$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/fafd26c0-f768-3c90-9b39-d1d69d9c9f2a.roa File: fafd26c0-f768-3c90-9b39-d1d69d9c9f2a.roa (raw, json) Hash identifier: AGE3jbSkJIhWdgccKkGumiUV/+A02l1DcaFaAL3IsMQ= Subject key identifier: 7D:8E:83:80:29:C5:88:FA:26:CC:22:06:43:57:CC:66:7E:23:9C:B3 Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584D44FA658746BF4ED87A20E700 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/fafd26c0-f768-3c90-9b39-d1d69d9c9f2a.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 13511 IP address blocks: 192.155.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:65:87:46:bf:4e:d8:7a:20:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=1a141f30-b250-497b-a397-8930dd698640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:60:c7:de:cf:83:06:22:bc:7e:77:e6:e1:56: c6:e5:f8:01:1c:2c:42:63:a6:b8:99:f9:6c:ce:7a: 81:f7:b7:75:7b:fb:21:bf:04:09:00:2a:80:a1:16: 97:fb:91:05:42:49:ee:f5:b7:bc:ba:d5:83:ff:75: 08:15:7c:66:c9:43:d4:be:67:a0:aa:21:c4:f0:65: d6:e5:47:5a:c4:15:a2:62:9c:1d:cd:b8:76:e7:d0: 56:5c:e7:48:dd:19:15:0a:76:d3:eb:96:c1:bb:27: 01:fa:db:30:aa:f4:1c:ff:ec:95:e5:6c:0b:b1:18: ed:b9:4a:f0:c3:cb:01:a3:e7:bb:81:99:a1:0c:8b: 01:66:8d:f7:e4:5d:12:a9:6c:57:5e:28:2b:60:52: 1e:d4:72:14:c2:af:69:e6:36:0b:3b:22:ac:cb:48: 2b:5a:52:64:fc:2c:f9:fd:c4:38:30:67:5f:ca:ee: c4:41:71:f8:c3:a0:dd:8e:d2:08:e3:90:d6:01:47: 2f:a8:97:9b:1d:62:b7:40:f9:01:de:14:00:52:6c: 4d:9b:ce:dc:e8:2f:db:ca:d4:01:8f:b4:87:ec:c7: ca:30:17:92:8c:d3:bc:e2:34:64:1c:66:4d:ee:97: 66:c7:c8:63:a5:b1:c0:9a:6b:3e:64:f1:8d:98:7d: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8E:83:80:29:C5:88:FA:26:CC:22:06:43:57:CC:66:7E:23:9C:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/fafd26c0-f768-3c90-9b39-d1d69d9c9f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:97:42:23:62:95:05:c5:70:05:b3:8b:a9:ac:20:0a:df:d3: 46:5a:12:0a:da:da:d4:1f:06:b0:c5:b1:f8:68:35:c1:34:c8: 84:17:e6:a9:e5:42:b6:44:57:31:5a:47:4e:f2:ae:35:a6:d5: 55:b9:e0:32:15:48:a0:bc:94:a9:f7:57:ef:ac:77:3c:11:c6: 32:4f:8e:db:46:43:11:dc:e9:1c:90:9e:cd:5a:88:3c:26:28: b1:36:56:f0:d6:8f:f9:49:94:a0:9e:6b:78:cf:d6:5e:82:9a: 91:ed:24:c1:5e:9c:f1:38:f9:bd:2e:f6:47:6e:45:a5:27:e7: 6f:df:aa:3d:ca:43:c2:42:18:e5:65:59:7a:bd:00:36:94:74: 21:bd:18:43:fc:8e:c1:9c:0a:37:30:72:3a:5b:3e:0f:91:35: 17:66:57:2c:ca:78:f1:8d:6b:09:c4:9c:42:fe:ec:55:ce:4b: 0c:98:82:1c:90:2d:0c:9b:0e:da:59:a8:da:8a:7b:2a:c3:b1: 71:46:2b:37:75:f9:e7:82:c1:a1:6f:67:8c:ac:61:ea:93:1c: 81:c6:34:10:f7:a3:47:dd:36:a1:50:28:dc:5c:e9:92:a3:17: 7c:b8:f5:2c:65:82:73:52:0d:7c:95:12:05:1b:75:e0:b8:9e: 0a:b2:67:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mWHRr9O2Hog5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MWExNDFmMzAtYjI1MC00OTdiLWEzOTctODkzMGRkNjk4NjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGDH3s+DBiK8fnfm4VbG5fgBHCxCY6a4mfls znqB97d1e/shvwQJACqAoRaX+5EFQknu9be8utWD/3UIFXxmyUPUvmegqiHE8GXW 5UdaxBWiYpwdzbh259BWXOdI3RkVCnbT65bBuycB+tswqvQc/+yV5WwLsRjtuUrw w8sBo+e7gZmhDIsBZo335F0SqWxXXigrYFIe1HIUwq9p5jYLOyKsy0grWlJk/Cz5 /cQ4MGdfyu7EQXH4w6DdjtII45DWAUcvqJebHWK3QPkB3hQAUmxNm87c6C/bytQB j7SH7MfKMBeSjNO84jRkHGZN7pdmx8hjpbHAmms+ZPGNmH0OGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2Og4ApxYj6JswiBkNXzGZ+I5yzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvZmFmZDI2YzAtZjc2OC0z YzkwLTliMzktZDFkNjlkOWM5ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCXQiNilQXFcAWzi6msIArf00ZaEgra2tQfBrDFsfhoNcE0yIQX5qnl QrZEVzFaR07yrjWm1VW54DIVSKC8lKn3V++sdzwRxjJPjttGQxHc6RyQns1aiDwm KLE2VvDWj/lJlKCea3jP1l6CmpHtJMFenPE4+b0u9kduRaUn52/fqj3KQ8JCGOVl WXq9ADaUdCG9GEP8jsGcCjcwcjpbPg+RNRdmVyzKePGNawnEnEL+7FXOSwyYghyQ LQybDtpZqNqKeyrDsXFGKzd1+eeCwaFvZ4ysYeqTHIHGNBD3o0fdNqFQKNxc6ZKj F3y49SxlgnNSDXyVEgUbdeC4ngqyZ/0= -----END CERTIFICATE-----Generated at Thu Mar 26 08:29:30 2026 by rpki-client