$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a8c17ec-703f-3b72-8800-f5f309613583.roa File: 2a8c17ec-703f-3b72-8800-f5f309613583.roa (raw, json) Hash identifier: x7plEMASTtWsR1jv+akDWpEJnvne9BWrCdXbNXU6f2Y= Subject key identifier: 90:47:F3:6A:D3:ED:38:9B:58:D5:B4:E9:DC:9C:E6:BE:62:B9:FA:4F Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584ED167203BE00E811943DD5700 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a8c17ec-703f-3b72-8800-f5f309613583.roa Signing time: Thu 13 Aug 2026 01:00:11 +0000 ROA not before: Thu 13 Aug 2026 01:00:11 +0000 ROA not after: Wed 11 Nov 2026 02:00:11 +0000 asID: 922 IP address blocks: 155.121.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d1:67:20:3b:e0:0e:81:19:43:dd:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Aug 13 01:00:11 2026 GMT Not After : Nov 11 02:00:11 2026 GMT Subject: CN=43c40882-29a5-45fb-a31e-81d4f8d64910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:77:55:dd:6f:5f:6b:fa:5f:00:84:27:f5:e1: 1c:51:68:1a:02:07:31:49:1f:64:8b:4d:26:8a:67: 5d:89:49:89:7f:f9:f3:a0:42:7e:07:48:1a:91:ee: e6:68:e1:d2:08:8d:eb:2e:70:3a:b4:6d:66:7a:af: 33:25:e3:d3:2f:4d:d5:ea:cf:8b:93:7d:8e:27:cd: 14:9f:d3:80:21:5e:41:f8:ea:ed:3a:c3:82:f5:08: 21:12:aa:fa:59:a5:79:fe:6c:80:0f:10:98:b3:20: be:c5:58:57:fc:12:7d:99:a9:3f:f2:f8:9b:97:3c: 9c:2a:61:f3:05:82:1d:13:30:bc:47:81:f7:a7:3a: 6a:fe:90:d2:c6:6b:25:d5:d7:17:f7:3c:46:50:df: 0f:9a:dc:c1:04:73:c3:58:f0:8c:eb:20:ca:7d:4f: 31:bd:c5:34:76:f8:a9:4b:68:2e:a1:dc:8b:a7:0a: 8c:c0:b0:d6:a0:fb:0b:fc:28:49:7e:00:f1:58:e6: dd:b7:68:48:8f:d0:62:9b:99:ff:ba:a6:d3:0b:50: 06:a3:e4:6e:05:9d:87:cf:ab:6c:59:4a:ff:1d:46: fc:9e:8d:fc:5a:18:bd:55:ac:ea:6b:5f:a4:c6:ea: b5:d4:02:0c:ea:f3:a7:72:6e:3f:a3:b8:4d:09:1d: 6a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:47:F3:6A:D3:ED:38:9B:58:D5:B4:E9:DC:9C:E6:BE:62:B9:FA:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a8c17ec-703f-3b72-8800-f5f309613583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 155.121.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:33:1b:96:0b:e2:0d:65:e9:4b:76:29:87:83:95:29:6f:61: ab:10:89:de:0e:54:01:46:26:87:51:7a:6f:48:ca:25:f9:8c: 98:44:a2:a0:bb:4b:86:94:0c:90:31:a9:ef:6c:70:af:da:cd: fe:92:c6:c1:07:80:b8:be:02:58:f8:5b:1b:b8:25:de:d9:b8: 8f:58:5a:df:25:41:67:cc:61:69:c2:cc:23:5e:d2:d9:6c:09: ee:09:89:1f:92:b2:47:51:3a:c7:69:bd:ca:27:a4:df:4c:62: 2c:b3:9b:8d:1e:65:7e:f7:63:0b:75:dd:90:77:8f:8e:ae:03: 6d:86:d7:bf:60:21:6f:01:cb:43:6a:a2:17:0f:1a:ee:c0:18: a2:23:5f:01:17:a1:1e:cf:cd:a7:d6:8e:ea:c4:33:66:a9:4d: a0:6f:6a:8b:90:81:0e:43:fc:d2:25:e7:e4:41:3b:ef:42:68: 8f:8c:93:ba:32:c5:d4:ac:d7:fc:77:b4:78:c0:32:4e:00:c7: c7:59:da:c8:cb:d9:85:8c:11:c6:09:8f:76:b0:28:5a:87:13: cd:36:cb:49:05:82:91:b9:80:11:d0:c8:03:aa:f2:9d:1c:2a: 0f:ff:9f:8e:6f:f2:91:5d:48:09:5d:af:20:d7:8e:00:aa:22: 01:59:0e:86 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE7RZyA74A6BGUPdVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI2MDgxMzAxMDAxMVoXDTI2MTExMTAyMDAxMVowLzEtMCsGA1UEAxMk NDNjNDA4ODItMjlhNS00NWZiLWEzMWUtODFkNGY4ZDY0OTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXdV3W9fa/pfAIQn9eEcUWgaAgcxSR9ki00m imddiUmJf/nzoEJ+B0gake7maOHSCI3rLnA6tG1meq8zJePTL03V6s+Lk32OJ80U n9OAIV5B+OrtOsOC9QghEqr6WaV5/myADxCYsyC+xVhX/BJ9mak/8viblzycKmHz BYIdEzC8R4H3pzpq/pDSxmsl1dcX9zxGUN8PmtzBBHPDWPCM6yDKfU8xvcU0dvip S2guodyLpwqMwLDWoPsL/ChJfgDxWObdt2hIj9Bim5n/uqbTC1AGo+RuBZ2Hz6ts WUr/HUb8no38Whi9Vazqa1+kxuq11AIM6vOncm4/o7hNCR1qBwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJBH82rT7TibWNW06dyc5r5iufpPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvMmE4YzE3ZWMtNzAzZi0z YjcyLTg4MDAtZjVmMzA5NjEzNTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAm3kwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEANTMblgviDWXpS3Yph4OVKW9hqxCJ3g5UAUYmh1F6b0jKJfmMmESioLtL hpQMkDGp72xwr9rN/pLGwQeAuL4CWPhbG7gl3tm4j1ha3yVBZ8xhacLMI17S2WwJ 7gmJH5KyR1E6x2m9yiek30xiLLObjR5lfvdjC3XdkHePjq4DbYbXv2AhbwHLQ2qi Fw8a7sAYoiNfARehHs/Np9aO6sQzZqlNoG9qi5CBDkP80iXn5EE770Joj4yTujLF 1KzX/He0eMAyTgDHx1nayMvZhYwRxgmPdrAoWocTzTbLSQWCkbmAEdDIA6rynRwq D/+fjm/ykV1ICV2vINeOAKoiAVkOhg== -----END CERTIFICATE-----Generated at Fri Aug 21 00:20:14 2026 by rpki-client