$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/457189b9-d3a9-3217-8a43-0445470cc4ed.roa File: 457189b9-d3a9-3217-8a43-0445470cc4ed.roa (raw, json) Hash identifier: U0nL6y61wohulpFLqmb8BMhI4ZrZk8jcoWUxeWEYae8= Subject key identifier: 36:E4:BC:31:3F:01:8A:1F:AF:0F:A5:B8:A1:AC:A6:A8:D3:2F:3A:3E Certificate issuer: /CN=8cb64613-5b0d-4968-b601-e2f2cf053f18 Certificate serial: 010D0C9F4328584F2D87C54519EC92634F73A900 Authority key identifier: 98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/457189b9-d3a9-3217-8a43-0445470cc4ed.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 271 IP address blocks: 192.146.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:c5:45:19:ec:92:63:4f:73:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cb64613-5b0d-4968-b601-e2f2cf053f18 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=4c6244ba-8e92-4ff4-9ff8-82089a02898c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:69:d4:15:ea:a7:50:5f:25:64:c5:8e:c1:a7: 11:87:33:a7:32:2c:3d:a9:25:08:c2:67:bd:cc:56: 27:de:18:80:d2:30:09:80:ee:de:0f:03:2b:04:4e: 28:81:2e:00:87:3a:10:cd:a1:de:60:54:d8:aa:a1: 4a:f1:a8:93:2c:74:b9:ce:b9:e0:a4:ab:de:83:22: d3:2e:3d:2b:92:15:09:1a:96:9f:f8:a6:2a:8c:9b: 6f:7b:68:8e:81:0c:11:fb:6e:0d:e6:36:97:7e:0b: 4b:a7:bd:28:90:1e:f8:61:9d:36:a9:99:2b:f2:af: 5a:19:b6:dd:87:2a:3a:41:2d:89:9e:ca:50:c1:17: 0c:d7:4b:04:c8:59:e4:0f:0c:57:d1:ae:1d:64:6d: 0a:00:9d:cb:5f:d4:33:43:5f:a4:3c:b7:96:0a:0c: 29:e7:2c:3a:81:c3:1a:9c:92:95:da:0b:45:9b:27: 14:4d:f2:c5:d7:05:8c:67:c0:68:13:ec:47:14:3f: 28:b2:5e:2f:f0:ec:a1:ce:04:4e:02:8f:58:d6:8d: f2:3e:8a:ed:3a:a9:e8:c8:db:6d:0f:62:29:60:f1: b8:44:bf:5c:4f:90:f8:96:fe:e5:c9:17:b9:c1:c4: ce:04:10:9b:2d:fc:04:3e:ca:af:39:37:58:f9:80: cb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E4:BC:31:3F:01:8A:1F:AF:0F:A5:B8:A1:AC:A6:A8:D3:2F:3A:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/457189b9-d3a9-3217-8a43-0445470cc4ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18/8cb64613-5b0d-4968-b601-e2f2cf053f18.crl X509v3 Authority Key Identifier: keyid:98:55:DD:4D:9C:C9:A0:81:5E:A9:31:0C:C7:BF:22:6B:16:7D:E9:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8cb64613-5b0d-4968-b601-e2f2cf053f18.cer sbgp-ipAddrBlock: critical IPv4: 192.146.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:1f:2c:8f:71:62:ed:f0:86:4d:e4:90:54:dc:b9:b3:ed:11: b3:27:59:a0:b0:1e:f2:81:6a:24:ee:16:f4:dc:71:67:d8:76: 1e:31:cf:5b:29:b7:a1:92:9e:05:d5:16:ae:95:57:18:c5:c3: 26:ab:d0:9f:d6:b7:ac:5b:0f:69:72:59:cf:a4:08:13:2e:5c: 23:c7:2c:fe:5f:7e:67:83:64:e6:27:09:5d:47:76:d6:11:30: 02:20:fd:ce:65:09:52:57:69:7a:92:4b:af:5c:ec:75:0c:f5: 80:d4:46:e9:69:2a:da:52:28:53:b0:e7:92:d0:72:af:9f:9d: 31:fa:44:5d:94:87:5b:17:4c:b5:3d:ca:6e:4a:ca:90:b3:60: 18:93:8b:54:d1:54:9c:83:2c:ef:c9:31:60:5e:7e:1f:3c:84: 3e:75:fa:1b:33:19:b8:7e:a6:1f:35:76:52:97:ec:44:25:05: 58:c3:07:62:92:3c:16:6f:25:b7:30:e1:ba:b1:2e:41:49:c2: 01:5a:53:ae:c0:64:1b:39:18:48:3a:fb:4c:ea:42:18:41:d7: e2:35:e7:d3:4c:f3:c9:3e:5b:74:5d:77:15:97:97:5a:2e:a0: a5:d0:68:dd:e4:50:3b:fc:3e:42:bd:2d:97:2c:96:3f:c2:dc: 5a:6c:99:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th8VFGeySY09zqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNiNjQ2MTMtNWIwZC00OTY4LWI2MDEtZTJmMmNmMDUz ZjE4MB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk NGM2MjQ0YmEtOGU5Mi00ZmY0LTlmZjgtODIwODlhMDI4OThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmnUFeqnUF8lZMWOwacRhzOnMiw9qSUIwme9 zFYn3hiA0jAJgO7eDwMrBE4ogS4AhzoQzaHeYFTYqqFK8aiTLHS5zrngpKvegyLT Lj0rkhUJGpaf+KYqjJtve2iOgQwR+24N5jaXfgtLp70okB74YZ02qZkr8q9aGbbd hyo6QS2JnspQwRcM10sEyFnkDwxX0a4dZG0KAJ3LX9QzQ1+kPLeWCgwp5yw6gcMa nJKV2gtFmycUTfLF1wWMZ8BoE+xHFD8osl4v8OyhzgROAo9Y1o3yPortOqnoyNtt D2IpYPG4RL9cT5D4lv7lyRe5wcTOBBCbLfwEPsqvOTdY+YDLTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbkvDE/AYofrw+luKGspqjTLzo+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84Y2I2 NDYxMy01YjBkLTQ5NjgtYjYwMS1lMmYyY2YwNTNmMTgvNDU3MTg5YjktZDNhOS0z MjE3LThhNDMtMDQ0NTQ3MGNjNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGNiNjQ2MTMtNWIwZC00OTY4LWI2 MDEtZTJmMmNmMDUzZjE4LzhjYjY0NjEzLTViMGQtNDk2OC1iNjAxLWUyZjJjZjA1 M2YxOC5jcmwwHwYDVR0jBBgwFoAUmFXdTZzJoIFeqTEMx78iaxZ96QgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84Y2I2NDYxMy01YjBkLTQ5NjgtYjYwMS1lMmYy Y2YwNTNmMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgfLI9xYu3whk3kkFTcubPtEbMnWaCwHvKBaiTuFvTccWfYdh4xz1sp t6GSngXVFq6VVxjFwyar0J/Wt6xbD2lyWc+kCBMuXCPHLP5ffmeDZOYnCV1HdtYR MAIg/c5lCVJXaXqSS69c7HUM9YDURulpKtpSKFOw55LQcq+fnTH6RF2Uh1sXTLU9 ym5KypCzYBiTi1TRVJyDLO/JMWBefh88hD51+hszGbh+ph81dlKX7EQlBVjDB2KS PBZvJbcw4bqxLkFJwgFaU67AZBs5GEg6+0zqQhhB1+I159NM88k+W3RddxWXl1ou oKXQaN3kUDv8PkK9LZcslj/C3FpsmZE= -----END CERTIFICATE-----Generated at Tue Sep 22 17:47:20 2026 by rpki-client