$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/5ec52ca6-8439-30c4-878a-2b5009e9008a.roa File: 5ec52ca6-8439-30c4-878a-2b5009e9008a.roa (raw, json) Hash identifier: 7+m0O9z3LGFubf1j4brCrIB3wZfjDdG1RbXxE1lZ+Ak= Subject key identifier: E7:EB:B9:43:9B:7A:E5:6D:8D:AC:85:26:88:F6:2B:CB:8B:13:44:3A Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584EC7A1E50C6B13F1621D86CBC0 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/5ec52ca6-8439-30c4-878a-2b5009e9008a.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 13511 IP address blocks: 192.155.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:e5:0c:6b:13:f1:62:1d:86:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=89a1e935-af5f-45b5-b8c9-b9e05991bddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:01:7a:c5:72:dd:70:05:bb:c3:c3:e0:6d:86: a6:3e:8b:79:9b:1b:ba:f5:fd:51:7c:2b:ea:8d:b0: 0e:8a:21:02:36:1c:f2:53:61:99:b8:4b:48:a6:05: 38:9d:dc:43:ab:97:20:3c:e4:10:ac:a7:ab:b7:fb: da:f6:c4:94:8b:e9:4e:04:9e:3c:99:52:19:ed:d1: af:cb:db:f8:05:aa:96:09:ec:77:d9:46:20:f0:9c: 3a:df:00:45:00:48:f4:d7:dc:16:7e:07:bf:86:8a: 69:90:e1:65:04:37:61:0f:ba:08:c3:3c:0c:f0:cd: df:2c:98:9c:32:63:92:c9:77:e8:4e:4d:6b:6b:1d: 84:e0:92:f3:e0:95:77:5a:e9:fa:ab:32:b3:67:8a: 2b:2f:30:05:40:fb:1d:42:68:6e:37:d0:c3:b1:e8: a5:76:9a:b2:e2:de:51:86:e3:d3:58:d5:03:3d:55: a5:99:23:5a:cc:b1:66:10:0e:6b:32:8c:ac:a2:e6: e3:cd:de:2c:fb:3d:47:68:9b:87:3b:4e:ac:37:43: 78:29:ae:8a:90:64:07:6d:1d:26:a7:3e:c0:c2:15: cb:65:3a:52:68:d8:38:94:e3:dd:99:cb:0b:78:c3: d4:1d:19:f8:6f:35:60:8c:98:2a:ac:71:c1:27:55: 10:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EB:B9:43:9B:7A:E5:6D:8D:AC:85:26:88:F6:2B:CB:8B:13:44:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/5ec52ca6-8439-30c4-878a-2b5009e9008a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:10:c5:21:d7:92:ff:72:a8:e2:44:9c:47:85:33:a3:7a:0f: c9:ce:bc:de:54:01:a4:1b:ef:d1:0e:66:df:70:34:6b:8b:4a: b8:b6:2a:fd:ba:03:96:8e:ef:49:cd:4e:72:c4:85:b0:ad:29: 7d:de:7f:5f:d7:95:1a:2a:08:07:22:b0:59:41:3b:89:85:a0: 41:e3:aa:a3:86:3d:7e:5c:c7:9a:6e:59:88:a5:53:af:88:d8: 20:fd:28:c0:57:67:97:e1:67:6b:04:11:8c:02:b9:b1:02:34: 02:57:e9:b3:69:b1:dd:ee:45:e4:6b:a8:d9:85:fe:41:35:0b: 08:02:c8:fa:ba:77:2e:e5:1a:09:77:9d:eb:12:db:d9:6f:0c: 44:c2:b8:32:55:77:40:cc:55:d7:0f:96:52:f6:70:59:7e:f8: b8:d5:2d:10:17:d8:73:60:1d:3e:a5:ba:97:7f:c8:09:d5:b8: f1:54:18:7f:1b:8d:46:0e:00:08:78:9f:db:e8:6d:4b:76:c1: da:29:82:4a:bf:f5:9b:51:50:6e:f9:2b:b1:19:3f:99:b4:94: 56:56:a3:ef:7c:8a:08:9a:8d:22:5c:05:e0:7b:02:d1:e7:c6: a3:2f:f5:6b:7f:69:c8:8c:57:5f:cb:4d:12:47:79:14:a7:d1: 1d:0f:b6:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HoeUMaxPxYh2Gy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk ODlhMWU5MzUtYWY1Zi00NWI1LWI4YzktYjllMDU5OTFiZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwF6xXLdcAW7w8PgbYamPot5mxu69f1RfCvq jbAOiiECNhzyU2GZuEtIpgU4ndxDq5cgPOQQrKert/va9sSUi+lOBJ48mVIZ7dGv y9v4BaqWCex32UYg8Jw63wBFAEj019wWfge/hoppkOFlBDdhD7oIwzwM8M3fLJic MmOSyXfoTk1rax2E4JLz4JV3Wun6qzKzZ4orLzAFQPsdQmhuN9DDseildpqy4t5R huPTWNUDPVWlmSNazLFmEA5rMoysoubjzd4s+z1HaJuHO06sN0N4Ka6KkGQHbR0m pz7AwhXLZTpSaNg4lOPdmcsLeMPUHRn4bzVgjJgqrHHBJ1UQXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfruUObeuVtjayFJoj2K8uLE0Q6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvNWVjNTJjYTYtODQzOS0z MGM0LTg3OGEtMmI1MDA5ZTkwMDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJt6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkQxSHXkv9yqOJEnEeFM6N6D8nOvN5UAaQb79EOZt9wNGuLSri2Kv26 A5aO70nNTnLEhbCtKX3ef1/XlRoqCAcisFlBO4mFoEHjqqOGPX5cx5puWYilU6+I 2CD9KMBXZ5fhZ2sEEYwCubECNAJX6bNpsd3uReRrqNmF/kE1CwgCyPq6dy7lGgl3 nesS29lvDETCuDJVd0DMVdcPllL2cFl++LjVLRAX2HNgHT6lupd/yAnVuPFUGH8b jUYOAAh4n9vobUt2wdopgkq/9ZtRUG75K7EZP5m0lFZWo+98igiajSJcBeB7AtHn xqMv9Wt/aciMV1/LTRJHeRSn0R0PtiQ= -----END CERTIFICATE-----Generated at Tue Sep 22 06:32:25 2026 by rpki-client