$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/5b896e6e-578e-3e6a-a229-c85a29386919.roa File: 5b896e6e-578e-3e6a-a229-c85a29386919.roa (raw, json) Hash identifier: Z+VINVnBJPfMl8CoC+UyccTn1BQFp5zLoGH0QUlJ0tI= Subject key identifier: 13:FD:5D:4D:3C:AE:A4:D2:0A:F7:77:C0:6D:FB:F1:B2:62:72:28:CC Certificate issuer: /CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Certificate serial: 010D0C9F4328584CAA270BF576025C539F3D37C0 Authority key identifier: E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/5b896e6e-578e-3e6a-a229-c85a29386919.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 14618 IP address blocks: 192.131.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:0b:f5:76:02:5c:53:9f:3d:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=f5686eed-bbf5-457d-9bde-058cca50f698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a1:e3:cb:f7:96:c0:22:c7:a4:40:89:2a:c6: 56:9c:03:e4:d4:e0:80:85:33:c4:dc:0e:5b:3f:ec: 02:16:1a:a7:01:73:e9:f6:34:26:5f:78:48:fc:ad: 5d:c5:e6:56:22:3b:86:d9:67:1c:d4:95:bd:93:3b: 12:ca:7a:b9:58:4e:df:63:ea:93:66:8f:be:5e:0e: 92:7d:8f:bf:c5:ff:bc:a2:5f:07:49:92:16:cf:50: 4c:ad:1d:79:d8:91:d2:4d:03:0c:7d:41:4b:9b:2f: 62:a0:89:7d:ac:1f:a8:67:d1:0c:8d:39:d9:47:81: 78:58:dc:1b:a6:31:a0:be:bb:6f:2b:02:df:40:e3: 2d:63:30:50:bb:8f:f6:e4:97:5b:e9:d8:d7:d8:87: 73:8b:c3:00:b3:26:f3:fb:04:df:62:ea:2c:28:69: ec:84:15:cc:ae:00:30:b6:06:9d:b0:ac:9f:91:6c: e8:2b:3d:96:78:e4:85:46:f3:3e:be:78:99:e8:36: 9f:73:e3:31:c9:b8:9d:39:09:92:a5:e0:7b:8d:d6: 76:81:96:fb:2f:4f:e4:b2:52:03:f2:e6:12:1b:e7: 99:1e:de:4e:09:8b:40:1e:05:6a:4c:00:df:9e:18: be:79:e9:47:93:2a:ad:6d:f6:b4:ee:99:f7:5e:54: 90:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FD:5D:4D:3C:AE:A4:D2:0A:F7:77:C0:6D:FB:F1:B2:62:72:28:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/5b896e6e-578e-3e6a-a229-c85a29386919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl X509v3 Authority Key Identifier: keyid:E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer sbgp-ipAddrBlock: critical IPv4: 192.131.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:38:0f:e2:94:1c:37:4c:61:fc:e5:5e:e3:24:33:d0:78:38: 85:ff:c5:7c:4d:05:9c:01:d5:96:3f:9a:0c:d2:5e:44:c2:10: b8:e1:1f:07:77:45:4a:56:3e:03:77:fe:61:65:9c:3a:0d:c5: e3:88:cc:a1:bb:5f:aa:dd:c7:37:28:a2:0b:6b:3a:73:28:77: cb:18:2d:d8:8f:6f:d4:33:b8:89:7f:d6:a6:aa:a9:57:9b:bd: b7:2f:e4:c3:d7:66:f6:8a:31:37:b2:62:ed:06:a2:9d:0e:7a: 4e:7e:35:3b:d2:1b:7c:e4:28:49:36:fe:a5:37:2b:2c:de:cc: f4:22:29:da:44:dd:18:a4:0b:36:55:33:2e:c3:87:6a:df:4d: 2a:28:82:0e:5c:d3:8b:fb:fb:b7:8f:66:a3:fb:aa:3a:a4:ab: b8:28:c6:7a:6f:77:15:fe:be:17:a7:a1:f7:44:73:be:62:e0: e0:09:ef:8c:9c:f7:3b:3f:76:73:fb:e4:4a:d9:71:90:27:13: a9:93:ce:19:a1:09:d1:e5:2c:7d:ed:4c:2f:72:11:2d:ed:41: 7c:c0:7e:a5:34:20:ee:82:db:42:28:8f:5e:24:b6:2b:b1:05: 4b:9b:b1:c6:ee:f1:87:4b:1f:8d:a5:b6:f7:17:16:8a:a6:91: ed:1b:f1:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwv1dgJcU589N8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU2ZDZiYWMtMWExNi00YjBjLWI1NzgtOTkyZmYxYjk0 NWM0MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk ZjU2ODZlZWQtYmJmNS00NTdkLTliZGUtMDU4Y2NhNTBmNjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6Hjy/eWwCLHpECJKsZWnAPk1OCAhTPE3A5b P+wCFhqnAXPp9jQmX3hI/K1dxeZWIjuG2Wcc1JW9kzsSynq5WE7fY+qTZo++Xg6S fY+/xf+8ol8HSZIWz1BMrR152JHSTQMMfUFLmy9ioIl9rB+oZ9EMjTnZR4F4WNwb pjGgvrtvKwLfQOMtYzBQu4/25Jdb6djX2Idzi8MAsybz+wTfYuosKGnshBXMrgAw tgadsKyfkWzoKz2WeOSFRvM+vniZ6Dafc+MxybidOQmSpeB7jdZ2gZb7L0/kslID 8uYSG+eZHt5OCYtAHgVqTADfnhi+eelHkyqtbfa07pn3XlSQjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBP9XU08rqTSCvd3wG378bJicijMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZk NmJhYy0xYTE2LTRiMGMtYjU3OC05OTJmZjFiOTQ1YzQvNWI4OTZlNmUtNTc4ZS0z ZTZhLWEyMjktYzg1YTI5Mzg2OTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTU2ZDZiYWMtMWExNi00YjBjLWI1 NzgtOTkyZmYxYjk0NWM0LzE1NmQ2YmFjLTFhMTYtNGIwYy1iNTc4LTk5MmZmMWI5 NDVjNC5jcmwwHwYDVR0jBBgwFoAU53jqrc4KmjfoNgHD2ir7bXsaYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZkNmJhYy0xYTE2LTRiMGMtYjU3OC05OTJm ZjFiOTQ1YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwINYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA4D+KUHDdMYfzlXuMkM9B4OIX/xXxNBZwB1ZY/mgzSXkTCELjhHwd3 RUpWPgN3/mFlnDoNxeOIzKG7X6rdxzcoogtrOnMod8sYLdiPb9QzuIl/1qaqqVeb vbcv5MPXZvaKMTeyYu0Gop0Oek5+NTvSG3zkKEk2/qU3KyzezPQiKdpE3RikCzZV My7Dh2rfTSoogg5c04v7+7ePZqP7qjqkq7goxnpvdxX+vhenofdEc75i4OAJ74yc 9zs/dnP75ErZcZAnE6mTzhmhCdHlLH3tTC9yES3tQXzAfqU0IO6C20Ioj14ktiux BUubscbu8YdLH42ltvcXFoqmke0b8W8= -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:48 2026 by rpki-client