$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/ae32667d-20dc-38d0-9173-85d343fffeae.roa File: ae32667d-20dc-38d0-9173-85d343fffeae.roa (raw, json) Hash identifier: 7XLyiojpHpInKM7KW8ePJMtNQSPKhRB9YHTSrmM1gNU= Subject key identifier: 13:4E:60:18:CE:8E:D0:68:C5:EE:DC:2E:19:9F:0D:67:66:78:37:AE Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584D44FA6A1D70BD706BC1859A00 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/ae32667d-20dc-38d0-9173-85d343fffeae.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 13511 IP address blocks: 192.155.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:6a:1d:70:bd:70:6b:c1:85:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=f03027b2-e577-428e-82a7-fa10c08764d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9c:df:f2:a1:ba:13:26:20:c7:71:0d:56:49: 26:5b:e1:ec:9d:6b:99:64:c7:5e:31:a6:07:c7:d3: 43:7b:1b:c2:5a:56:5f:6e:fd:3b:b7:dc:26:d5:22: 8e:3b:d6:d9:25:a9:96:f6:6f:2d:68:33:85:b2:10: b1:ce:de:b8:23:54:94:0a:b0:f7:0d:08:02:25:8c: e4:8c:23:3b:e3:05:77:7f:af:52:a4:98:ca:56:33: 25:bd:2a:9a:8a:08:d8:51:f7:d4:bb:9a:bb:02:fa: 1f:e6:17:4e:da:19:ff:db:cf:c2:2e:a0:d9:91:4d: 4a:c6:b4:5a:0f:97:4a:39:2b:5f:63:b4:1b:69:c1: 9e:af:72:ae:0d:bf:8d:f1:4b:79:d4:c8:f4:49:2e: 6b:be:57:8a:e4:42:54:15:ed:c2:4f:2a:fd:62:02: f5:53:0d:7e:33:39:7f:a5:84:2a:14:8e:d1:8a:09: da:34:c4:61:5f:03:96:ee:5e:ee:c4:e6:53:82:b4: cb:86:58:ce:bf:38:03:45:90:1e:ed:ac:d6:0f:e5: 26:b4:62:85:b5:25:51:3e:a2:4e:48:dc:fe:26:6d: cd:84:ad:cb:4e:d5:6a:79:c4:01:2b:58:d1:30:d8: ba:44:74:dd:c3:92:a6:96:d9:2a:a3:12:d6:86:1b: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4E:60:18:CE:8E:D0:68:C5:EE:DC:2E:19:9F:0D:67:66:78:37:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/ae32667d-20dc-38d0-9173-85d343fffeae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a3:67:3a:d0:d5:71:eb:27:41:d7:48:d5:80:82:51:af:d7: 99:07:8c:95:d6:04:63:5c:93:1e:4c:9d:44:22:32:fb:6b:93: 89:36:9a:6e:8e:50:01:50:3d:2b:8c:46:e8:22:46:9b:c7:61: 27:e4:64:54:1c:96:83:f3:35:5d:21:f1:b1:68:5c:a5:0d:8c: f0:92:0e:5a:c4:98:70:d6:1a:7a:2e:83:38:8c:05:b7:fc:a9: 7b:69:10:ff:65:2c:4a:1e:83:cc:a5:45:35:3a:15:d7:74:5c: 79:cb:28:46:85:ce:8d:2f:4d:b3:ff:ac:f9:cd:bd:8d:81:62: 91:3d:fb:18:da:47:0d:8c:31:b9:8b:56:ca:42:23:ac:93:56: 70:dd:35:f5:63:42:d7:1c:e0:9e:f2:bb:51:9b:89:24:99:06: e4:f4:dd:c0:d0:0c:5a:6e:3c:cc:97:47:75:1f:a5:d3:9f:55: f2:54:5a:e2:07:54:43:10:b4:d2:28:4d:c6:a5:69:62:50:99: f3:f8:2a:4d:e2:6f:10:3a:99:8f:e8:ef:20:f6:a0:e1:d8:4f: 30:a3:5f:87:f3:4e:b6:c3:8f:4b:af:7d:a1:d2:ca:9b:f4:aa: e5:14:82:c0:5b:58:9a:0a:7b:0e:40:c0:3a:61:21:1f:e8:f9: 97:5f:0e:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+modcL1wa8GFmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZjAzMDI3YjItZTU3Ny00MjhlLTgyYTctZmExMGMwODc2NGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJzf8qG6EyYgx3ENVkkmW+HsnWuZZMdeMaYH x9NDexvCWlZfbv07t9wm1SKOO9bZJamW9m8taDOFshCxzt64I1SUCrD3DQgCJYzk jCM74wV3f69SpJjKVjMlvSqaigjYUffUu5q7Avof5hdO2hn/28/CLqDZkU1KxrRa D5dKOStfY7QbacGer3KuDb+N8Ut51Mj0SS5rvleK5EJUFe3CTyr9YgL1Uw1+Mzl/ pYQqFI7RignaNMRhXwOW7l7uxOZTgrTLhljOvzgDRZAe7azWD+UmtGKFtSVRPqJO SNz+Jm3NhK3LTtVqecQBK1jRMNi6RHTdw5KmltkqoxLWhht1uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNOYBjOjtBoxe7cLhmfDWdmeDeuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvYWUzMjY2N2QtMjBkYy0z OGQwLTkxNzMtODVkMzQzZmZmZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJtyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2jZzrQ1XHrJ0HXSNWAglGv15kHjJXWBGNckx5MnUQiMvtrk4k2mm6O UAFQPSuMRugiRpvHYSfkZFQcloPzNV0h8bFoXKUNjPCSDlrEmHDWGnougziMBbf8 qXtpEP9lLEoeg8ylRTU6Fdd0XHnLKEaFzo0vTbP/rPnNvY2BYpE9+xjaRw2MMbmL VspCI6yTVnDdNfVjQtcc4J7yu1GbiSSZBuT03cDQDFpuPMyXR3UfpdOfVfJUWuIH VEMQtNIoTcalaWJQmfP4Kk3ibxA6mY/o7yD2oOHYTzCjX4fzTrbDj0uvfaHSypv0 quUUgsBbWJoKew5AwDphIR/o+ZdfDqw= -----END CERTIFICATE-----Generated at Thu Mar 26 10:00:55 2026 by rpki-client