$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c/220270de-85bc-3656-ba5e-da67af91919a.roa File: 220270de-85bc-3656-ba5e-da67af91919a.roa (raw, json) Hash identifier: RvZVBhdgeHVUmC9yVEeuINlCeQI/74rsskiAlNwAvJ8= Subject key identifier: 00:D7:36:72:42:9A:BC:07:05:F5:13:EA:AB:2F:1B:79:64:47:35:36 Certificate issuer: /CN=0f35d963-b9d2-495c-92b1-408f555bc61c Certificate serial: 010D0C9F4328584F7C9B0D27FDA3124C889B2680 Authority key identifier: 5D:AE:6A:70:3E:F2:9E:DC:28:3D:46:58:48:69:4C:E1:70:A3:E2:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c/220270de-85bc-3656-ba5e-da67af91919a.roa Signing time: Tue 13 Oct 2026 08:48:06 +0000 ROA not before: Tue 13 Oct 2026 08:48:06 +0000 ROA not after: Mon 11 Jan 2027 09:48:06 +0000 asID: 9304 IP address blocks: 156.9.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c/0f35d963-b9d2-495c-92b1-408f555bc61c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c/0f35d963-b9d2-495c-92b1-408f555bc61c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7c:9b:0d:27:fd:a3:12:4c:88:9b:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f35d963-b9d2-495c-92b1-408f555bc61c Validity Not Before: Oct 13 08:48:06 2026 GMT Not After : Jan 11 09:48:06 2027 GMT Subject: CN=b074fa5b-fabb-4f66-ad26-b07b3fc26c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:9b:d0:41:0e:c4:3f:5b:19:10:2a:e5:11: af:af:7a:e4:77:d9:72:a5:65:e6:d5:72:91:c9:36: 71:2e:ee:1b:48:c4:fb:b3:0e:c8:c1:64:77:dd:39: c6:d1:a2:4f:55:de:53:72:37:c7:8c:28:6d:98:a2: 44:83:aa:bc:f2:43:2d:6f:fa:4a:a7:5f:69:b3:d2: a7:ba:90:00:ea:43:b4:e8:72:b1:85:ca:fc:31:0d: 7d:ed:88:4c:e7:ff:80:3f:62:22:68:e5:cb:0c:f6: f5:f6:03:d5:7a:74:13:54:eb:6c:18:2e:0b:cb:8e: 12:d7:f3:a3:9c:c7:c7:13:69:f1:f3:5c:52:99:61: c6:11:42:26:84:ec:ef:65:a7:cb:49:27:2d:d4:3e: 7b:bc:ab:d2:3b:19:45:0a:a4:0a:a8:ea:e8:07:ac: 79:64:be:52:16:e4:f2:c5:b7:06:7a:bd:26:9c:27: 07:fd:1c:3c:95:9f:76:05:6e:2f:0c:3a:c7:67:5d: 2d:89:74:ef:1d:85:fd:4a:e6:cf:b5:70:21:66:fd: cb:3d:c6:c0:92:0c:99:88:13:cf:f6:89:c7:f5:5b: 46:3c:d3:01:2d:bd:4e:40:42:eb:57:9c:83:ce:fd: a9:29:93:40:e0:b0:c0:c2:14:24:21:84:c5:b4:2e: e0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D7:36:72:42:9A:BC:07:05:F5:13:EA:AB:2F:1B:79:64:47:35:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c/220270de-85bc-3656-ba5e-da67af91919a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c/0f35d963-b9d2-495c-92b1-408f555bc61c.crl X509v3 Authority Key Identifier: keyid:5D:AE:6A:70:3E:F2:9E:DC:28:3D:46:58:48:69:4C:E1:70:A3:E2:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f35d963-b9d2-495c-92b1-408f555bc61c.cer sbgp-ipAddrBlock: critical IPv4: 156.9.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:17:d5:a9:80:2f:e4:8a:c1:16:b1:71:8b:47:50:21:47:e7: db:e2:29:52:a2:25:86:0a:27:4c:34:f8:bf:49:98:8f:c5:4d: 6c:9c:f0:0e:c6:31:d6:c3:9d:b8:dd:0b:08:1c:20:b6:dc:7e: e4:5b:eb:36:59:16:33:36:ac:db:70:81:fb:7d:fc:5a:a6:1c: 17:0b:4d:d6:fc:cd:04:37:4d:d9:b2:f0:93:15:de:9f:ea:87: 43:ba:60:63:bc:a9:52:06:3f:fa:cb:de:9f:9c:3d:bf:2d:8b: 80:8f:4a:85:42:30:41:e3:a0:83:a4:a5:4f:39:0d:85:e9:88: a5:ee:15:80:ac:c8:16:0f:48:24:77:5c:fe:84:fb:a7:05:31: f3:14:ba:c6:3e:8d:76:c3:e9:62:e7:82:41:95:1a:de:59:74: ce:0e:25:0b:6c:05:3f:4f:04:12:35:41:87:cc:26:b4:60:9c: c5:45:26:98:73:c6:0a:db:34:16:5a:56:99:6b:f7:eb:07:c1: 9d:f5:83:99:e4:e3:af:6d:1b:d3:d4:45:4a:10:a5:1c:6b:dd: cb:f2:06:7e:be:6b:69:93:f1:ca:97:f6:85:ff:cb:9b:10:33: 5f:41:ab:ee:e2:1f:ab:13:a9:e9:ce:a7:4b:3b:f3:dc:f7:70: 33:6f:d8:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE98mw0n/aMSTIibJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYzNWQ5NjMtYjlkMi00OTVjLTkyYjEtNDA4ZjU1NWJj NjFjMB4XDTI2MTAxMzA4NDgwNloXDTI3MDExMTA5NDgwNlowLzEtMCsGA1UEAxMk YjA3NGZhNWItZmFiYi00ZjY2LWFkMjYtYjA3YjNmYzI2Yzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1+b0EEOxD9bGRAq5RGvr3rkd9lypWXm1XKR yTZxLu4bSMT7sw7IwWR33TnG0aJPVd5TcjfHjChtmKJEg6q88kMtb/pKp19ps9Kn upAA6kO06HKxhcr8MQ197YhM5/+AP2IiaOXLDPb19gPVenQTVOtsGC4Ly44S1/Oj nMfHE2nx81xSmWHGEUImhOzvZafLSSct1D57vKvSOxlFCqQKqOroB6x5ZL5SFuTy xbcGer0mnCcH/Rw8lZ92BW4vDDrHZ10tiXTvHYX9SubPtXAhZv3LPcbAkgyZiBPP 9onH9VtGPNMBLb1OQELrV5yDzv2pKZNA4LDAwhQkIYTFtC7gxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADXNnJCmrwHBfUT6qsvG3lkRzU2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZjM1 ZDk2My1iOWQyLTQ5NWMtOTJiMS00MDhmNTU1YmM2MWMvMjIwMjcwZGUtODViYy0z NjU2LWJhNWUtZGE2N2FmOTE5MTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMGYzNWQ5NjMtYjlkMi00OTVjLTky YjEtNDA4ZjU1NWJjNjFjLzBmMzVkOTYzLWI5ZDItNDk1Yy05MmIxLTQwOGY1NTVi YzYxYy5jcmwwHwYDVR0jBBgwFoAUXa5qcD7yntwoPUZYSGlM4XCj4uAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8wZjM1ZDk2My1iOWQyLTQ5NWMtOTJiMS00MDhm NTU1YmM2MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnAm8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIX1amAL+SKwRaxcYtHUCFH59viKVKiJYYKJ0w0+L9JmI/FTWyc8A7G MdbDnbjdCwgcILbcfuRb6zZZFjM2rNtwgft9/FqmHBcLTdb8zQQ3Tdmy8JMV3p/q h0O6YGO8qVIGP/rL3p+cPb8ti4CPSoVCMEHjoIOkpU85DYXpiKXuFYCsyBYPSCR3 XP6E+6cFMfMUusY+jXbD6WLngkGVGt5ZdM4OJQtsBT9PBBI1QYfMJrRgnMVFJphz xgrbNBZaVplr9+sHwZ31g5nk469tG9PURUoQpRxr3cvyBn6+a2mT8cqX9oX/y5sQ M19Bq+7iH6sTqenOp0s789z3cDNv2J4= -----END CERTIFICATE-----Generated at Thu Oct 15 11:57:45 2026 by rpki-client