$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/c1c1ccbf-88d2-3b98-9cff-bd5858f77b3c.roa File: c1c1ccbf-88d2-3b98-9cff-bd5858f77b3c.roa (raw, json) Hash identifier: 2RkTvPmm9Cex/3gWDARTPfBz+qdxgCGXp0M7HNuPpZ4= Subject key identifier: 56:C3:2D:A7:B5:8D:D5:96:11:3E:4C:CC:EE:91:F8:C2:80:9D:32:28 Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584D44FA6A847692BE6FE04CF900 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/c1c1ccbf-88d2-3b98-9cff-bd5858f77b3c.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 13511 IP address blocks: 192.155.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:6a:84:76:92:be:6f:e0:4c:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=76313fdc-daa5-4f7d-b82d-79fbca14b425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c8:ab:9f:2d:19:de:81:32:bb:09:c6:f7:a3: 9d:44:c7:38:15:ae:72:c8:63:fe:6b:e2:88:29:e7: 4f:29:25:2d:76:78:95:47:ec:8d:b3:6c:ff:4e:ae: 04:d9:03:11:9f:bb:fc:34:1b:5f:a2:cf:cd:bc:a8: bf:3d:a1:2a:d0:36:f8:c1:73:78:4f:92:16:ab:ef: 00:86:6e:c8:9f:df:33:e8:b6:25:2a:b5:34:5a:de: 09:d4:bc:b8:bc:ed:0a:d8:88:1f:c4:2c:34:57:18: a8:d5:92:d9:34:17:29:5f:63:6c:a3:f6:35:1e:22: 33:35:7e:58:84:b1:bc:db:84:5d:ec:34:eb:b1:c3: 31:09:a4:f4:ae:bd:54:74:31:f9:11:c3:77:0e:aa: 85:5a:fa:27:dc:34:0b:9d:00:10:fd:c0:59:26:03: 74:e6:74:3d:de:59:f1:ae:18:d1:2b:90:5e:38:2a: f4:49:c3:40:1e:0b:38:c1:e6:b8:a5:e4:2e:1e:57: 6f:67:fd:ed:c2:cb:b2:8e:0b:c7:82:95:55:0c:6a: a8:a5:c4:31:64:5b:9a:6e:a4:1c:e6:2e:e4:5c:25: bd:cc:13:a8:64:97:70:52:83:4b:6d:75:21:6f:18: f3:97:be:c5:85:64:d5:31:8b:53:90:62:b5:11:73: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C3:2D:A7:B5:8D:D5:96:11:3E:4C:CC:EE:91:F8:C2:80:9D:32:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/c1c1ccbf-88d2-3b98-9cff-bd5858f77b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:39:29:cc:78:50:f1:e9:2e:02:9f:32:67:76:ac:ac:4c:c6: da:b7:03:f9:ee:4f:be:50:1f:86:26:4e:4e:37:f7:9e:c9:ef: 22:66:ba:35:33:fd:2a:7b:32:79:ee:cf:9d:1e:2c:12:52:60: 8d:64:61:29:68:a5:1d:35:ec:99:36:84:13:a2:5e:6b:55:26: 3a:2c:ee:0d:af:56:f9:0f:8c:b3:1b:20:c0:e9:3f:a7:a7:69: 79:ff:53:14:0f:b8:da:95:73:3f:7f:70:34:3d:d6:6e:cc:b8: 38:07:11:c4:fc:4f:d7:ba:0c:2a:c1:2d:f4:f0:cc:66:1f:25: 9c:a0:40:fc:a5:75:47:ac:d5:ec:12:84:07:45:43:df:d9:39: 3b:3d:db:fc:88:a9:35:58:5c:5e:fb:e9:fb:56:c8:80:8b:99: 53:58:e7:a2:cb:f4:76:a8:ad:48:2a:6e:9a:2b:ee:0a:5f:e6: a4:87:44:f3:52:82:5f:9f:17:ac:3f:99:20:09:42:a5:6c:96: 11:42:98:10:ec:cd:72:a2:0a:aa:18:df:aa:2f:77:c4:55:03: e4:a1:27:db:47:2e:f8:42:7a:77:31:f9:71:b8:79:3d:03:78: 2b:9c:37:21:0a:da:67:98:dd:4c:c4:2a:03:79:93:3d:6f:bc: 93:cf:d6:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mqEdpK+b+BM+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NzYzMTNmZGMtZGFhNS00ZjdkLWI4MmQtNzlmYmNhMTRiNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncirny0Z3oEyuwnG96OdRMc4Fa5yyGP+a+KI KedPKSUtdniVR+yNs2z/Tq4E2QMRn7v8NBtfos/NvKi/PaEq0Db4wXN4T5IWq+8A hm7In98z6LYlKrU0Wt4J1Ly4vO0K2IgfxCw0Vxio1ZLZNBcpX2Nso/Y1HiIzNX5Y hLG824Rd7DTrscMxCaT0rr1UdDH5EcN3DqqFWvon3DQLnQAQ/cBZJgN05nQ93lnx rhjRK5BeOCr0ScNAHgs4wea4peQuHldvZ/3twsuyjgvHgpVVDGqopcQxZFuabqQc 5i7kXCW9zBOoZJdwUoNLbXUhbxjzl77FhWTVMYtTkGK1EXOEdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbDLae1jdWWET5MzO6R+MKAnTIoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvYzFjMWNjYmYtODhkMi0z Yjk4LTljZmYtYmQ1ODU4Zjc3YjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJt9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIM5Kcx4UPHpLgKfMmd2rKxMxtq3A/nuT75QH4YmTk43957J7yJmujUz /Sp7Mnnuz50eLBJSYI1kYSlopR017Jk2hBOiXmtVJjos7g2vVvkPjLMbIMDpP6en aXn/UxQPuNqVcz9/cDQ91m7MuDgHEcT8T9e6DCrBLfTwzGYfJZygQPyldUes1ewS hAdFQ9/ZOTs92/yIqTVYXF776ftWyICLmVNY56LL9HaorUgqbpor7gpf5qSHRPNS gl+fF6w/mSAJQqVslhFCmBDszXKiCqoY36ovd8RVA+ShJ9tHLvhCencx+XG4eT0D eCucNyEK2meY3UzEKgN5kz1vvJPP1lg= -----END CERTIFICATE-----Generated at Thu Mar 26 09:59:51 2026 by rpki-client