$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/9f48b662-32d4-39d1-86c7-bb4f4f6ae937.roa File: 9f48b662-32d4-39d1-86c7-bb4f4f6ae937.roa (raw, json) Hash identifier: 9n6cREEHCy7z9YGF0daQ1+GRc3XrfS8YJhvsCmzpyIw= Subject key identifier: 43:50:01:F1:90:F9:0F:22:80:50:C4:03:FE:FB:31:43:D0:4B:AA:93 Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584D44FA6CA4B00B5DC52D47AAA8 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/9f48b662-32d4-39d1-86c7-bb4f4f6ae937.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 13511 IP address blocks: 192.155.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:6c:a4:b0:0b:5d:c5:2d:47:aa:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=503cd01f-5a97-4a9a-bd68-3fd6b76a0d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:4e:46:0c:64:b6:db:f3:76:2f:c9:da:5a: d9:fb:67:e0:00:57:fa:42:cc:f8:69:c2:8d:cb:37: 19:26:a0:b6:cf:98:56:1c:dd:b4:0b:16:1d:c5:f8: 77:b0:35:f4:8b:1d:cb:8a:00:15:5c:e4:5e:22:0a: 4a:64:5f:5d:33:32:fb:b2:1d:0c:a8:a7:34:6e:61: 05:68:29:80:7a:19:e6:2d:57:c2:10:61:e6:74:16: 1e:6c:a3:ad:c2:66:23:63:46:f3:1b:b8:a7:f4:b5: 7d:9a:00:5e:fb:20:f1:89:1b:f2:e0:0d:93:87:1d: 66:60:42:7d:93:51:63:09:e6:9f:1a:3d:be:4c:48: 66:6e:a7:f1:ef:33:fa:59:d7:58:8d:21:90:09:f0: 3e:7e:eb:cd:66:07:3a:c7:a9:ef:01:9f:65:e1:47: b2:6f:f6:74:da:0d:a8:2c:d3:54:96:ed:52:73:37: b6:3e:ff:e0:08:3f:0e:31:d0:58:39:3a:c1:dd:d4: c7:60:b6:af:3a:79:b4:4b:8b:40:bd:4a:db:71:28: 01:f1:c4:5e:4a:27:70:d5:c9:a1:f2:eb:92:c3:28: 02:e0:6f:e2:f9:7b:d1:e6:2e:55:4a:86:ef:43:5e: b3:9a:4f:dd:7d:9f:33:cd:05:d9:42:7e:c5:36:a4: e8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:50:01:F1:90:F9:0F:22:80:50:C4:03:FE:FB:31:43:D0:4B:AA:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/9f48b662-32d4-39d1-86c7-bb4f4f6ae937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:6b:90:5f:f3:70:d4:bc:0c:45:11:10:21:d7:ba:05:7d:4e: 7d:7d:9b:22:1e:98:d9:5d:5f:68:d8:73:d1:2b:e4:6c:ca:e5: e5:91:61:4e:69:58:47:35:d4:d3:98:af:42:0b:31:35:c3:44: f0:a4:ba:c4:f0:94:a8:a7:8e:68:01:df:d9:aa:95:36:f7:35: 97:f2:4c:50:d3:e6:0a:fd:8f:97:6c:aa:48:b1:03:6d:6a:5e: ad:44:82:b0:1b:1c:cf:70:eb:d5:2d:41:b8:5a:91:83:4a:c6: f7:d0:c9:16:4b:d8:aa:41:60:78:78:17:41:41:21:48:eb:ab: fa:22:21:01:58:4d:0c:40:c4:16:9e:ae:fc:27:cb:64:c4:ca: 35:37:11:9f:37:11:f1:46:98:ad:ca:c9:be:db:bb:f0:db:45: 3c:fd:1c:9b:f6:fb:e4:e6:c7:d1:32:28:d0:d0:42:2c:68:2d: a6:84:58:3e:b7:8f:f3:10:e3:dd:bd:4e:69:ea:78:dc:77:c4: eb:97:0b:dd:79:cf:aa:0d:cd:af:5f:ed:45:79:b3:2d:77:01: 73:58:e6:57:a3:00:79:82:c7:e4:8e:51:a3:0c:75:26:b0:63: 43:d0:d2:57:16:92:79:18:55:1d:86:d3:7c:1a:a2:8c:4e:4a: 08:06:30:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+myksAtdxS1HqqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NTAzY2QwMWYtNWE5Ny00YTlhLWJkNjgtM2ZkNmI3NmEwZDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuxORgxkttvzdi/J2lrZ+2fgAFf6Qsz4acKN yzcZJqC2z5hWHN20CxYdxfh3sDX0ix3LigAVXOReIgpKZF9dMzL7sh0MqKc0bmEF aCmAehnmLVfCEGHmdBYebKOtwmYjY0bzG7in9LV9mgBe+yDxiRvy4A2Thx1mYEJ9 k1FjCeafGj2+TEhmbqfx7zP6WddYjSGQCfA+fuvNZgc6x6nvAZ9l4Ueyb/Z02g2o LNNUlu1Scze2Pv/gCD8OMdBYOTrB3dTHYLavOnm0S4tAvUrbcSgB8cReSidw1cmh 8uuSwygC4G/i+XvR5i5VSobvQ16zmk/dfZ8zzQXZQn7FNqToSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENQAfGQ+Q8igFDEA/77MUPQS6qTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvOWY0OGI2NjItMzJkNC0z OWQxLTg2YzctYmI0ZjRmNmFlOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwJt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFrkF/zcNS8DEURECHXugV9Tn19myIemNldX2jYc9Er5GzK5eWRYU5p WEc11NOYr0ILMTXDRPCkusTwlKinjmgB39mqlTb3NZfyTFDT5gr9j5dsqkixA21q Xq1EgrAbHM9w69UtQbhakYNKxvfQyRZL2KpBYHh4F0FBIUjrq/oiIQFYTQxAxBae rvwny2TEyjU3EZ83EfFGmK3Kyb7bu/DbRTz9HJv2++Tmx9EyKNDQQixoLaaEWD63 j/MQ4929TmnqeNx3xOuXC915z6oNza9f7UV5sy13AXNY5lejAHmCx+SOUaMMdSaw Y0PQ0lcWknkYVR2G03waooxOSggGMEc= -----END CERTIFICATE-----Generated at Thu Mar 26 11:11:43 2026 by rpki-client