$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/9f48b662-32d4-39d1-86c7-bb4f4f6ae937.roa File: 9f48b662-32d4-39d1-86c7-bb4f4f6ae937.roa (raw, json) Hash identifier: eW+AnSM+35BX+Vh/Q84eEoFfxslw1DsC+Wb3mKliAeo= Subject key identifier: DF:54:1A:0D:C5:B8:73:79:F4:3C:B8:7E:62:F5:8E:F9:52:1D:66:CE Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584EC7A1C47B762D47EF50492F00 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/9f48b662-32d4-39d1-86c7-bb4f4f6ae937.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 13511 IP address blocks: 192.155.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:c4:7b:76:2d:47:ef:50:49:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=3c00827f-f0df-47ff-8b1a-2f306581bf40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:57:59:f6:2d:ce:fd:46:4b:c8:7f:9d:90: 48:c6:c6:ea:9a:ad:d9:62:71:a7:58:31:c9:11:48: e4:18:4b:13:bf:cd:d7:b9:23:5d:ce:41:91:d2:99: 9d:ae:27:01:c8:8c:7c:0b:42:55:dc:bc:8c:0f:cd: 5e:69:46:b2:53:c1:32:5b:6b:ab:14:2f:a1:2f:58: f2:a3:5b:ec:ed:43:1e:d7:62:06:e9:f7:38:c1:63: f3:51:da:4f:53:67:3b:56:78:12:01:45:1c:1f:e0: 59:40:58:47:19:c1:af:48:54:2c:ed:42:14:17:d2: f3:a7:b5:e0:0d:b3:24:83:91:68:d5:6f:35:c0:ab: bd:fd:08:89:f3:5c:9f:6a:e6:de:73:41:7a:50:f3: 85:33:cf:05:4d:9a:b8:6a:11:4f:bf:a8:3b:db:c6: 64:b8:5b:d0:cb:7e:0e:26:fc:e0:da:07:62:cf:6f: 54:47:bf:bc:a6:7c:4f:40:2b:0d:3d:da:46:b1:f6: 45:61:cb:fc:15:ff:bc:ad:f1:f9:50:fb:d6:f7:da: 77:3e:ea:37:03:be:53:6b:df:f0:17:30:de:a3:51: eb:16:b0:b5:79:4a:26:c3:dc:60:4b:6a:3b:ce:6f: 02:a9:08:7f:49:dc:38:ab:bc:aa:07:3a:ef:c6:cd: 5b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:54:1A:0D:C5:B8:73:79:F4:3C:B8:7E:62:F5:8E:F9:52:1D:66:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/9f48b662-32d4-39d1-86c7-bb4f4f6ae937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c4:fd:a7:38:aa:53:ff:92:0b:47:f6:98:f5:47:2d:0f:6e: dd:3d:b3:39:87:72:76:7f:67:ff:af:35:a3:63:2f:67:33:ca: 4c:b2:b0:d4:36:f1:62:49:20:9a:57:b6:4b:f9:bb:ff:c9:f7: 67:99:47:94:82:b6:ae:9b:aa:c8:3d:70:3d:b5:bd:23:85:d1: 31:a8:de:bf:73:9d:69:09:41:1e:73:b2:f5:7f:3e:ea:5b:87: 1e:e7:14:5b:3c:04:28:47:fa:ae:05:01:0b:08:96:14:cf:cc: f2:1f:99:e4:9b:68:0b:06:37:c8:1d:94:f1:3d:49:23:09:3d: b0:a6:40:47:d2:73:b3:5f:7f:53:d5:a1:ca:88:58:97:f2:3c: ec:b8:7e:90:40:04:ef:af:52:9d:0b:41:6a:53:85:56:19:c2: 94:21:6c:a9:35:26:b3:88:ce:fc:0c:08:64:35:6a:bc:69:7d: 32:fe:05:a2:06:1b:e5:7f:2c:dc:66:2c:13:db:ea:06:b7:8a: 31:0b:e8:e9:9c:6b:f5:3d:fd:e7:a2:7d:31:f6:69:95:e1:99: f2:a5:d9:50:66:8a:2d:4b:5a:52:91:95:71:63:d7:3b:a8:a7: 80:d9:04:90:f2:50:88:01:21:fb:f5:aa:f6:cf:5f:48:05:9b: 43:60:cb:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HocR7di1H71BJLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk M2MwMDgyN2YtZjBkZi00N2ZmLThiMWEtMmYzMDY1ODFiZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt61XWfYtzv1GS8h/nZBIxsbqmq3ZYnGnWDHJ EUjkGEsTv83XuSNdzkGR0pmdricByIx8C0JV3LyMD81eaUayU8EyW2urFC+hL1jy o1vs7UMe12IG6fc4wWPzUdpPU2c7VngSAUUcH+BZQFhHGcGvSFQs7UIUF9Lzp7Xg DbMkg5Fo1W81wKu9/QiJ81yfaubec0F6UPOFM88FTZq4ahFPv6g728ZkuFvQy34O Jvzg2gdiz29UR7+8pnxPQCsNPdpGsfZFYcv8Ff+8rfH5UPvW99p3Puo3A75Ta9/w FzDeo1HrFrC1eUomw9xgS2o7zm8CqQh/Sdw4q7yqBzrvxs1bwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9UGg3FuHN59Dy4fmL1jvlSHWbOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvOWY0OGI2NjItMzJkNC0z OWQxLTg2YzctYmI0ZjRmNmFlOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwJt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbE/ac4qlP/kgtH9pj1Ry0Pbt09szmHcnZ/Z/+vNaNjL2czykyysNQ2 8WJJIJpXtkv5u//J92eZR5SCtq6bqsg9cD21vSOF0TGo3r9znWkJQR5zsvV/Pupb hx7nFFs8BChH+q4FAQsIlhTPzPIfmeSbaAsGN8gdlPE9SSMJPbCmQEfSc7Nff1PV ocqIWJfyPOy4fpBABO+vUp0LQWpThVYZwpQhbKk1JrOIzvwMCGQ1arxpfTL+BaIG G+V/LNxmLBPb6ga3ijEL6Omca/U9/eeifTH2aZXhmfKl2VBmii1LWlKRlXFj1zuo p4DZBJDyUIgBIfv1qvbPX0gFm0Ngy3s= -----END CERTIFICATE-----Generated at Tue Sep 22 06:31:30 2026 by rpki-client