$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa File: d5cf8319-403b-387c-a79b-84a59277e3f3.roa (raw, json) Hash identifier: p2yg+IB5fnEfovyrn3I+GQxD4vdPewL25MLwb4pmrq8= Subject key identifier: 42:15:AA:56:31:44:3C:BB:4E:BE:3E:DE:B9:ED:95:E5:44:C6:22:C5 Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Certificate serial: 010D0C9F4328584C9ACC5B441B3FBA19B4991380 Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa Signing time: Thu 22 Jan 2026 02:00:31 +0000 ROA not before: Thu 22 Jan 2026 02:00:31 +0000 ROA not after: Wed 22 Apr 2026 01:00:31 +0000 asID: 54535 IP address blocks: 156.37.196.0/24 maxlen: 24 156.37.197.0/24 maxlen: 24 156.37.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9a:cc:5b:44:1b:3f:ba:19:b4:99:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9 Validity Not Before: Jan 22 02:00:31 2026 GMT Not After : Apr 22 01:00:31 2026 GMT Subject: CN=135d8486-9330-4c84-8d52-4e6c62966959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6b:dc:ac:1a:e5:4d:01:cf:7c:5e:db:77:52: 49:a7:7e:62:1d:79:2b:01:88:d9:82:b4:9b:75:d6: a0:b9:10:f6:07:79:26:1f:0b:b9:da:af:5e:30:55: 69:2f:37:d4:f0:8a:54:3c:58:43:e6:ea:9a:0b:61: e0:6e:e8:6e:d1:b9:e1:fd:ec:13:95:53:95:c2:e0: aa:39:1f:b5:ce:99:28:d0:e1:e0:2f:bf:c8:1f:d2: c0:11:2d:d7:ef:a2:69:e0:32:59:09:a6:69:70:92: b1:56:6c:e4:8d:08:23:fb:07:e6:e6:9c:cf:2c:38: 82:25:a1:64:ae:79:fb:cd:e8:4f:52:a0:5a:90:78: 46:d5:cd:64:8a:a8:84:44:fe:4b:a0:61:17:ed:86: 00:ad:59:68:b6:f8:a3:6d:50:2a:ff:5b:f1:97:68: 87:30:12:91:70:ba:e0:e4:44:70:15:ba:11:c7:87: 24:2c:c9:33:da:12:db:8e:07:b1:95:a9:c8:2b:7c: 11:58:2d:ac:47:f3:f5:f3:c6:34:c8:21:32:d8:6c: dd:bf:d2:c6:34:37:e7:24:f1:61:98:91:02:b2:9a: 4f:74:38:cd:b0:f0:c0:54:70:bd:d8:1a:e5:a5:a1: f4:e5:ac:35:5b:b6:ca:fe:4c:ef:ee:5b:d2:72:7c: 91:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:15:AA:56:31:44:3C:BB:4E:BE:3E:DE:B9:ED:95:E5:44:C6:22:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/d5cf8319-403b-387c-a79b-84a59277e3f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl X509v3 Authority Key Identifier: keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer sbgp-ipAddrBlock: critical IPv4: 156.37.196.0-156.37.198.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:4f:92:62:f2:46:04:f1:09:4e:c9:8a:25:a4:64:d3:14:8e: 2d:66:43:b0:47:15:9d:5e:5d:69:af:20:f6:70:84:de:b7:a1: 37:64:0b:c0:d6:35:90:eb:61:9f:f9:58:59:5d:ac:7d:85:11: 37:9d:cd:45:61:b1:6e:52:c9:cf:5c:17:aa:9e:14:a0:6d:0f: 0c:fc:06:a5:b8:2a:2b:3a:7c:b5:fb:8a:f1:5b:56:d2:f0:4d: 31:52:d1:33:e1:b2:97:a5:3b:f1:4a:fb:77:89:3b:d0:d5:3a: 35:39:22:b6:3d:13:87:9b:fd:e8:1c:b3:78:04:b4:26:ba:fe: f1:38:18:f3:99:ad:a1:32:e8:dd:91:7b:f5:1c:68:fd:2d:03: fb:0a:b1:bc:89:e4:92:f1:64:5e:f3:5e:29:3d:a0:44:0a:1b: 01:0d:85:1c:7c:ab:e8:93:9a:53:43:3e:a6:34:a9:f8:58:02: 09:94:5c:6a:81:10:d4:7d:5e:b8:1e:24:a0:fe:13:c4:d8:96: ba:c2:47:2b:81:db:d6:e3:1e:27:91:a0:cd:4f:2b:5b:70:ab: 8a:5c:2d:a0:c8:ee:1c:ff:59:46:42:49:a0:c5:27:e5:f6:73: e0:25:c2:5f:2e:b6:42:f7:3c:b4:d5:83:41:f5:42:82:2f:e8: 6f:b7:c4:af -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEyazFtEGz+6GbSZE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQzMzM1ZGItYzU1Yi00NDNlLWIyMGMtNWM3NGUxYzI1 NmM5MB4XDTI2MDEyMjAyMDAzMVoXDTI2MDQyMjAxMDAzMVowLzEtMCsGA1UEAxMk MTM1ZDg0ODYtOTMzMC00Yzg0LThkNTItNGU2YzYyOTY2OTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2vcrBrlTQHPfF7bd1JJp35iHXkrAYjZgrSb ddaguRD2B3kmHwu52q9eMFVpLzfU8IpUPFhD5uqaC2Hgbuhu0bnh/ewTlVOVwuCq OR+1zpko0OHgL7/IH9LAES3X76Jp4DJZCaZpcJKxVmzkjQgj+wfm5pzPLDiCJaFk rnn7zehPUqBakHhG1c1kiqiERP5LoGEX7YYArVlotvijbVAq/1vxl2iHMBKRcLrg 5ERwFboRx4ckLMkz2hLbjgexlanIK3wRWC2sR/P188Y0yCEy2Gzdv9LGNDfnJPFh mJECsppPdDjNsPDAVHC92BrlpaH05aw1W7bK/kzv7lvScnyRFQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFEIVqlYxRDy7Tr4+3rntleVExiLFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jNDMz MzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0ZTFjMjU2YzkvZDVjZjgzMTktNDAzYi0z ODdjLWE3OWItODRhNTkyNzdlM2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzQzMzM1ZGItYzU1Yi00NDNlLWIy MGMtNWM3NGUxYzI1NmM5L2M0MzMzNWRiLWM1NWItNDQzZS1iMjBjLTVjNzRlMWMy NTZjOS5jcmwwHwYDVR0jBBgwFoAUxAvagFtAIbjQ1K7dFqiSimKzZdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jNDMzMzVkYi1jNTViLTQ0M2UtYjIwYy01Yzc0 ZTFjMjU2YzkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKcJcQD BACcJcYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAK0+SYvJGBPEJTsmKJaRk0xSOLWZDsEcVnV5daa8g9nCE 3rehN2QLwNY1kOthn/lYWV2sfYURN53NRWGxblLJz1wXqp4UoG0PDPwGpbgqKzp8 tfuK8VtW0vBNMVLRM+Gyl6U78Ur7d4k70NU6NTkitj0Th5v96ByzeAS0Jrr+8TgY 85mtoTLo3ZF79Rxo/S0D+wqxvInkkvFkXvNeKT2gRAobAQ2FHHyr6JOaU0M+pjSp +FgCCZRcaoEQ1H1euB4koP4TxNiWusJHK4Hb1uMeJ5GgzU8rW3CrilwtoMjuHP9Z RkJJoMUn5fZz4CXCXy62Qvc8tNWDQfVCgi/ob7fErw== -----END CERTIFICATE-----Generated at Mon Mar 2 20:02:31 2026 by rpki-client