$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/232bd181-e2ca-3b10-b390-d882a9d6cd18.roa File: 232bd181-e2ca-3b10-b390-d882a9d6cd18.roa (raw, json) Hash identifier: pQnhSB1RisXolFEwqG123bVonRnXTPC6Ttc9DUUcctc= Subject key identifier: F8:CA:3F:E9:2F:6F:05:9B:2B:C6:83:5E:21:99:0F:70:31:CF:14:97 Certificate issuer: /CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Certificate serial: 010D0C9F4328584F498750F4D240A45AD1AE3FC0 Authority key identifier: 3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/232bd181-e2ca-3b10-b390-d882a9d6cd18.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30286 IP address blocks: 199.101.156.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:50:f4:d2:40:a4:5a:d1:ae:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d554b656-74e2-4d80-80e2-ca50a6bf1e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2c:f1:61:02:a4:99:d4:37:ff:b0:c8:b1:0a: 22:ad:48:0b:b7:93:08:c5:b0:d4:84:e1:de:c1:b8: c8:e0:a7:7a:47:0c:14:a0:30:ad:35:6f:2a:0e:8f: 59:0c:7f:c1:99:6e:b2:af:4e:08:f7:5c:ad:5f:19: 32:9d:3a:ea:dc:77:d8:0d:26:c9:d8:3e:a1:d7:c7: 36:a7:a7:80:03:5f:2c:34:87:70:52:ff:ea:35:8a: e5:3d:34:83:2b:a2:63:75:41:f1:31:fd:93:b2:43: be:55:9d:c3:f7:c9:c3:00:7e:19:aa:3e:1e:52:be: 0e:05:a7:3a:f8:2a:92:88:87:34:83:cc:71:18:ba: e1:cb:e9:8f:53:c7:da:71:8e:08:68:bb:69:78:fa: 8e:c4:82:3c:ce:75:94:56:aa:cb:d0:be:15:bb:ab: 57:5d:dd:11:a5:d3:4c:a1:20:0a:c4:91:f0:2d:48: 59:ea:32:01:52:96:44:dc:c3:79:5e:e9:82:4a:0a: e0:77:26:df:87:35:f0:41:83:03:bc:f9:6f:8a:46: df:39:3f:b7:bf:ac:0a:33:e9:3d:ce:6f:8d:c9:ac: ca:17:f6:50:15:43:a4:18:61:4e:9c:57:da:73:86: bc:d1:2a:7c:86:1f:b5:b1:f6:79:ca:d4:ec:53:fe: 3f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CA:3F:E9:2F:6F:05:9B:2B:C6:83:5E:21:99:0F:70:31:CF:14:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/232bd181-e2ca-3b10-b390-d882a9d6cd18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl X509v3 Authority Key Identifier: keyid:3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer sbgp-ipAddrBlock: critical IPv4: 199.101.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ea:21:e2:d6:88:b3:2c:20:36:f5:ce:14:4f:d0:b1:ec:21: fd:b7:5a:07:80:64:fb:7c:95:65:7f:e2:84:95:8d:96:f3:15: 0b:f7:34:67:ae:3c:39:54:ea:9a:2d:70:a0:8f:4a:15:55:c6: 47:c0:fb:54:37:09:7f:46:7d:ca:79:44:57:10:5b:2c:39:7a: 35:9d:cc:dc:ee:db:cc:77:bc:64:da:ae:78:61:d2:e8:33:ea: 04:2e:4c:b6:8d:9b:80:cc:95:b0:fa:9c:4d:84:e4:ac:f4:f2: bf:56:99:1e:bd:4b:ce:6f:99:76:bd:23:37:5c:dd:fa:da:50: 12:69:3c:74:29:53:6c:98:82:6a:57:e7:4d:14:86:ac:9f:7b: e6:63:42:66:6b:e0:b0:8f:5d:12:6e:eb:e8:46:11:3f:cf:24: 54:75:97:c0:14:ab:f6:ad:7c:93:b4:85:9a:c4:59:82:77:a6: 9f:c9:ee:3a:15:95:cf:3a:5a:d6:a6:f7:3d:a0:a5:3a:7c:3b: 10:63:82:33:eb:a7:c1:4a:39:8b:5e:e0:44:54:ee:22:a7:46: 3d:37:80:d4:44:9d:b1:9f:c1:18:25:41:96:b3:7f:65:fc:c9: a8:74:4e:9b:12:bf:61:a3:ed:af:13:b9:86:cd:3c:97:00:d9: 5c:fe:c3:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh1D00kCkWtGuP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFlMjItMzQ5Yzc1MTk1 ZjY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDU1NGI2NTYtNzRlMi00ZDgwLTgwZTItY2E1MGE2YmYxZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCzxYQKkmdQ3/7DIsQoirUgLt5MIxbDUhOHe wbjI4Kd6RwwUoDCtNW8qDo9ZDH/BmW6yr04I91ytXxkynTrq3HfYDSbJ2D6h18c2 p6eAA18sNIdwUv/qNYrlPTSDK6JjdUHxMf2TskO+VZ3D98nDAH4Zqj4eUr4OBac6 +CqSiIc0g8xxGLrhy+mPU8facY4IaLtpePqOxII8znWUVqrL0L4Vu6tXXd0RpdNM oSAKxJHwLUhZ6jIBUpZE3MN5XumCSgrgdybfhzXwQYMDvPlvikbfOT+3v6wKM+k9 zm+NyazKF/ZQFUOkGGFOnFfac4a80Sp8hh+1sfZ5ytTsU/4//wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjKP+kvbwWbK8aDXiGZD3AxzxSXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYjlm M2RjNS00ZDgyLTRkODItYWUyMi0zNDljNzUxOTVmNjUvMjMyYmQxODEtZTJjYS0z YjEwLWIzOTAtZDg4MmE5ZDZjZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFl MjItMzQ5Yzc1MTk1ZjY1L2NiOWYzZGM1LTRkODItNGQ4Mi1hZTIyLTM0OWM3NTE5 NWY2NS5jcmwwHwYDVR0jBBgwFoAUO5u6/Gw878L1iqiluojFFhAupTAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYjlmM2RjNS00ZDgyLTRkODItYWUyMi0zNDlj NzUxOTVmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2WcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPqIeLWiLMsIDb1zhRP0LHsIf23WgeAZPt8lWV/4oSVjZbzFQv3NGeu PDlU6potcKCPShVVxkfA+1Q3CX9Gfcp5RFcQWyw5ejWdzNzu28x3vGTarnhh0ugz 6gQuTLaNm4DMlbD6nE2E5Kz08r9WmR69S85vmXa9Izdc3fraUBJpPHQpU2yYgmpX 500Uhqyfe+ZjQmZr4LCPXRJu6+hGET/PJFR1l8AUq/atfJO0hZrEWYJ3pp/J7joV lc86Wtam9z2gpTp8OxBjgjPrp8FKOYte4ERU7iKnRj03gNREnbGfwRglQZazf2X8 yah0TpsSv2Gj7a8TuYbNPJcA2Vz+w1Y= -----END CERTIFICATE-----Generated at Wed Oct 21 19:08:36 2026 by rpki-client