$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa File: 252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa (raw, json) Hash identifier: /pYZ+Yl4o4RqBxkqSBw2i9Q5SzrH7rK/yaI/EDNkiUk= Subject key identifier: 11:AE:FF:A0:BA:CA:3D:CB:40:E7:7D:F1:4B:4A:63:C3:FB:05:6A:F0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984FE10ECEEB707374DF880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 199.36.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:fe:10:ec:ee:b7:07:37:4d:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e8c0171d-49b3-4f1c-8561-e29331f23f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:18:ee:54:92:8a:f6:4c:1b:17:af:3a:45:cb: 0c:a5:2e:2b:b4:85:d6:18:4a:97:c0:18:7c:b7:bb: 37:82:33:a2:21:9d:3e:a0:60:3b:1a:fb:60:c2:9c: 48:b5:e1:5d:1b:d0:97:14:eb:fb:d2:8d:0c:e5:5c: 32:85:3d:cb:23:3b:2b:19:4c:8b:d7:99:90:25:c6: 06:77:65:b6:5d:e7:bb:6f:b3:a3:26:28:e6:33:bc: 6e:cc:c8:0f:ba:af:76:92:2a:2d:86:cc:33:3a:4c: 31:84:4a:c5:24:10:61:4a:02:03:d2:a9:ec:33:3d: df:61:20:2e:6a:0d:1e:96:fa:a5:9f:12:90:06:6e: 2e:68:44:b0:65:fa:3a:49:4b:8b:9f:0b:f5:f5:8f: af:26:ea:49:2f:12:bb:ba:e9:2d:6e:6a:c1:02:08: cb:86:51:78:d6:37:a1:f0:2b:7f:0d:34:56:c3:4e: 4a:be:ec:7c:48:6c:c0:92:e1:ce:4d:c3:93:68:af: 6c:cc:85:cb:be:7f:9d:8c:e6:18:bb:7b:1f:c0:68: 55:a7:ac:8e:46:4e:e0:cd:e9:0c:14:86:fc:b6:c9: be:19:bf:7f:73:de:8b:14:10:a3:a3:d1:d4:58:38: cc:cd:93:28:45:64:11:1c:80:64:11:98:08:5d:28: d4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AE:FF:A0:BA:CA:3D:CB:40:E7:7D:F1:4B:4A:63:C3:FB:05:6A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/252f3ae8-7aea-3989-8b62-f1bbe5c9c3d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 199.36.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:65:97:ce:aa:59:f1:c8:4f:59:00:4d:88:20:43:41:5e:0b: b8:ec:83:c0:9a:c3:a3:e4:65:e5:f7:55:74:e2:80:5f:74:4c: 1a:97:d8:f1:b2:84:e8:f1:39:77:2d:29:61:97:0d:29:9b:6c: 77:be:a4:07:f8:38:75:4d:3c:12:3a:76:b1:16:09:f5:c2:67: 83:93:74:75:d6:e9:ba:c2:be:7f:57:f3:f6:62:35:5c:51:f8: 31:74:e4:2b:65:51:b7:0c:fd:74:fe:e5:82:65:fe:52:46:43: 69:9f:a2:a0:d9:5f:f8:f9:b2:7e:46:7c:b4:53:33:31:b9:b3: 73:ef:04:04:87:12:fa:97:82:5a:0b:de:15:e7:e3:ec:58:b2: dc:83:9b:17:76:a2:86:46:10:c6:ac:bd:72:75:98:71:be:4e: 8b:c6:52:b3:49:55:06:e7:7a:2e:17:c6:ae:30:c8:91:e6:12: 35:c5:eb:7e:2c:e9:5d:d3:41:68:e0:54:8a:ad:5f:48:3f:74: b5:32:3f:e5:9c:f5:35:6b:6c:03:e7:e5:8a:cc:22:68:4b:91: 3a:68:be:70:fe:3c:9a:cf:0c:2a:aa:de:a4:f5:36:76:21:02: b8:82:bd:d9:09:c0:0f:13:25:85:9a:c5:e4:57:05:73:9e:43: 36:4f:8b:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhP4Q7O63BzdN+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZThjMDE3MWQtNDliMy00ZjFjLTg1NjEtZTI5MzMxZjIzZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBjuVJKK9kwbF686RcsMpS4rtIXWGEqXwBh8 t7s3gjOiIZ0+oGA7GvtgwpxIteFdG9CXFOv70o0M5VwyhT3LIzsrGUyL15mQJcYG d2W2Xee7b7OjJijmM7xuzMgPuq92kiothswzOkwxhErFJBBhSgID0qnsMz3fYSAu ag0elvqlnxKQBm4uaESwZfo6SUuLnwv19Y+vJupJLxK7uuktbmrBAgjLhlF41jeh 8Ct/DTRWw05Kvux8SGzAkuHOTcOTaK9szIXLvn+djOYYu3sfwGhVp6yORk7gzekM FIb8tsm+Gb9/c96LFBCjo9HUWDjMzZMoRWQRHIBkEZgIXSjUbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGu/6C6yj3LQOd98UtKY8P7BWrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjUyZjNhZTgtN2FlYS0z OTg5LThiNjItZjFiYmU1YzljM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJll86qWfHIT1kATYggQ0FeC7jsg8Caw6PkZeX3VXTigF90TBqX2PGy hOjxOXctKWGXDSmbbHe+pAf4OHVNPBI6drEWCfXCZ4OTdHXW6brCvn9X8/ZiNVxR +DF05CtlUbcM/XT+5YJl/lJGQ2mfoqDZX/j5sn5GfLRTMzG5s3PvBASHEvqXgloL 3hXn4+xYstyDmxd2ooZGEMasvXJ1mHG+TovGUrNJVQbnei4Xxq4wyJHmEjXF634s 6V3TQWjgVIqtX0g/dLUyP+Wc9TVrbAPn5YrMImhLkTpovnD+PJrPDCqq3qT1NnYh AriCvdkJwA8TJYWaxeRXBXOeQzZPi0o= -----END CERTIFICATE-----Generated at Fri Sep 25 14:57:35 2026 by rpki-client