$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/5ec52ca6-8439-30c4-878a-2b5009e9008a.roa File: 5ec52ca6-8439-30c4-878a-2b5009e9008a.roa (raw, json) Hash identifier: YcvolccCVyQ3tyvNXgyq0xL+IsP1RTWQSgz8AxwnoGg= Subject key identifier: 17:1E:47:4B:9E:04:58:84:CA:4B:89:16:7D:B6:09:66:B6:8D:5B:57 Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584D44FA6E388FECD8A05D243C20 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/5ec52ca6-8439-30c4-878a-2b5009e9008a.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 13511 IP address blocks: 192.155.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:6e:38:8f:ec:d8:a0:5d:24:3c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=d9e77524-316e-4057-8756-2fd7489c8e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a2:7c:42:d4:bf:78:f3:a8:1f:ed:bf:3c:8d: b8:14:d0:96:ca:12:ec:90:f5:14:93:7c:e3:04:cd: 5d:f5:46:d0:ff:07:64:68:8d:ad:08:d7:cb:37:54: 90:5f:87:9d:9a:c0:93:8e:28:f8:a7:23:06:34:49: ee:4e:c0:d2:b7:43:94:39:64:3f:4b:2a:6f:5b:8c: d9:79:65:03:39:ff:c9:ef:57:f4:7e:1c:82:72:b5: 61:08:cc:37:39:0b:4b:9c:ee:55:dc:93:b0:69:d8: 17:07:bd:de:ee:51:70:b1:b3:76:4c:8f:fd:de:15: c3:3c:54:34:49:0b:0a:ef:32:70:e0:ec:2d:2e:14: 02:a2:e3:60:80:a1:9b:1e:61:22:a0:48:78:19:c2: 31:6a:de:f4:69:8a:15:32:d7:95:38:f5:c7:51:de: af:df:cf:48:63:ef:aa:57:50:c7:8e:e7:c6:4c:cb: 4a:9b:81:f6:f0:d0:eb:76:df:59:a8:03:97:7c:95: d1:07:d3:79:f7:20:47:6f:ff:01:d5:5d:72:f3:2f: 9d:85:d4:95:d0:71:e5:05:11:83:db:85:78:19:68: 4d:e7:45:bd:0c:ec:8d:ec:32:a5:46:ab:0f:60:1e: 42:06:9f:68:c6:b6:b3:5a:4e:ef:d9:dd:1f:8c:52: 5a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1E:47:4B:9E:04:58:84:CA:4B:89:16:7D:B6:09:66:B6:8D:5B:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/5ec52ca6-8439-30c4-878a-2b5009e9008a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c4:22:ff:1d:35:27:24:b9:20:70:26:7e:e7:41:29:fe:5d: a2:f4:df:23:bf:e9:ac:ec:20:39:cf:4e:b8:0e:bc:a9:af:f0: df:93:49:35:b6:75:cd:6e:80:8a:8e:0b:78:68:13:6e:a7:46: 61:56:be:2d:80:ef:5e:61:78:1c:18:65:be:f8:f4:e0:d8:90: 96:e8:cd:94:a0:5f:96:d3:50:d6:d7:16:7f:25:bc:47:74:ca: 32:2e:54:4e:23:1b:37:51:aa:c0:00:f4:db:f9:fa:1a:f4:27: 2f:4a:b3:b7:59:e8:04:40:b5:00:21:78:c8:e7:a9:bc:72:df: 0e:82:64:24:1b:62:99:76:f4:65:5b:aa:cd:4f:83:cf:80:8b: 21:e4:1e:ff:35:65:d9:35:c0:f9:46:98:9e:b2:bb:b4:aa:c6: c8:cc:7e:04:e5:04:14:78:60:41:c7:e4:88:53:d9:10:a2:76: ca:b5:1f:fd:a7:f5:07:66:11:db:1f:cb:dd:66:53:40:63:45: ed:42:d4:0a:39:96:53:b4:7e:8c:62:ae:e7:8c:04:da:88:3e: 54:fd:8c:e5:8a:7f:2b:35:f5:c8:4f:34:1a:fa:f7:a8:f2:79: 12:72:32:d3:af:14:ae:51:1b:6c:b7:ec:e2:03:ee:d2:55:d9: be:ca:71:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+m44j+zYoF0kPCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZDllNzc1MjQtMzE2ZS00MDU3LTg3NTYtMmZkNzQ4OWM4ZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6J8QtS/ePOoH+2/PI24FNCWyhLskPUUk3zj BM1d9UbQ/wdkaI2tCNfLN1SQX4edmsCTjij4pyMGNEnuTsDSt0OUOWQ/SypvW4zZ eWUDOf/J71f0fhyCcrVhCMw3OQtLnO5V3JOwadgXB73e7lFwsbN2TI/93hXDPFQ0 SQsK7zJw4OwtLhQCouNggKGbHmEioEh4GcIxat70aYoVMteVOPXHUd6v389IY++q V1DHjufGTMtKm4H28NDrdt9ZqAOXfJXRB9N59yBHb/8B1V1y8y+dhdSV0HHlBRGD 24V4GWhN50W9DOyN7DKlRqsPYB5CBp9oxrazWk7v2d0fjFJa2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBceR0ueBFiEykuJFn22CWa2jVtXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvNWVjNTJjYTYtODQzOS0z MGM0LTg3OGEtMmI1MDA5ZTkwMDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJt6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDEIv8dNSckuSBwJn7nQSn+XaL03yO/6azsIDnPTrgOvKmv8N+TSTW2 dc1ugIqOC3hoE26nRmFWvi2A715heBwYZb749ODYkJbozZSgX5bTUNbXFn8lvEd0 yjIuVE4jGzdRqsAA9Nv5+hr0Jy9Ks7dZ6ARAtQAheMjnqbxy3w6CZCQbYpl29GVb qs1Pg8+AiyHkHv81Zdk1wPlGmJ6yu7SqxsjMfgTlBBR4YEHH5IhT2RCidsq1H/2n 9QdmEdsfy91mU0BjRe1C1Ao5llO0foxirueMBNqIPlT9jOWKfys19chPNBr696jy eRJyMtOvFK5RG2y37OID7tJV2b7KcWU= -----END CERTIFICATE-----Generated at Thu Mar 26 14:11:30 2026 by rpki-client