$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/fa9c25da-7bb9-37fb-8185-cc02488028d6.roa File: fa9c25da-7bb9-37fb-8185-cc02488028d6.roa (raw, json) Hash identifier: WgYvx+UKKh9LuN9/T1LwrhIuoC4Z7+WoUCNv+hMfeqo= Subject key identifier: 52:EA:F6:C2:AB:D8:1C:92:BE:80:DF:EC:1C:8B:10:98:86:A2:7C:53 Certificate issuer: /CN=1a6caf55-a53e-446e-9958-ee41f172c88f Certificate serial: 010D0C9F4328584D6C0FDB8F29899C8ECF633380 Authority key identifier: 10:DF:30:B3:02:46:F3:B0:F2:8A:50:08:46:67:1D:3E:5A:E8:44:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/fa9c25da-7bb9-37fb-8185-cc02488028d6.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 16509 IP address blocks: 192.112.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/1a6caf55-a53e-446e-9958-ee41f172c88f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/1a6caf55-a53e-446e-9958-ee41f172c88f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:db:8f:29:89:9c:8e:cf:63:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a6caf55-a53e-446e-9958-ee41f172c88f Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=d8f78ef5-5a08-4341-a195-2a25f453bcc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:28:75:2f:77:aa:bf:85:0c:46:97:c9:b8:1c: 12:cb:bd:4e:65:1a:96:d9:81:64:11:a1:7a:3a:5d: 3e:3a:db:49:82:57:66:60:a6:ef:7f:ac:3c:cf:ed: c4:cf:f1:5a:fe:ee:aa:88:ba:c1:ac:d1:4d:80:7b: 83:28:64:81:82:b1:47:5d:37:8e:57:b7:3c:24:5f: 5c:7c:dc:0d:c9:82:f7:50:1b:f9:e8:94:83:93:35: 96:14:e3:ef:d8:57:42:06:71:f0:92:9e:a7:87:ae: c0:04:2d:22:7f:90:38:41:11:3f:f5:dd:e4:34:8c: e2:d8:ae:f4:63:08:04:d3:ae:ef:44:9e:05:b9:5c: bc:36:5e:be:c2:ec:a4:5c:d5:39:67:06:49:c3:ef: a1:c7:3d:19:b9:6d:2a:e0:eb:a4:37:e6:fb:90:b6: e2:35:00:cd:df:14:30:d8:67:60:5a:17:81:f6:7d: 87:0a:da:fc:20:94:f9:9b:fd:1b:4c:bb:71:46:bd: 03:27:d3:8c:10:69:08:79:9f:d2:36:07:55:b3:e8: 4c:cc:28:3d:02:93:d4:49:7f:8c:71:40:a1:58:9b: 72:c9:5e:67:71:32:49:11:b5:6d:0a:b0:d3:7f:32: cc:d7:11:56:9e:cb:70:8d:aa:3d:54:e7:7c:98:8a: a3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EA:F6:C2:AB:D8:1C:92:BE:80:DF:EC:1C:8B:10:98:86:A2:7C:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/fa9c25da-7bb9-37fb-8185-cc02488028d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/1a6caf55-a53e-446e-9958-ee41f172c88f.crl X509v3 Authority Key Identifier: keyid:10:DF:30:B3:02:46:F3:B0:F2:8A:50:08:46:67:1D:3E:5A:E8:44:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f.cer sbgp-ipAddrBlock: critical IPv4: 192.112.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:cc:5b:be:ff:c0:8a:bb:40:7b:cb:8d:90:a1:19:5c:35:70: 6d:18:3d:f8:15:45:2c:12:db:6b:55:29:15:01:98:54:b2:1d: fa:3f:a4:a6:49:23:42:20:1f:ea:50:0d:54:69:5b:67:20:f5: 5c:39:39:c2:c5:75:be:5a:2d:13:11:af:76:93:86:80:92:3b: ed:99:ce:44:c4:d8:87:17:12:7a:27:fc:48:3b:c2:4a:e2:42: 7a:cf:b1:6f:9d:b0:aa:3b:64:47:bb:19:fb:bb:65:2a:47:73: ee:4d:8d:b3:75:7c:da:c3:18:6b:22:45:cc:ce:bd:64:29:c9: 75:27:ef:15:fb:ce:46:8d:a3:56:57:63:cb:00:f4:0d:85:50: 1f:94:7e:71:79:d6:d8:e5:80:65:81:8c:64:d0:9b:5a:80:fb: 56:16:03:59:4d:e1:7e:83:f4:0e:75:a4:6a:b9:3b:65:83:b2: 79:42:b5:3d:9a:ad:65:07:4c:4a:fc:fb:be:8c:90:74:06:1d: 03:ea:52:1b:cc:04:06:0c:48:cc:dc:89:d6:b8:f0:bb:a3:eb: 87:4e:1b:93:11:16:84:78:1e:3e:dc:d1:b4:16:d4:1a:f6:d3: 59:71:50:a3:c3:38:42:29:7c:c7:90:0d:a8:e7:bd:d8:8b:5f: a7:9b:80:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD9uPKYmcjs9jM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2Y2FmNTUtYTUzZS00NDZlLTk5NTgtZWU0MWYxNzJj ODhmMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk ZDhmNzhlZjUtNWEwOC00MzQxLWExOTUtMmEyNWY0NTNiY2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArih1L3eqv4UMRpfJuBwSy71OZRqW2YFkEaF6 Ol0+OttJgldmYKbvf6w8z+3Ez/Fa/u6qiLrBrNFNgHuDKGSBgrFHXTeOV7c8JF9c fNwNyYL3UBv56JSDkzWWFOPv2FdCBnHwkp6nh67ABC0if5A4QRE/9d3kNIzi2K70 YwgE067vRJ4FuVy8Nl6+wuykXNU5ZwZJw++hxz0ZuW0q4OukN+b7kLbiNQDN3xQw 2GdgWheB9n2HCtr8IJT5m/0bTLtxRr0DJ9OMEGkIeZ/SNgdVs+hMzCg9ApPUSX+M cUChWJtyyV5ncTJJEbVtCrDTfzLM1xFWnstwjao9VOd8mIqjIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLq9sKr2BySvoDf7ByLEJiGonxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xYTZj YWY1NS1hNTNlLTQ0NmUtOTk1OC1lZTQxZjE3MmM4OGYvZmE5YzI1ZGEtN2JiOS0z N2ZiLTgxODUtY2MwMjQ4ODAyOGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWE2Y2FmNTUtYTUzZS00NDZlLTk5 NTgtZWU0MWYxNzJjODhmLzFhNmNhZjU1LWE1M2UtNDQ2ZS05OTU4LWVlNDFmMTcy Yzg4Zi5jcmwwHwYDVR0jBBgwFoAUEN8wswJG87DyilAIRmcdPlroRE0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xYTZjYWY1NS1hNTNlLTQ0NmUtOTk1OC1lZTQx ZjE3MmM4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwHCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/MW77/wIq7QHvLjZChGVw1cG0YPfgVRSwS22tVKRUBmFSyHfo/pKZJ I0IgH+pQDVRpW2cg9Vw5OcLFdb5aLRMRr3aThoCSO+2ZzkTE2IcXEnon/Eg7wkri QnrPsW+dsKo7ZEe7Gfu7ZSpHc+5NjbN1fNrDGGsiRczOvWQpyXUn7xX7zkaNo1ZX Y8sA9A2FUB+UfnF51tjlgGWBjGTQm1qA+1YWA1lN4X6D9A51pGq5O2WDsnlCtT2a rWUHTEr8+76MkHQGHQPqUhvMBAYMSMzcida48Luj64dOG5MRFoR4Hj7c0bQW1Br2 01lxUKPDOEIpfMeQDajnvdiLX6ebgEE= -----END CERTIFICATE-----Generated at Fri Apr 17 16:27:00 2026 by rpki-client