$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa File: 00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa (raw, json) Hash identifier: jtlYWWyLquRoftKLvFbm+4+lMYR6ns/Y9yH+oQzdLL0= Subject key identifier: 06:26:0C:21:F2:03:2E:62:83:04:A3:8B:72:F7:2D:0E:DE:FB:E2:EF Certificate issuer: /CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Certificate serial: 010D0C9F4328584CAA270C62FA846098C8E63780 Authority key identifier: E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 22571 IP address blocks: 192.131.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:0c:62:fa:84:60:98:c8:e6:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=859086f7-b215-4609-9dd4-d03711868506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a3:9f:14:fd:b3:3f:59:d4:9a:6e:4c:95:1d: a7:0f:23:ca:5e:9c:ba:29:74:97:d6:33:ce:fe:a7: b2:61:6f:e3:d3:17:85:9b:3a:83:9d:8f:e7:c3:03: a4:63:ea:80:98:f3:69:68:56:4b:72:a9:cd:15:41: 8b:8a:c6:cd:d7:7c:44:da:fe:55:e9:12:9d:ba:09: 87:1d:12:ca:18:a9:5c:f1:44:3f:a6:8c:83:a4:ed: 90:30:1f:7f:0c:f6:73:7a:d0:33:f9:37:a8:c3:87: 3c:eb:68:38:2b:2d:90:c2:9d:49:25:a8:db:d0:7c: 14:79:81:1d:27:fc:0c:cb:6a:93:22:98:dc:16:e9: bf:3e:f0:8f:b7:33:0d:9a:3d:a6:e1:03:d2:cd:fc: 1f:ea:da:4f:48:61:72:17:db:be:69:a1:80:61:de: 51:7d:a9:00:0d:43:01:a4:a9:d4:d1:21:8a:76:a5: 4a:22:32:4e:22:58:09:ed:c4:4d:e9:ce:80:d7:b3: e5:87:db:b1:57:77:5d:42:64:39:7d:6c:c2:f2:f0: e5:9b:e5:1a:38:1e:ba:85:a0:2e:f9:ea:49:28:ea: 96:a8:bc:43:c2:81:89:cd:4b:12:96:3b:e4:6c:0e: 75:dc:c4:72:6b:d0:42:6d:64:91:9a:b4:1f:04:5c: a9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:26:0C:21:F2:03:2E:62:83:04:A3:8B:72:F7:2D:0E:DE:FB:E2:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl X509v3 Authority Key Identifier: keyid:E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer sbgp-ipAddrBlock: critical IPv4: 192.131.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:5d:50:8c:a1:34:84:76:06:2b:09:5a:97:c1:9c:71:b7:9f: 5d:81:3a:dc:5b:50:5e:2c:64:19:f0:47:f3:53:eb:c2:f4:c7: e4:a2:0a:1b:17:8f:0f:3e:bb:29:7e:a8:f4:33:e2:8e:71:a3: aa:f9:c6:3f:66:69:06:fc:6f:a2:05:ab:9b:66:42:3d:b6:b0: b5:18:a4:e8:ef:fa:f6:22:33:f0:26:85:24:77:e2:d8:20:2c: e0:c0:f4:0f:6c:33:6f:41:88:aa:04:95:d5:46:3c:84:f5:b7: 1d:10:f0:fb:83:86:9d:35:e7:eb:41:88:0a:d1:cf:10:76:f9: fa:43:00:3c:cd:72:a3:94:14:3a:2d:a0:5a:b0:fe:61:bb:8d: 30:f5:9d:da:bc:3d:37:57:04:ce:02:73:bc:f5:76:fd:76:4d: ba:52:d4:db:5c:46:77:89:fd:8a:06:ba:4a:61:d3:f0:fe:07: 61:30:00:91:3e:ca:5a:d7:5d:9c:9f:80:da:56:e5:e2:e3:5e: 9b:c3:4f:f9:53:bc:ee:31:66:e7:d9:3a:97:5b:75:5d:87:d5: 9c:ea:92:fd:83:52:d4:20:b7:03:70:34:92:d7:20:3a:91:e3: 7b:a7:22:44:41:a1:3b:5b:e7:5f:4b:73:dc:4b:28:80:6f:c5: e9:43:be:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwxi+oRgmMjmN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU2ZDZiYWMtMWExNi00YjBjLWI1NzgtOTkyZmYxYjk0 NWM0MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk ODU5MDg2ZjctYjIxNS00NjA5LTlkZDQtZDAzNzExODY4NTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6OfFP2zP1nUmm5MlR2nDyPKXpy6KXSX1jPO /qeyYW/j0xeFmzqDnY/nwwOkY+qAmPNpaFZLcqnNFUGLisbN13xE2v5V6RKdugmH HRLKGKlc8UQ/poyDpO2QMB9/DPZzetAz+Teow4c862g4Ky2Qwp1JJajb0HwUeYEd J/wMy2qTIpjcFum/PvCPtzMNmj2m4QPSzfwf6tpPSGFyF9u+aaGAYd5RfakADUMB pKnU0SGKdqVKIjJOIlgJ7cRN6c6A17Plh9uxV3ddQmQ5fWzC8vDlm+UaOB66haAu +epJKOqWqLxDwoGJzUsSljvkbA513MRya9BCbWSRmrQfBFyp7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYmDCHyAy5igwSji3L3LQ7e++LvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZk NmJhYy0xYTE2LTRiMGMtYjU3OC05OTJmZjFiOTQ1YzQvMDBhOWJlNzMtNmUwZC0z MWJhLWE1MTAtNmVlMmIzMjVmYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTU2ZDZiYWMtMWExNi00YjBjLWI1 NzgtOTkyZmYxYjk0NWM0LzE1NmQ2YmFjLTFhMTYtNGIwYy1iNTc4LTk5MmZmMWI5 NDVjNC5jcmwwHwYDVR0jBBgwFoAU53jqrc4KmjfoNgHD2ir7bXsaYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZkNmJhYy0xYTE2LTRiMGMtYjU3OC05OTJm ZjFiOTQ1YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwINYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGddUIyhNIR2BisJWpfBnHG3n12BOtxbUF4sZBnwR/NT68L0x+SiChsX jw8+uyl+qPQz4o5xo6r5xj9maQb8b6IFq5tmQj22sLUYpOjv+vYiM/AmhSR34tgg LODA9A9sM29BiKoEldVGPIT1tx0Q8PuDhp015+tBiArRzxB2+fpDADzNcqOUFDot oFqw/mG7jTD1ndq8PTdXBM4Cc7z1dv12TbpS1NtcRneJ/YoGukph0/D+B2EwAJE+ ylrXXZyfgNpW5eLjXpvDT/lTvO4xZufZOpdbdV2H1Zzqkv2DUtQgtwNwNJLXIDqR 43unIkRBoTtb519Lc9xLKIBvxelDvug= -----END CERTIFICATE-----Generated at Mon Mar 2 15:52:10 2026 by rpki-client