$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/870d5c80-35ac-3232-9bea-78b626e4ed7c.roa File: 870d5c80-35ac-3232-9bea-78b626e4ed7c.roa (raw, json) Hash identifier: cAcxWmus8SRYlt0CA5yMUHxcZlFkoJ6bmeZJ1nGv0xs= Subject key identifier: B6:69:D4:18:67:DA:3E:9D:F2:0C:50:0A:38:4F:FF:50:2C:F4:51:D7 Certificate issuer: /CN=a2839383-af07-436e-89af-5453510b6546 Certificate serial: 010D0C9F4328584F6F0EC3D4C253AA9FCFFE8330 Authority key identifier: 00:66:C2:0A:A7:35:0D:55:EC:39:80:06:16:B5:C5:3C:3C:6E:8B:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/870d5c80-35ac-3232-9bea-78b626e4ed7c.roa Signing time: Thu 08 Oct 2026 12:19:56 +0000 ROA not before: Thu 08 Oct 2026 12:19:56 +0000 ROA not after: Wed 06 Jan 2027 13:19:56 +0000 asID: 401487 IP address blocks: 128.254.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/a2839383-af07-436e-89af-5453510b6546.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/a2839383-af07-436e-89af-5453510b6546.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:0e:c3:d4:c2:53:aa:9f:cf:fe:83:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2839383-af07-436e-89af-5453510b6546 Validity Not Before: Oct 8 12:19:56 2026 GMT Not After : Jan 6 13:19:56 2027 GMT Subject: CN=6c5ae690-2e47-412b-a45e-fbce9f96d28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e2:22:a8:20:64:f9:ea:49:e5:03:98:2c:67: ea:92:6b:a2:d0:5f:5d:ab:a1:ae:3b:29:a0:93:8f: ff:3f:a6:31:97:1e:62:88:c3:4f:8d:3c:52:60:cf: a7:ca:4f:4c:69:6c:e7:30:b9:2f:c6:5f:0e:fc:d6: f4:0f:46:b6:39:72:96:63:1e:d1:9e:37:fd:a9:08: 26:2f:35:cd:a5:c1:12:10:d1:fc:19:71:2a:7f:71: 46:57:7c:b7:05:d5:41:fa:b7:1d:0f:56:3a:40:47: f9:ca:0c:cf:c4:96:a3:4b:db:89:f6:03:8b:84:20: 29:8c:4f:b9:b3:e1:d6:88:77:d6:6f:fa:3d:d8:8f: 7b:fd:d6:ee:c2:3b:38:76:74:60:dd:8a:6f:23:68: 0d:69:8e:4e:86:30:23:f5:e7:b1:1f:ec:88:53:65: 76:92:d5:cc:e7:ee:34:3f:fb:c8:5c:17:5d:fc:91: 72:81:49:3d:1c:49:4f:8b:ef:f6:84:a8:97:c9:59: 04:5d:82:3c:55:8b:eb:d9:73:5e:0f:33:89:7a:22: 3d:dc:0d:f9:85:91:8e:a5:4e:ae:3e:37:69:b5:b1: 1c:35:c8:67:8a:0f:3c:22:77:71:73:a5:8b:51:fa: 65:00:88:db:ab:4d:42:e2:24:24:1f:7d:e1:d0:0b: 73:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:69:D4:18:67:DA:3E:9D:F2:0C:50:0A:38:4F:FF:50:2C:F4:51:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/870d5c80-35ac-3232-9bea-78b626e4ed7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546/a2839383-af07-436e-89af-5453510b6546.crl X509v3 Authority Key Identifier: keyid:00:66:C2:0A:A7:35:0D:55:EC:39:80:06:16:B5:C5:3C:3C:6E:8B:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a2839383-af07-436e-89af-5453510b6546.cer sbgp-ipAddrBlock: critical IPv4: 128.254.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:cc:25:d2:69:cd:4e:1d:b0:c2:e1:ff:81:f9:a9:f4:15:a6: 9a:ce:3b:e2:27:c7:59:6e:7f:6c:3d:45:27:ef:e2:2e:e2:ba: f6:55:9e:93:35:a6:f8:47:42:9a:a5:01:0b:e7:e2:ce:9e:6f: 62:43:fa:1b:31:ca:d9:e5:e5:14:5f:34:6d:8b:b8:7b:7c:ed: e1:e7:05:b8:65:d4:9b:10:d8:cb:ee:bd:bd:f5:f5:16:a5:98: 3d:48:45:1f:d2:f1:6c:27:a6:60:5d:2c:3a:62:bf:64:58:ba: f2:42:87:96:d9:6f:72:c5:f8:04:2a:df:e7:8e:b1:de:1a:e5: c1:08:bd:eb:e9:b6:3b:5c:ae:c5:fb:0a:41:3e:12:30:f8:9d: c7:80:79:ab:10:7e:a5:b5:da:70:43:d9:8a:f0:ce:da:a0:10: c9:6b:d1:06:6d:e6:b1:e4:f6:ba:f1:e3:43:f7:6e:ef:5e:34: 74:b5:7f:df:a8:07:a3:11:ab:1d:f8:0b:1b:03:e1:63:e2:6f: 40:b6:63:ad:e4:56:9a:a1:a2:bd:39:05:47:1e:7a:01:8f:37: 64:37:38:cc:6f:31:cb:4f:ae:aa:fd:e0:3d:14:00:a5:a9:6b: 46:55:e4:99:64:66:d0:d7:28:10:37:7a:94:57:a6:39:f5:12: 3a:b5:04:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vDsPUwlOqn8/+gzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI4MzkzODMtYWYwNy00MzZlLTg5YWYtNTQ1MzUxMGI2 NTQ2MB4XDTI2MTAwODEyMTk1NloXDTI3MDEwNjEzMTk1NlowLzEtMCsGA1UEAxMk NmM1YWU2OTAtMmU0Ny00MTJiLWE0NWUtZmJjZTlmOTZkMjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+IiqCBk+epJ5QOYLGfqkmui0F9dq6GuOymg k4//P6Yxlx5iiMNPjTxSYM+nyk9MaWznMLkvxl8O/Nb0D0a2OXKWYx7Rnjf9qQgm LzXNpcESENH8GXEqf3FGV3y3BdVB+rcdD1Y6QEf5ygzPxJajS9uJ9gOLhCApjE+5 s+HWiHfWb/o92I97/dbuwjs4dnRg3YpvI2gNaY5OhjAj9eexH+yIU2V2ktXM5+40 P/vIXBdd/JFygUk9HElPi+/2hKiXyVkEXYI8VYvr2XNeDzOJeiI93A35hZGOpU6u PjdptbEcNchnig88Indxc6WLUfplAIjbq01C4iQkH33h0AtzVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZp1Bhn2j6d8gxQCjhP/1As9FHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hMjgz OTM4My1hZjA3LTQzNmUtODlhZi01NDUzNTEwYjY1NDYvODcwZDVjODAtMzVhYy0z MjMyLTliZWEtNzhiNjI2ZTRlZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTI4MzkzODMtYWYwNy00MzZlLTg5 YWYtNTQ1MzUxMGI2NTQ2L2EyODM5MzgzLWFmMDctNDM2ZS04OWFmLTU0NTM1MTBi NjU0Ni5jcmwwHwYDVR0jBBgwFoAUAGbCCqc1DVXsOYAGFrXFPDxuiyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hMjgzOTM4My1hZjA3LTQzNmUtODlhZi01NDUz NTEwYjY1NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvMJdJpzU4dsMLh/4H5qfQVpprOO+Inx1luf2w9RSfv4i7iuvZVnpM1 pvhHQpqlAQvn4s6eb2JD+hsxytnl5RRfNG2LuHt87eHnBbhl1JsQ2Mvuvb319Ral mD1IRR/S8WwnpmBdLDpiv2RYuvJCh5bZb3LF+AQq3+eOsd4a5cEIvevptjtcrsX7 CkE+EjD4nceAeasQfqW12nBD2YrwztqgEMlr0QZt5rHk9rrx40P3bu9eNHS1f9+o B6MRqx34CxsD4WPib0C2Y63kVpqhor05BUceegGPN2Q3OMxvMctPrqr94D0UAKWp a0ZV5JlkZtDXKBA3epRXpjn1Ejq1BKg= -----END CERTIFICATE-----Generated at Sun Oct 11 11:31:00 2026 by rpki-client