$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/5ebea1cc-bd42-3443-870b-07ab0839d1db.roa File: 5ebea1cc-bd42-3443-870b-07ab0839d1db.roa (raw, json) Hash identifier: 0VZvu8i0i27Oql6erueApoFqoDAZrZmmZe3KaCtOE/4= Subject key identifier: 53:10:12:F9:2E:18:1A:2E:00:F1:64:B3:9A:E9:0B:16:10:41:8B:E5 Certificate issuer: /CN=74aa5b22-bda2-4141-8bdf-98a78696dd03 Certificate serial: 010D0C9F4328584F69FBACC6EEFD958F40662E80 Authority key identifier: DE:AA:7D:B1:45:23:40:13:01:BE:78:B7:DA:FF:CE:CF:CF:D4:F3:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/5ebea1cc-bd42-3443-870b-07ab0839d1db.roa Signing time: Tue 06 Oct 2026 16:42:25 +0000 ROA not before: Tue 06 Oct 2026 16:42:25 +0000 ROA not after: Mon 04 Jan 2027 17:42:25 +0000 asID: 400402 IP address blocks: 156.9.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:fb:ac:c6:ee:fd:95:8f:40:66:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74aa5b22-bda2-4141-8bdf-98a78696dd03 Validity Not Before: Oct 6 16:42:25 2026 GMT Not After : Jan 4 17:42:25 2027 GMT Subject: CN=c0316221-15ae-4b38-96b7-0177cd49ee12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:67:83:49:c0:ed:ea:e4:c9:c5:13:a6:88:68: 6d:95:c7:0c:1f:03:4c:15:d4:c6:6b:eb:59:6f:85: e0:a0:0d:30:a8:5e:1c:09:12:1b:5e:0e:1d:d6:d1: 8c:63:fc:22:42:fa:55:19:a8:71:c4:45:d3:eb:b0: 76:87:4e:ec:ba:b4:ed:1f:75:25:8c:a5:84:95:90: 53:4f:f3:d1:d1:fd:f3:37:d2:6c:60:49:d9:21:5a: c3:33:2d:19:6a:09:3e:5c:6d:a0:24:90:de:33:87: a4:76:19:64:f2:89:f7:9b:d3:35:24:0f:8e:dd:41: 62:0f:92:94:7e:4b:5f:e4:bb:04:6e:a0:f4:57:be: 3f:f8:1e:71:81:f7:36:eb:1f:32:98:74:99:87:c3: f9:e0:52:fa:1e:23:3c:0c:ae:90:36:5d:a4:57:07: 81:9c:3f:b9:75:c9:67:54:84:52:58:da:fc:3b:a7: 24:23:5f:13:fe:38:8b:87:e0:c5:db:7e:6b:f4:4c: e3:2c:31:07:f3:20:20:4e:96:eb:4a:14:5e:ff:ae: 3a:0e:2d:e0:38:33:af:3b:22:30:29:3f:81:17:e5: fb:50:7e:ac:ab:07:fc:74:21:f1:84:a4:96:b2:04: 18:3b:fb:93:91:3a:d7:ce:da:c1:d9:f6:48:1c:c3: a7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:10:12:F9:2E:18:1A:2E:00:F1:64:B3:9A:E9:0B:16:10:41:8B:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/5ebea1cc-bd42-3443-870b-07ab0839d1db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.crl X509v3 Authority Key Identifier: keyid:DE:AA:7D:B1:45:23:40:13:01:BE:78:B7:DA:FF:CE:CF:CF:D4:F3:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer sbgp-ipAddrBlock: critical IPv4: 156.9.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:6d:bc:b4:b5:cf:1b:86:5f:17:2c:e0:70:82:9e:04:fb:f5: 8c:1b:a5:d4:7d:b6:a7:5a:00:f7:9c:72:7a:f5:9a:3a:a8:50: a9:99:cf:c6:a9:6a:5e:83:35:dd:55:3b:a3:d7:ba:ee:a8:9a: 8b:91:57:bd:34:f6:c0:d9:1a:29:f6:fb:34:84:76:8b:63:08: f5:67:8b:35:41:61:ba:6d:eb:b6:1a:4a:19:43:d8:23:78:03: 01:2e:55:47:58:3e:ae:43:48:37:ee:a1:5f:58:0f:3b:24:b3: 98:47:de:12:6c:3b:2b:a9:ca:60:32:7e:87:a4:df:ca:0d:4b: 32:37:fa:8a:84:0c:30:e6:3e:b6:80:6c:08:97:5b:6d:1f:13: e4:bf:43:50:29:92:a0:c3:ba:20:b5:48:44:82:95:ee:11:b6: c9:02:4b:fd:c6:13:a6:fe:56:de:a2:00:15:fb:61:b2:f6:ef: 05:ff:5d:95:75:40:31:90:4b:bd:05:da:15:27:0f:06:51:1c: f4:b1:c4:de:0a:93:e6:16:20:0a:0e:aa:12:39:36:6d:2d:61: 52:db:5c:1a:54:7f:1f:a2:75:7e:5d:a8:24:13:2f:65:4e:2a: 7f:c7:c9:4e:fe:4d:67:36:d8:59:0f:34:4a:ca:56:4f:b2:d1: e0:99:88:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9p+6zG7v2Vj0BmLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhYTViMjItYmRhMi00MTQxLThiZGYtOThhNzg2OTZk ZDAzMB4XDTI2MTAwNjE2NDIyNVoXDTI3MDEwNDE3NDIyNVowLzEtMCsGA1UEAxMk YzAzMTYyMjEtMTVhZS00YjM4LTk2YjctMDE3N2NkNDllZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmeDScDt6uTJxROmiGhtlccMHwNMFdTGa+tZ b4XgoA0wqF4cCRIbXg4d1tGMY/wiQvpVGahxxEXT67B2h07surTtH3UljKWElZBT T/PR0f3zN9JsYEnZIVrDMy0Zagk+XG2gJJDeM4ekdhlk8on3m9M1JA+O3UFiD5KU fktf5LsEbqD0V74/+B5xgfc26x8ymHSZh8P54FL6HiM8DK6QNl2kVweBnD+5dcln VIRSWNr8O6ckI18T/jiLh+DF235r9EzjLDEH8yAgTpbrShRe/646Di3gODOvOyIw KT+BF+X7UH6sqwf8dCHxhKSWsgQYO/uTkTrXztrB2fZIHMOnRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMQEvkuGBouAPFks5rpCxYQQYvlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NGFh NWIyMi1iZGEyLTQxNDEtOGJkZi05OGE3ODY5NmRkMDMvNWViZWExY2MtYmQ0Mi0z NDQzLTg3MGItMDdhYjA4MzlkMWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzRhYTViMjItYmRhMi00MTQxLThi ZGYtOThhNzg2OTZkZDAzLzc0YWE1YjIyLWJkYTItNDE0MS04YmRmLTk4YTc4Njk2 ZGQwMy5jcmwwHwYDVR0jBBgwFoAU3qp9sUUjQBMBvni32v/Oz8/U868wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NGFhNWIyMi1iZGEyLTQxNDEtOGJkZi05OGE3 ODY5NmRkMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnAkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhtvLS1zxuGXxcs4HCCngT79YwbpdR9tqdaAPeccnr1mjqoUKmZz8ap al6DNd1VO6PXuu6omouRV7009sDZGin2+zSEdotjCPVnizVBYbpt67YaShlD2CN4 AwEuVUdYPq5DSDfuoV9YDzsks5hH3hJsOyupymAyfoek38oNSzI3+oqEDDDmPraA bAiXW20fE+S/Q1ApkqDDuiC1SESCle4RtskCS/3GE6b+Vt6iABX7YbL27wX/XZV1 QDGQS70F2hUnDwZRHPSxxN4Kk+YWIAoOqhI5Nm0tYVLbXBpUfx+idX5dqCQTL2VO Kn/HyU7+TWc22FkPNErKVk+y0eCZiFI= -----END CERTIFICATE-----Generated at Fri Oct 9 17:38:58 2026 by rpki-client