$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0b9a86-554a-4dc1-8867-cf8c182319c7/534a1036-b880-3790-b92e-af921efdaa1e.roa File: 534a1036-b880-3790-b92e-af921efdaa1e.roa (raw, json) Hash identifier: mKOzkW4E5KX1C7V0ofutjZ61zxWYH7WP/JoolOS91wo= Subject key identifier: 6C:5C:6C:6D:B2:F9:BA:02:97:A4:63:97:BD:71:85:EE:43:5D:E5:27 Certificate issuer: /CN=8a0b9a86-554a-4dc1-8867-cf8c182319c7 Certificate serial: 010D0C9F4328584F69EE1A6D89C56CA4DA6D8F00 Authority key identifier: 8E:7C:17:D1:83:87:F4:4C:6E:A3:AB:25:27:F7:EA:92:25:37:4C:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0b9a86-554a-4dc1-8867-cf8c182319c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0b9a86-554a-4dc1-8867-cf8c182319c7/534a1036-b880-3790-b92e-af921efdaa1e.roa Signing time: Tue 06 Oct 2026 16:15:04 +0000 ROA not before: Tue 06 Oct 2026 16:15:04 +0000 ROA not after: Mon 04 Jan 2027 17:15:04 +0000 asID: 403001 IP address blocks: 156.9.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0b9a86-554a-4dc1-8867-cf8c182319c7/8a0b9a86-554a-4dc1-8867-cf8c182319c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0b9a86-554a-4dc1-8867-cf8c182319c7/8a0b9a86-554a-4dc1-8867-cf8c182319c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0b9a86-554a-4dc1-8867-cf8c182319c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:ee:1a:6d:89:c5:6c:a4:da:6d:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a0b9a86-554a-4dc1-8867-cf8c182319c7 Validity Not Before: Oct 6 16:15:04 2026 GMT Not After : Jan 4 17:15:04 2027 GMT Subject: CN=d1ce7a24-a7fb-4e37-bfeb-700ecdb0a248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:55:80:ac:6f:4b:f6:80:c7:e2:71:00:c8:64: cf:db:1a:d4:d0:3b:26:8b:5b:91:7a:2a:25:f4:c6: e2:b9:38:35:0d:4d:90:a3:81:58:67:0c:82:57:87: 64:76:32:64:e2:91:6b:7e:6a:1e:bd:3f:b9:8e:58: bd:5b:69:e3:1c:a2:89:75:21:b5:a3:b4:bd:8d:f3: ff:f6:42:f1:2a:81:0e:2a:90:b0:c1:78:f1:6e:3e: ed:c9:7b:c2:0e:2f:79:98:49:14:be:ac:41:96:0d: fd:1d:08:18:57:df:2a:a1:2a:fb:27:33:9d:e3:9c: 6c:eb:54:36:8c:cf:af:6a:c2:9d:48:1f:29:6d:a8: 4b:5c:32:57:eb:06:e8:13:86:b9:54:53:a5:54:38: 93:c7:ee:88:81:d7:53:97:75:e5:7e:08:65:91:e8: 73:d6:fb:3d:ef:9f:96:45:39:d2:d8:cf:27:f8:56: 7b:a3:00:6f:da:99:d3:9f:45:ac:dc:33:39:cf:57: 20:56:9b:66:fc:88:ac:a5:08:07:98:d9:06:a9:3a: 71:19:b1:fa:9f:e7:56:5d:ba:ed:7d:c8:73:49:bc: 09:99:04:7e:72:55:ba:c6:93:40:d3:ab:e4:ff:25: 10:e6:01:a2:8c:2e:41:e3:e0:f9:e0:69:16:fb:e6: 0a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5C:6C:6D:B2:F9:BA:02:97:A4:63:97:BD:71:85:EE:43:5D:E5:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0b9a86-554a-4dc1-8867-cf8c182319c7/534a1036-b880-3790-b92e-af921efdaa1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0b9a86-554a-4dc1-8867-cf8c182319c7/8a0b9a86-554a-4dc1-8867-cf8c182319c7.crl X509v3 Authority Key Identifier: keyid:8E:7C:17:D1:83:87:F4:4C:6E:A3:AB:25:27:F7:EA:92:25:37:4C:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a0b9a86-554a-4dc1-8867-cf8c182319c7.cer sbgp-ipAddrBlock: critical IPv4: 156.9.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d3:f5:77:c1:5a:b3:03:b4:da:db:92:38:db:9d:1e:d3:73: bd:dc:4b:69:95:3f:48:e1:0d:dd:f2:d3:ec:98:4a:20:cb:1a: ff:1e:e1:48:40:86:eb:0c:5a:13:c0:74:17:27:14:d6:c9:ca: b7:12:9f:c2:c6:9d:3a:a1:1a:d6:60:35:b0:64:72:24:5b:28: 63:06:cf:8a:c3:39:5d:65:91:5e:a1:c3:25:28:a1:fa:bb:5e: 3b:7e:2e:e3:eb:13:05:e6:91:cc:8c:8f:6f:f7:2c:05:b9:d4: b8:cd:41:df:95:9f:d7:91:bd:68:21:e0:c6:c4:0e:13:62:88: af:a9:7f:aa:6f:9e:bb:03:ce:f7:da:47:bb:3a:cc:d9:ae:ba: 44:4e:8c:38:16:73:1a:7c:91:a5:cc:03:33:c5:90:27:60:86: e8:29:28:d8:2c:ce:ad:37:15:35:2e:27:7f:b8:ec:cc:1f:61: 2c:ba:24:29:45:e2:a4:80:6f:5a:f7:ab:ca:be:ac:84:c1:6f: 56:70:c4:47:4d:99:30:2c:94:02:3d:70:b3:3d:cb:2f:b7:7d: cc:a1:77:73:bc:e5:7c:85:39:47:74:0e:0b:12:d9:7e:b7:83: b2:cb:3c:a9:dc:47:75:c9:3b:11:fe:5e:68:65:60:fc:2c:72: 44:13:e6:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9p7hpticVspNptjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGEwYjlhODYtNTU0YS00ZGMxLTg4NjctY2Y4YzE4MjMx OWM3MB4XDTI2MTAwNjE2MTUwNFoXDTI3MDEwNDE3MTUwNFowLzEtMCsGA1UEAxMk ZDFjZTdhMjQtYTdmYi00ZTM3LWJmZWItNzAwZWNkYjBhMjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1WArG9L9oDH4nEAyGTP2xrU0Dsmi1uReiol 9MbiuTg1DU2Qo4FYZwyCV4dkdjJk4pFrfmoevT+5jli9W2njHKKJdSG1o7S9jfP/ 9kLxKoEOKpCwwXjxbj7tyXvCDi95mEkUvqxBlg39HQgYV98qoSr7JzOd45xs61Q2 jM+vasKdSB8pbahLXDJX6wboE4a5VFOlVDiTx+6IgddTl3Xlfghlkehz1vs975+W RTnS2M8n+FZ7owBv2pnTn0Ws3DM5z1cgVptm/IispQgHmNkGqTpxGbH6n+dWXbrt fchzSbwJmQR+clW6xpNA06vk/yUQ5gGijC5B4+D54GkW++YKkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxcbG2y+boCl6Rjl71xhe5DXeUnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84YTBi OWE4Ni01NTRhLTRkYzEtODg2Ny1jZjhjMTgyMzE5YzcvNTM0YTEwMzYtYjg4MC0z NzkwLWI5MmUtYWY5MjFlZmRhYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGEwYjlhODYtNTU0YS00ZGMxLTg4 NjctY2Y4YzE4MjMxOWM3LzhhMGI5YTg2LTU1NGEtNGRjMS04ODY3LWNmOGMxODIz MTljNy5jcmwwHwYDVR0jBBgwFoAUjnwX0YOH9Exuo6slJ/fqkiU3TPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YTBiOWE4Ni01NTRhLTRkYzEtODg2Ny1jZjhj MTgyMzE5YzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnAnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjT9XfBWrMDtNrbkjjbnR7Tc73cS2mVP0jhDd3y0+yYSiDLGv8e4UhA husMWhPAdBcnFNbJyrcSn8LGnTqhGtZgNbBkciRbKGMGz4rDOV1lkV6hwyUoofq7 Xjt+LuPrEwXmkcyMj2/3LAW51LjNQd+Vn9eRvWgh4MbEDhNiiK+pf6pvnrsDzvfa R7s6zNmuukROjDgWcxp8kaXMAzPFkCdghugpKNgszq03FTUuJ3+47MwfYSy6JClF 4qSAb1r3q8q+rITBb1ZwxEdNmTAslAI9cLM9yy+3fcyhd3O85XyFOUd0DgsS2X63 g7LLPKncR3XJOxH+XmhlYPwsckQT5is= -----END CERTIFICATE-----Generated at Sun Oct 11 17:48:07 2026 by rpki-client