$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a0e009b6-cdcc-312b-8299-a229b1f41ddb.roa File: a0e009b6-cdcc-312b-8299-a229b1f41ddb.roa (raw, json) Hash identifier: BhmnaX5n+v7qRhsYRYAJRGoGndd2xBrlUR03jGqxwdk= Subject key identifier: 08:AD:98:64:49:7A:33:E9:93:A2:95:C8:18:DD:E5:B6:34:80:FE:D9 Certificate issuer: /CN=a8adc860-1381-4299-b5ba-dd3e1f605c46 Certificate serial: 010D0C9F4328584F2ABD0B28A8FF972C3C148980 Authority key identifier: 47:07:11:AF:B7:AC:02:75:2C:6D:63:8F:93:57:71:28:68:1B:13:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a0e009b6-cdcc-312b-8299-a229b1f41ddb.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 159.220.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a8adc860-1381-4299-b5ba-dd3e1f605c46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a8adc860-1381-4299-b5ba-dd3e1f605c46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:0b:28:a8:ff:97:2c:3c:14:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8adc860-1381-4299-b5ba-dd3e1f605c46 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=999763cd-63a6-4f3c-af64-2cffeb1c6c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:57:32:b0:d1:e8:ce:ff:f3:f4:ae:33:84:a8: 1a:3d:2d:7f:a2:f8:ae:bd:45:7d:59:0a:4f:59:ef: 28:b5:4f:25:94:15:08:dc:ec:9e:69:33:54:a5:f5: 8f:be:d1:85:75:f0:40:71:b9:6d:12:c9:bc:6b:21: 3b:65:78:98:4e:c0:1a:a7:a1:32:da:f2:c1:30:e7: 17:0b:d1:05:bc:41:6d:08:69:a4:b4:69:39:07:0a: f2:f1:25:ce:b9:19:de:40:e5:6b:99:bb:11:5a:3c: 54:aa:22:17:d2:37:11:22:d6:05:f0:f9:e9:56:75: 34:4a:86:11:9e:f5:89:fd:f8:f3:df:ec:f2:00:28: 63:49:dc:04:89:9b:bd:31:0e:a1:af:ec:3e:39:53: 53:85:a6:18:a1:4b:d6:f6:59:e5:52:d3:ce:d4:fc: b3:ad:1a:93:7f:31:b3:02:4e:1b:ae:79:01:59:4f: a6:b8:9f:03:e8:4a:16:ea:04:cf:50:47:54:ec:38: 70:c7:4a:9b:d0:96:5e:6c:83:70:6a:cd:2b:d4:dc: 51:e4:2f:51:9e:57:86:bd:70:11:92:fb:1c:8f:15: 14:76:8f:3a:5a:89:cc:bc:43:2a:9a:49:7d:63:d9: ce:18:87:e5:b7:85:d9:df:d5:42:02:94:ed:96:28: a1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AD:98:64:49:7A:33:E9:93:A2:95:C8:18:DD:E5:B6:34:80:FE:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a0e009b6-cdcc-312b-8299-a229b1f41ddb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46/a8adc860-1381-4299-b5ba-dd3e1f605c46.crl X509v3 Authority Key Identifier: keyid:47:07:11:AF:B7:AC:02:75:2C:6D:63:8F:93:57:71:28:68:1B:13:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a8adc860-1381-4299-b5ba-dd3e1f605c46.cer sbgp-ipAddrBlock: critical IPv4: 159.220.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f0:07:2c:67:0a:9c:86:b4:37:7a:40:d2:49:8a:6d:62:47: 63:23:b3:08:d4:35:e8:43:d7:5d:b3:da:68:52:af:cf:3a:cb: cf:9c:45:15:d9:fc:bb:c1:ac:ea:c2:03:0e:f1:4f:9c:84:89: 90:34:98:b7:7e:86:ee:90:da:c1:8e:b1:70:08:6c:66:8f:1d: e7:b2:82:16:0e:fe:07:45:f4:4f:51:73:78:6e:ff:58:13:c5: e3:69:fb:47:b5:c1:eb:ba:db:7a:fa:9d:60:30:d0:43:11:30: 55:60:4c:40:63:e1:e2:0f:93:23:c3:5c:33:f6:c7:7f:69:ca: ad:38:a9:f4:57:dc:33:13:72:9d:94:5c:a9:9b:40:f7:95:e9: b0:67:92:a7:a7:0c:29:10:38:45:87:04:bf:36:86:ac:f5:5c: 2c:7a:d1:2a:20:94:5f:3f:ad:3f:9f:a0:d9:a9:e7:2f:29:29: b1:7f:d3:56:15:67:c9:2a:ae:b4:30:0c:7d:61:7a:dc:3e:91: 91:7d:89:0c:c2:8e:9f:f1:28:c2:91:63:d3:a9:fd:0c:ac:af: 94:b7:cd:47:98:85:65:6d:dd:b2:88:ea:4b:c2:ba:19:e9:9b: 6a:9e:f9:b7:bf:1a:80:7f:80:ef:67:64:c4:0c:32:f7:30:62: 5c:c3:d4:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQsoqP+XLDwUiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThhZGM4NjAtMTM4MS00Mjk5LWI1YmEtZGQzZTFmNjA1 YzQ2MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk OTk5NzYzY2QtNjNhNi00ZjNjLWFmNjQtMmNmZmViMWM2YzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1cysNHozv/z9K4zhKgaPS1/oviuvUV9WQpP We8otU8llBUI3OyeaTNUpfWPvtGFdfBAcbltEsm8ayE7ZXiYTsAap6Ey2vLBMOcX C9EFvEFtCGmktGk5Bwry8SXOuRneQOVrmbsRWjxUqiIX0jcRItYF8PnpVnU0SoYR nvWJ/fjz3+zyAChjSdwEiZu9MQ6hr+w+OVNThaYYoUvW9lnlUtPO1PyzrRqTfzGz Ak4brnkBWU+muJ8D6EoW6gTPUEdU7Dhwx0qb0JZebINwas0r1NxR5C9RnleGvXAR kvscjxUUdo86WonMvEMqmkl9Y9nOGIflt4XZ39VCApTtliih6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAitmGRJejPpk6KVyBjd5bY0gP7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9hOGFk Yzg2MC0xMzgxLTQyOTktYjViYS1kZDNlMWY2MDVjNDYvYTBlMDA5YjYtY2RjYy0z MTJiLTgyOTktYTIyOWIxZjQxZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYThhZGM4NjAtMTM4MS00Mjk5LWI1 YmEtZGQzZTFmNjA1YzQ2L2E4YWRjODYwLTEzODEtNDI5OS1iNWJhLWRkM2UxZjYw NWM0Ni5jcmwwHwYDVR0jBBgwFoAURwcRr7esAnUsbWOPk1dxKGgbExAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9hOGFkYzg2MC0xMzgxLTQyOTktYjViYS1kZDNl MWY2MDVjNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn9w0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7wByxnCpyGtDd6QNJJim1iR2MjswjUNehD112z2mhSr886y8+cRRXZ /LvBrOrCAw7xT5yEiZA0mLd+hu6Q2sGOsXAIbGaPHeeyghYO/gdF9E9Rc3hu/1gT xeNp+0e1weu623r6nWAw0EMRMFVgTEBj4eIPkyPDXDP2x39pyq04qfRX3DMTcp2U XKmbQPeV6bBnkqenDCkQOEWHBL82hqz1XCx60SoglF8/rT+foNmp5y8pKbF/01YV Z8kqrrQwDH1hetw+kZF9iQzCjp/xKMKRY9Op/Qysr5S3zUeYhWVt3bKI6kvCuhnp m2qe+be/GoB/gO9nZMQMMvcwYlzD1AA= -----END CERTIFICATE-----Generated at Sun Sep 20 15:59:23 2026 by rpki-client