$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/a5fa980a-2aa7-3176-9a1a-f899e9243de9.roa File: a5fa980a-2aa7-3176-9a1a-f899e9243de9.roa (raw, json) Hash identifier: rGcnLoo/W2307pux3HveJaST96j9ngySO6K9fbEZZAQ= Subject key identifier: 85:FD:BC:9E:E7:64:67:6E:96:78:1F:7F:88:BD:65:A0:1C:DD:06:D1 Certificate issuer: /CN=cd789731-b7d6-499d-bd13-8fae75220140 Certificate serial: 010D0C9F4328584F18979163CE3663C82A4B5200 Authority key identifier: 47:7D:85:A3:D9:21:EC:00:74:C9:D4:CA:61:B7:96:16:4E:D4:A3:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/a5fa980a-2aa7-3176-9a1a-f899e9243de9.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 5078 IP address blocks: 156.110.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/cd789731-b7d6-499d-bd13-8fae75220140.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/cd789731-b7d6-499d-bd13-8fae75220140.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:91:63:ce:36:63:c8:2a:4b:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd789731-b7d6-499d-bd13-8fae75220140 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=f178f1e5-5a8a-422a-ae14-dddbe98bc8dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:77:2e:42:6d:68:15:d9:2a:32:94:da:fc:4c: 3f:44:7a:ac:40:d3:cc:f0:71:60:ce:ef:e2:c9:73: bd:59:e0:ed:a3:24:ba:61:8e:93:73:80:be:f1:e6: cf:0d:ae:b0:20:d1:3e:f6:5e:65:9f:34:0a:72:19: 18:ea:16:c3:d2:50:53:cc:91:3e:45:89:94:97:24: 31:cc:2b:8f:7d:b9:49:c3:8e:95:79:29:43:ea:bc: 01:43:ae:8c:88:1e:2f:d8:53:27:6e:14:12:14:f5: f5:10:47:ea:16:aa:4e:51:e3:f4:24:a0:47:c8:fb: bb:91:d2:b5:86:03:25:44:63:37:ac:1b:ac:a2:f8: c9:18:75:c6:b0:08:ba:95:48:13:05:04:57:4c:99: 2a:0c:48:42:a7:5f:e6:21:16:9c:9e:1a:ea:84:7a: d5:29:f8:37:7d:54:05:ce:d1:dd:fa:3b:8d:ad:de: 1c:5c:9a:79:bc:a1:0f:79:5d:a6:79:46:04:3d:37: ea:8d:17:9f:2f:cc:01:c5:40:d5:08:8c:df:41:55: d6:aa:27:88:cd:f0:8e:6e:26:cc:e7:c8:64:68:d3: e6:ca:2a:62:ae:6a:7f:d7:26:9d:01:3b:b1:b4:49: e6:66:fb:ad:4b:a0:2e:bc:16:03:b8:8e:55:d3:61: b7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FD:BC:9E:E7:64:67:6E:96:78:1F:7F:88:BD:65:A0:1C:DD:06:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/a5fa980a-2aa7-3176-9a1a-f899e9243de9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/cd789731-b7d6-499d-bd13-8fae75220140.crl X509v3 Authority Key Identifier: keyid:47:7D:85:A3:D9:21:EC:00:74:C9:D4:CA:61:B7:96:16:4E:D4:A3:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140.cer sbgp-ipAddrBlock: critical IPv4: 156.110.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c4:d7:c4:50:98:86:cd:bd:8d:b7:c9:90:dc:5a:c5:33:8d: e1:e5:00:7c:af:38:98:1a:0b:a2:1c:c0:b7:de:ec:3b:e8:48: f0:c8:4c:85:20:05:44:3d:e4:c1:0e:bf:6b:79:ce:a9:84:d8: 3a:8c:99:b1:20:df:57:a5:50:c0:9a:48:c5:02:aa:5f:14:f0: 68:23:00:f1:ca:18:a9:1a:90:ba:ae:a5:4a:e8:78:01:c0:6a: cf:9a:e3:29:ca:93:24:73:5b:3f:70:ae:5b:ab:10:a8:33:cc: 5f:c6:88:bc:ce:69:64:70:47:d2:ee:89:31:c5:0e:27:45:5c: ae:0a:ae:85:38:78:69:07:70:f1:88:37:5c:14:37:a7:28:bc: b9:f0:30:cc:c5:97:1a:d7:7c:48:44:c3:80:2e:aa:ec:d5:22: 1c:6e:c5:32:3c:a7:99:94:78:d6:f7:c7:89:83:22:57:b4:18: 32:58:65:d2:49:65:4a:c4:00:c1:d0:ab:f8:c4:3c:f9:f0:73: b0:0b:f9:8b:9c:86:c5:5f:26:76:c9:8f:6b:5d:1d:a8:4e:09: 81:69:4f:06:95:93:9e:f8:50:9b:46:ae:79:4d:38:7f:77:a7: 5f:df:4e:e4:06:97:03:91:83:90:27:13:65:29:35:46:ad:17: d6:c2:4e:74 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8Yl5FjzjZjyCpLUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ODk3MzEtYjdkNi00OTlkLWJkMTMtOGZhZTc1MjIw MTQwMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjE3OGYxZTUtNWE4YS00MjJhLWFlMTQtZGRkYmU5OGJjOGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlncuQm1oFdkqMpTa/Ew/RHqsQNPM8HFgzu/i yXO9WeDtoyS6YY6Tc4C+8ebPDa6wINE+9l5lnzQKchkY6hbD0lBTzJE+RYmUlyQx zCuPfblJw46VeSlD6rwBQ66MiB4v2FMnbhQSFPX1EEfqFqpOUeP0JKBHyPu7kdK1 hgMlRGM3rBusovjJGHXGsAi6lUgTBQRXTJkqDEhCp1/mIRacnhrqhHrVKfg3fVQF ztHd+juNrd4cXJp5vKEPeV2meUYEPTfqjRefL8wBxUDVCIzfQVXWqieIzfCObibM 58hkaNPmyipirmp/1yadATuxtEnmZvutS6AuvBYDuI5V02G3HwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIX9vJ7nZGdulngff4i9ZaAc3QbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZDc4 OTczMS1iN2Q2LTQ5OWQtYmQxMy04ZmFlNzUyMjAxNDAvYTVmYTk4MGEtMmFhNy0z MTc2LTlhMWEtZjg5OWU5MjQzZGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2Q3ODk3MzEtYjdkNi00OTlkLWJk MTMtOGZhZTc1MjIwMTQwL2NkNzg5NzMxLWI3ZDYtNDk5ZC1iZDEzLThmYWU3NTIy MDE0MC5jcmwwHwYDVR0jBBgwFoAUR32Fo9kh7AB0ydTKYbeWFk7Uo88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZDc4OTczMS1iN2Q2LTQ5OWQtYmQxMy04ZmFl NzUyMjAxNDAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnG4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFMTXxFCYhs29jbfJkNxaxTON4eUAfK84mBoLohzAt97sO+hI8MhMhSAF RD3kwQ6/a3nOqYTYOoyZsSDfV6VQwJpIxQKqXxTwaCMA8coYqRqQuq6lSuh4AcBq z5rjKcqTJHNbP3CuW6sQqDPMX8aIvM5pZHBH0u6JMcUOJ0VcrgquhTh4aQdw8Yg3 XBQ3pyi8ufAwzMWXGtd8SETDgC6q7NUiHG7FMjynmZR41vfHiYMiV7QYMlhl0kll SsQAwdCr+MQ8+fBzsAv5i5yGxV8mdsmPa10dqE4JgWlPBpWTnvhQm0aueU04f3en X99O5AaXA5GDkCcTZSk1Rq0X1sJOdA== -----END CERTIFICATE-----Generated at Mon Sep 28 10:12:13 2026 by rpki-client