$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/850665c6-2c75-3d29-a8cf-128f11029970.roa File: 850665c6-2c75-3d29-a8cf-128f11029970.roa (raw, json) Hash identifier: 2YgcSsQ2uHA1FlAbDR9W1v9xr7cyoXAbg16JaGxi0/s= Subject key identifier: FE:1B:FF:55:EB:76:22:39:4B:37:80:E7:F8:00:52:32:44:25:D1:23 Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584D44FA722DC7BDD5900304EF80 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/850665c6-2c75-3d29-a8cf-128f11029970.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 13511 IP address blocks: 192.155.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:72:2d:c7:bd:d5:90:03:04:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=861ac1a1-1242-4e55-9f48-3ba31c9bebbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:92:91:5b:07:70:72:98:1f:54:9e:f1:6b:37: 10:5a:72:96:ad:a4:66:fd:24:f0:35:e7:9a:7e:f3: 7f:b9:03:47:13:f7:81:24:02:4c:46:ea:c3:b6:1f: 12:4a:62:e1:66:7f:aa:7a:77:58:b4:aa:d0:f6:47: 15:c9:ad:62:73:e5:5b:13:95:cf:af:1b:a1:18:15: b7:f7:e7:b1:57:7e:5e:49:eb:a1:a3:32:7c:12:ae: 97:33:c1:2b:15:bd:ed:ca:85:01:26:7e:91:c1:10: 30:e1:8e:5c:65:0c:aa:c2:44:53:74:16:dc:0e:57: b1:d0:0b:d7:79:d8:e2:14:f8:f6:ed:05:93:61:a0: 56:2f:f7:39:39:0c:a5:da:e4:f6:4f:b8:7e:c2:b8: 43:88:7c:36:f3:7c:17:31:bf:8b:65:20:4e:45:18: 2b:72:6a:6d:e6:9a:14:a5:9c:ff:22:37:77:81:33: e7:2a:0b:46:94:31:21:0d:11:41:d9:97:36:23:24: b8:9a:fb:2a:a2:b3:fd:d4:b0:4e:b1:9b:e5:60:b2: ee:9e:78:15:41:a7:84:5b:7a:0e:8e:8c:90:2a:9b: fe:69:55:32:f7:65:86:89:db:d3:6c:a1:09:70:a7: 6d:cb:1e:cd:a1:46:5e:f7:c6:22:41:5b:d2:c7:9d: 3f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1B:FF:55:EB:76:22:39:4B:37:80:E7:F8:00:52:32:44:25:D1:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/850665c6-2c75-3d29-a8cf-128f11029970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:17:2c:3a:45:66:1b:5d:ed:33:41:f3:e8:51:b5:9c:fd:c3: 3e:42:82:95:bc:69:1c:91:83:4b:ab:77:c4:de:b9:02:fc:cc: 51:0b:f8:d2:41:e7:7f:f0:ec:63:67:3d:f4:cb:57:0e:ba:fe: d2:f2:4d:26:37:cd:45:eb:5d:79:06:88:14:ac:da:d4:1f:c6: 96:5e:c9:07:18:aa:93:59:1a:9a:45:bf:01:a3:5d:dc:e7:65: ce:b7:01:07:8e:bc:05:b9:be:0e:5f:d0:e1:e4:04:a4:82:c5: f0:d5:60:d7:08:cf:53:3f:0d:3f:ea:2f:0f:c3:82:bc:ac:fd: d3:4c:8a:a5:02:95:07:dd:a5:86:57:32:53:d1:20:2a:1a:e1: c9:04:4a:e3:4d:df:6c:51:e0:87:cc:ed:8f:49:2d:42:2e:9d: b4:15:77:a8:3c:29:d1:06:c2:8f:64:cd:e6:bd:33:8d:e0:14: 58:f1:bc:7b:1a:9c:15:34:35:41:b7:84:66:0a:b7:de:66:6a: 57:ec:40:e7:11:23:92:21:d2:d2:c3:3f:15:0f:9a:46:e5:57: e0:e5:6e:27:c9:2b:44:be:f5:e7:43:65:2f:5f:a8:13:b4:cd: 27:9e:c9:95:de:d6:47:a8:7e:d5:21:ce:d6:6e:be:cf:fc:37: 29:58:43:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nItx73VkAME74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ODYxYWMxYTEtMTI0Mi00ZTU1LTlmNDgtM2JhMzFjOWJlYmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZKRWwdwcpgfVJ7xazcQWnKWraRm/STwNeea fvN/uQNHE/eBJAJMRurDth8SSmLhZn+qendYtKrQ9kcVya1ic+VbE5XPrxuhGBW3 9+exV35eSeuhozJ8Eq6XM8ErFb3tyoUBJn6RwRAw4Y5cZQyqwkRTdBbcDlex0AvX edjiFPj27QWTYaBWL/c5OQyl2uT2T7h+wrhDiHw283wXMb+LZSBORRgrcmpt5poU pZz/Ijd3gTPnKgtGlDEhDRFB2Zc2IyS4mvsqorP91LBOsZvlYLLunngVQaeEW3oO joyQKpv+aVUy92WGidvTbKEJcKdtyx7NoUZe98YiQVvSx50/mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4b/1XrdiI5SzeA5/gAUjJEJdEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvODUwNjY1YzYtMmM3NS0z ZDI5LWE4Y2YtMTI4ZjExMDI5OTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJt1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUXLDpFZhtd7TNB8+hRtZz9wz5CgpW8aRyRg0urd8TeuQL8zFEL+NJB 53/w7GNnPfTLVw66/tLyTSY3zUXrXXkGiBSs2tQfxpZeyQcYqpNZGppFvwGjXdzn Zc63AQeOvAW5vg5f0OHkBKSCxfDVYNcIz1M/DT/qLw/Dgrys/dNMiqUClQfdpYZX MlPRICoa4ckESuNN32xR4IfM7Y9JLUIunbQVd6g8KdEGwo9kzea9M43gFFjxvHsa nBU0NUG3hGYKt95malfsQOcRI5Ih0tLDPxUPmkblV+DlbifJK0S+9edDZS9fqBO0 zSeeyZXe1keoftUhztZuvs/8NylYQ6E= -----END CERTIFICATE-----Generated at Thu Mar 26 08:30:05 2026 by rpki-client