$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa File: 00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa (raw, json) Hash identifier: MFwYNO7E4+NCZ3ZhJ7819HYbsLiDUl+pXmeKQ2s5waE= Subject key identifier: A6:23:E7:5C:3A:C1:6A:60:28:28:07:1F:29:D0:D0:9A:60:4A:86:70 Certificate issuer: /CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Certificate serial: 010D0C9F4328584D8AC53B53C4365C554CB47540 Authority key identifier: E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 22571 IP address blocks: 192.131.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:3b:53:c4:36:5c:55:4c:b4:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=3450f222-b631-4e0f-990e-685377f88715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f6:67:02:e4:70:14:dc:f3:52:39:3c:d6:61: 31:58:11:45:cc:bd:28:61:65:80:a4:10:d0:75:f6: 36:97:d1:3e:ce:b7:34:2f:67:78:ed:15:80:2f:79: ba:26:06:b3:2a:17:97:ef:e1:c7:7e:35:88:3d:39: 04:1d:f3:15:de:67:bd:9b:e9:53:60:72:0d:3b:93: a7:79:92:b2:4c:c0:56:b3:42:02:77:fb:03:e2:af: 81:0a:7d:32:fd:bf:e2:03:6a:81:36:8a:61:a5:ce: cb:08:ee:2b:69:d5:db:2f:69:89:67:56:57:39:c3: 77:10:87:e7:2c:b2:a4:e7:ad:d9:05:b3:01:10:69: aa:8c:d5:48:c0:a4:1a:d1:ec:2b:54:0a:5e:6f:17: 24:27:f9:56:62:2a:59:7b:af:18:5d:8f:aa:3c:db: c0:d6:27:49:3e:46:63:11:2e:32:49:80:07:fc:f9: 11:6c:af:e0:b6:c5:f6:d8:9d:fe:85:4e:a5:e5:2c: 1d:5b:ae:60:e2:4b:0a:d7:56:1f:7a:99:f8:8a:8c: 37:15:cb:84:bf:a8:b6:24:a1:a7:96:b7:09:c1:6f: 00:f8:2c:4d:63:63:f4:db:9b:92:5e:10:26:db:83: 70:85:b8:25:08:c2:14:bc:0c:4f:47:cf:35:be:4f: 5f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:23:E7:5C:3A:C1:6A:60:28:28:07:1F:29:D0:D0:9A:60:4A:86:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/00a9be73-6e0d-31ba-a510-6ee2b325fa32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.crl X509v3 Authority Key Identifier: keyid:E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer sbgp-ipAddrBlock: critical IPv4: 192.131.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:89:a0:89:3a:62:9e:52:3f:5e:aa:6f:96:17:43:a8:66:45: e3:f1:39:aa:b6:2b:94:9d:27:9f:1f:e1:4c:bc:00:07:88:d5: a8:b4:d4:28:7e:29:54:49:b7:a7:0f:28:28:14:b2:35:7d:41: e1:c2:5c:4c:7a:e6:6a:e5:50:bf:2c:6b:82:19:73:77:f1:9d: ce:b0:e5:40:16:f3:fe:fe:0f:16:b4:d8:2f:85:2c:a9:f3:a5: 0d:79:1d:47:cc:29:88:45:dd:39:6c:62:67:dc:7b:0e:f9:92: 8a:f7:83:cd:a1:c1:50:cb:94:58:5f:32:a6:58:58:f9:88:24: 1c:d9:57:e3:34:87:06:10:6e:7d:3f:c4:8a:66:5e:8d:be:09: ed:f6:a9:98:7a:44:af:32:94:a7:bd:0f:a3:2a:ba:eb:c0:31: 16:62:5e:5f:3c:87:d1:52:76:6d:d3:e0:42:c2:95:c2:56:e9: 53:dd:58:66:6d:01:4f:cf:d9:59:e9:99:fc:55:ab:3a:28:00: d1:25:8c:87:f3:a4:9f:1d:81:d3:07:8c:58:77:11:eb:0f:bf: 42:36:be:68:91:d5:60:49:3d:75:4b:7c:d5:ad:95:4c:58:69: 47:49:18:bd:ff:63:4f:46:ba:32:15:72:e7:ab:65:c2:eb:8a: 8d:90:54:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxTtTxDZcVUy0dUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU2ZDZiYWMtMWExNi00YjBjLWI1NzgtOTkyZmYxYjk0 NWM0MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk MzQ1MGYyMjItYjYzMS00ZTBmLTk5MGUtNjg1Mzc3Zjg4NzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvZnAuRwFNzzUjk81mExWBFFzL0oYWWApBDQ dfY2l9E+zrc0L2d47RWAL3m6JgazKheX7+HHfjWIPTkEHfMV3me9m+lTYHINO5On eZKyTMBWs0ICd/sD4q+BCn0y/b/iA2qBNophpc7LCO4radXbL2mJZ1ZXOcN3EIfn LLKk563ZBbMBEGmqjNVIwKQa0ewrVApebxckJ/lWYipZe68YXY+qPNvA1idJPkZj ES4ySYAH/PkRbK/gtsX22J3+hU6l5SwdW65g4ksK11Yfepn4iow3FcuEv6i2JKGn lrcJwW8A+CxNY2P025uSXhAm24NwhbglCMIUvAxPR881vk9f8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYj51w6wWpgKCgHHynQ0JpgSoZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZk NmJhYy0xYTE2LTRiMGMtYjU3OC05OTJmZjFiOTQ1YzQvMDBhOWJlNzMtNmUwZC0z MWJhLWE1MTAtNmVlMmIzMjVmYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTU2ZDZiYWMtMWExNi00YjBjLWI1 NzgtOTkyZmYxYjk0NWM0LzE1NmQ2YmFjLTFhMTYtNGIwYy1iNTc4LTk5MmZmMWI5 NDVjNC5jcmwwHwYDVR0jBBgwFoAU53jqrc4KmjfoNgHD2ir7bXsaYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTZkNmJhYy0xYTE2LTRiMGMtYjU3OC05OTJm ZjFiOTQ1YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwINYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaJoIk6Yp5SP16qb5YXQ6hmRePxOaq2K5SdJ58f4Uy8AAeI1ai01Ch+ KVRJt6cPKCgUsjV9QeHCXEx65mrlUL8sa4IZc3fxnc6w5UAW8/7+Dxa02C+FLKnz pQ15HUfMKYhF3TlsYmfcew75kor3g82hwVDLlFhfMqZYWPmIJBzZV+M0hwYQbn0/ xIpmXo2+Ce32qZh6RK8ylKe9D6MquuvAMRZiXl88h9FSdm3T4ELClcJW6VPdWGZt AU/P2VnpmfxVqzooANEljIfzpJ8dgdMHjFh3EesPv0I2vmiR1WBJPXVLfNWtlUxY aUdJGL3/Y09GujIVcuerZcLrio2QVGU= -----END CERTIFICATE-----Generated at Sun May 3 17:51:14 2026 by rpki-client