$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8299a868-a299-3463-8991-7b9cb3efb6d3.roa File: 8299a868-a299-3463-8991-7b9cb3efb6d3.roa (raw, json) Hash identifier: gUiRTiXbRXCwsFELq6wa5mAlET7I7IjtN180Tvc+Jmc= Subject key identifier: FB:7F:5D:75:D7:FB:A0:EB:74:C2:5E:CD:E4:11:27:35:A1:01:0D:BA Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584D44FA75C2FC306887663D6C60 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8299a868-a299-3463-8991-7b9cb3efb6d3.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 13511 IP address blocks: 192.155.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:75:c2:fc:30:68:87:66:3d:6c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=865cb845-73f9-4010-ac2e-6a9f8744735d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c4:9c:6b:ae:9e:78:4e:3f:d9:07:fa:2b:87: 4f:8c:0a:fe:b0:20:a5:a9:47:35:df:13:da:b3:86: a8:3e:91:43:9f:5a:70:3a:9c:46:80:5f:99:63:05: 59:49:e5:37:7f:84:33:1e:63:1c:19:5e:d9:8b:c0: ee:88:64:94:a8:96:5c:87:2c:01:9d:ed:ba:07:14: 7b:8a:80:ea:22:3a:f3:29:dd:46:c1:17:12:13:b5: 0c:a4:17:3e:84:38:33:b6:3f:ed:ce:8c:97:2a:6e: 86:f2:cb:39:e8:79:2d:bc:2a:92:6c:09:e8:c9:db: c6:1c:85:cb:8b:ab:93:95:60:21:27:a3:43:76:ae: 50:ce:cd:e7:13:a7:a7:0d:00:7a:ad:fb:75:0b:61: 55:07:f7:1d:37:ea:8c:35:58:bf:89:65:c9:8e:e9: 37:31:15:d2:33:8f:c1:d2:21:9e:3a:a1:8e:53:2f: 86:1f:6c:1f:c7:81:d9:23:92:d4:47:66:5b:1e:7c: 69:c4:f6:25:eb:df:74:3a:75:1f:32:29:20:a8:a6: 2b:d6:e1:9b:65:42:17:a5:5c:82:9b:1f:0a:d7:2b: a9:74:f0:1a:84:e0:4f:e2:cc:67:d7:9e:a3:86:2d: 25:16:7c:49:70:f5:0c:7b:1b:02:86:77:b5:16:5e: 18:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7F:5D:75:D7:FB:A0:EB:74:C2:5E:CD:E4:11:27:35:A1:01:0D:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8299a868-a299-3463-8991-7b9cb3efb6d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e4:05:15:91:39:79:db:1b:51:45:96:80:98:ca:aa:84:c0: 66:ff:64:ef:b2:1c:11:ee:3f:f2:f1:a3:fa:77:8e:cc:02:21: 97:10:4e:69:40:4e:d7:d1:e3:8a:6b:65:88:1c:22:cc:ca:22: c9:49:b3:5d:70:82:36:23:17:b0:88:31:e9:b4:3c:f0:c6:50: 6e:21:3e:8b:c8:9c:ac:c8:89:1d:e2:b2:a3:fb:01:29:17:4f: 88:99:09:59:94:c7:8c:cd:4a:f3:1f:e7:74:e0:78:d1:86:a5: 72:24:2b:46:9c:ab:55:48:a4:5a:bc:70:19:e6:57:16:0e:7f: d1:6a:97:1b:f8:d9:7e:52:1b:0b:11:13:16:30:73:65:fd:d2: c5:8d:7b:bc:c1:74:3c:a0:1d:53:13:87:5c:46:20:9c:c6:22: 8a:7b:22:74:e3:04:4f:4c:f5:91:bc:55:4a:4e:f9:c0:e3:f2: 6c:e1:fe:b1:31:f3:5c:ff:9b:3a:12:12:ff:a8:84:0e:f8:ee: 88:6f:6c:de:22:06:6a:0f:62:7e:41:f1:cc:46:92:d6:09:c7: 25:bb:28:8b:0d:31:e2:d7:4f:bb:d3:01:8f:ba:d1:2d:3f:e2: 63:93:84:64:b2:ce:39:7e:4e:7e:ff:05:5d:de:1d:00:a7:3f: 3e:11:bc:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nXC/DBoh2Y9bGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ODY1Y2I4NDUtNzNmOS00MDEwLWFjMmUtNmE5Zjg3NDQ3MzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMSca66eeE4/2Qf6K4dPjAr+sCClqUc13xPa s4aoPpFDn1pwOpxGgF+ZYwVZSeU3f4QzHmMcGV7Zi8DuiGSUqJZchywBne26BxR7 ioDqIjrzKd1GwRcSE7UMpBc+hDgztj/tzoyXKm6G8ss56HktvCqSbAnoydvGHIXL i6uTlWAhJ6NDdq5Qzs3nE6enDQB6rft1C2FVB/cdN+qMNVi/iWXJjuk3MRXSM4/B 0iGeOqGOUy+GH2wfx4HZI5LUR2ZbHnxpxPYl6990OnUfMikgqKYr1uGbZUIXpVyC mx8K1yupdPAahOBP4sxn156jhi0lFnxJcPUMexsChne1Fl4Y9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPt/XXXX+6DrdMJezeQRJzWhAQ26MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvODI5OWE4NjgtYTI5OS0z NDYzLTg5OTEtN2I5Y2IzZWZiNmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwJt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITkBRWROXnbG1FFloCYyqqEwGb/ZO+yHBHuP/Lxo/p3jswCIZcQTmlA TtfR44prZYgcIszKIslJs11wgjYjF7CIMem0PPDGUG4hPovInKzIiR3isqP7ASkX T4iZCVmUx4zNSvMf53TgeNGGpXIkK0acq1VIpFq8cBnmVxYOf9Fqlxv42X5SGwsR ExYwc2X90sWNe7zBdDygHVMTh1xGIJzGIop7InTjBE9M9ZG8VUpO+cDj8mzh/rEx 81z/mzoSEv+ohA747ohvbN4iBmoPYn5B8cxGktYJxyW7KIsNMeLXT7vTAY+60S0/ 4mOThGSyzjl+Tn7/BV3eHQCnPz4RvPw= -----END CERTIFICATE-----Generated at Thu Mar 26 08:29:46 2026 by rpki-client