$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/d311ea91-f079-380f-a5bf-8adfe8c9a212.roa File: d311ea91-f079-380f-a5bf-8adfe8c9a212.roa (raw, json) Hash identifier: Ilz7pmkLUUYve+5mrtL4kK/hgiCqXPej1V9JPF3GrQU= Subject key identifier: B7:10:31:6C:72:C9:5E:4F:DE:24:3D:58:63:71:F8:3D:C4:0C:2B:C9 Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584D44FA71C4999F5B14E939AEC0 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/d311ea91-f079-380f-a5bf-8adfe8c9a212.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 13511 IP address blocks: 192.155.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:71:c4:99:9f:5b:14:e9:39:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=4937fab4-7727-4475-9d64-7ac30dca6ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:57:5c:63:8f:ae:c5:0a:78:e9:87:b2:b4:46: 2c:15:3c:45:d0:ce:99:9b:d8:c6:9c:37:c6:d8:1c: 02:1c:fc:dd:dd:d3:17:c7:e3:75:61:a5:6f:78:27: 5a:87:d3:20:df:fe:c4:a8:76:0f:2c:d4:b3:62:24: 98:08:a1:35:2f:13:2e:6b:5e:c8:b2:82:f2:f4:80: 69:d0:37:bc:51:41:76:fd:b7:6d:28:3f:ee:ed:57: 2c:2b:b4:8b:66:7d:29:49:c7:1d:6d:b2:a5:47:8d: a8:ed:5c:df:10:ac:6c:06:b8:40:87:e3:5f:d3:8d: fb:23:46:db:31:7f:20:d8:33:98:4e:b7:5b:79:47: 7c:28:5f:72:56:d9:01:f8:07:dd:eb:90:00:ba:15: 3e:a5:d9:f4:88:4b:41:58:14:7f:5c:8d:4e:06:2b: fa:5c:42:30:d8:81:4d:e2:a3:ac:ed:b4:02:f1:61: 18:3f:3c:79:97:33:89:2d:08:14:39:42:99:52:56: 75:79:8e:07:b8:10:ae:ff:3d:cd:24:18:5f:9a:50: 0c:d2:d5:cf:79:76:91:23:b8:6f:5f:bc:3b:99:08: 91:65:98:c2:62:a9:bd:45:0c:6c:aa:93:7d:3d:48: 43:eb:c2:06:50:cc:d7:71:00:56:97:e4:ac:97:4e: 35:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:10:31:6C:72:C9:5E:4F:DE:24:3D:58:63:71:F8:3D:C4:0C:2B:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/d311ea91-f079-380f-a5bf-8adfe8c9a212.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c0:3e:6d:08:a1:4e:b5:b5:c3:07:4d:d9:18:b3:ea:03:70: f3:76:75:66:08:5c:05:46:1a:08:0a:f1:81:4e:0a:4a:d3:cb: 0b:a4:47:76:3d:64:16:85:89:82:dc:c6:39:58:13:a3:21:5a: ac:3c:91:cd:6b:77:79:fa:76:a0:16:17:a5:e0:5e:a2:38:a9: fb:aa:22:01:ac:c1:4a:6e:9f:11:aa:73:50:90:b4:af:2a:14: 05:b1:43:c8:c7:cc:a6:1d:65:0b:7b:9e:f1:2a:60:4d:86:32: a5:49:6b:12:02:82:8f:47:5a:6f:72:05:1f:43:b6:02:2f:bf: 4e:d2:21:00:a5:fe:b4:42:ee:b3:88:32:de:3c:e7:80:a4:19: 9d:2a:42:e4:74:1f:54:1d:53:17:a3:e5:a8:35:09:1a:b3:18: 0a:d3:78:75:34:20:7c:22:66:a9:60:d8:c5:cd:58:6f:b1:e1: 4c:82:0c:da:af:76:64:f1:e3:f5:0a:c5:53:ab:d8:c6:5f:28: 43:ca:0f:b0:dd:3d:ab:50:51:5e:a3:e4:f7:33:27:27:bf:a4: 44:ef:24:54:ed:8f:8a:1f:64:b2:9b:d9:59:a4:88:08:b3:a1: 58:ff:95:2f:b0:16:8a:70:7a:f8:e1:ca:7d:de:20:01:fa:ec: 7a:d9:ce:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nHEmZ9bFOk5rsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NDkzN2ZhYjQtNzcyNy00NDc1LTlkNjQtN2FjMzBkY2E2ZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgldcY4+uxQp46YeytEYsFTxF0M6Zm9jGnDfG 2BwCHPzd3dMXx+N1YaVveCdah9Mg3/7EqHYPLNSzYiSYCKE1LxMua17IsoLy9IBp 0De8UUF2/bdtKD/u7VcsK7SLZn0pSccdbbKlR42o7VzfEKxsBrhAh+Nf0437I0bb MX8g2DOYTrdbeUd8KF9yVtkB+Afd65AAuhU+pdn0iEtBWBR/XI1OBiv6XEIw2IFN 4qOs7bQC8WEYPzx5lzOJLQgUOUKZUlZ1eY4HuBCu/z3NJBhfmlAM0tXPeXaRI7hv X7w7mQiRZZjCYqm9RQxsqpN9PUhD68IGUMzXcQBWl+Ssl041JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcQMWxyyV5P3iQ9WGNx+D3EDCvJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvZDMxMWVhOTEtZjA3OS0z ODBmLWE1YmYtOGFkZmU4YzlhMjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbAPm0IoU61tcMHTdkYs+oDcPN2dWYIXAVGGggK8YFOCkrTywukR3Y9 ZBaFiYLcxjlYE6MhWqw8kc1rd3n6dqAWF6XgXqI4qfuqIgGswUpunxGqc1CQtK8q FAWxQ8jHzKYdZQt7nvEqYE2GMqVJaxICgo9HWm9yBR9DtgIvv07SIQCl/rRC7rOI Mt4854CkGZ0qQuR0H1QdUxej5ag1CRqzGArTeHU0IHwiZqlg2MXNWG+x4UyCDNqv dmTx4/UKxVOr2MZfKEPKD7DdPatQUV6j5PczJye/pETvJFTtj4ofZLKb2VmkiAiz oVj/lS+wFopwevjhyn3eIAH67HrZzsg= -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:40 2026 by rpki-client