$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa File: aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa (raw, json) Hash identifier: UdMyKa9dr8ysmMr9R5kSF5x7hPcV/NGqagPchvS2tG0= Subject key identifier: 1F:35:1F:C4:69:3F:B8:68:B5:9F:FA:55:A9:1F:7B:50:3A:B3:9C:EB Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584F2EED2806A18595A1CB205B40 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 30387 IP address blocks: 156.40.53.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:28:06:a1:85:95:a1:cb:20:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=372bdfc5-556b-4dd3-a4a8-3d5fa07c602b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f1:e0:e6:03:d0:d5:ed:4d:93:58:bf:19:56: 6f:e4:19:09:6e:9c:fc:24:d9:d8:5b:9f:da:08:ab: b3:07:ce:1e:f9:7d:48:df:59:bc:78:56:fc:4f:a6: 4f:ce:8c:87:29:9e:c1:d8:75:05:ed:a4:9f:73:30: bb:8b:06:cf:c6:9a:a9:c1:fa:7d:87:2e:46:d1:9d: d4:ba:f5:9f:6b:1e:06:ab:f4:65:2c:b0:5d:47:27: 34:be:4e:d8:01:9b:b9:88:f9:48:40:96:80:d9:cd: 3b:64:fe:01:a7:b6:58:1e:b3:be:d1:86:0b:db:47: 24:b9:65:50:34:02:be:53:42:75:51:e8:3f:7e:d7: 7f:13:ef:0f:83:10:6d:cc:1c:79:6c:04:12:ad:10: 20:a5:ec:d9:25:b2:96:72:cd:fc:a9:34:84:7a:1e: c6:c7:56:c3:3e:08:a0:9c:80:5d:75:27:7a:76:f6: 45:d9:29:58:93:55:d5:67:1a:48:51:7f:8d:e2:58: af:fc:28:fa:d4:19:1b:35:e6:ab:90:02:0a:89:4c: 27:c7:c7:8f:14:0d:03:b3:24:d5:4d:58:66:46:b3: d6:c4:2d:37:34:18:a1:8c:3b:e1:71:38:2d:61:c2: 53:60:ea:7f:a0:21:64:ff:c4:b2:da:fc:76:a0:79: a1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:35:1F:C4:69:3F:B8:68:B5:9F:FA:55:A9:1F:7B:50:3A:B3:9C:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/aea2ecb1-242a-34a0-a0d2-7240ca38ad2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 156.40.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:67:1d:d1:72:5b:52:2b:60:7c:46:35:a6:4e:48:c2:30:ef: 2a:02:70:dc:0c:80:69:48:df:3d:50:0c:53:be:04:32:7d:83: 64:74:12:5b:cf:6f:5a:2c:28:44:7b:d0:49:65:a4:77:de:a7: 55:ca:39:78:48:90:07:11:31:0d:b0:e9:54:dd:33:1f:ba:e5: d5:17:b4:00:2b:b7:49:d8:aa:c5:1b:94:72:92:65:f1:47:38: 86:ac:02:c9:fd:c2:8b:b5:47:7c:9e:fb:fb:97:23:41:dc:85: ca:2f:d0:89:c0:1c:75:3c:b4:d5:1c:be:d9:a2:ae:1b:1f:18: c4:76:d9:c4:6f:17:87:44:08:5c:a1:eb:c9:46:5c:1a:94:6e: ac:ab:59:0d:86:6d:c0:cd:9d:a1:9e:56:19:c2:fa:ea:7b:98: bd:a2:f6:54:5b:fb:63:7b:f7:d3:fc:df:fe:4c:0f:20:db:f0: e0:f2:c7:c6:48:3a:06:f4:68:2d:5b:02:8e:bf:c8:c6:3f:e1: ec:8d:ad:d0:15:63:39:14:84:85:92:87:b8:3c:66:0e:43:89: db:5f:64:d1:22:78:98:b2:5f:6b:0c:b3:3b:1c:2d:19:f9:7c: ad:5f:98:3a:e3:dc:db:23:59:99:a4:93:74:a8:d9:5c:42:9a: 19:11:33:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7SgGoYWVocsgW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk MzcyYmRmYzUtNTU2Yi00ZGQzLWE0YTgtM2Q1ZmEwN2M2MDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPHg5gPQ1e1Nk1i/GVZv5BkJbpz8JNnYW5/a CKuzB84e+X1I31m8eFb8T6ZPzoyHKZ7B2HUF7aSfczC7iwbPxpqpwfp9hy5G0Z3U uvWfax4Gq/RlLLBdRyc0vk7YAZu5iPlIQJaA2c07ZP4Bp7ZYHrO+0YYL20ckuWVQ NAK+U0J1Ueg/ftd/E+8PgxBtzBx5bAQSrRAgpezZJbKWcs38qTSEeh7Gx1bDPgig nIBddSd6dvZF2SlYk1XVZxpIUX+N4liv/Cj61BkbNearkAIKiUwnx8ePFA0DsyTV TVhmRrPWxC03NBihjDvhcTgtYcJTYOp/oCFk/8Sy2vx2oHmhFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB81H8RpP7hotZ/6Vakfe1A6s5zrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvYWVhMmVjYjEtMjQyYS0z NGEwLWEwZDItNzI0MGNhMzhhZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnCg1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1nHdFyW1IrYHxGNaZOSMIw7yoCcNwMgGlI3z1QDFO+BDJ9g2R0ElvP b1osKER70EllpHfep1XKOXhIkAcRMQ2w6VTdMx+65dUXtAArt0nYqsUblHKSZfFH OIasAsn9wou1R3ye+/uXI0Hchcov0InAHHU8tNUcvtmirhsfGMR22cRvF4dECFyh 68lGXBqUbqyrWQ2GbcDNnaGeVhnC+up7mL2i9lRb+2N799P83/5MDyDb8ODyx8ZI Ogb0aC1bAo6/yMY/4eyNrdAVYzkUhIWSh7g8Zg5DidtfZNEieJiyX2sMszscLRn5 fK1fmDrj3NsjWZmkk3So2VxCmhkRM/c= -----END CERTIFICATE-----Generated at Sun Sep 27 04:42:47 2026 by rpki-client