$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa File: 520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa (raw, json) Hash identifier: W2FrQYKqM3tjbYLWt0i/Fowmc1XVINBxh8/oMsH662Y= Subject key identifier: 56:85:5A:DF:59:BF:53:E8:F0:8B:1D:CF:F0:B3:48:73:3F:CC:95:4C Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584F03A77F0AA25AC2A026788CC0 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 13414 IP address blocks: 199.16.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:7f:0a:a2:5a:c2:a0:26:78:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=87dc7edc-57bd-4b75-bd4c-0f2a25c5f898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:21:5f:00:6a:e7:61:4e:e9:ac:04:ab:e0:3e: 68:4e:99:1a:2f:43:87:61:42:96:24:f0:d3:48:26: f7:dc:23:2f:ac:c2:c3:84:0a:0f:e3:2b:6c:a0:8a: 3a:5c:b6:33:05:3a:8d:73:9c:c6:50:e8:ed:90:ca: 54:e8:47:35:c0:97:60:0e:ee:5d:75:75:a4:ec:b7: 31:bf:13:5c:e5:c5:34:27:be:88:04:b5:82:5c:0d: be:c0:28:0b:b4:aa:94:1e:88:50:56:3a:08:2e:dd: 6d:33:f2:10:d9:3b:9d:68:10:8e:8c:e9:4e:92:96: e6:cf:a4:55:1a:9a:c4:1c:b8:9c:0d:bb:36:45:4e: 2f:d8:e0:22:d3:9a:4a:ee:be:54:e7:7b:d2:b7:ac: 3f:87:b2:f1:49:a4:f2:1a:0e:17:7e:9c:af:0f:3b: 0c:c7:a6:f7:62:a5:48:d3:51:7c:64:7f:94:c7:31: da:3e:64:42:33:a3:53:cb:68:d1:e5:bb:09:8a:02: 6a:bd:5e:8d:b7:76:f2:93:36:1c:d8:5a:04:da:3b: ca:49:26:58:14:79:f7:91:93:5b:dc:4d:2a:a0:6f: 3a:db:de:ef:62:96:f9:10:06:ec:0f:d5:21:3f:ab: f3:75:52:2f:19:31:bc:26:0e:61:38:6b:85:0f:cd: 16:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:85:5A:DF:59:BF:53:E8:F0:8B:1D:CF:F0:B3:48:73:3F:CC:95:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 199.16.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:99:a8:ab:55:ea:3d:8d:bb:71:27:43:c9:49:b6:76:ee:8a: 5b:16:19:30:c6:d7:34:a3:50:09:67:a3:68:80:5d:62:a8:a5: 7e:07:97:5e:36:f6:69:af:2d:8a:19:6b:81:a4:45:61:4f:10: f1:dd:06:d0:aa:3f:90:40:0f:fa:ee:f1:8f:71:4d:3f:17:5a: 0f:80:7b:99:80:28:a8:a3:72:7e:fa:21:34:5d:85:cb:1c:bf: 9b:c7:09:01:39:68:8e:9e:86:db:43:2c:78:43:ba:5b:eb:de: fc:4c:1b:cf:62:68:30:df:84:ce:f9:d7:d7:59:81:11:81:59: a0:ea:d2:67:f7:3d:57:de:b6:2c:46:81:b3:94:9e:66:85:7a: f1:51:00:c1:45:2e:8d:50:09:0d:cb:03:83:86:70:39:7e:06: 3e:a2:3a:a9:6d:e9:d3:55:99:7a:8f:53:ea:9e:a0:80:5e:6b: 0e:ab:8e:a5:d0:f2:83:0c:62:4f:c7:d4:8c:50:48:1a:7a:69: e9:21:b2:02:29:be:dc:1b:2b:64:fd:b6:04:ae:89:74:e2:a2: c1:b5:6b:b1:84:3d:2b:5b:7e:64:ac:08:e2:87:4d:f9:8f:b7: e6:bb:fc:cb:bc:b4:0d:6f:28:50:9b:13:63:5e:3b:66:7f:fc: 2a:21:33:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp38KolrCoCZ4jMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ODdkYzdlZGMtNTdiZC00Yjc1LWJkNGMtMGYyYTI1YzVmODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCFfAGrnYU7prASr4D5oTpkaL0OHYUKWJPDT SCb33CMvrMLDhAoP4ytsoIo6XLYzBTqNc5zGUOjtkMpU6Ec1wJdgDu5ddXWk7Lcx vxNc5cU0J76IBLWCXA2+wCgLtKqUHohQVjoILt1tM/IQ2TudaBCOjOlOkpbmz6RV GprEHLicDbs2RU4v2OAi05pK7r5U53vSt6w/h7LxSaTyGg4XfpyvDzsMx6b3YqVI 01F8ZH+UxzHaPmRCM6NTy2jR5bsJigJqvV6Nt3bykzYc2FoE2jvKSSZYFHn3kZNb 3E0qoG86297vYpb5EAbsD9UhP6vzdVIvGTG8Jg5hOGuFD80WHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaFWt9Zv1Po8Isdz/CzSHM/zJVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvNTIwYmM3ZWQtMjViMS0z ZDljLWIzYWYtNmEwM2U3MmE1MDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxxCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqZqKtV6j2Nu3EnQ8lJtnbuilsWGTDG1zSjUAlno2iAXWKopX4Hl142 9mmvLYoZa4GkRWFPEPHdBtCqP5BAD/ru8Y9xTT8XWg+Ae5mAKKijcn76ITRdhcsc v5vHCQE5aI6ehttDLHhDulvr3vxMG89iaDDfhM7519dZgRGBWaDq0mf3PVfetixG gbOUnmaFevFRAMFFLo1QCQ3LA4OGcDl+Bj6iOqlt6dNVmXqPU+qeoIBeaw6rjqXQ 8oMMYk/H1IxQSBp6aekhsgIpvtwbK2T9tgSuiXTiosG1a7GEPStbfmSsCOKHTfmP t+a7/Mu8tA1vKFCbE2NeO2Z//CohM4k= -----END CERTIFICATE-----Generated at Sat Sep 26 23:41:37 2026 by rpki-client