$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/d311ea91-f079-380f-a5bf-8adfe8c9a212.roa File: d311ea91-f079-380f-a5bf-8adfe8c9a212.roa (raw, json) Hash identifier: kWiOsPsthq6F21Ti6jJOUyJUKQghDIiP3b5XuErEuZU= Subject key identifier: EA:20:87:F3:7C:90:15:C7:A3:BA:37:D6:D0:F6:47:59:D2:5F:EC:EE Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584B85C39A52EAC324EC14928340 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/d311ea91-f079-380f-a5bf-8adfe8c9a212.roa Signing time: Tue 14 Oct 2025 20:24:20 +0000 ROA not before: Tue 14 Oct 2025 20:24:20 +0000 ROA not after: Mon 12 Jan 2026 21:24:20 +0000 asID: 13511 IP address blocks: 192.155.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:c3:9a:52:ea:c3:24:ec:14:92:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Oct 14 20:24:20 2025 GMT Not After : Jan 12 21:24:20 2026 GMT Subject: CN=d1b045dc-49e4-4987-acd0-fabfd14ff67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7c:5c:70:3a:43:e3:a3:d0:b2:4a:f2:b2:28: 6b:5b:54:f0:b3:c2:26:4a:6e:4f:bf:17:95:00:01: 51:bc:99:34:f0:f7:f9:f9:91:9a:4a:bc:68:8c:08: a6:c3:42:18:a7:44:bc:b5:36:c0:cb:ed:e8:73:4e: a2:97:84:40:5c:3a:02:a0:f8:75:30:d0:02:dc:ae: 1f:ba:4a:9d:78:32:f2:b0:7c:f2:51:f9:cd:c9:c4: 1c:79:2c:ed:ee:69:7c:0a:4b:a5:36:b4:84:f3:dc: 92:b9:67:26:b3:de:8a:c6:ba:28:d1:0f:b7:16:59: ca:c1:42:cc:f4:fa:b3:32:c3:ca:e6:b1:15:b2:0e: b9:e2:cd:5e:7a:6f:6f:21:08:65:1e:b4:a1:ce:4d: 75:0c:5f:d1:c4:44:19:13:7f:8e:ea:c7:71:0f:11: 77:d6:1a:e4:7d:b6:02:1c:e9:d7:7e:01:16:74:47: 96:a8:96:dd:08:ea:71:8e:77:b1:49:97:fe:26:08: 10:56:a7:3b:c7:b5:f8:29:37:dd:83:dc:ed:c0:6a: 4b:32:54:bd:bd:63:79:b9:85:1f:fb:fd:d6:17:77: 67:e5:0d:22:98:0c:39:db:86:d7:9d:a6:3e:71:ce: b8:fc:6c:89:66:87:52:92:c5:7d:6f:9a:d5:b3:3e: 32:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:20:87:F3:7C:90:15:C7:A3:BA:37:D6:D0:F6:47:59:D2:5F:EC:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/d311ea91-f079-380f-a5bf-8adfe8c9a212.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:07:5a:45:2c:fd:28:bc:62:53:d4:7c:b7:f4:2f:79:c5:ff: a6:47:19:75:0d:c6:68:35:3d:d5:1b:26:5f:72:19:5d:cc:91: e8:1e:f3:50:b2:a6:15:5a:19:1b:03:c5:08:4b:35:e5:d0:00: b4:59:d9:d1:c6:de:05:34:61:db:ad:55:78:a6:dc:92:5c:65: fa:8e:6a:e3:a9:01:af:44:d6:43:7b:8c:d1:c5:02:5c:3b:94: c9:18:e5:14:b6:76:f1:13:dc:49:81:f0:5b:5b:fe:8e:68:b2: 0f:b5:1d:0f:1b:3e:8b:31:0a:13:95:18:bf:d0:8f:7e:17:78: ee:5e:d6:60:ef:3c:d4:c4:df:26:93:d7:b7:49:cd:94:0d:24: 58:8e:40:a5:c3:7e:ef:a6:82:ab:9f:c2:b7:39:1c:82:78:18: cc:2f:84:15:72:cb:c1:82:c2:c1:cc:e3:63:e2:b6:ef:87:41: 80:cb:a4:6c:ed:cd:ac:9a:17:54:4a:66:ab:67:f8:d9:e0:a6: a7:59:90:ca:b8:14:01:39:58:ed:e8:de:08:12:02:ca:13:0d: 19:e2:fa:76:60:81:ef:aa:29:82:c0:19:0f:2e:6e:e6:43:ad: 99:4a:03:db:f7:1b:e4:f6:0d:20:5a:dd:46:da:b1:d2:1e:4e: 92:6c:61:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFw5pS6sMk7BSSg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI1MTAxNDIwMjQyMFoXDTI2MDExMjIxMjQyMFowLzEtMCsGA1UEAxMk ZDFiMDQ1ZGMtNDllNC00OTg3LWFjZDAtZmFiZmQxNGZmNjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3xccDpD46PQskrysihrW1Tws8ImSm5PvxeV AAFRvJk08Pf5+ZGaSrxojAimw0IYp0S8tTbAy+3oc06il4RAXDoCoPh1MNAC3K4f ukqdeDLysHzyUfnNycQceSzt7ml8CkulNrSE89ySuWcms96Kxroo0Q+3FlnKwULM 9PqzMsPK5rEVsg654s1eem9vIQhlHrShzk11DF/RxEQZE3+O6sdxDxF31hrkfbYC HOnXfgEWdEeWqJbdCOpxjnexSZf+JggQVqc7x7X4KTfdg9ztwGpLMlS9vWN5uYUf +/3WF3dn5Q0imAw524bXnaY+cc64/GyJZodSksV9b5rVsz4ytQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOogh/N8kBXHo7o31tD2R1nSX+zuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvZDMxMWVhOTEtZjA3OS0z ODBmLWE1YmYtOGFkZmU4YzlhMjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAHWkUs/Si8YlPUfLf0L3nF/6ZHGXUNxmg1PdUbJl9yGV3Mkege81Cy phVaGRsDxQhLNeXQALRZ2dHG3gU0YdutVXim3JJcZfqOauOpAa9E1kN7jNHFAlw7 lMkY5RS2dvET3EmB8Ftb/o5osg+1HQ8bPosxChOVGL/Qj34XeO5e1mDvPNTE3yaT 17dJzZQNJFiOQKXDfu+mgqufwrc5HIJ4GMwvhBVyy8GCwsHM42Pitu+HQYDLpGzt zayaF1RKZqtn+NngpqdZkMq4FAE5WO3o3ggSAsoTDRni+nZgge+qKYLAGQ8ubuZD rZlKA9v3G+T2DSBa3UbasdIeTpJsYV0= -----END CERTIFICATE-----Generated at Mon Oct 20 18:31:49 2025 by rpki-client