$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/126ca051-d56b-38ed-9e4c-31fd97846e57.roa File: 126ca051-d56b-38ed-9e4c-31fd97846e57.roa (raw, json) Hash identifier: hnH7oSQVX7JkbjDcFqvJDNjBxg9tBMbtOhFJDquXNdo= Subject key identifier: 77:2F:54:5D:A2:9F:F4:FD:15:01:10:07:E2:17:F3:12:40:60:FD:25 Certificate issuer: /CN=0a44ddfe-6fde-4083-a1dd-cbb3707e1b70 Certificate serial: 010D0C9F4328584F28FF7635377537B96D480100 Authority key identifier: EB:56:FA:99:FF:96:D9:62:22:6D:6B:6F:E3:00:10:08:BA:CA:A9:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/126ca051-d56b-38ed-9e4c-31fd97846e57.roa Signing time: Sun 13 Sep 2026 10:02:30 +0000 ROA not before: Sun 13 Sep 2026 10:02:30 +0000 ROA not after: Sat 12 Dec 2026 11:02:30 +0000 asID: 29917 IP address blocks: 158.136.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:28:ff:76:35:37:75:37:b9:6d:48:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a44ddfe-6fde-4083-a1dd-cbb3707e1b70 Validity Not Before: Sep 13 10:02:30 2026 GMT Not After : Dec 12 11:02:30 2026 GMT Subject: CN=d9ec4d2b-6bc6-4036-a7db-c6e9b7df80d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:07:83:31:46:28:b2:88:5a:88:6f:e0:29:c7: 25:ba:67:fc:da:1d:2a:54:7c:b4:d0:f4:b6:31:aa: 6b:f9:00:7b:df:4d:c8:0f:74:66:9f:9d:42:5f:bd: b5:3b:eb:3b:c7:c8:88:40:b1:14:d9:15:20:07:2a: 8c:f6:f1:27:ee:c0:7b:91:98:e5:cf:2c:a2:92:91: 25:90:42:fe:d2:61:5e:72:50:e0:b8:c2:d0:19:51: 47:b7:72:a3:f3:5a:fd:ad:9b:5b:2f:0d:d3:19:f7: fd:73:82:63:4c:43:4e:06:82:bb:85:84:9a:82:40: 80:da:99:77:5b:41:01:f4:f2:fd:c2:5f:06:29:a3: 6e:5c:93:66:f4:20:bd:38:99:c2:3a:29:1d:d7:7e: 2e:3e:0e:d7:73:84:af:47:09:7a:88:ba:ad:df:27: 77:ea:40:f6:9c:87:4a:a5:0c:d3:df:6c:19:77:36: 6b:20:e7:59:61:d0:45:43:5f:fd:e7:9f:5e:d8:86: 5d:83:ad:5f:72:75:f6:92:8c:d4:97:db:b8:7b:53: 4c:8f:72:6e:77:0c:7b:1b:e4:25:5f:f6:a4:f0:9c: bb:77:9d:06:4d:47:33:2a:4d:1b:a0:43:1e:b9:5d: f2:39:1f:4f:78:11:e7:9b:80:77:35:44:7b:ea:e9: 68:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2F:54:5D:A2:9F:F4:FD:15:01:10:07:E2:17:F3:12:40:60:FD:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/126ca051-d56b-38ed-9e4c-31fd97846e57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.crl X509v3 Authority Key Identifier: keyid:EB:56:FA:99:FF:96:D9:62:22:6D:6B:6F:E3:00:10:08:BA:CA:A9:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a44ddfe-6fde-4083-a1dd-cbb3707e1b70.cer sbgp-ipAddrBlock: critical IPv4: 158.136.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:ef:32:01:3e:3e:5b:df:92:79:37:f4:96:8b:e8:34:7d:b4: f6:e2:c4:50:a7:12:60:17:40:83:ec:49:1d:57:6f:58:57:b9: 3e:73:45:00:50:f4:a7:66:b0:ed:83:e7:03:64:0c:8d:93:a5: dd:cf:72:fb:95:3e:3d:84:58:7b:54:a1:f8:1f:d3:c1:d3:5e: 79:b2:bf:b0:a2:52:3f:e8:50:09:c6:81:53:14:ad:c3:d0:e4: 0b:50:ff:4a:a9:02:fd:e2:57:b6:a2:23:c0:f6:bd:66:c1:6a: 6d:e7:92:45:42:1d:22:3e:0b:95:dd:c7:02:22:1f:06:2b:b8: d4:24:9c:ef:e2:94:a1:3e:9a:3a:9d:ac:cc:13:3c:ec:12:7a: 62:9e:bb:3c:68:46:ea:45:f7:50:06:76:e7:b5:d6:7f:72:a4: d2:2c:c9:cf:98:ee:dc:05:1c:4e:7f:19:8f:e1:27:53:01:95: aa:bd:68:8c:d3:1f:d9:96:d6:92:8f:4b:d5:e4:01:de:4c:3d: fe:be:66:10:8f:b0:1e:f7:94:d1:65:79:ad:fb:24:bf:de:4d: 73:7b:87:43:37:d3:e8:1b:f9:32:69:ef:24:de:5a:55:f5:dc: 9d:d6:70:83:c9:da:df:d9:22:3e:20:41:70:72:47:06:df:cd: 8f:6d:32:70 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8o/3Y1N3U3uW1IAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE0NGRkZmUtNmZkZS00MDgzLWExZGQtY2JiMzcwN2Ux YjcwMB4XDTI2MDkxMzEwMDIzMFoXDTI2MTIxMjExMDIzMFowLzEtMCsGA1UEAxMk ZDllYzRkMmItNmJjNi00MDM2LWE3ZGItYzZlOWI3ZGY4MGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAeDMUYosohaiG/gKcclumf82h0qVHy00PS2 Mapr+QB7303ID3Rmn51CX721O+s7x8iIQLEU2RUgByqM9vEn7sB7kZjlzyyikpEl kEL+0mFeclDguMLQGVFHt3Kj81r9rZtbLw3TGff9c4JjTENOBoK7hYSagkCA2pl3 W0EB9PL9wl8GKaNuXJNm9CC9OJnCOikd134uPg7Xc4SvRwl6iLqt3yd36kD2nIdK pQzT32wZdzZrIOdZYdBFQ1/9559e2IZdg61fcnX2kozUl9u4e1NMj3Judwx7G+Ql X/ak8Jy7d50GTUczKk0boEMeuV3yOR9PeBHnm4B3NUR76ulovQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHcvVF2in/T9FQEQB+IX8xJAYP0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYTQ0 ZGRmZS02ZmRlLTQwODMtYTFkZC1jYmIzNzA3ZTFiNzAvMTI2Y2EwNTEtZDU2Yi0z OGVkLTllNGMtMzFmZDk3ODQ2ZTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGE0NGRkZmUtNmZkZS00MDgzLWEx ZGQtY2JiMzcwN2UxYjcwLzBhNDRkZGZlLTZmZGUtNDA4My1hMWRkLWNiYjM3MDdl MWI3MC5jcmwwHwYDVR0jBBgwFoAU61b6mf+W2WIibWtv4wAQCLrKqWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYTQ0ZGRmZS02ZmRlLTQwODMtYTFkZC1jYmIz NzA3ZTFiNzAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnogwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAq+8yAT4+W9+SeTf0lovoNH209uLEUKcSYBdAg+xJHVdvWFe5PnNFAFD0 p2aw7YPnA2QMjZOl3c9y+5U+PYRYe1Sh+B/TwdNeebK/sKJSP+hQCcaBUxStw9Dk C1D/SqkC/eJXtqIjwPa9ZsFqbeeSRUIdIj4Lld3HAiIfBiu41CSc7+KUoT6aOp2s zBM87BJ6Yp67PGhG6kX3UAZ257XWf3Kk0izJz5ju3AUcTn8Zj+EnUwGVqr1ojNMf 2ZbWko9L1eQB3kw9/r5mEI+wHveU0WV5rfskv95Nc3uHQzfT6Bv5MmnvJN5aVfXc ndZwg8na39kiPiBBcHJHBt/Nj20ycA== -----END CERTIFICATE-----Generated at Sat Sep 26 11:47:44 2026 by rpki-client