$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/fc71bbc5-516e-3ad9-b330-376b7d8bda9e.roa File: fc71bbc5-516e-3ad9-b330-376b7d8bda9e.roa (raw, json) Hash identifier: SQSMUMRb6UG+lqLyVHujoqyejmd2eqT0nQgXOsNUUxo= Subject key identifier: 1A:DC:A7:3F:F4:2D:12:DA:06:75:41:25:DF:40:89:93:99:68:D5:7C Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Certificate serial: 010D0C9F4328584F9BCDD2BBE48801CAC0CF6080 Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/fc71bbc5-516e-3ad9-b330-376b7d8bda9e.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 10430 IP address blocks: 152.157.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:d2:bb:e4:88:01:ca:c0:cf:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=8b5e3f89-0b85-424b-b922-05ad0af51876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:04:6a:18:0e:00:c5:9c:82:49:cd:71:f6:ce: 52:0b:e0:e2:29:cf:2a:bf:86:f9:a2:0f:8c:a9:e9: e2:2b:99:2c:33:10:8c:8e:5e:3a:5c:20:84:6b:53: c2:3c:f5:84:8a:5e:b8:5c:f0:44:c8:7e:fa:3e:cb: c1:2a:28:da:12:53:27:25:cb:da:ae:69:ed:1e:0c: d1:de:05:82:41:8d:5b:ef:07:60:67:57:44:6f:21: d9:d4:8f:aa:fa:a4:88:a3:b8:d6:fe:48:ad:a5:29: de:d7:ef:6d:76:61:38:e2:c9:1a:f1:cd:eb:bd:e1: 6f:94:eb:6b:df:b3:b2:31:01:fc:26:97:22:63:59: 93:99:6e:54:e5:6d:77:d8:27:de:74:da:00:43:df: 23:61:3d:ad:da:1f:79:3d:a0:f2:ee:a2:45:5a:59: df:26:09:1c:bc:30:81:16:ff:fe:a2:46:a0:ef:d7: 20:75:15:b1:3e:7d:92:3a:bc:ad:22:1b:f7:8f:e4: 9d:f9:74:7a:13:65:ac:97:d0:a4:85:80:2b:cd:7d: c2:8e:5c:c6:7e:c2:8e:05:78:18:ba:83:6f:62:36: 08:38:5b:21:55:46:15:18:03:c2:9f:81:8a:fa:53: b8:4a:60:c9:12:13:34:4b:12:4d:38:fe:50:e3:4c: 9b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DC:A7:3F:F4:2D:12:DA:06:75:41:25:DF:40:89:93:99:68:D5:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/fc71bbc5-516e-3ad9-b330-376b7d8bda9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl X509v3 Authority Key Identifier: keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer sbgp-ipAddrBlock: critical IPv4: 152.157.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a7:b8:88:8d:dc:df:a6:10:b2:a9:c2:6f:49:04:8e:02:8d: 8b:4c:dc:f3:05:e8:b9:d9:25:0e:53:9f:22:f3:22:0c:56:64: cc:95:fe:17:c3:00:ce:79:14:74:59:56:f5:97:b0:f0:94:3c: 0b:26:9c:e6:8b:5c:92:17:1b:ea:30:c3:b3:4b:f0:7e:96:25: d0:69:d1:77:f8:79:7b:19:36:af:98:43:bf:83:38:fa:b8:1c: bc:7b:d8:3b:bf:cf:ca:7e:15:37:e2:3f:0a:7f:24:bc:ec:d4: 19:4d:af:ac:a0:87:03:4d:3d:a2:a8:d8:f9:5f:c2:a6:09:87: 62:34:d8:32:90:7f:25:03:34:0b:24:11:f5:1e:fd:ff:3b:47: 62:d7:02:a2:4d:f6:61:fa:ad:f4:6a:34:43:97:6d:d0:48:1a: 9d:3d:65:22:38:20:28:67:18:79:88:a2:77:15:b8:89:63:87: 3b:6f:e6:4b:91:57:2f:6f:90:c2:5f:32:5a:7a:88:0e:d6:8c: 3b:3f:e2:68:47:6c:35:6b:f3:09:13:87:9b:fe:6b:bd:d7:6a: 6d:c5:d1:c4:4b:80:ca:0e:7b:e9:74:a6:b2:7f:c2:a0:ab:c1: 1d:d6:23:10:c4:b7:9f:19:b2:66:b1:27:d2:6e:f0:3f:5e:70: 21:69:58:0e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+bzdK75IgBysDPYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk ODE2MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk OGI1ZTNmODktMGI4NS00MjRiLWI5MjItMDVhZDBhZjUxODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiARqGA4AxZyCSc1x9s5SC+DiKc8qv4b5og+M qeniK5ksMxCMjl46XCCEa1PCPPWEil64XPBEyH76PsvBKijaElMnJcvarmntHgzR 3gWCQY1b7wdgZ1dEbyHZ1I+q+qSIo7jW/kitpSne1+9tdmE44ska8c3rveFvlOtr 37OyMQH8JpciY1mTmW5U5W132CfedNoAQ98jYT2t2h95PaDy7qJFWlnfJgkcvDCB Fv/+okag79cgdRWxPn2SOrytIhv3j+Sd+XR6E2Wsl9CkhYArzX3CjlzGfsKOBXgY uoNvYjYIOFshVUYVGAPCn4GK+lO4SmDJEhM0SxJNOP5Q40ybxQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBrcpz/0LRLaBnVBJd9AiZOZaNV8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5 OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvZmM3MWJiYzUtNTE2ZS0z YWQ5LWIzMzAtMzc2YjdkOGJkYTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx NDkxYWQ4MTYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmJ0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACqe4iI3c36YQsqnCb0kEjgKNi0zc8wXoudklDlOfIvMiDFZkzJX+F8MA znkUdFlW9Zew8JQ8Cyac5otckhcb6jDDs0vwfpYl0GnRd/h5exk2r5hDv4M4+rgc vHvYO7/Pyn4VN+I/Cn8kvOzUGU2vrKCHA009oqjY+V/CpgmHYjTYMpB/JQM0CyQR 9R79/ztHYtcCok32Yfqt9Go0Q5dt0EganT1lIjggKGcYeYiidxW4iWOHO2/mS5FX L2+Qwl8yWnqIDtaMOz/iaEdsNWvzCROHm/5rvddqbcXRxEuAyg576XSmsn/CoKvB HdYjEMS3nxmyZrEn0m7wP15wIWlYDg== -----END CERTIFICATE-----Generated at Sun Nov 15 19:18:33 2026 by rpki-client