$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/dd2823ba-7ee2-3c32-b1fc-290399aa0470.roa File: dd2823ba-7ee2-3c32-b1fc-290399aa0470.roa (raw, json) Hash identifier: LFS8ZoYrzOJuwYZpoKzYbqjTu7uNzikdLoIK+Q4lhAc= Subject key identifier: 19:69:81:7D:CC:0B:66:62:09:6D:C7:EE:E2:A8:98:7C:AA:EE:BC:FB Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584D44FA65A7C6D28854B89B5640 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/dd2823ba-7ee2-3c32-b1fc-290399aa0470.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 13511 IP address blocks: 192.155.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:65:a7:c6:d2:88:54:b8:9b:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=96babcf9-df41-41ac-8924-1ea1903839d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f9:ab:f6:ba:a6:5e:b7:b6:de:e9:04:be:c1: 8c:44:0e:5a:0b:58:62:e8:92:69:5d:88:0d:67:cb: d9:f1:1d:a4:99:a2:46:47:b5:71:6a:3b:2c:f9:43: 7e:7b:c9:ae:5c:49:ea:b7:71:73:dd:60:11:a1:a6: ed:dc:34:53:89:64:63:6a:a3:07:61:2f:f0:5f:95: 72:df:41:fc:f8:fc:da:25:37:f2:72:f5:90:83:f9: 92:aa:a3:e9:aa:cf:4a:f8:f5:61:99:90:01:be:9f: aa:3e:31:4f:e6:89:b3:12:6f:a1:20:d5:79:ec:51: 38:92:18:b7:28:21:07:ff:73:6e:3e:17:3a:d3:10: 7c:dc:c6:e5:c8:7a:d8:8b:12:15:0c:38:39:8a:7e: ac:86:56:fb:e3:58:64:95:dc:83:27:18:e9:5e:eb: 71:d0:85:f9:1d:14:e3:c5:eb:af:3c:a0:70:75:82: 60:86:90:4e:1e:8a:0d:25:26:cc:c2:df:64:0b:ec: 33:17:88:5b:b5:be:13:61:a9:d8:98:dc:1d:a3:b9: 46:8c:58:fe:23:d4:4d:1e:98:cf:7c:eb:b8:e5:6a: cd:51:39:6b:d5:5a:a0:87:a8:ac:58:ee:2d:5d:f7: 41:12:62:58:70:3e:5c:bc:a7:f1:30:26:35:f4:a9: fb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:69:81:7D:CC:0B:66:62:09:6D:C7:EE:E2:A8:98:7C:AA:EE:BC:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/dd2823ba-7ee2-3c32-b1fc-290399aa0470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:77:c7:a7:62:b8:58:71:0d:db:87:2c:87:80:c3:c5:9a:2f: b8:cd:8d:13:a9:4d:93:0a:d2:91:09:4c:e2:66:c3:11:a8:06: a1:cc:7d:43:3f:66:15:f6:8e:65:15:3b:0a:c3:32:4a:1a:ef: 83:56:16:b3:d2:2a:81:78:68:56:07:cb:73:33:4b:e5:23:f8: 6a:c2:ec:54:38:d5:44:4d:81:d9:6c:05:49:b1:89:6d:2b:9d: a1:69:7b:99:c2:85:80:1b:cc:0d:63:21:9b:ac:91:bc:26:66: 48:a0:44:d3:63:be:e9:c7:50:80:26:d6:01:f3:fc:e2:b6:bd: a1:4d:5d:24:30:57:3c:25:e0:f2:b8:c8:d0:93:89:20:69:4d: 09:d0:42:6b:73:82:05:47:9b:e2:85:b6:5b:6c:81:a9:e1:af: ab:fb:c1:54:a7:a3:a9:d2:37:28:6a:f1:1f:42:c2:c3:55:e8: 4b:17:d0:56:f6:f2:5c:b5:e1:14:79:2a:cd:c2:9c:1e:90:01: fe:b8:c8:2b:14:1d:7e:83:d0:c9:b8:2f:82:64:8d:d8:43:d1: 03:ef:a0:fe:e7:02:c6:59:f9:99:31:85:e6:e3:85:28:62:e2: 1a:df:54:d0:94:af:1e:be:1b:50:e9:81:5b:2a:4c:d7:d4:18: a0:b0:0c:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mWnxtKIVLibVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OTZiYWJjZjktZGY0MS00MWFjLTg5MjQtMWVhMTkwMzgzOWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvmr9rqmXre23ukEvsGMRA5aC1hi6JJpXYgN Z8vZ8R2kmaJGR7Vxajss+UN+e8muXEnqt3Fz3WARoabt3DRTiWRjaqMHYS/wX5Vy 30H8+PzaJTfycvWQg/mSqqPpqs9K+PVhmZABvp+qPjFP5omzEm+hINV57FE4khi3 KCEH/3NuPhc60xB83MblyHrYixIVDDg5in6shlb741hkldyDJxjpXutx0IX5HRTj xeuvPKBwdYJghpBOHooNJSbMwt9kC+wzF4hbtb4TYanYmNwdo7lGjFj+I9RNHpjP fOu45WrNUTlr1Vqgh6isWO4tXfdBEmJYcD5cvKfxMCY19Kn77QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlpgX3MC2ZiCW3H7uKomHyq7rz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvZGQyODIzYmEtN2VlMi0z YzMyLWIxZmMtMjkwMzk5YWEwNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIh3x6diuFhxDduHLIeAw8WaL7jNjROpTZMK0pEJTOJmwxGoBqHMfUM/ ZhX2jmUVOwrDMkoa74NWFrPSKoF4aFYHy3MzS+Uj+GrC7FQ41URNgdlsBUmxiW0r naFpe5nChYAbzA1jIZuskbwmZkigRNNjvunHUIAm1gHz/OK2vaFNXSQwVzwl4PK4 yNCTiSBpTQnQQmtzggVHm+KFtltsganhr6v7wVSno6nSNyhq8R9CwsNV6EsX0Fb2 8ly14RR5Ks3CnB6QAf64yCsUHX6D0Mm4L4JkjdhD0QPvoP7nAsZZ+ZkxhebjhShi 4hrfVNCUrx6+G1DpgVsqTNfUGKCwDCA= -----END CERTIFICATE-----Generated at Thu Mar 26 12:38:20 2026 by rpki-client