$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/a993a619-ee1e-3438-894d-7b8dfa52d09d.roa File: a993a619-ee1e-3438-894d-7b8dfa52d09d.roa (raw, json) Hash identifier: rayUu0IR5zUS7lCmtmfGf/q5AIX7EvPQ9nIulnI0Jcc= Subject key identifier: F3:06:52:2E:BD:09:58:C1:79:F4:D6:BE:2F:CB:43:04:C5:50:F6:53 Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584F4989D1CA30BF04592CB02900 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/a993a619-ee1e-3438-894d-7b8dfa52d09d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30387 IP address blocks: 156.40.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:d1:ca:30:bf:04:59:2c:b0:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a6d56566-45fa-4688-b503-a143c3f1022f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fe:bc:8b:8a:c6:08:fc:c5:42:97:46:34:12: 08:77:d3:dc:2c:6b:48:58:9a:02:63:22:a3:18:d4: 6e:ce:63:15:d8:0e:78:1e:a1:a1:88:12:22:5f:b8: 89:3e:04:7f:69:7f:dd:56:c2:fd:40:22:d4:a8:cd: f4:a4:2e:23:da:91:8d:c0:0d:b6:5e:ea:17:31:28: bc:9a:36:79:a9:82:ce:18:fd:8c:0c:2d:3e:de:81: ef:63:19:88:3f:8d:64:eb:60:9b:40:05:9b:a7:97: b8:31:46:2d:5e:f9:37:c9:67:6e:97:88:46:4a:21: 91:f4:25:58:18:60:50:d6:32:d7:57:2f:7e:73:0c: 62:78:69:f1:d0:8e:a2:0d:44:ba:90:d5:46:8c:da: 02:c8:3f:d1:3f:89:17:ee:45:f9:f9:f1:a2:f5:26: 8d:94:eb:fb:ae:a0:df:2e:3e:67:8b:69:a7:ba:9b: 2f:46:57:91:d4:2f:39:f5:c7:12:0f:7e:d1:57:bc: 4d:36:c3:62:ec:1c:9d:2b:e6:29:71:39:36:e9:45: 28:94:f1:26:7b:be:43:2f:33:9a:b6:c8:6e:cc:b3: af:39:aa:86:95:c3:5f:fd:24:40:f2:bc:28:37:a4: 22:c2:49:e4:30:a4:38:b4:42:bf:14:3d:f0:58:58: e9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:06:52:2E:BD:09:58:C1:79:F4:D6:BE:2F:CB:43:04:C5:50:F6:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/a993a619-ee1e-3438-894d-7b8dfa52d09d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 156.40.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c3:8b:5c:a6:60:71:04:f6:20:cc:50:55:67:a1:ad:45:7c: f2:6e:2a:d9:c2:88:46:92:ae:8b:91:6d:72:4b:58:3a:db:1b: c9:87:89:29:49:81:02:c0:11:0b:f7:cf:fb:74:0c:37:99:6f: 7e:84:d6:94:f1:fe:0b:d8:0b:ea:4c:47:64:b6:ae:4a:1a:ba: 64:16:7b:0e:4d:0d:ff:d1:1b:f1:b9:ba:50:99:9d:fe:42:1d: d2:62:ea:0d:7a:c1:fc:0b:aa:87:9f:5b:70:cc:51:a0:9f:4f: 7b:e3:02:46:42:4f:5f:52:00:c1:b8:c5:75:ef:6d:5d:89:a4: 41:aa:ba:63:3a:0d:52:7d:e0:6f:c9:8a:f3:57:68:3f:62:5e: 72:01:61:3e:92:25:0f:70:4e:a4:56:ca:da:bd:83:66:2c:7f: dd:81:90:a8:87:2f:e7:91:e7:36:01:a9:b4:23:03:22:17:94: 6f:5e:2e:e3:75:17:11:e4:de:41:d6:d6:07:bf:a2:5e:60:59: fe:14:c9:5d:07:e3:ba:e0:18:50:e7:de:2b:5c:eb:8f:17:3c: 42:30:80:e7:c5:56:4e:fa:96:99:e3:98:db:c4:0b:69:f4:38: 85:d7:5d:bb:16:5e:af:9c:6b:18:47:1d:14:6c:89:65:19:2f: 7b:53:fc:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JidHKML8EWSywKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTZkNTY1NjYtNDVmYS00Njg4LWI1MDMtYTE0M2MzZjEwMjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP68i4rGCPzFQpdGNBIId9PcLGtIWJoCYyKj GNRuzmMV2A54HqGhiBIiX7iJPgR/aX/dVsL9QCLUqM30pC4j2pGNwA22XuoXMSi8 mjZ5qYLOGP2MDC0+3oHvYxmIP41k62CbQAWbp5e4MUYtXvk3yWdul4hGSiGR9CVY GGBQ1jLXVy9+cwxieGnx0I6iDUS6kNVGjNoCyD/RP4kX7kX5+fGi9SaNlOv7rqDf Lj5ni2mnupsvRleR1C859ccSD37RV7xNNsNi7BydK+YpcTk26UUolPEme75DLzOa tshuzLOvOaqGlcNf/SRA8rwoN6QiwknkMKQ4tEK/FD3wWFjpSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMGUi69CVjBefTWvi/LQwTFUPZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYTk5M2E2MTktZWUxZS0z NDM4LTg5NGQtN2I4ZGZhNTJkMDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnChiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnDi1ymYHEE9iDMUFVnoa1FfPJuKtnCiEaSrouRbXJLWDrbG8mHiSlJ gQLAEQv3z/t0DDeZb36E1pTx/gvYC+pMR2S2rkoaumQWew5NDf/RG/G5ulCZnf5C HdJi6g16wfwLqoefW3DMUaCfT3vjAkZCT19SAMG4xXXvbV2JpEGqumM6DVJ94G/J ivNXaD9iXnIBYT6SJQ9wTqRWytq9g2Ysf92BkKiHL+eR5zYBqbQjAyIXlG9eLuN1 FxHk3kHW1ge/ol5gWf4UyV0H47rgGFDn3itc648XPEIwgOfFVk76lpnjmNvEC2n0 OIXXXbsWXq+caxhHHRRsiWUZL3tT/Ck= -----END CERTIFICATE-----Generated at Fri Oct 2 05:08:19 2026 by rpki-client