$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/f123f0a2-b3ee-32ac-83ac-501e9d045720.roa File: f123f0a2-b3ee-32ac-83ac-501e9d045720.roa (raw, json) Hash identifier: 7z+ClU630Yrap+N2GCZQDi1EEIQjk4ah5BHW7iBNYRs= Subject key identifier: 6A:6A:A7:6D:64:65:B4:14:58:8F:40:93:12:B7:0F:42:C8:AC:8E:93 Certificate issuer: /CN=533bea0e-cd52-49a8-9cca-a05cc33ce073 Certificate serial: 010D0C9F4328584F497361E688AEB223AAAE5500 Authority key identifier: 33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/f123f0a2-b3ee-32ac-83ac-501e9d045720.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2914 IP address blocks: 198.44.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:61:e6:88:ae:b2:23:aa:ae:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533bea0e-cd52-49a8-9cca-a05cc33ce073 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=351ad184-5723-4ca9-a7fa-f69ff4ca0d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3d:80:a3:d7:8e:1a:d3:92:24:4f:89:09:20: cb:29:82:81:d7:af:08:fe:fe:a1:75:f5:df:0d:a8: 41:37:d9:b1:0f:f8:af:ca:4f:22:b1:c5:1c:93:8d: e3:07:01:3b:25:4f:de:b0:40:c5:67:bf:1e:60:27: de:b5:fa:87:82:95:a2:de:cc:fc:75:16:f2:f3:23: 79:bd:3d:a1:05:7a:09:30:3c:c3:8e:03:04:51:fb: 52:63:b6:cf:cf:c9:64:b1:1f:13:54:1a:88:e4:9d: 19:10:1c:bb:71:6c:44:e2:1f:98:c0:ce:0e:1a:9a: 6e:82:31:dd:a4:cc:47:0c:21:ed:4a:c8:61:d9:a8: c7:04:1f:81:4d:cc:b5:a5:b6:f6:bf:9d:bb:6c:36: df:1a:29:d0:06:10:9b:4c:37:e1:3f:dc:74:2a:e3: 89:96:27:56:35:bb:ee:4a:b1:9d:5f:6c:cd:93:b7: bd:5a:7c:a0:d3:14:08:0e:74:c6:e8:ab:41:04:54: d1:7c:3d:83:10:ff:53:cf:f0:ce:2f:61:af:12:d2: a3:cf:8f:b3:5f:5e:f5:f4:e0:75:d3:5c:0c:aa:7c: bb:0f:3c:5c:ba:0f:24:a9:15:a8:2d:8f:9d:ba:7a: cd:cc:1f:d6:1a:c8:d3:f4:2a:26:c1:c6:6a:2f:86: 55:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6A:A7:6D:64:65:B4:14:58:8F:40:93:12:B7:0F:42:C8:AC:8E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/f123f0a2-b3ee-32ac-83ac-501e9d045720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl X509v3 Authority Key Identifier: keyid:33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer sbgp-ipAddrBlock: critical IPv4: 198.44.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:12:69:06:42:33:dc:95:67:9b:1d:6b:5d:c4:f0:a0:97:b4: f3:6b:b3:f4:92:72:50:ca:b5:99:17:39:64:94:da:40:49:f2: 0b:d4:5c:91:17:e9:fd:af:7a:a8:8d:d4:6b:cd:71:b1:1c:74: 48:4c:52:29:23:3c:07:ee:d4:71:ec:78:81:f2:3f:3a:39:87: 1f:98:6c:66:54:3b:56:b4:cc:d2:f7:60:bb:56:c2:37:3f:e8: 02:55:6b:a9:84:3b:25:d7:08:e6:52:de:73:69:4a:87:b0:23: d9:04:e7:a5:82:01:8e:49:92:5f:e8:e5:2c:47:07:ba:d5:72: 48:f3:8b:8e:8d:c7:97:0b:25:bd:fd:93:6c:14:c8:7d:f8:4a: d6:b8:5a:03:d1:59:92:18:77:28:b4:fe:7e:02:c5:17:6f:09: 19:8d:cb:03:36:88:f4:50:4a:b4:6c:de:e8:a0:c8:f3:88:a0: 96:42:d4:6d:aa:52:e9:5b:0d:fc:67:a0:55:b4:7e:78:ae:16: 76:e3:ea:a1:36:d7:95:67:88:8b:c8:c3:98:3d:f5:6e:7c:6c: 59:1e:86:3d:de:4c:f2:fb:55:6f:03:ee:12:69:99:34:8b:bf: f9:7a:35:4d:35:6e:9e:08:0a:f0:b6:90:54:50:e8:aa:9e:3a: 2f:4f:ff:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc2HmiK6yI6quVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMzYmVhMGUtY2Q1Mi00OWE4LTljY2EtYTA1Y2MzM2Nl MDczMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzUxYWQxODQtNTcyMy00Y2E5LWE3ZmEtZjY5ZmY0Y2EwZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD2Ao9eOGtOSJE+JCSDLKYKB168I/v6hdfXf DahBN9mxD/ivyk8iscUck43jBwE7JU/esEDFZ78eYCfetfqHgpWi3sz8dRby8yN5 vT2hBXoJMDzDjgMEUftSY7bPz8lksR8TVBqI5J0ZEBy7cWxE4h+YwM4OGppugjHd pMxHDCHtSshh2ajHBB+BTcy1pbb2v527bDbfGinQBhCbTDfhP9x0KuOJlidWNbvu SrGdX2zNk7e9Wnyg0xQIDnTG6KtBBFTRfD2DEP9Tz/DOL2GvEtKjz4+zX1719OB1 01wMqny7Dzxcug8kqRWoLY+dunrNzB/WGsjT9ComwcZqL4ZViQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpqp21kZbQUWI9AkxK3D0LIrI6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MzNi ZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVjYzMzY2UwNzMvZjEyM2YwYTItYjNlZS0z MmFjLTgzYWMtNTAxZTlkMDQ1NzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTMzYmVhMGUtY2Q1Mi00OWE4LTlj Y2EtYTA1Y2MzM2NlMDczLzUzM2JlYTBlLWNkNTItNDlhOC05Y2NhLWEwNWNjMzNj ZTA3My5jcmwwHwYDVR0jBBgwFoAUMxi/JZqnskOqqLLCHXyjj+mzZWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81MzNiZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVj YzMzY2UwNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQSaQZCM9yVZ5sda13E8KCXtPNrs/SSclDKtZkXOWSU2kBJ8gvUXJEX 6f2veqiN1GvNcbEcdEhMUikjPAfu1HHseIHyPzo5hx+YbGZUO1a0zNL3YLtWwjc/ 6AJVa6mEOyXXCOZS3nNpSoewI9kE56WCAY5Jkl/o5SxHB7rVckjzi46Nx5cLJb39 k2wUyH34Sta4WgPRWZIYdyi0/n4CxRdvCRmNywM2iPRQSrRs3uigyPOIoJZC1G2q UulbDfxnoFW0fniuFnbj6qE215VniIvIw5g99W58bFkehj3eTPL7VW8D7hJpmTSL v/l6NU01bp4ICvC2kFRQ6KqeOi9P//Y= -----END CERTIFICATE-----Generated at Thu Oct 29 00:41:46 2026 by rpki-client