$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/00e98e8d-0bf4-3203-b397-ab28caeccb32.roa File: 00e98e8d-0bf4-3203-b397-ab28caeccb32.roa (raw, json) Hash identifier: nV8rMBTExYLHk0iuYCls25i+ZujrhnfWFcbQP/FDeaw= Subject key identifier: 43:1E:E2:20:BF:E4:93:F3:E6:27:25:9C:C2:F6:BC:65:3B:97:B1:D2 Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584D44FA6F0EB6E840BECFF86880 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/00e98e8d-0bf4-3203-b397-ab28caeccb32.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 13511 IP address blocks: 192.155.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:6f:0e:b6:e8:40:be:cf:f8:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=d6bc6957-f5a6-4f7b-9190-f37073396947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:db:7d:fe:f3:56:7f:60:3a:9c:71:3b:00:21: 93:7b:8c:9d:e8:be:97:8d:d6:25:5f:bf:4a:12:b3: 43:51:f3:54:59:50:31:94:0b:6c:f3:d0:0d:eb:b8: 0f:0c:ef:78:0a:98:ff:d3:18:07:11:68:e1:48:6a: eb:8c:7c:77:bb:a6:27:68:50:fd:8b:77:d6:78:60: 24:56:fb:a4:39:52:e8:db:fb:2a:ab:fe:b4:47:f7: 34:84:49:1f:a9:51:ad:9e:f3:61:99:06:90:8e:cd: f2:ab:5c:98:46:46:28:c3:01:0e:24:ce:4e:0e:bb: 65:b6:f5:71:2d:f2:54:c2:5f:96:ca:3c:63:fc:de: 8c:bf:bd:c3:30:eb:54:a7:2a:72:0c:3f:29:e1:ef: f9:43:ad:8f:1e:43:5c:14:ae:09:df:3c:e8:76:f2: e7:10:5f:75:94:72:fa:a1:7f:0c:75:f5:24:43:7e: 75:86:ae:34:d5:6b:b5:86:61:ef:55:1b:c1:b2:06: 4c:c5:da:c8:dc:ba:01:fe:26:90:94:ca:cc:9c:cf: 7e:9d:3e:f0:b0:dd:88:da:86:6a:4b:ad:ec:21:be: 19:21:db:4b:37:53:ff:8c:be:9d:02:c7:31:65:26: 51:60:a8:ae:9b:82:1a:25:59:fb:c2:a0:6d:4d:a6: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1E:E2:20:BF:E4:93:F3:E6:27:25:9C:C2:F6:BC:65:3B:97:B1:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/00e98e8d-0bf4-3203-b397-ab28caeccb32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:cc:03:04:44:65:37:f2:d3:39:7e:f5:d3:97:47:91:dc:1a: 19:64:b5:27:76:f2:a7:0a:00:57:0c:91:b3:95:15:87:e1:fc: f1:bd:ca:98:75:01:9d:2e:7e:1d:95:a5:33:21:3d:26:a5:e6: 42:c8:89:c9:6c:65:27:6c:19:eb:66:97:04:8d:15:a0:23:ce: 5c:b7:1b:ad:b7:b0:ac:6e:8f:a5:7d:98:f9:cc:13:ab:02:7d: c5:81:57:57:1e:2c:d7:fd:1c:54:44:f6:40:5e:d7:ca:71:17: 75:3e:e6:53:c5:dd:05:a7:58:4f:5e:10:ee:c1:3f:98:f7:23: 0a:bd:6e:b3:dd:f4:8e:7d:28:49:64:34:ae:be:2a:4e:94:cc: 59:ff:67:51:7a:f1:f7:01:04:a0:85:4f:df:99:54:3e:4b:07: 05:7d:79:00:be:97:f6:91:83:00:52:47:98:75:64:18:1b:61: 56:90:bb:10:ff:5d:b2:ad:ee:d9:5d:0d:5a:ca:b7:8a:3b:63: a7:2b:7c:92:9f:ba:ed:1f:3b:87:77:b6:09:fc:0d:6b:95:c3: a5:4f:d3:af:d8:11:ba:9f:4f:3c:fd:ee:73:af:e1:ef:b8:71: 3b:bf:ac:46:37:c6:e1:2c:6b:d8:e3:97:bb:1e:34:0a:23:51: 6f:13:97:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+m8OtuhAvs/4aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZDZiYzY5NTctZjVhNi00ZjdiLTkxOTAtZjM3MDczMzk2OTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Nt9/vNWf2A6nHE7ACGTe4yd6L6XjdYlX79K ErNDUfNUWVAxlAts89AN67gPDO94Cpj/0xgHEWjhSGrrjHx3u6YnaFD9i3fWeGAk VvukOVLo2/sqq/60R/c0hEkfqVGtnvNhmQaQjs3yq1yYRkYowwEOJM5ODrtltvVx LfJUwl+Wyjxj/N6Mv73DMOtUpypyDD8p4e/5Q62PHkNcFK4J3zzodvLnEF91lHL6 oX8MdfUkQ351hq401Wu1hmHvVRvBsgZMxdrI3LoB/iaQlMrMnM9+nT7wsN2I2oZq S63sIb4ZIdtLN1P/jL6dAscxZSZRYKium4IaJVn7wqBtTaYqKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMe4iC/5JPz5iclnML2vGU7l7HSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvMDBlOThlOGQtMGJmNC0z MjAzLWIzOTctYWIyOGNhZWNjYjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbMAwREZTfy0zl+9dOXR5HcGhlktSd28qcKAFcMkbOVFYfh/PG9yph1 AZ0ufh2VpTMhPSal5kLIiclsZSdsGetmlwSNFaAjzly3G623sKxuj6V9mPnME6sC fcWBV1ceLNf9HFRE9kBe18pxF3U+5lPF3QWnWE9eEO7BP5j3Iwq9brPd9I59KElk NK6+Kk6UzFn/Z1F68fcBBKCFT9+ZVD5LBwV9eQC+l/aRgwBSR5h1ZBgbYVaQuxD/ XbKt7tldDVrKt4o7Y6crfJKfuu0fO4d3tgn8DWuVw6VP06/YEbqfTzz97nOv4e+4 cTu/rEY3xuEsa9jjl7seNAojUW8Tl7Q= -----END CERTIFICATE-----Generated at Thu Mar 26 12:37:17 2026 by rpki-client