$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a8c17ec-703f-3b72-8800-f5f309613583.roa File: 2a8c17ec-703f-3b72-8800-f5f309613583.roa (raw, json) Hash identifier: z2whs4cB9tEXsXRKCqDNZoijqLvtC/8AYGTGEgpk9oo= Subject key identifier: AA:5A:DE:EB:01:07:DA:64:F9:36:DE:DA:06:1D:99:79:CD:66:53:22 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584F7352DF402978EB3F3F4C6D00 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a8c17ec-703f-3b72-8800-f5f309613583.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 922 IP address blocks: 155.121.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:df:40:29:78:eb:3f:3f:4c:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=8c4c6027-43ac-42c5-bb84-e28bfabf9f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f3:38:5e:f0:92:c2:3b:fe:37:3b:66:f9:e5: 30:80:87:b1:bd:b8:8b:5f:5d:67:9e:ae:5e:b6:78: 05:aa:44:5a:83:b7:40:b1:55:a8:65:b7:4a:6b:31: a9:ef:35:54:78:f1:eb:c3:70:12:d3:aa:6c:8d:48: 51:c3:01:a8:f0:ea:a0:68:82:b1:1a:06:d4:ff:9f: a3:4c:81:ef:2c:43:b8:f5:fc:97:01:a4:43:4a:51: 64:d5:e0:78:3d:68:94:02:14:20:e5:91:67:c0:65: e8:47:5d:3d:99:fb:73:51:d2:c6:30:60:f5:46:73: 45:70:fe:a1:fa:7d:cd:a5:c8:72:12:00:0d:e8:e1: f8:88:d3:f9:59:a2:fa:31:61:0b:94:1e:58:37:e8: d6:a8:0e:67:80:84:12:f4:83:2c:00:86:c7:ee:ea: b7:ae:4c:ae:7a:04:e0:cc:aa:c7:be:d3:aa:af:f3: 33:23:44:bf:37:e0:f1:4f:be:c2:3c:5d:5b:69:c1: 7e:41:94:7c:de:9f:82:86:e1:aa:3b:ca:44:96:91: 79:44:96:a3:7d:13:75:11:8e:6e:83:6c:4a:18:f4: d0:98:68:b6:f5:28:04:f1:fb:df:0c:63:06:ad:df: 27:0f:96:a2:ac:3c:75:d1:98:40:d2:30:36:f8:76: c9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5A:DE:EB:01:07:DA:64:F9:36:DE:DA:06:1D:99:79:CD:66:53:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a8c17ec-703f-3b72-8800-f5f309613583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 155.121.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c3:6b:ae:f8:19:34:72:56:90:89:a9:0d:c9:43:2d:f3:4b: 22:c2:64:e6:ac:a8:47:e8:61:9b:f6:6b:bd:fa:df:50:58:03: 44:9f:d8:cf:dd:ee:b8:6a:ac:eb:0d:d9:0d:a6:1a:13:e3:38: 99:f4:ce:39:26:85:a3:fc:98:20:88:39:f8:a4:23:af:8f:74: 5e:0f:b5:83:24:4f:02:1c:50:8c:99:e8:9b:46:a3:2e:bd:98: 71:df:e6:64:d2:5e:58:22:d8:08:11:59:a2:85:62:32:a3:b9: 44:ab:6a:71:c7:33:43:8d:32:d9:b3:c2:c6:b8:c6:a9:23:7a: 07:09:28:a5:6b:82:55:99:3b:76:ae:4e:0c:70:4e:a4:f3:b1: 3c:a0:f4:85:58:bb:ee:fb:a4:19:c1:22:d3:1c:47:bd:04:cb: 6f:85:55:c7:7e:15:42:3e:93:62:47:70:16:ff:47:bc:a5:89: 2c:f1:5c:6e:52:1b:36:b2:a1:41:bf:64:c4:7a:3c:63:f9:36: cb:28:f7:7c:00:7c:91:f6:1d:e1:82:ef:db:18:e7:6c:50:0b: 82:1a:1b:a7:21:2a:d2:33:7f:fe:70:e7:c1:23:4f:7c:c8:77: 7d:58:93:3c:3a:07:be:27:c1:af:60:7e:66:6e:6d:29:c6:b0: e7:3e:33:14 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9zUt9AKXjrPz9MbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk OGM0YzYwMjctNDNhYy00MmM1LWJiODQtZTI4YmZhYmY5ZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvM4XvCSwjv+Nztm+eUwgIexvbiLX11nnq5e tngFqkRag7dAsVWoZbdKazGp7zVUePHrw3AS06psjUhRwwGo8OqgaIKxGgbU/5+j TIHvLEO49fyXAaRDSlFk1eB4PWiUAhQg5ZFnwGXoR109mftzUdLGMGD1RnNFcP6h +n3NpchyEgAN6OH4iNP5WaL6MWELlB5YN+jWqA5ngIQS9IMsAIbH7uq3rkyuegTg zKrHvtOqr/MzI0S/N+DxT77CPF1bacF+QZR83p+ChuGqO8pElpF5RJajfRN1EY5u g2xKGPTQmGi29SgE8fvfDGMGrd8nD5airDx10ZhA0jA2+HbJLwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKpa3usBB9pk+Tbe2gYdmXnNZlMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvMmE4YzE3ZWMtNzAzZi0z YjcyLTg4MDAtZjVmMzA5NjEzNTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAm3kwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJcNrrvgZNHJWkImpDclDLfNLIsJk5qyoR+hhm/ZrvfrfUFgDRJ/Yz93u uGqs6w3ZDaYaE+M4mfTOOSaFo/yYIIg5+KQjr490Xg+1gyRPAhxQjJnom0ajLr2Y cd/mZNJeWCLYCBFZooViMqO5RKtqccczQ40y2bPCxrjGqSN6BwkopWuCVZk7dq5O DHBOpPOxPKD0hVi77vukGcEi0xxHvQTLb4VVx34VQj6TYkdwFv9HvKWJLPFcblIb NrKhQb9kxHo8Y/k2yyj3fAB8kfYd4YLv2xjnbFALghobpyEq0jN//nDnwSNPfMh3 fViTPDoHvifBr2B+Zm5tKcaw5z4zFA== -----END CERTIFICATE-----Generated at Sun Oct 11 07:44:24 2026 by rpki-client