$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/5c986a3d-7c18-3d31-9220-cddcf9b335e9.roa File: 5c986a3d-7c18-3d31-9220-cddcf9b335e9.roa (raw, json) Hash identifier: ArLpineAK2x3Y8nPNuzqctYZECIZG+LD2mBZ8RBtCjY= Subject key identifier: 05:05:87:63:69:11:1A:F2:F3:37:53:31:C3:51:27:3D:19:2E:3E:16 Certificate issuer: /CN=a84229b8-4341-4c6e-9665-bb4d991b9cdb Certificate serial: 010D0C9F4328584F4C3D423CBE524D25874A7A80 Authority key identifier: 14:F9:A4:42:11:36:C9:E8:D1:AB:75:9D:CF:2A:CD:AE:7F:19:87:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/5c986a3d-7c18-3d31-9220-cddcf9b335e9.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 16509 IP address blocks: 159.119.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:42:3c:be:52:4d:25:87:4a:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a84229b8-4341-4c6e-9665-bb4d991b9cdb Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a0c453ca-2af7-43aa-86bf-642f0005d0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:64:0a:4a:5f:fc:20:d2:64:dc:c1:27:bc:7e: 17:7a:19:29:9e:38:2c:0c:b3:ab:1c:8b:da:f2:c6: 20:fc:4f:84:b7:c1:19:37:a7:79:bc:a0:6a:74:6d: 82:85:ed:b3:28:24:c8:aa:d8:60:c0:3a:75:b7:5c: e7:1b:c8:76:8b:28:5d:d9:90:eb:49:ad:6a:cd:a3: c1:e1:db:97:35:85:0f:47:9e:9a:6e:c1:9c:93:bd: c5:c8:4b:9d:e5:7e:0e:9d:80:e0:4d:f0:c5:19:9c: b3:b8:b6:c9:8a:85:71:b1:c5:ba:b1:27:cd:42:d9: e4:4f:ce:d4:fa:68:fa:7e:ae:5e:a3:de:56:75:87: 62:97:40:7b:21:e3:d5:f0:2c:a7:f8:d6:e9:7d:a8: d0:44:b2:9d:0b:ed:8e:cc:54:9a:4e:a0:ef:e4:41: cb:ef:a8:29:f9:8e:ee:75:cf:85:ca:7c:1e:ce:a9: 0d:db:d0:1e:74:aa:d4:5e:e0:30:24:e6:1e:ea:68: 4b:ea:14:08:0e:30:9b:17:c2:5b:51:58:e7:93:a2: 1b:fe:60:7d:2f:be:40:67:ba:3e:0a:ea:50:3f:50: a0:10:7d:5e:e2:ba:15:c9:47:06:fb:5f:14:c4:5f: 25:ab:38:53:25:f1:7c:f3:cf:19:05:31:cc:8c:97: ef:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:05:87:63:69:11:1A:F2:F3:37:53:31:C3:51:27:3D:19:2E:3E:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/5c986a3d-7c18-3d31-9220-cddcf9b335e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.crl X509v3 Authority Key Identifier: keyid:14:F9:A4:42:11:36:C9:E8:D1:AB:75:9D:CF:2A:CD:AE:7F:19:87:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer sbgp-ipAddrBlock: critical IPv4: 159.119.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:1e:ae:c6:c1:bd:80:57:e7:3d:a0:90:f8:51:7d:d7:ea:76: ed:44:7f:25:5d:99:ed:5a:14:8e:09:f5:98:0b:12:b9:21:2f: 93:26:7e:36:40:0d:28:c6:64:b5:3a:b5:f8:85:a9:1f:e6:1d: b8:40:58:a2:fe:f7:fb:b5:31:a0:07:af:4d:f0:ff:c6:0d:2c: b1:59:fe:d3:08:ab:cc:39:27:87:7c:57:49:c8:28:d3:c4:41: de:34:13:a5:83:6f:26:0b:1e:36:0e:a6:d5:2b:aa:d3:9c:04: b9:00:80:98:34:32:66:dc:0c:5a:9c:d7:d9:13:72:0e:d3:a0: dd:39:61:39:8d:17:b4:1e:08:d0:41:a0:e5:97:8d:0e:5f:f8: b1:55:38:b2:49:37:82:09:19:e8:85:9e:2c:6f:66:5a:f4:96: 77:33:1d:ea:27:33:c6:5c:15:0b:ec:b7:73:e9:17:02:e0:1e: d2:9b:9e:78:88:80:3e:fd:27:29:87:9f:d1:5e:bc:ea:f3:15: eb:c3:55:1f:db:dd:51:b4:83:0f:39:07:a5:78:21:d0:65:84: 8f:66:32:71:c8:2d:ab:ba:f7:b2:5e:82:c6:e0:10:cb:b9:d1: 90:fd:1a:d1:c2:ac:95:ac:fd:52:32:96:14:f1:59:65:5b:58: 14:14:6c:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUI8vlJNJYdKeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg0MjI5YjgtNDM0MS00YzZlLTk2NjUtYmI0ZDk5MWI5 Y2RiMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTBjNDUzY2EtMmFmNy00M2FhLTg2YmYtNjQyZjAwMDVkMGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmQKSl/8INJk3MEnvH4XehkpnjgsDLOrHIva 8sYg/E+Et8EZN6d5vKBqdG2Che2zKCTIqthgwDp1t1znG8h2iyhd2ZDrSa1qzaPB 4duXNYUPR56absGck73FyEud5X4OnYDgTfDFGZyzuLbJioVxscW6sSfNQtnkT87U +mj6fq5eo95WdYdil0B7IePV8Cyn+NbpfajQRLKdC+2OzFSaTqDv5EHL76gp+Y7u dc+FynwezqkN29AedKrUXuAwJOYe6mhL6hQIDjCbF8JbUVjnk6Ib/mB9L75AZ7o+ CupQP1CgEH1e4roVyUcG+18UxF8lqzhTJfF8888ZBTHMjJfvxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUFh2NpERry8zdTMcNRJz0ZLj4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODQy MjliOC00MzQxLTRjNmUtOTY2NS1iYjRkOTkxYjljZGIvNWM5ODZhM2QtN2MxOC0z ZDMxLTkyMjAtY2RkY2Y5YjMzNWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg0MjI5YjgtNDM0MS00YzZlLTk2 NjUtYmI0ZDk5MWI5Y2RiL2E4NDIyOWI4LTQzNDEtNGM2ZS05NjY1LWJiNGQ5OTFi OWNkYi5jcmwwHwYDVR0jBBgwFoAUFPmkQhE2yejRq3WdzyrNrn8Zh6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hODQyMjliOC00MzQxLTRjNmUtOTY2NS1iYjRk OTkxYjljZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn3eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoersbBvYBX5z2gkPhRfdfqdu1EfyVdme1aFI4J9ZgLErkhL5MmfjZA DSjGZLU6tfiFqR/mHbhAWKL+9/u1MaAHr03w/8YNLLFZ/tMIq8w5J4d8V0nIKNPE Qd40E6WDbyYLHjYOptUrqtOcBLkAgJg0MmbcDFqc19kTcg7ToN05YTmNF7QeCNBB oOWXjQ5f+LFVOLJJN4IJGeiFnixvZlr0lnczHeonM8ZcFQvst3PpFwLgHtKbnniI gD79JymHn9FevOrzFevDVR/b3VG0gw85B6V4IdBlhI9mMnHILau697JegsbgEMu5 0ZD9GtHCrJWs/VIylhTxWWVbWBQUbG4= -----END CERTIFICATE-----Generated at Tue Oct 6 15:25:33 2026 by rpki-client