92:3b:97:36:0e:dc:40: f5:b8:25:2e:c0:f4:ab:1e:57:40:64:a2:d5:8a:53: 6f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DE:74:94:CB:5B:90:C8:5C:5F:A6:B4:64:C5:0D:CD:85:A4:14:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/606e21bf-b2c9-3c8f-b9bb-e286f720248e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 157.52.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:87:86:35:6a:62:3c:24:41:ac:0b:55:39:8e:97:88:cd:7b: ed:2b:aa:cb:fe:ab:3c:51:db:d4:97:f0:16:ea:36:0c:c6:78: 20:e1:03:84:33:91:51:df:2a:ab:27:a6:91:e8:b4:e6:90:1f: fe:b7:1b:b2:c4:d3:c8:51:e4:f4:e5:ad:bc:7c:1f:44:5f:81: 8c:d6:99:b5:b3:3e:ec:64:ab:84:06:70:e6:45:54:78:e5:d3: b1:85:ea:7c:b2:3c:ee:4d:0f:00:e6:8d:ee:f1:b5:a0:d1:1e: 05:7e:9b:01:90:d3:c3:bf:45:65:83:72:e2:ea:c0:e6:97:68: d0:ed:48:24:d2:f0:04:34:48:ce:1f:17:33:93:e2:f7:ed:00: d6:7a:24:e0:f7:b2:7d:34:72:3d:d4:49:c6:2d:36:06:7e:e4: 37:f8:b4:ac:30:09:c6:c2:e2:27:53:8e:56:09:64:56:d1:e9: d2:85:1e:59:70:36:1e:7a:7c:28:bc:c2:93:0c:4b:d5:3c:e1: 56:bb:93:58:b9:46:32:70:30:f3:73:59:a9:b4:f5:32:8d:b4: d2:c6:2f:bd:69:67:47:f8:a1:72:a2:e3:cd:8b:71:7e:46:44: ac:01:f4:aa:fc:eb:6e:ea:1c:87:4f:79:05:80:45:04:78:cc: 21:5d:f8:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/474psq4jFnTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MTAxYzE1MDAtMTRiMS00ZTNmLTk3N2YtMzhjNzgwOWVkY2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuReHKX33MHKmB0FV8YRftiv3oa2B4i9BZg7w BsbI3toPrqzb0YROd2146qkjL8MQ8bvplMG54A3ZnLJBk9MHfxw86jYQkKQ/pUWJ hdb9KOeGooOIW+tPGOFp9y/ic5RI0jFe8a6JKVsQj9xHkVNZsbhiCAZIRkt+vxbB gxALizcgU1UOfDY9zBRTtFNGcfNKvpwqtckoMQsPHd0PNHKjI6yqMQD19sTDZQ/E ee93efXCMAPh4EMuezCAu2ZdTly2IkSr5C8+DHfhnBheWKLDK1n0Cg1Gld+O7WTO EA6zUecQvhLeDGAQ15I7lzYO3ED1uCUuwPSrHldAZKLVilNvEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnedJTLW5DIXF+mtGTFDc2FpBRJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNjA2ZTIxYmYtYjJjOS0z YzhmLWI5YmItZTI4NmY3MjAyNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnTRWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyHhjVqYjwkQawLVTmOl4jNe+0rqsv+qzxR29SX8BbqNgzGeCDhA4Qz kVHfKqsnppHotOaQH/63G7LE08hR5PTlrbx8H0RfgYzWmbWzPuxkq4QGcOZFVHjl 07GF6nyyPO5NDwDmje7xtaDRHgV+mwGQ08O/RWWDcuLqwOaXaNDtSCTS8AQ0SM4f FzOT4vftANZ6JOD3sn00cj3UScYtNgZ+5Df4tKwwCcbC4idTjlYJZFbR6dKFHllw Nh56fCi8wpMMS9U84Va7k1i5RjJwMPNzWam09TKNtNLGL71pZ0f4oXKi482LcX5G RKwB9Kr8627qHIdPeQWARQR4zCFd+Dk= -----END CERTIFICATE-----Generated at Fri Sep 25 22:18:52 2026 by rpki-client