$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0b9a86-554a-4dc1-8867-cf8c182319c7/1e13da57-f020-355e-8b4b-8f1d9de2f34c.roa File: 1e13da57-f020-355e-8b4b-8f1d9de2f34c.roa (raw, json) Hash identifier: kUdZDvWG9GDyGoz5jWxj8N4ynA30FJnpa09PuI3pb1o= Subject key identifier: F2:BD:55:78:EA:C3:E1:93:9C:F3:E8:ED:3E:62:9C:89:AD:6F:BF:C8 Certificate issuer: /CN=8a0b9a86-554a-4dc1-8867-cf8c182319c7 Certificate serial: 010D0C9F4328584F71DB946736EC6A00AAE13600 Authority key identifier: 8E:7C:17:D1:83:87:F4:4C:6E:A3:AB:25:27:F7:EA:92:25:37:4C:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0b9a86-554a-4dc1-8867-cf8c182319c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0b9a86-554a-4dc1-8867-cf8c182319c7/1e13da57-f020-355e-8b4b-8f1d9de2f34c.roa Signing time: Fri 09 Oct 2026 12:24:13 +0000 ROA not before: Fri 09 Oct 2026 12:24:13 +0000 ROA not after: Thu 07 Jan 2027 13:24:13 +0000 asID: 403001 IP address blocks: 156.9.216.0/24 maxlen: 24 156.9.217.0/24 maxlen: 24 156.9.218.0/24 maxlen: 24 156.9.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0b9a86-554a-4dc1-8867-cf8c182319c7/8a0b9a86-554a-4dc1-8867-cf8c182319c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0b9a86-554a-4dc1-8867-cf8c182319c7/8a0b9a86-554a-4dc1-8867-cf8c182319c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0b9a86-554a-4dc1-8867-cf8c182319c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:db:94:67:36:ec:6a:00:aa:e1:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a0b9a86-554a-4dc1-8867-cf8c182319c7 Validity Not Before: Oct 9 12:24:13 2026 GMT Not After : Jan 7 13:24:13 2027 GMT Subject: CN=952a9988-d075-4860-be5b-36b5c1d734cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ee:28:5a:47:d1:64:57:c3:27:ca:1d:53:c3: f5:e6:19:1a:b9:0d:22:82:69:c0:ab:35:0b:41:1a: 51:98:07:e3:52:6f:41:ee:1d:f4:23:ce:aa:60:f2: 2e:ea:98:fb:3f:e0:d4:6b:46:92:97:a3:c6:3c:19: db:b9:b2:2e:41:0b:9e:59:04:41:ba:88:85:1b:e3: a1:8f:45:a0:c5:82:87:4f:f4:d9:fb:6d:9d:91:43: 24:23:68:8c:8c:ea:38:52:35:64:31:eb:69:89:b4: 2c:20:12:1a:99:81:2a:d4:85:36:44:4b:93:c7:01: d5:20:64:54:c5:79:1a:ec:91:af:65:e1:69:f2:62: f5:44:ec:15:bc:95:6a:02:a2:e9:84:45:45:87:03: 7d:a7:10:df:17:ea:85:87:42:00:10:32:cc:d9:70: b6:60:ad:4a:08:86:84:a9:01:9d:bf:53:6e:c4:8d: 18:01:0e:c6:d3:de:4c:cd:99:a5:1a:6b:26:23:75: c9:50:d3:ea:91:21:4f:34:38:d3:b9:a4:ec:8c:70: 6a:19:8a:ce:1d:ee:40:fd:37:b6:d0:f8:11:2e:91: 8b:c3:82:fc:79:65:1d:46:56:99:7b:c4:0a:e4:ec: 80:03:c5:34:88:9f:65:4d:14:1d:06:e9:29:a8:d8: ac:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BD:55:78:EA:C3:E1:93:9C:F3:E8:ED:3E:62:9C:89:AD:6F:BF:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0b9a86-554a-4dc1-8867-cf8c182319c7/1e13da57-f020-355e-8b4b-8f1d9de2f34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0b9a86-554a-4dc1-8867-cf8c182319c7/8a0b9a86-554a-4dc1-8867-cf8c182319c7.crl X509v3 Authority Key Identifier: keyid:8E:7C:17:D1:83:87:F4:4C:6E:A3:AB:25:27:F7:EA:92:25:37:4C:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0b9a86-554a-4dc1-8867-cf8c182319c7.cer sbgp-ipAddrBlock: critical IPv4: 156.9.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:98:1e:65:a8:96:a5:5c:79:5f:74:ec:b3:9e:69:71:89:3a: 85:bb:6b:e7:60:b3:b6:f3:e8:a0:fe:a1:a5:1c:36:46:dd:a4: d4:da:82:17:4b:90:04:0d:d4:93:b7:19:1e:a2:23:97:4e:b8: bb:b8:5e:56:f1:c4:39:7e:25:cb:29:e7:96:41:dd:79:59:a4: a7:ff:9e:4e:e2:44:7a:81:16:86:3c:db:13:47:05:f4:47:17: 1a:ca:2c:7b:b5:55:c3:25:af:78:cd:60:7c:e1:08:41:51:2f: 45:80:12:60:c3:de:24:92:e9:3d:da:b1:03:71:9d:34:1e:4c: 5a:ab:3d:55:fd:db:5a:50:2e:ec:bb:65:6b:2e:5d:43:98:f4: a9:ac:34:a1:a7:b4:5e:98:80:49:f9:e6:5c:10:e3:24:53:89: 43:12:40:90:b8:28:e1:43:97:d8:20:93:0b:87:b2:f5:c6:0e: 9a:f2:c6:7a:ed:d0:2d:3d:88:c9:d1:5b:fe:82:cb:b6:71:36: 61:fc:10:ad:d8:50:20:c3:da:68:ac:96:d7:c7:70:13:eb:b2: cd:ba:65:b8:bd:9e:50:92:ed:da:55:ba:f0:15:58:ee:15:0d: c7:c2:a6:a8:b4:8b:e1:f0:a8:b0:c1:82:1f:66:58:72:77:55: 21:98:b6:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x25RnNuxqAKrhNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGEwYjlhODYtNTU0YS00ZGMxLTg4NjctY2Y4YzE4MjMx OWM3MB4XDTI2MTAwOTEyMjQxM1oXDTI3MDEwNzEzMjQxM1owLzEtMCsGA1UEAxMk OTUyYTk5ODgtZDA3NS00ODYwLWJlNWItMzZiNWMxZDczNGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie4oWkfRZFfDJ8odU8P15hkauQ0igmnAqzUL QRpRmAfjUm9B7h30I86qYPIu6pj7P+DUa0aSl6PGPBnbubIuQQueWQRBuoiFG+Oh j0WgxYKHT/TZ+22dkUMkI2iMjOo4UjVkMetpibQsIBIamYEq1IU2REuTxwHVIGRU xXka7JGvZeFp8mL1ROwVvJVqAqLphEVFhwN9pxDfF+qFh0IAEDLM2XC2YK1KCIaE qQGdv1NuxI0YAQ7G095MzZmlGmsmI3XJUNPqkSFPNDjTuaTsjHBqGYrOHe5A/Te2 0PgRLpGLw4L8eWUdRlaZe8QK5OyAA8U0iJ9lTRQdBukpqNisCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPK9VXjqw+GTnPPo7T5inImtb7/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84YTBi OWE4Ni01NTRhLTRkYzEtODg2Ny1jZjhjMTgyMzE5YzcvMWUxM2RhNTctZjAyMC0z NTVlLThiNGItOGYxZDlkZTJmMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGEwYjlhODYtNTU0YS00ZGMxLTg4 NjctY2Y4YzE4MjMxOWM3LzhhMGI5YTg2LTU1NGEtNGRjMS04ODY3LWNmOGMxODIz MTljNy5jcmwwHwYDVR0jBBgwFoAUjnwX0YOH9Exuo6slJ/fqkiU3TPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YTBiOWE4Ni01NTRhLTRkYzEtODg2Ny1jZjhj MTgyMzE5YzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnAnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiYHmWolqVceV907LOeaXGJOoW7a+dgs7bz6KD+oaUcNkbdpNTaghdL kAQN1JO3GR6iI5dOuLu4XlbxxDl+Jcsp55ZB3XlZpKf/nk7iRHqBFoY82xNHBfRH FxrKLHu1VcMlr3jNYHzhCEFRL0WAEmDD3iSS6T3asQNxnTQeTFqrPVX921pQLuy7 ZWsuXUOY9KmsNKGntF6YgEn55lwQ4yRTiUMSQJC4KOFDl9ggkwuHsvXGDpryxnrt 0C09iMnRW/6Cy7ZxNmH8EK3YUCDD2misltfHcBPrss26Zbi9nlCS7dpVuvAVWO4V DcfCpqi0i+HwqLDBgh9mWHJ3VSGYtj0= -----END CERTIFICATE-----Generated at Sun Oct 11 11:11:00 2026 by rpki-client