$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/a95379b5-6d42-39ad-802a-afc32f163143.roa File: a95379b5-6d42-39ad-802a-afc32f163143.roa (raw, json) Hash identifier: FjAgcSpMiSD5ggnrDU4HCXCfcN0RXAKHyI2KBi9ASvA= Subject key identifier: DE:40:67:8B:8B:07:97:A0:C9:EB:47:B4:36:D1:D1:A4:B3:53:44:A8 Certificate issuer: /CN=de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b Certificate serial: 010D0C9F4328584F4C3D5D8BAB8A0EB902246C60 Authority key identifier: 6E:C1:59:BC:12:59:CB:1A:EF:81:AA:75:0B:AC:8C:C2:73:48:37:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/a95379b5-6d42-39ad-802a-afc32f163143.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 40838 IP address blocks: 168.151.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:5d:8b:ab:8a:0e:b9:02:24:6c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=8a117571-be4d-472a-9694-908064bcdd6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:54:1d:42:59:8f:b0:99:fc:85:18:57:1f:44: 85:fc:82:53:5a:ab:a8:91:72:37:28:b1:fa:54:f9: b1:26:57:40:e4:80:f5:5b:f8:46:bc:65:df:7b:79: 84:e4:e1:5b:47:b4:93:b1:fb:8d:6f:a9:a6:de:76: db:5c:3d:55:71:de:8f:db:64:51:36:82:d5:8d:b4: 79:df:3f:b0:57:32:9a:c7:11:be:df:ee:ca:08:86: 14:19:bf:df:e3:4c:90:a0:fa:01:07:b9:9b:15:7b: 59:e6:ca:4f:84:9e:95:eb:b7:f6:a1:bc:ba:58:21: 09:3b:9d:a9:e8:0e:34:97:ba:c2:7b:4c:57:da:fc: bf:84:9f:32:58:f9:93:ad:e2:08:08:2f:bb:35:14: 98:4f:8e:2c:dc:dc:f8:88:3e:14:f2:5f:0d:02:25: 2d:18:ad:0b:21:2a:18:91:c4:aa:6a:42:95:b0:3a: 6f:d6:93:96:e1:50:18:9b:f9:57:fe:48:1d:f4:f4: f3:a8:6a:c7:ff:8d:69:eb:c4:0e:39:ee:8c:53:4b: 5c:9e:b2:64:99:19:18:60:85:5a:1c:ad:c8:f8:d8: dd:fa:62:49:eb:a4:e0:92:26:8e:dd:94:97:d5:a6: e8:33:64:50:37:3e:7a:79:8f:b0:d8:64:2d:8d:07: 4b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:40:67:8B:8B:07:97:A0:C9:EB:47:B4:36:D1:D1:A4:B3:53:44:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/a95379b5-6d42-39ad-802a-afc32f163143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.crl X509v3 Authority Key Identifier: keyid:6E:C1:59:BC:12:59:CB:1A:EF:81:AA:75:0B:AC:8C:C2:73:48:37:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de9d9fe8-3a53-49a0-955b-cc4dfeeb9f7b.cer sbgp-ipAddrBlock: critical IPv4: 168.151.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:31:f5:3e:ad:4c:61:36:91:65:b1:f5:01:fb:a8:5f:77:94: 91:f8:ef:2c:de:46:99:c8:04:d2:a8:50:2e:2d:91:f4:dc:aa: 89:e2:d0:3e:a5:f4:9b:b9:eb:30:95:c8:15:c8:15:27:7d:bc: 4b:5f:2b:37:e1:04:5f:9c:dc:3a:ae:43:1f:8c:37:35:b0:d4: f0:e2:21:49:31:86:b3:91:27:3d:c7:ff:86:fe:4f:f3:a6:f6: 5a:2b:1b:61:a2:60:8a:60:ba:99:1e:df:b7:98:2e:19:bb:a1: a3:56:80:e6:e0:df:e8:6c:aa:68:14:99:73:9d:aa:40:ff:03: af:80:09:8b:17:8a:2c:fe:48:64:0a:6f:f3:b6:b0:71:1d:71: cf:65:5d:f8:8f:78:db:82:4a:ad:de:5d:b5:68:5d:c8:2f:44: 30:3d:54:02:1a:a3:15:cb:b2:35:fe:55:f3:39:4a:bd:5d:33: 6f:a5:8c:5c:f4:5c:c8:a6:7a:36:74:33:b1:c9:ae:42:90:c4: 50:20:47:86:50:08:7b:45:08:f8:f9:f9:b4:5a:dd:d1:5b:49: 0a:06:47:1d:38:91:81:02:44:72:30:2c:00:e9:ce:74:45:3c: f1:44:b6:d3:ee:75:a9:d7:24:ca:7f:a3:f8:77:33:52:3d:0d: 94:28:b4:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPV2Lq4oOuQIkbGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU5ZDlmZTgtM2E1My00OWEwLTk1NWItY2M0ZGZlZWI5 ZjdiMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OGExMTc1NzEtYmU0ZC00NzJhLTk2OTQtOTA4MDY0YmNkZDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklQdQlmPsJn8hRhXH0SF/IJTWquokXI3KLH6 VPmxJldA5ID1W/hGvGXfe3mE5OFbR7STsfuNb6mm3nbbXD1Vcd6P22RRNoLVjbR5 3z+wVzKaxxG+3+7KCIYUGb/f40yQoPoBB7mbFXtZ5spPhJ6V67f2oby6WCEJO52p 6A40l7rCe0xX2vy/hJ8yWPmTreIICC+7NRSYT44s3Nz4iD4U8l8NAiUtGK0LISoY kcSqakKVsDpv1pOW4VAYm/lX/kgd9PTzqGrH/41p68QOOe6MU0tcnrJkmRkYYIVa HK3I+Njd+mJJ66TgkiaO3ZSX1aboM2RQNz56eY+w2GQtjQdL9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5AZ4uLB5egyetHtDbR0aSzU0SoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZTlk OWZlOC0zYTUzLTQ5YTAtOTU1Yi1jYzRkZmVlYjlmN2IvYTk1Mzc5YjUtNmQ0Mi0z OWFkLTgwMmEtYWZjMzJmMTYzMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGU5ZDlmZTgtM2E1My00OWEwLTk1 NWItY2M0ZGZlZWI5ZjdiL2RlOWQ5ZmU4LTNhNTMtNDlhMC05NTViLWNjNGRmZWVi OWY3Yi5jcmwwHwYDVR0jBBgwFoAUbsFZvBJZyxrvgap1C6yMwnNINxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kZTlkOWZlOC0zYTUzLTQ5YTAtOTU1Yi1jYzRk ZmVlYjlmN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqJcMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwx9T6tTGE2kWWx9QH7qF93lJH47yzeRpnIBNKoUC4tkfTcqoni0D6l 9Ju56zCVyBXIFSd9vEtfKzfhBF+c3DquQx+MNzWw1PDiIUkxhrORJz3H/4b+T/Om 9lorG2GiYIpgupke37eYLhm7oaNWgObg3+hsqmgUmXOdqkD/A6+ACYsXiiz+SGQK b/O2sHEdcc9lXfiPeNuCSq3eXbVoXcgvRDA9VAIaoxXLsjX+VfM5Sr1dM2+ljFz0 XMimejZ0M7HJrkKQxFAgR4ZQCHtFCPj5+bRa3dFbSQoGRx04kYECRHIwLADpznRF PPFEttPudanXJMp/o/h3M1I9DZQotOw= -----END CERTIFICATE-----Generated at Mon Sep 28 21:14:06 2026 by rpki-client