$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/232bd181-e2ca-3b10-b390-d882a9d6cd18.roa File: 232bd181-e2ca-3b10-b390-d882a9d6cd18.roa (raw, json) Hash identifier: sBgU5fBuHMCXkXcgsELYiuo0Pgm3XpISCYilQl4awQg= Subject key identifier: EE:AB:B5:04:1A:DC:8F:7E:72:6F:04:9D:4C:E3:26:05:FF:CC:B8:84 Certificate issuer: /CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Certificate serial: 010D0C9F4328584EA788B3ADDC3D6E05645D6640 Authority key identifier: 3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/232bd181-e2ca-3b10-b390-d882a9d6cd18.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30286 IP address blocks: 199.101.156.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:b3:ad:dc:3d:6e:05:64:5d:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cd5268cf-8231-4a70-89ad-a09803caa3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:27:af:3e:01:51:2d:0c:d4:c3:31:44:b6:40: e7:2c:7f:06:a7:6f:38:d5:0e:a9:99:af:d9:56:0b: 36:35:30:78:81:b6:9c:a5:27:12:73:ce:d0:13:d1: 98:96:dd:25:7e:23:f7:81:e7:94:7b:63:4c:90:f9: d3:c5:9e:23:94:60:90:0d:40:c4:58:6f:a9:79:f8: e9:de:01:d1:49:6b:d8:ad:62:8e:58:70:b1:d1:85: dc:4e:33:cf:17:ae:1b:2b:9c:b2:41:ce:3e:b3:21: 22:6f:56:35:db:48:c7:20:20:f1:1c:9f:3c:8a:95: 1c:85:d5:a1:02:64:01:87:99:1b:b6:bd:b4:f0:bc: 23:03:09:10:9e:01:b6:df:84:fb:03:c2:e3:6e:f2: 85:04:ba:96:84:a7:9d:b4:73:82:4d:ad:ee:99:55: d8:07:d3:c1:24:df:78:70:73:df:34:00:a0:01:61: 4b:59:72:cc:04:95:03:98:54:3f:28:78:4d:b6:35: 7d:76:16:a9:86:e8:33:b3:a9:d1:2b:cb:1b:01:68: c9:4c:34:70:d6:d3:9b:9b:c2:f1:e7:86:55:24:d7: 00:a5:c1:f4:66:12:bc:bd:f7:0e:10:a1:1e:e5:bf: 45:ec:ba:fd:67:8a:ba:69:2e:ff:e9:2d:f7:cb:2b: 04:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AB:B5:04:1A:DC:8F:7E:72:6F:04:9D:4C:E3:26:05:FF:CC:B8:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/232bd181-e2ca-3b10-b390-d882a9d6cd18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl X509v3 Authority Key Identifier: keyid:3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer sbgp-ipAddrBlock: critical IPv4: 199.101.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d8:69:63:fd:d2:c9:65:87:d5:4f:38:21:92:24:34:5f:1e: 72:11:d7:e3:79:db:4d:71:64:e1:2f:1a:af:cf:96:5b:da:5c: 6f:ca:fb:e8:03:9b:ae:da:e8:af:c7:4a:88:1d:ed:5d:c2:80: 7c:a2:ee:1e:8f:29:96:29:82:6a:7b:ad:36:31:f9:ba:92:93: 58:cc:a7:c9:09:96:be:bd:bf:ec:62:c7:f6:99:d6:59:2a:71: 47:4e:86:e6:fd:03:32:5e:48:2b:5b:c9:57:7b:fb:87:a6:ce: 8d:96:1c:3e:47:ad:58:a8:0c:30:23:83:f5:15:fe:19:1a:a9: a5:69:bf:81:9f:75:e1:8a:ac:93:76:9b:3b:28:96:74:7b:66: 3d:e9:2c:30:b4:04:9d:b6:22:e4:f7:b5:1f:ef:54:4d:01:c7: e4:92:e2:a3:9a:7a:e9:d6:7e:f9:e1:5b:56:d8:a2:b2:f5:23: 91:31:0a:f8:e8:9a:67:b8:2b:de:cc:b9:a0:c7:65:9a:29:ce: 9d:9e:59:1b:73:03:c2:a2:6b:22:33:fd:d6:4e:9e:86:2a:85: 08:b7:9e:73:fc:df:09:17:b3:61:fe:73:63:f3:e5:77:5f:5e: 92:d9:6d:31:7c:34:46:29:da:fd:35:e8:a9:a1:30:b2:ac:7a: 79:2b:b2:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niLOt3D1uBWRdZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFlMjItMzQ5Yzc1MTk1 ZjY1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2Q1MjY4Y2YtODIzMS00YTcwLTg5YWQtYTA5ODAzY2FhM2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yevPgFRLQzUwzFEtkDnLH8Gp2841Q6pma/Z Vgs2NTB4gbacpScSc87QE9GYlt0lfiP3geeUe2NMkPnTxZ4jlGCQDUDEWG+pefjp 3gHRSWvYrWKOWHCx0YXcTjPPF64bK5yyQc4+syEib1Y120jHICDxHJ88ipUchdWh AmQBh5kbtr208LwjAwkQngG234T7A8LjbvKFBLqWhKedtHOCTa3umVXYB9PBJN94 cHPfNACgAWFLWXLMBJUDmFQ/KHhNtjV9dhaphugzs6nRK8sbAWjJTDRw1tObm8Lx 54ZVJNcApcH0ZhK8vfcOEKEe5b9F7Lr9Z4q6aS7/6S33yysEgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6rtQQa3I9+cm8EnUzjJgX/zLiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYjlm M2RjNS00ZDgyLTRkODItYWUyMi0zNDljNzUxOTVmNjUvMjMyYmQxODEtZTJjYS0z YjEwLWIzOTAtZDg4MmE5ZDZjZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFl MjItMzQ5Yzc1MTk1ZjY1L2NiOWYzZGM1LTRkODItNGQ4Mi1hZTIyLTM0OWM3NTE5 NWY2NS5jcmwwHwYDVR0jBBgwFoAUO5u6/Gw878L1iqiluojFFhAupTAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYjlmM2RjNS00ZDgyLTRkODItYWUyMi0zNDlj NzUxOTVmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx2WcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTYaWP90sllh9VPOCGSJDRfHnIR1+N5201xZOEvGq/PllvaXG/K++gD m67a6K/HSogd7V3CgHyi7h6PKZYpgmp7rTYx+bqSk1jMp8kJlr69v+xix/aZ1lkq cUdOhub9AzJeSCtbyVd7+4emzo2WHD5HrVioDDAjg/UV/hkaqaVpv4GfdeGKrJN2 mzsolnR7Zj3pLDC0BJ22IuT3tR/vVE0Bx+SS4qOaeunWfvnhW1bYorL1I5ExCvjo mme4K97MuaDHZZopzp2eWRtzA8KiayIz/dZOnoYqhQi3nnP83wkXs2H+c2Pz5Xdf XpLZbTF8NEYp2v016KmhMLKsenkrsmY= -----END CERTIFICATE-----Generated at Sat Sep 5 03:17:46 2026 by rpki-client