$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/872945b3-fb01-3694-b07d-3956542f5ccf.roa File: 872945b3-fb01-3694-b07d-3956542f5ccf.roa (raw, json) Hash identifier: zxSY5HTg4Q4+1pyVd97vJzojoepnrHGsDCU0U5xvUzU= Subject key identifier: 55:58:03:1C:8C:6D:EF:BE:1E:C0:1C:87:AF:A0:89:63:8F:50:87:6F Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584EC7A1BD16698D1C2C82500F70 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/872945b3-fb01-3694-b07d-3956542f5ccf.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 13511 IP address blocks: 192.155.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:bd:16:69:8d:1c:2c:82:50:0f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=67be65e0-59f3-449c-9fb7-58dca4d529c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:46:23:3b:63:05:45:d4:a4:df:f6:b7:a6: 57:51:0e:76:b2:98:df:7f:fa:c5:41:61:fd:b7:b9: 8d:ab:60:70:f4:07:c4:9b:b4:8f:6f:54:56:50:db: a2:63:89:e6:87:78:fc:5d:ad:2e:15:c0:5a:62:22: a4:8b:a5:79:ff:8a:14:e3:f6:b6:9b:ce:85:93:29: 35:a3:13:87:cf:d6:f4:62:ee:25:7e:6c:bc:76:11: 92:42:ff:78:0d:c8:f1:13:a8:ab:20:e4:c3:a1:50: 8c:4c:3e:8a:8e:08:96:28:3d:3b:d8:7e:3d:0d:48: e8:4f:af:b2:e9:95:47:82:53:60:7a:ad:34:8e:fd: e7:6b:da:b6:d9:a9:1a:cb:81:b3:71:0a:9b:35:2d: 1b:63:7f:0b:67:57:20:73:15:e0:e1:f2:73:91:13: fa:55:1b:63:48:f1:68:cf:52:2e:cc:78:4d:fa:e2: 82:fb:3a:85:cd:1d:bf:c1:20:3e:a0:de:9a:33:d8: 35:2e:d3:c2:57:c1:7e:b1:21:20:a3:81:86:59:7c: 65:bd:4f:5f:95:0b:ae:b2:4a:92:e2:6a:5e:36:ef: b4:2a:b2:18:0c:45:d3:51:4c:1f:bb:21:f7:d8:31: cd:d6:f5:55:0e:d3:60:d1:8b:e5:ba:bd:63:54:14: 2a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:58:03:1C:8C:6D:EF:BE:1E:C0:1C:87:AF:A0:89:63:8F:50:87:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/872945b3-fb01-3694-b07d-3956542f5ccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:aa:36:6b:7b:b0:70:b0:bd:97:24:4d:16:4e:c3:04:9f:3b: 8c:e6:bc:58:f9:ee:9c:9f:b5:0c:8a:e5:11:61:3f:77:53:46: b6:56:64:47:cd:4b:7d:d7:13:0c:9f:b8:ae:00:05:d4:66:81: 39:7a:cb:30:b5:3c:aa:36:78:4b:6d:ee:38:43:1f:8f:da:a1: df:a8:37:25:ce:fc:cd:d1:92:1a:1f:aa:52:74:4f:5e:9d:68: f5:3e:04:b1:96:de:5e:b0:ae:d9:cd:62:22:04:4a:e0:13:bd: d7:96:52:9c:50:eb:a8:35:40:f3:f2:df:38:8c:7d:08:db:48: d5:fc:bc:c4:c7:f3:1d:0b:84:46:1b:b6:78:88:f1:64:6a:8c: 10:5c:28:b3:ca:14:fc:b7:a0:bf:2d:61:38:f7:d5:75:d1:9c: 2a:c5:b1:44:db:58:96:42:34:5f:85:52:b4:b4:4c:6e:17:44: 7f:a4:36:9e:c9:12:73:ff:26:de:8d:a1:05:0f:6c:f4:48:7c: 0c:10:07:0b:6b:d3:22:c6:ed:a7:f0:f3:28:17:d8:ec:01:eb: 9a:c1:d8:8f:da:c2:bf:9a:af:0a:c1:f1:39:20:50:44:c8:4d: 72:46:d9:69:60:20:4c:f5:c8:79:35:3c:ef:7a:39:7a:a5:47: f2:a4:84:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Hob0WaY0cLIJQD3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk NjdiZTY1ZTAtNTlmMy00NDljLTlmYjctNThkY2E0ZDUyOWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqudGIztjBUXUpN/2t6ZXUQ52spjff/rFQWH9 t7mNq2Bw9AfEm7SPb1RWUNuiY4nmh3j8Xa0uFcBaYiKki6V5/4oU4/a2m86Fkyk1 oxOHz9b0Yu4lfmy8dhGSQv94DcjxE6irIOTDoVCMTD6KjgiWKD072H49DUjoT6+y 6ZVHglNgeq00jv3na9q22akay4GzcQqbNS0bY38LZ1cgcxXg4fJzkRP6VRtjSPFo z1IuzHhN+uKC+zqFzR2/wSA+oN6aM9g1LtPCV8F+sSEgo4GGWXxlvU9flQuuskqS 4mpeNu+0KrIYDEXTUUwfuyH32DHN1vVVDtNg0Yvlur1jVBQqLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVYAxyMbe++HsAch6+giWOPUIdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvODcyOTQ1YjMtZmIwMS0z Njk0LWIwN2QtMzk1NjU0MmY1Y2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJt7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6qNmt7sHCwvZckTRZOwwSfO4zmvFj57pyftQyK5RFhP3dTRrZWZEfN S33XEwyfuK4ABdRmgTl6yzC1PKo2eEtt7jhDH4/aod+oNyXO/M3RkhofqlJ0T16d aPU+BLGW3l6wrtnNYiIESuATvdeWUpxQ66g1QPPy3ziMfQjbSNX8vMTH8x0LhEYb tniI8WRqjBBcKLPKFPy3oL8tYTj31XXRnCrFsUTbWJZCNF+FUrS0TG4XRH+kNp7J EnP/Jt6NoQUPbPRIfAwQBwtr0yLG7afw8ygX2OwB65rB2I/awr+arwrB8TkgUETI TXJG2WlgIEz1yHk1PO96OXqlR/KkhLE= -----END CERTIFICATE-----Generated at Tue Sep 22 08:34:32 2026 by rpki-client