$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/bda2f7a7-dee6-3527-9211-66fbad31be85.roa File: bda2f7a7-dee6-3527-9211-66fbad31be85.roa (raw, json) Hash identifier: rjX+XnqgiYb/ntMDpDXvdNzYVWpuyCZ9SFsP2tTAbTA= Subject key identifier: 20:A5:71:A2:15:15:89:DE:20:98:A9:3B:98:67:DE:68:8C:47:98:7E Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584D44FA64217678B1B078D2F3C0 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/bda2f7a7-dee6-3527-9211-66fbad31be85.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 13511 IP address blocks: 192.155.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:64:21:76:78:b1:b0:78:d2:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=3430a7b3-f667-45c0-9769-d927beea2746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:8d:b5:36:ee:4a:61:6a:48:fd:4a:e2:b9: 47:bf:c0:e4:29:06:f2:d2:c9:ff:10:90:33:15:c1: 88:d9:24:8a:2b:8f:1f:c9:3d:b7:74:a5:e3:7c:25: 9e:f5:70:9a:85:84:d9:70:09:f8:6b:1d:0f:b1:84: 4d:00:a5:fa:95:73:9b:45:e5:50:b4:8b:6f:e9:ba: 15:b1:22:43:aa:ce:5d:16:1e:30:9d:9d:a1:12:27: 4d:4e:bc:06:92:f9:b9:83:f5:8f:85:3d:f9:e5:03: c7:fd:23:80:ec:b4:f4:93:f3:98:ee:ef:4c:d7:0e: 6d:66:5a:d6:5d:a1:8a:f8:0d:44:6b:2f:2f:bb:f0: ba:f9:67:22:51:c2:6c:3d:b3:de:a2:77:3c:b2:34: 23:73:e1:5b:92:a0:71:24:48:22:20:b2:28:23:5b: 50:77:bd:89:52:c3:77:49:bf:23:57:b3:f8:ce:5f: 6b:4d:17:55:40:2d:3d:7c:94:69:ba:d2:c5:6a:5e: 91:16:2d:48:a6:8e:4e:ac:80:38:de:38:c2:ab:8f: 2c:c5:f6:62:19:b2:4d:9d:0d:db:fa:ea:f2:79:76: 29:35:e4:7a:16:d3:74:3e:5c:00:76:b2:42:b0:35: d5:25:83:a7:e4:4a:bd:ed:d1:e6:3a:5a:24:29:56: 75:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A5:71:A2:15:15:89:DE:20:98:A9:3B:98:67:DE:68:8C:47:98:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/bda2f7a7-dee6-3527-9211-66fbad31be85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:bc:8e:71:02:ed:23:78:0b:ee:4b:8d:f9:73:cc:3f:4f:8c: ef:e1:88:d9:e2:86:94:75:2c:f7:5e:3c:c7:c4:62:35:44:da: c9:32:31:f0:03:59:2f:48:f7:38:3d:ad:14:ea:28:24:a6:41: d6:41:72:9d:0b:5f:e1:16:e0:7e:d8:b8:1d:13:a3:4f:70:ee: f6:7f:98:fd:c6:f2:21:67:0e:d7:8e:ef:b4:f9:57:dd:4a:ac: 39:a4:ce:fe:24:d3:c7:56:26:3b:3a:4d:db:24:28:12:0a:02: 1d:8a:e3:47:d1:bf:45:88:0c:5e:09:48:3c:a1:2e:15:ff:d9: 59:64:5c:38:48:d7:52:73:17:2c:96:33:c2:13:bc:e8:68:d8: 5a:f9:90:c2:da:f2:a1:aa:03:ba:15:33:ac:53:21:c6:a6:8f: 1c:71:56:76:ed:59:ce:67:54:4c:7a:2d:76:9e:c8:0e:da:f5: 1a:7a:8c:10:58:ed:48:62:b2:86:40:c3:36:f7:bd:5b:ab:13: 09:90:39:22:e3:11:f6:1d:01:fb:6a:13:c0:2e:d2:e4:ea:98: 3d:7c:f0:e7:17:b5:86:9b:fd:58:61:d5:19:72:87:cf:fe:75: e3:92:55:39:43:0c:3b:2a:74:41:23:6d:9a:59:a1:0f:97:46: 72:f8:50:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mQhdnixsHjS88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MzQzMGE3YjMtZjY2Ny00NWMwLTk3NjktZDkyN2JlZWEyNzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuguNtTbuSmFqSP1K4rlHv8DkKQby0sn/EJAz FcGI2SSKK48fyT23dKXjfCWe9XCahYTZcAn4ax0PsYRNAKX6lXObReVQtItv6boV sSJDqs5dFh4wnZ2hEidNTrwGkvm5g/WPhT355QPH/SOA7LT0k/OY7u9M1w5tZlrW XaGK+A1Eay8vu/C6+WciUcJsPbPeonc8sjQjc+FbkqBxJEgiILIoI1tQd72JUsN3 Sb8jV7P4zl9rTRdVQC09fJRputLFal6RFi1Ipo5OrIA43jjCq48sxfZiGbJNnQ3b +uryeXYpNeR6FtN0PlwAdrJCsDXVJYOn5Eq97dHmOlokKVZ1LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCClcaIVFYneIJipO5hn3miMR5h+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvYmRhMmY3YTctZGVlNi0z NTI3LTkyMTEtNjZmYmFkMzFiZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJt2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIC8jnEC7SN4C+5LjflzzD9PjO/hiNnihpR1LPdePMfEYjVE2skyMfAD WS9I9zg9rRTqKCSmQdZBcp0LX+EW4H7YuB0To09w7vZ/mP3G8iFnDteO77T5V91K rDmkzv4k08dWJjs6TdskKBIKAh2K40fRv0WIDF4JSDyhLhX/2VlkXDhI11JzFyyW M8ITvOho2Fr5kMLa8qGqA7oVM6xTIcamjxxxVnbtWc5nVEx6LXaeyA7a9Rp6jBBY 7UhisoZAwzb3vVurEwmQOSLjEfYdAftqE8Au0uTqmD188OcXtYab/Vhh1Rlyh8/+ deOSVTlDDDsqdEEjbZpZoQ+XRnL4UM0= -----END CERTIFICATE-----Generated at Thu Mar 26 11:11:09 2026 by rpki-client