$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/571768c7-1a06-3657-84a4-df54cd111858.roa File: 571768c7-1a06-3657-84a4-df54cd111858.roa (raw, json) Hash identifier: Vht26gejJyPH3gsl3rAGOskDbqC0TKdxs0U2VKxwfcc= Subject key identifier: C9:00:29:F1:BF:C4:DB:C1:36:16:87:26:7D:2F:A8:A5:B7:A2:51:24 Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584EFE1230B6B044CD36F82E5880 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/571768c7-1a06-3657-84a4-df54cd111858.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 54535 IP address blocks: 156.53.198.0/24 maxlen: 24 156.53.199.0/24 maxlen: 24 156.53.224.0/23 maxlen: 23 156.53.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:30:b6:b0:44:cd:36:f8:2e:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=11fa25bf-b1c6-43c1-b46d-271d0af37634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:14:e0:cc:7d:a9:0f:c5:e1:ed:c6:8a:dd:7d: d3:e2:e5:cf:9a:b7:f1:54:5f:6e:a1:6b:e8:86:75: d0:87:b2:cb:1a:59:e3:08:65:86:42:31:49:db:04: d8:58:00:37:37:4c:ef:2c:05:ba:3a:9c:9c:5e:b9: 83:95:23:72:a0:72:d0:dd:98:91:e2:78:05:3a:01: 56:48:7e:54:d0:94:10:90:7f:d1:7f:9d:f8:7e:94: f4:4c:8f:da:54:70:e8:ee:c3:cb:ba:34:a3:08:f1: db:31:33:ce:7b:e4:93:39:57:17:28:05:b0:19:ff: 2c:63:db:0e:2b:d7:9a:60:f9:38:4f:c2:9a:72:c1: c5:52:83:eb:ea:8d:6e:06:7a:9f:40:c4:1b:8e:ee: ca:90:d1:08:77:f0:41:8f:05:49:f5:9b:de:0d:ea: 6c:ec:0d:10:ae:ca:2e:53:d0:00:d2:4e:8b:a3:af: c9:57:dd:de:6b:5d:49:e5:eb:61:e3:fa:82:9d:15: f0:41:ea:28:3f:f7:bd:e4:11:dd:de:33:11:1e:e1: ff:fc:9c:b8:e2:ba:56:52:67:0c:e0:01:a6:f6:98: da:9b:5c:dc:de:a7:02:9c:79:de:22:c8:61:89:6f: 4c:cb:b0:e1:de:72:05:95:ad:5a:06:5c:ae:15:1b: 04:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:00:29:F1:BF:C4:DB:C1:36:16:87:26:7D:2F:A8:A5:B7:A2:51:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/571768c7-1a06-3657-84a4-df54cd111858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.53.198.0/23 156.53.224.0/23 156.53.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:90:b7:7e:95:dd:ac:e5:a1:3f:7c:55:d1:0f:3d:f3:cd:7b: 9e:96:f9:59:bf:e2:40:e9:c8:a5:59:75:ef:6b:2d:f3:a6:cc: 7f:1f:25:43:d7:5f:e0:2b:9f:10:5d:c8:f9:8f:94:57:44:41: ed:f3:28:de:9e:77:13:6f:f0:54:e7:68:15:8b:a7:77:6e:8b: 69:44:4f:4a:1d:96:52:4f:25:62:6c:9a:37:49:12:68:5f:f0: 64:50:49:df:15:a1:46:f9:3f:88:46:39:95:8e:d4:2a:57:8a: 8f:6f:52:04:0a:39:d2:57:7c:df:35:c2:42:c7:0c:ad:cd:10: 5b:95:b1:a1:be:01:4f:b7:69:df:bc:fb:98:37:dd:57:ae:2d: 8d:a6:4a:3e:2c:4a:e8:2d:10:e0:1f:d1:b8:f9:06:e9:e4:7c: 9d:16:10:d1:6e:99:35:08:64:1f:ad:b0:d1:89:70:fd:25:db: aa:4e:25:9c:92:36:bf:97:f4:47:11:04:8f:86:06:df:b5:82: 9a:ef:e8:75:65:c0:6f:a9:db:ae:62:f9:24:8f:c5:94:4e:d7: c0:cf:4e:00:96:77:08:3d:20:07:cb:9e:62:3e:37:af:71:e7: 90:84:7e:c2:87:d4:4d:9c:74:49:76:4b:61:08:ec:cb:e0:41: 8a:9c:ff:b6 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE7+EjC2sETNNvguWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk MTFmYTI1YmYtYjFjNi00M2MxLWI0NmQtMjcxZDBhZjM3NjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBTgzH2pD8Xh7caK3X3T4uXPmrfxVF9uoWvo hnXQh7LLGlnjCGWGQjFJ2wTYWAA3N0zvLAW6OpycXrmDlSNyoHLQ3ZiR4ngFOgFW SH5U0JQQkH/Rf534fpT0TI/aVHDo7sPLujSjCPHbMTPOe+STOVcXKAWwGf8sY9sO K9eaYPk4T8KacsHFUoPr6o1uBnqfQMQbju7KkNEId/BBjwVJ9ZveDeps7A0Qrsou U9AA0k6Lo6/JV93ea11J5eth4/qCnRXwQeooP/e95BHd3jMRHuH//Jy44rpWUmcM 4AGm9pjam1zc3qcCnHneIshhiW9My7Dh3nIFla1aBlyuFRsEcQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMkAKfG/xNvBNhaHJn0vqKW3olEkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvNTcxNzY4YzctMWEwNi0z NjU3LTg0YTQtZGY1NGNkMTExODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnDXGAwQB nDXgAwQCnDXwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEaQt36V3azloT98VdEPPfPNe56W+Vm/4kDpyKVZ de9rLfOmzH8fJUPXX+ArnxBdyPmPlFdEQe3zKN6edxNv8FTnaBWLp3dui2lET0od llJPJWJsmjdJEmhf8GRQSd8VoUb5P4hGOZWO1CpXio9vUgQKOdJXfN81wkLHDK3N EFuVsaG+AU+3ad+8+5g33VeuLY2mSj4sSugtEOAf0bj5BunkfJ0WENFumTUIZB+t sNGJcP0l26pOJZySNr+X9EcRBI+GBt+1gprv6HVlwG+p265i+SSPxZRO18DPTgCW dwg9IAfLnmI+N69x55CEfsKH1E2cdEl2S2EI7MvgQYqc/7Y= -----END CERTIFICATE-----Generated at Fri Sep 25 23:41:53 2026 by rpki-client