$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/f157d5a8-1f48-3fa1-a5c4-fd3f8b8206a4.roa File: f157d5a8-1f48-3fa1-a5c4-fd3f8b8206a4.roa (raw, json) Hash identifier: E8VZkFc4wjScfvYjNnQD9h1wv9r29vdVA4VTrAXVoOE= Subject key identifier: BF:80:11:0A:62:13:37:ED:B6:E8:56:91:7D:A8:E6:D2:A1:46:0A:72 Certificate issuer: /CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Certificate serial: 010D0C9F4328584F23C25DD55510FD9CBA5E9940 Authority key identifier: EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/f157d5a8-1f48-3fa1-a5c4-fd3f8b8206a4.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 198.160.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:5d:d5:55:10:fd:9c:ba:5e:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=55cb2dc6-ae79-4262-89a6-000f2f0603b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:41:72:9f:60:c0:c8:41:11:5b:ec:d1:02:b5: c9:11:22:fe:6d:9e:db:e7:f5:70:b5:5d:66:45:ba: bf:da:63:de:ec:1e:23:d2:40:b3:eb:9b:0d:49:85: 6d:da:14:e5:3d:a7:cc:f1:36:0c:1e:7e:a9:cd:87: c8:76:3c:3b:8c:15:0c:64:e4:11:3b:78:af:0f:6f: 4c:97:58:67:0d:f2:69:6d:56:f3:a3:f8:0b:63:d6: c2:2a:cd:cb:82:52:45:95:93:d2:d1:3c:ac:e0:8a: cb:36:07:a5:b1:d5:1a:4b:15:51:9f:ca:b4:f0:a2: bd:05:e2:b9:c8:8e:b1:4a:34:4a:ee:c1:6e:92:8c: ab:33:35:d7:06:5c:24:fb:8e:a5:f3:ed:1c:e6:d1: 72:f5:e8:81:fa:cf:9c:c0:54:86:71:c3:13:17:3a: c0:5b:64:67:a3:51:04:37:9a:cf:e6:69:3b:97:d2: c2:42:74:b6:a2:9a:f3:40:4b:67:ef:c5:fc:17:9b: ae:ff:1b:47:f8:ed:3c:5e:16:1d:23:d2:03:bd:e9: a0:31:2f:86:fc:60:2c:53:7b:44:20:98:84:01:52: 7d:16:dc:7b:e5:d8:8d:10:92:e8:40:1a:89:56:3e: ff:ac:42:be:a7:92:11:d6:94:f0:bc:1b:33:99:32: 8c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:80:11:0A:62:13:37:ED:B6:E8:56:91:7D:A8:E6:D2:A1:46:0A:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/f157d5a8-1f48-3fa1-a5c4-fd3f8b8206a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl X509v3 Authority Key Identifier: keyid:EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer sbgp-ipAddrBlock: critical IPv4: 198.160.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:87:7a:1a:02:60:e6:65:eb:86:ad:45:6f:47:e4:a1:ae:c9: 47:6b:6c:c8:d1:81:a9:37:34:0f:a6:0a:1a:45:d8:d9:cf:66: 3c:09:6e:03:b7:00:e0:3d:f6:c2:3d:df:3d:3d:f0:75:2a:47: da:6d:dc:ce:0d:78:df:d4:64:f0:53:96:25:63:f5:97:d1:dd: d6:91:02:c2:c0:69:f3:39:2f:69:1d:4f:ba:5b:95:6d:c7:b1: e2:9f:68:f5:6a:ca:19:38:23:26:80:cb:ef:bc:6e:48:a4:45: 60:be:d4:c0:be:49:a0:cc:59:94:5d:3c:6c:05:ed:5f:38:9a: b8:fb:48:35:d6:af:c4:ae:33:84:2d:2d:19:e6:1b:2a:e8:03: 3f:ac:75:99:9e:fe:fe:f9:d5:3e:a8:45:a9:43:cd:c0:1b:93: a2:48:65:89:68:69:ee:b1:0a:11:e1:38:59:72:b4:65:bd:95: c1:91:8d:59:8e:03:b9:9e:0d:09:38:3a:82:a4:18:cb:67:75: 48:cf:d9:25:30:d6:a7:93:19:52:d4:fa:d5:a6:fb:c0:6d:a7: 45:26:c1:1f:53:d8:d8:a6:03:02:4a:22:bb:49:b2:fb:d3:f9: 85:be:e4:bf:8f:a7:6e:ad:dc:ab:28:df:73:2b:e0:9f:c1:c0: f0:03:b5:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwl3VVRD9nLpemUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5MWItN2JlMTJkNTMz ZGE3MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk NTVjYjJkYzYtYWU3OS00MjYyLTg5YTYtMDAwZjJmMDYwM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10Fyn2DAyEERW+zRArXJESL+bZ7b5/VwtV1m Rbq/2mPe7B4j0kCz65sNSYVt2hTlPafM8TYMHn6pzYfIdjw7jBUMZOQRO3ivD29M l1hnDfJpbVbzo/gLY9bCKs3LglJFlZPS0Tys4IrLNgelsdUaSxVRn8q08KK9BeK5 yI6xSjRK7sFukoyrMzXXBlwk+46l8+0c5tFy9eiB+s+cwFSGccMTFzrAW2Rno1EE N5rP5mk7l9LCQnS2oprzQEtn78X8F5uu/xtH+O08XhYdI9IDvemgMS+G/GAsU3tE IJiEAVJ9Ftx75diNEJLoQBqJVj7/rEK+p5IR1pTwvBszmTKMFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+AEQpiEzfttuhWkX2o5tKhRgpyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZh OTVjYS1hYTQyLTRiODYtODkxYi03YmUxMmQ1MzNkYTcvZjE1N2Q1YTgtMWY0OC0z ZmExLWE1YzQtZmQzZjhiODIwNmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5 MWItN2JlMTJkNTMzZGE3L2I4ZmE5NWNhLWFhNDItNGI4Ni04OTFiLTdiZTEyZDUz M2RhNy5jcmwwHwYDVR0jBBgwFoAU7sOjJy3EvbNgvZp5M5mA/c2R1/0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZhOTVjYS1hYTQyLTRiODYtODkxYi03YmUx MmQ1MzNkYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqCPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqHehoCYOZl64atRW9H5KGuyUdrbMjRgak3NA+mChpF2NnPZjwJbgO3 AOA99sI93z098HUqR9pt3M4NeN/UZPBTliVj9ZfR3daRAsLAafM5L2kdT7pblW3H seKfaPVqyhk4IyaAy++8bkikRWC+1MC+SaDMWZRdPGwF7V84mrj7SDXWr8SuM4Qt LRnmGyroAz+sdZme/v751T6oRalDzcAbk6JIZYloae6xChHhOFlytGW9lcGRjVmO A7meDQk4OoKkGMtndUjP2SUw1qeTGVLU+tWm+8Btp0UmwR9T2NimAwJKIrtJsvvT +YW+5L+Pp26t3Kso33Mr4J/BwPADtU0= -----END CERTIFICATE-----Generated at Sat Oct 3 14:26:48 2026 by rpki-client