$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/d311ea91-f079-380f-a5bf-8adfe8c9a212.roa File: d311ea91-f079-380f-a5bf-8adfe8c9a212.roa (raw, json) Hash identifier: GcgCmQ4YttOthaqbRHc0z4JiPgblESSNQBtIN9G69Rs= Subject key identifier: 60:6A:96:4E:B5:BE:CF:2A:59:F1:2C:C4:03:7E:06:A8:15:F8:54:F0 Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584E253F1BA6DF17C4A9D16F0B00 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/d311ea91-f079-380f-a5bf-8adfe8c9a212.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 13511 IP address blocks: 192.155.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3f:1b:a6:df:17:c4:a9:d1:6f:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=6e13216d-2e63-4c63-b13a-74d0ddddd174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d2:7b:f6:68:4f:99:72:66:fa:1a:29:8c:ff: 07:9d:e7:f0:76:43:ce:a6:a4:a5:f9:ba:cc:7c:12: d6:52:7a:a0:48:63:3a:fa:df:0f:92:2e:c3:e9:48: 31:a2:8f:49:b1:e0:1d:1c:24:a2:c6:88:84:a0:e0: 2b:3f:aa:e1:bf:97:12:3a:06:4c:22:db:79:5f:f0: 44:6a:2c:7e:0f:a2:fe:d6:4b:f9:3f:98:77:88:5f: aa:0f:42:0d:82:df:2e:fe:27:fa:89:c8:40:87:ad: 12:5f:7d:80:ca:0c:2d:3d:aa:56:c9:34:f6:c5:c4: bd:d2:ed:ec:1d:34:f4:65:4d:bf:20:86:7c:25:e0: 9d:e1:4a:47:17:c0:d2:85:7c:51:ce:92:4f:b8:54: 38:c6:5a:79:d6:41:c4:6a:b0:51:21:8a:77:6f:2a: e6:01:d0:a7:9f:9f:7e:93:94:1d:0a:99:cb:5d:14: 06:51:9a:5e:b4:eb:a7:01:c6:63:e3:ce:e1:ab:5e: ae:2f:94:21:55:1a:f3:af:e6:b5:c7:d2:39:8f:50: 94:16:76:2e:a3:7b:21:9a:d3:48:c8:fb:8a:46:79: 9b:aa:ad:c9:1c:6f:76:af:66:ab:33:1a:51:ca:32: 50:f1:0c:94:99:cc:3a:fa:a7:62:80:aa:bd:2c:a2: cc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6A:96:4E:B5:BE:CF:2A:59:F1:2C:C4:03:7E:06:A8:15:F8:54:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/d311ea91-f079-380f-a5bf-8adfe8c9a212.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b7:e4:ab:e2:53:65:15:c4:e9:86:04:ec:e4:fe:02:4b:1a: dd:6e:18:c4:e5:4e:24:c3:dd:25:c1:a4:d0:ff:00:41:25:70: 28:fb:c7:ca:57:df:ef:d5:6b:29:b2:5e:ae:57:5a:aa:a8:85: ec:47:cb:3e:c7:76:87:38:67:bb:d1:c9:d4:36:14:ea:5e:c5: d6:d5:de:c1:bc:ea:c3:16:33:2f:a5:86:73:70:0d:fc:6c:00: 16:74:12:cd:cd:e0:88:42:ff:73:af:aa:86:71:3e:97:21:54: 7d:37:b5:84:05:36:98:bd:91:85:a4:08:ac:a0:ff:e7:c2:c6: d8:6b:aa:11:e1:8f:b6:86:87:4a:46:65:e0:61:13:dc:0f:40: 0a:21:ca:11:5d:f3:c3:6d:35:22:2e:bd:3d:20:34:02:ca:f1: bf:d6:3c:c5:b4:ba:ee:b1:e1:92:17:27:8f:b1:44:f5:28:4f: ba:6a:95:1d:f3:0a:d2:37:43:03:3d:6b:46:b6:16:f8:97:2f: ce:d7:41:9d:2d:fc:41:d8:b5:27:08:5d:7e:01:5f:7a:36:6e: ae:7f:d0:78:ad:64:02:9d:50:69:f1:08:75:fd:2c:21:18:12: 37:7f:96:5f:4d:43:52:77:cf:8f:66:e8:b1:24:6b:ef:a8:b3: 08:b9:3f:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPxum3xfEqdFvCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk NmUxMzIxNmQtMmU2My00YzYzLWIxM2EtNzRkMGRkZGRkMTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89J79mhPmXJm+hopjP8HnefwdkPOpqSl+brM fBLWUnqgSGM6+t8Pki7D6Ugxoo9JseAdHCSixoiEoOArP6rhv5cSOgZMItt5X/BE aix+D6L+1kv5P5h3iF+qD0INgt8u/if6ichAh60SX32AygwtPapWyTT2xcS90u3s HTT0ZU2/IIZ8JeCd4UpHF8DShXxRzpJPuFQ4xlp51kHEarBRIYp3byrmAdCnn59+ k5QdCpnLXRQGUZpetOunAcZj487hq16uL5QhVRrzr+a1x9I5j1CUFnYuo3shmtNI yPuKRnmbqq3JHG92r2arMxpRyjJQ8QyUmcw6+qdigKq9LKLMVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBqlk61vs8qWfEsxAN+BqgV+FTwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvZDMxMWVhOTEtZjA3OS0z ODBmLWE1YmYtOGFkZmU4YzlhMjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa35KviU2UVxOmGBOzk/gJLGt1uGMTlTiTD3SXBpND/AEElcCj7x8pX 3+/VaymyXq5XWqqohexHyz7Hdoc4Z7vRydQ2FOpexdbV3sG86sMWMy+lhnNwDfxs ABZ0Es3N4IhC/3OvqoZxPpchVH03tYQFNpi9kYWkCKyg/+fCxthrqhHhj7aGh0pG ZeBhE9wPQAohyhFd88NtNSIuvT0gNALK8b/WPMW0uu6x4ZIXJ4+xRPUoT7pqlR3z CtI3QwM9a0a2FviXL87XQZ0t/EHYtScIXX4BX3o2bq5/0HitZAKdUGnxCHX9LCEY Ejd/ll9NQ1J3z49m6LEka++oswi5P00= -----END CERTIFICATE-----Generated at Sat Jun 13 22:10:30 2026 by rpki-client