$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/a2d25287-ac92-37a3-91a7-a07f2ef5962e.roa File: a2d25287-ac92-37a3-91a7-a07f2ef5962e.roa (raw, json) Hash identifier: H2MOFFVw8Ot5tvEhTGggdYf+VQAuUln44pSmVXp5c7M= Subject key identifier: DD:9C:68:72:4B:61:83:DE:EC:2E:F8:5F:05:C8:79:A9:9F:1B:49:0D Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584D44FA6A43F4CF7C89EEA32780 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/a2d25287-ac92-37a3-91a7-a07f2ef5962e.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 13511 IP address blocks: 192.155.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:6a:43:f4:cf:7c:89:ee:a3:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=fd1ef48e-5764-42f6-b1db-3b917ce58b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1f:e7:be:44:26:b2:34:f4:0e:8e:7d:33:73: 5c:c6:66:9a:bf:08:f3:8d:e3:2e:fa:1f:22:82:98: c7:02:9c:95:ae:78:3b:74:df:fa:ad:02:8f:d0:7e: 27:de:90:c5:f0:1d:24:91:c2:d3:35:75:44:50:0e: 27:b5:a4:84:2f:d2:85:02:f8:0d:4e:84:47:ce:d0: 29:43:f8:95:61:4a:03:12:f0:70:8c:70:e3:6b:2f: 53:2d:7c:b3:12:05:84:b9:c6:8b:60:ff:f1:7a:79: 61:53:27:e0:6c:82:2d:0a:d8:f3:e9:ce:06:f6:ac: e6:1f:a7:1f:87:b1:99:28:1e:9f:47:d4:a7:17:f4: be:16:cb:3a:44:29:15:d4:03:25:c9:62:62:c0:e3: 0b:9f:6b:29:a9:85:0c:b1:8a:be:00:55:ca:38:71: 20:53:86:76:87:d3:ff:a0:68:86:47:67:b9:0e:e7: 1a:12:cd:20:f0:c5:b1:92:8a:2a:23:a1:50:d5:f0: 1a:98:99:92:e2:f7:1f:2c:79:ef:89:ab:87:aa:12: 20:c1:db:15:44:31:8a:e6:35:78:94:c7:5a:72:14: 13:93:dc:b4:b8:58:0a:c9:1a:1e:76:a9:20:11:63: bc:56:9c:27:47:13:a7:13:21:ab:a8:f3:de:d1:76: 1e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9C:68:72:4B:61:83:DE:EC:2E:F8:5F:05:C8:79:A9:9F:1B:49:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/a2d25287-ac92-37a3-91a7-a07f2ef5962e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:56:2d:e5:fa:98:0b:5b:a3:83:a2:7b:2a:fc:c8:cd:cd:44: ae:dc:2e:c6:03:4f:db:b3:11:a2:b4:c2:d0:5b:b2:46:94:db: d7:8f:73:14:f5:16:08:26:8a:f3:1d:88:78:f4:7d:06:80:93: 6b:b9:a0:d6:4c:27:b2:5b:82:23:45:ad:d5:ca:e9:58:32:8e: 5d:3b:88:68:72:d2:5f:aa:1e:e7:75:a3:f5:42:7d:da:e6:d3: 1b:d7:c0:69:76:1d:00:69:74:db:bb:57:e6:2c:ba:cd:16:3d: f2:8d:8f:eb:ee:79:69:64:32:6a:10:00:dd:f1:6c:65:cf:78: 46:fe:68:21:45:14:0f:f6:e9:71:4b:4d:2e:c9:e0:6a:a4:e6: db:f3:11:1c:b0:02:45:e0:d2:09:48:42:28:3a:ae:cb:07:75: ce:10:a7:aa:d7:c6:29:c1:69:80:0f:69:a2:8d:ff:8b:80:78: 0b:9e:d1:91:5a:ed:a5:5b:aa:c2:e7:71:14:1e:f8:6e:ac:f7: 0a:a7:39:79:aa:73:68:5f:14:74:61:f6:d9:1a:66:e1:81:77: 0e:2f:b0:65:6c:68:fb:46:3b:f5:38:a1:75:3e:f4:cb:e5:1b: 80:af:34:25:bc:53:de:4f:a2:04:44:70:4c:a8:56:c8:5d:2e: 64:f4:44:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mpD9M98ie6jJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZmQxZWY0OGUtNTc2NC00MmY2LWIxZGItM2I5MTdjZTU4YjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh/nvkQmsjT0Do59M3NcxmaavwjzjeMu+h8i gpjHApyVrng7dN/6rQKP0H4n3pDF8B0kkcLTNXVEUA4ntaSEL9KFAvgNToRHztAp Q/iVYUoDEvBwjHDjay9TLXyzEgWEucaLYP/xenlhUyfgbIItCtjz6c4G9qzmH6cf h7GZKB6fR9SnF/S+Fss6RCkV1AMlyWJiwOMLn2spqYUMsYq+AFXKOHEgU4Z2h9P/ oGiGR2e5DucaEs0g8MWxkooqI6FQ1fAamJmS4vcfLHnviauHqhIgwdsVRDGK5jV4 lMdachQTk9y0uFgKyRoedqkgEWO8VpwnRxOnEyGrqPPe0XYeJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2caHJLYYPe7C74XwXIeamfG0kNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvYTJkMjUyODctYWM5Mi0z N2EzLTkxYTctYTA3ZjJlZjU5NjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJtyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZWLeX6mAtbo4Oieyr8yM3NRK7cLsYDT9uzEaK0wtBbskaU29ePcxT1 FggmivMdiHj0fQaAk2u5oNZMJ7JbgiNFrdXK6Vgyjl07iGhy0l+qHud1o/VCfdrm 0xvXwGl2HQBpdNu7V+Ysus0WPfKNj+vueWlkMmoQAN3xbGXPeEb+aCFFFA/26XFL TS7J4Gqk5tvzERywAkXg0glIQig6rssHdc4Qp6rXxinBaYAPaaKN/4uAeAue0ZFa 7aVbqsLncRQe+G6s9wqnOXmqc2hfFHRh9tkaZuGBdw4vsGVsaPtGO/U4oXU+9Mvl G4CvNCW8U95PogREcEyoVshdLmT0REw= -----END CERTIFICATE-----Generated at Thu Mar 26 11:10:48 2026 by rpki-client