$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/07d3baeb-0a75-30a3-ba4e-1b1f83e6b2ff.roa File: 07d3baeb-0a75-30a3-ba4e-1b1f83e6b2ff.roa (raw, json) Hash identifier: 4T5t0sLCTgIsOPD2GhbxXXaJsYxv1T7KLiW5k0aHM3U= Subject key identifier: 8B:2B:D3:BE:D0:F4:04:28:69:34:36:14:22:AE:E7:FA:16:62:4D:1A Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584D5234F801302F2DAEE93D79C0 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/07d3baeb-0a75-30a3-ba4e-1b1f83e6b2ff.roa Signing time: Sat 28 Mar 2026 18:44:35 +0000 ROA not before: Sat 28 Mar 2026 18:44:35 +0000 ROA not after: Thu 28 May 2026 19:00:48 +0000 asID: 14618 IP address blocks: 155.121.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:f8:01:30:2f:2d:ae:e9:3d:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Mar 28 18:44:35 2026 GMT Not After : May 28 19:00:48 2026 GMT Subject: CN=13b83ea9-69ce-49ac-a50e-484059890871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ed:e6:36:f8:b3:8e:72:47:2e:3f:f9:80:c2: 86:39:3a:d5:de:da:a2:2c:2f:15:96:50:bb:91:9f: 1e:7e:30:7e:f3:5d:a8:9c:e9:ca:8f:4b:0b:2e:36: c1:e9:c3:25:17:d4:56:55:f7:17:74:dd:ff:02:ec: d0:05:91:f9:0c:bf:40:72:13:bd:9d:90:3e:23:cc: d0:a5:cf:dd:1a:28:2e:09:3b:7c:78:23:7b:44:aa: c0:34:53:da:bd:bd:9d:c4:51:ab:e5:a2:11:d7:63: 27:ef:b0:bb:fc:ae:86:c4:67:a0:fd:0b:59:21:e8: b5:88:1a:50:3d:56:db:31:bc:63:ce:66:bc:98:f7: c2:2f:88:1d:60:17:0d:53:7d:0b:be:bd:2d:dc:93: 89:01:3c:88:fa:60:6a:72:ec:23:74:26:89:d0:de: 4c:6d:8d:01:74:d3:73:a3:a6:21:7d:58:24:69:70: 7e:e2:09:d5:50:0d:7a:27:02:d6:e4:d2:1b:dd:dd: 6c:43:f8:20:23:f3:1c:1b:c9:82:49:a5:3f:be:13: 88:b2:b9:0e:0a:7e:a7:3d:2c:f5:f9:75:30:ce:52: 34:ca:b4:a3:3a:3c:15:9d:3c:6d:d0:e4:9d:e6:1e: da:dd:4e:cc:2c:c2:1e:0c:73:ec:f1:6b:86:ce:f0: 5f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2B:D3:BE:D0:F4:04:28:69:34:36:14:22:AE:E7:FA:16:62:4D:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/07d3baeb-0a75-30a3-ba4e-1b1f83e6b2ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 155.121.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:21:6f:fc:6e:56:dc:e2:bb:d5:86:b3:9d:1b:ac:99:ab:41: 78:77:ec:07:cf:49:1f:d0:80:ae:cb:b6:f3:30:09:00:3e:cc: d5:21:1b:85:ef:bb:eb:0f:dd:fa:41:56:25:d2:22:82:19:d8: 55:39:dd:23:d5:08:9a:45:7d:6e:b6:a2:69:53:a7:da:cc:f6: 9e:66:95:07:28:5e:7f:18:e4:b1:0d:6e:90:ed:2c:5d:5e:fc: d9:f7:16:60:b6:1d:23:00:37:17:5b:e2:77:09:d1:8b:62:cc: 5b:8d:53:ac:fe:ff:bc:52:cd:67:58:96:f1:58:a2:52:94:d8: b0:f7:ac:73:b6:86:6e:79:0a:07:f8:1c:3f:d5:c0:6a:d6:7a: f8:d2:dc:17:af:7a:41:eb:5c:c1:cb:a3:bb:51:22:5c:84:a9: ed:3d:19:77:74:34:62:e0:09:7a:53:d3:d4:c3:08:c3:bb:2d: 85:a7:ed:39:b9:c1:9d:86:b9:05:2a:1a:94:68:fd:ea:1e:06: 7b:aa:9f:b1:d2:4f:26:16:44:e1:63:51:ec:67:c2:ac:7a:38: d7:5c:69:71:39:5e:73:a7:fa:e8:21:60:0f:60:f5:db:e5:73: 52:bc:29:ef:c6:91:9e:97:5f:3a:cd:96:e9:1f:a4:b3:b9:cd: 9e:3d:58:d5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1SNPgBMC8truk9ecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI2MDMyODE4NDQzNVoXDTI2MDUyODE5MDA0OFowLzEtMCsGA1UEAxMk MTNiODNlYTktNjljZS00OWFjLWE1MGUtNDg0MDU5ODkwODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu3mNvizjnJHLj/5gMKGOTrV3tqiLC8VllC7 kZ8efjB+812onOnKj0sLLjbB6cMlF9RWVfcXdN3/AuzQBZH5DL9AchO9nZA+I8zQ pc/dGiguCTt8eCN7RKrANFPavb2dxFGr5aIR12Mn77C7/K6GxGeg/QtZIei1iBpQ PVbbMbxjzma8mPfCL4gdYBcNU30Lvr0t3JOJATyI+mBqcuwjdCaJ0N5MbY0BdNNz o6YhfVgkaXB+4gnVUA16JwLW5NIb3d1sQ/ggI/McG8mCSaU/vhOIsrkOCn6nPSz1 +XUwzlI0yrSjOjwVnTxt0OSd5h7a3U7MLMIeDHPs8WuGzvBfsQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIsr077Q9AQoaTQ2FCKu5/oWYk0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvMDdkM2JhZWItMGE3NS0z MGEzLWJhNGUtMWIxZjgzZTZiMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAm3kwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAViFv/G5W3OK71YaznRusmatBeHfsB89JH9CArsu28zAJAD7M1SEbhe+7 6w/d+kFWJdIighnYVTndI9UImkV9braiaVOn2sz2nmaVByhefxjksQ1ukO0sXV78 2fcWYLYdIwA3F1vidwnRi2LMW41TrP7/vFLNZ1iW8ViiUpTYsPesc7aGbnkKB/gc P9XAatZ6+NLcF696Qetcwcuju1EiXISp7T0Zd3Q0YuAJelPT1MMIw7sthaftObnB nYa5BSoalGj96h4Ge6qfsdJPJhZE4WNR7GfCrHo411xpcTlec6f66CFgD2D12+Vz Urwp78aRnpdfOs2W6R+ks7nNnj1Y1Q== -----END CERTIFICATE-----Generated at Tue Apr 7 10:31:08 2026 by rpki-client