$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/4b6ef071-5e89-38dc-9977-6c76cae16ef5.roa File: 4b6ef071-5e89-38dc-9977-6c76cae16ef5.roa (raw, json) Hash identifier: D54uSYxkHFadRG8UPhWLcyLUJ1bcu7CfLTjEalG3kMI= Subject key identifier: 72:17:C0:D5:3D:D3:A0:2D:E8:88:53:A0:56:7E:50:9B:21:DE:D2:C7 Certificate issuer: /CN=580e739b-bb2f-4e02-9a24-4813328e39cf Certificate serial: 010D0C9F4328584F3A17DC8028EFAFCAC42FB5C0 Authority key identifier: E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/4b6ef071-5e89-38dc-9977-6c76cae16ef5.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 3736 IP address blocks: 199.5.156.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:dc:80:28:ef:af:ca:c4:2f:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580e739b-bb2f-4e02-9a24-4813328e39cf Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=c3638d9a-a7ae-4705-96e8-76d6c8436f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ad:eb:db:d7:58:97:18:eb:63:59:ea:6d:16: 32:bf:02:6e:ac:ad:61:c2:d8:15:09:c0:81:c9:3a: e2:45:7b:73:e2:e2:a6:1e:52:b3:e8:ad:5a:32:af: b9:88:2e:77:58:56:f6:6a:8b:8f:d6:dd:5b:67:fe: ce:55:67:95:85:fa:26:a1:cc:e4:a4:ce:9f:50:32: 58:ed:56:5d:65:3a:c7:1b:0a:3d:61:96:d9:24:4a: f8:00:7e:8b:09:b2:6f:91:80:64:b8:3c:d5:fa:94: f2:86:89:d4:af:e3:3d:e9:ac:9b:e2:20:42:53:39: 69:2e:d3:91:c2:8f:45:cd:82:c6:c8:2b:ac:cd:21: f8:d9:e8:b9:2a:47:69:8f:a2:dd:99:6a:40:8d:9b: 1d:07:36:6d:56:2a:60:8f:03:b3:94:b4:52:81:34: 56:be:9f:09:df:1a:64:e0:85:83:20:a3:de:e2:e2: 9f:ad:99:6c:8a:d6:9e:56:6d:fa:bf:b3:bd:d8:b8: c0:de:89:a2:f2:4e:0c:12:c0:e9:2f:0c:e4:95:49: ca:43:66:e9:ca:2c:60:5c:55:ba:30:ff:e6:b0:88: 72:46:de:b1:6e:3a:21:0d:35:7a:86:e0:b3:14:da: 05:8b:40:de:a4:79:0f:19:b0:6c:56:62:5f:2c:39: 1a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:17:C0:D5:3D:D3:A0:2D:E8:88:53:A0:56:7E:50:9B:21:DE:D2:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/4b6ef071-5e89-38dc-9977-6c76cae16ef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl X509v3 Authority Key Identifier: keyid:E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer sbgp-ipAddrBlock: critical IPv4: 199.5.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3a:45:c2:5e:71:bd:ae:68:29:a3:6f:d7:25:bf:de:41:e7: 5e:a9:0b:79:b6:b8:95:51:fa:1a:b1:30:cf:be:a5:2c:05:a6: 1e:3d:e9:f9:2a:e3:44:6d:49:97:46:e5:03:7c:3b:68:b0:ad: 35:3f:c9:88:6f:f5:f3:75:b7:8d:57:f9:96:6b:87:ef:2c:df: 3d:7e:be:78:b2:7a:e5:3e:01:8a:b2:cd:4b:d9:de:d1:a7:6f: a6:5a:6e:c3:c2:3d:1e:90:7c:cf:6b:a7:de:59:0f:f5:0a:87: e6:b3:20:45:12:8c:28:65:13:17:09:d6:57:41:a4:b6:2a:2f: 6e:dc:b9:26:92:68:a7:9e:95:d4:cf:ec:2e:6d:31:18:a7:ae: 9c:4e:5f:fc:d7:af:c1:6b:f0:b4:fd:c2:76:a3:af:8f:f1:73: 79:2f:24:52:0e:e6:9b:53:d5:26:4e:d3:b4:02:a6:80:1e:d4: 5d:0d:89:5f:6a:c6:e5:ed:47:8f:d9:41:f6:77:37:a4:17:80: 0f:c4:ec:58:87:18:1f:c2:41:f5:a2:2e:61:24:fe:28:05:b2: 81:fd:fd:22:14:e8:0b:09:51:94:de:68:93:72:4a:5c:fc:43: 6a:bc:23:3e:be:7b:54:2c:b5:26:dc:c8:3e:ee:a8:21:d1:e4: 4e:6a:f0:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9yAKO+vysQvtcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTgwZTczOWItYmIyZi00ZTAyLTlhMjQtNDgxMzMyOGUz OWNmMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk YzM2MzhkOWEtYTdhZS00NzA1LTk2ZTgtNzZkNmM4NDM2Zjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq3r29dYlxjrY1nqbRYyvwJurK1hwtgVCcCB yTriRXtz4uKmHlKz6K1aMq+5iC53WFb2aouP1t1bZ/7OVWeVhfomoczkpM6fUDJY 7VZdZTrHGwo9YZbZJEr4AH6LCbJvkYBkuDzV+pTyhonUr+M96ayb4iBCUzlpLtOR wo9FzYLGyCuszSH42ei5Kkdpj6LdmWpAjZsdBzZtVipgjwOzlLRSgTRWvp8J3xpk 4IWDIKPe4uKfrZlsitaeVm36v7O92LjA3omi8k4MEsDpLwzklUnKQ2bpyixgXFW6 MP/msIhyRt6xbjohDTV6huCzFNoFi0DepHkPGbBsVmJfLDkauwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIXwNU906At6IhToFZ+UJsh3tLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81ODBl NzM5Yi1iYjJmLTRlMDItOWEyNC00ODEzMzI4ZTM5Y2YvNGI2ZWYwNzEtNWU4OS0z OGRjLTk5NzctNmM3NmNhZTE2ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTgwZTczOWItYmIyZi00ZTAyLTlh MjQtNDgxMzMyOGUzOWNmLzU4MGU3MzliLWJiMmYtNGUwMi05YTI0LTQ4MTMzMjhl MzljZi5jcmwwHwYDVR0jBBgwFoAU53lu1AwCQP2Zt3JGcoLlodSJyLUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81ODBlNzM5Yi1iYjJmLTRlMDItOWEyNC00ODEz MzI4ZTM5Y2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxwWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc6RcJecb2uaCmjb9clv95B516pC3m2uJVR+hqxMM++pSwFph496fkq 40RtSZdG5QN8O2iwrTU/yYhv9fN1t41X+ZZrh+8s3z1+vniyeuU+AYqyzUvZ3tGn b6ZabsPCPR6QfM9rp95ZD/UKh+azIEUSjChlExcJ1ldBpLYqL27cuSaSaKeeldTP 7C5tMRinrpxOX/zXr8Fr8LT9wnajr4/xc3kvJFIO5ptT1SZO07QCpoAe1F0NiV9q xuXtR4/ZQfZ3N6QXgA/E7FiHGB/CQfWiLmEk/igFsoH9/SIU6AsJUZTeaJNySlz8 Q2q8Iz6+e1QstSbcyD7uqCHR5E5q8IU= -----END CERTIFICATE-----Generated at Tue Sep 22 07:50:32 2026 by rpki-client