$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/4caa9342-737f-3da7-a847-9c004e5815b3.roa File: 4caa9342-737f-3da7-a847-9c004e5815b3.roa (raw, json) Hash identifier: x1fjyJt4WwTQGVYgBH1A3zaBXK6eYZNzJDspvZUDyec= Subject key identifier: 39:8B:61:2B:66:AF:D4:A9:79:04:B4:27:B9:11:AF:5D:5F:7B:28:61 Certificate issuer: /CN=85befeae-24b8-4c74-a4dc-19e1382944ad Certificate serial: 010D0C9F4328584D1F4A41F71496E8C930F27540 Authority key identifier: C3:35:6D:AD:1A:B7:F1:7C:16:8C:31:2B:65:0F:D5:E5:9F:C1:BD:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/4caa9342-737f-3da7-a847-9c004e5815b3.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 156.154.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/85befeae-24b8-4c74-a4dc-19e1382944ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/85befeae-24b8-4c74-a4dc-19e1382944ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:41:f7:14:96:e8:c9:30:f2:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85befeae-24b8-4c74-a4dc-19e1382944ad Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=836799cd-7217-437c-b6a3-56d89af53b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fe:ff:27:da:f2:60:29:61:c9:19:52:e6:8f: da:4e:89:e8:fa:65:94:25:97:36:f0:46:16:9e:c0: 88:69:86:f4:7d:86:4f:5d:ad:8e:9e:7e:6f:17:f8: ff:86:e9:d3:17:d6:d3:67:dd:09:f2:75:16:f6:94: 90:fb:f8:67:ef:24:97:63:73:52:5e:06:65:e0:75: 2b:26:0b:f3:2e:90:79:73:6c:92:45:f2:e1:84:c2: 2a:25:48:40:b7:7e:fc:4e:30:45:dd:7b:3a:34:55: b0:73:6d:0b:02:91:0d:0a:65:9d:6a:93:c2:59:df: 75:30:5b:d3:85:8b:06:22:bf:a4:cf:a3:73:46:e9: e0:be:43:31:7c:a6:2f:a2:f8:34:70:20:31:8f:bb: 62:71:1b:6f:85:fe:47:8d:55:1d:98:93:9e:46:4a: 68:2b:72:63:f1:be:47:ea:be:df:b0:a3:d4:2d:9b: 1c:8a:5e:6c:88:b5:bf:1d:77:e2:d5:00:0f:a6:cf: c8:56:42:e9:ec:9b:a2:4b:c3:84:19:9d:60:5c:8c: c8:d7:a9:24:21:51:65:b4:90:a5:6b:bc:7f:65:16: 46:c8:28:ed:02:c5:5e:50:5c:9b:0c:a1:8b:ab:df: 41:96:41:3b:9c:28:7b:91:67:1c:97:03:a0:be:2f: 5c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8B:61:2B:66:AF:D4:A9:79:04:B4:27:B9:11:AF:5D:5F:7B:28:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/4caa9342-737f-3da7-a847-9c004e5815b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad/85befeae-24b8-4c74-a4dc-19e1382944ad.crl X509v3 Authority Key Identifier: keyid:C3:35:6D:AD:1A:B7:F1:7C:16:8C:31:2B:65:0F:D5:E5:9F:C1:BD:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85befeae-24b8-4c74-a4dc-19e1382944ad.cer sbgp-ipAddrBlock: critical IPv4: 156.154.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:56:6d:ee:35:4e:71:d6:d7:37:b5:d9:31:25:3b:c9:8c:aa: 1e:b4:69:53:41:4c:61:6a:1c:e7:c1:c3:bd:5f:bb:8b:cf:de: 72:33:8e:3d:9d:f2:ab:71:01:57:45:f9:6d:4f:4e:bb:38:8d: 97:e4:a9:60:7d:ad:a4:46:dc:ea:90:7f:90:f1:d7:79:08:47: 1c:ce:e5:6c:a5:15:1b:55:23:ac:d0:10:b9:21:9e:0e:28:bf: c1:41:f6:db:ad:89:f0:2f:f2:74:6b:4d:a8:a7:b6:0e:f1:0a: 72:d6:eb:5c:db:a7:fb:23:99:2c:cb:37:b5:13:b4:93:6f:6b: df:8e:c4:83:82:54:aa:7c:2e:20:fe:1f:ad:e9:de:9f:ed:31: 86:93:ea:a1:15:09:cf:e1:2f:af:90:8e:05:02:a0:1c:13:58: 13:e2:c6:da:53:f8:1b:b7:af:ae:16:f1:d0:36:ef:ef:7c:05: 98:3f:61:73:0c:68:2c:e0:ed:fb:f1:4d:0f:31:94:11:9e:24: e7:d4:2e:ec:e9:0e:7d:02:20:77:35:56:be:aa:95:63:a3:76: 04:fc:81:4d:f7:b6:df:68:6d:99:8c:fc:41:d3:57:86:fc:fa: d0:fa:50:31:c3:27:1d:e8:fd:3b:48:d2:c4:ab:fa:5e:8b:b9: e2:5c:11:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkH3FJboyTDydUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODViZWZlYWUtMjRiOC00Yzc0LWE0ZGMtMTllMTM4Mjk0 NGFkMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ODM2Nzk5Y2QtNzIxNy00MzdjLWI2YTMtNTZkODlhZjUzYjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/7/J9ryYClhyRlS5o/aTono+mWUJZc28EYW nsCIaYb0fYZPXa2Onn5vF/j/hunTF9bTZ90J8nUW9pSQ+/hn7ySXY3NSXgZl4HUr JgvzLpB5c2ySRfLhhMIqJUhAt378TjBF3Xs6NFWwc20LApENCmWdapPCWd91MFvT hYsGIr+kz6NzRungvkMxfKYvovg0cCAxj7ticRtvhf5HjVUdmJOeRkpoK3Jj8b5H 6r7fsKPULZscil5siLW/HXfi1QAPps/IVkLp7JuiS8OEGZ1gXIzI16kkIVFltJCl a7x/ZRZGyCjtAsVeUFybDKGLq99BlkE7nCh7kWcclwOgvi9cRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmLYStmr9SpeQS0J7kRr11feyhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NWJl ZmVhZS0yNGI4LTRjNzQtYTRkYy0xOWUxMzgyOTQ0YWQvNGNhYTkzNDItNzM3Zi0z ZGE3LWE4NDctOWMwMDRlNTgxNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODViZWZlYWUtMjRiOC00Yzc0LWE0 ZGMtMTllMTM4Mjk0NGFkLzg1YmVmZWFlLTI0YjgtNGM3NC1hNGRjLTE5ZTEzODI5 NDRhZC5jcmwwHwYDVR0jBBgwFoAUwzVtrRq38XwWjDErZQ/V5Z/BvSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NWJlZmVhZS0yNGI4LTRjNzQtYTRkYy0xOWUx MzgyOTQ0YWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJoTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlWbe41TnHW1ze12TElO8mMqh60aVNBTGFqHOfBw71fu4vP3nIzjj2d 8qtxAVdF+W1PTrs4jZfkqWB9raRG3OqQf5Dx13kIRxzO5WylFRtVI6zQELkhng4o v8FB9tutifAv8nRrTaintg7xCnLW61zbp/sjmSzLN7UTtJNva9+OxIOCVKp8LiD+ H63p3p/tMYaT6qEVCc/hL6+QjgUCoBwTWBPixtpT+Bu3r64W8dA27+98BZg/YXMM aCzg7fvxTQ8xlBGeJOfULuzpDn0CIHc1Vr6qlWOjdgT8gU33tt9obZmM/EHTV4b8 +tD6UDHDJx3o/TtI0sSr+l6LueJcEYY= -----END CERTIFICATE-----Generated at Thu Mar 19 15:33:44 2026 by rpki-client