$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf/9e539eb9-2766-3050-9658-9baea900b429.roa File: 9e539eb9-2766-3050-9658-9baea900b429.roa (raw, json) Hash identifier: 4naje6ot7vtP4dmM3q4Qcx84t3ACZVhLRUDibYoTm/8= Subject key identifier: 24:7D:4C:F4:2B:0D:7D:B2:7F:FC:38:AC:D8:33:B1:D9:13:94:21:CA Certificate issuer: /CN=89cf2d78-a948-47d7-a14a-a8b9a62311bf Certificate serial: 010D0C9F4328584D65153E3EA8F5FA013ACAC340 Authority key identifier: D7:86:4F:E9:EB:B4:AD:41:55:E1:CB:D6:E2:E4:29:49:79:6A:3D:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf/9e539eb9-2766-3050-9658-9baea900b429.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 40605 IP address blocks: 155.103.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:3e:3e:a8:f5:fa:01:3a:ca:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89cf2d78-a948-47d7-a14a-a8b9a62311bf Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=3f4c7967-5ffa-4de7-96a2-281760192ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0d:7b:5c:70:f7:05:a0:04:40:f3:d1:9c:f6: 7e:4e:26:60:3e:17:ce:91:e3:bd:c3:40:d5:6a:3e: a5:09:94:85:7d:aa:a8:8c:16:64:ad:22:d1:a0:ca: 9d:e9:39:dd:c5:87:7e:14:9f:3a:ed:05:b8:f2:71: 8e:19:08:10:f0:37:28:8b:77:56:57:cd:00:90:37: 95:c2:83:91:80:93:90:b5:a4:26:05:0c:93:f3:a9: f5:68:26:5b:cd:27:0e:ae:62:c5:1c:16:fe:bd:11: b0:29:bf:ba:0b:0e:47:f7:46:ea:e7:1e:7d:17:cb: e7:52:5a:b2:6e:ac:e6:d2:b0:73:41:af:83:c1:c8: 90:67:26:2b:a4:2e:5a:a2:e5:94:4f:8e:d1:11:b1: 15:57:9f:35:88:1b:74:a2:f8:36:fa:f8:29:b3:9f: 94:b1:2c:99:9d:39:4d:a0:5f:2b:4e:cc:73:fd:7b: 29:1e:c9:5e:6b:ae:ec:06:92:08:5b:8e:79:cc:0e: 41:e5:7f:1e:c8:c2:40:eb:08:6f:f6:d5:94:20:17: c5:f2:dd:d1:a2:7e:83:fc:82:a9:d3:28:24:e5:4a: 2b:4a:c1:42:1b:4c:43:5b:96:0a:06:10:df:2e:82: ef:65:c4:ce:13:f3:46:b3:b0:b2:5c:78:66:94:07: 7f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7D:4C:F4:2B:0D:7D:B2:7F:FC:38:AC:D8:33:B1:D9:13:94:21:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf/9e539eb9-2766-3050-9658-9baea900b429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf.crl X509v3 Authority Key Identifier: keyid:D7:86:4F:E9:EB:B4:AD:41:55:E1:CB:D6:E2:E4:29:49:79:6A:3D:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/89cf2d78-a948-47d7-a14a-a8b9a62311bf.cer sbgp-ipAddrBlock: critical IPv4: 155.103.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e9:c5:0d:4a:98:e6:89:db:d6:9e:23:1f:d3:03:27:ec:41: 6b:0e:62:31:ed:13:78:29:e5:2c:87:8e:1a:d7:02:c2:af:eb: 27:59:d2:43:a5:df:a2:e3:43:df:5a:75:0f:8f:d1:c0:61:57: 19:45:5b:82:6b:2b:c4:86:f0:6c:f2:7f:25:c4:cb:38:61:fc: f4:46:27:ba:f5:52:1a:de:d0:0f:33:51:0a:2a:32:7a:78:52: 88:05:bb:af:6e:9f:7b:dc:38:5e:61:20:f9:61:4a:34:f3:4a: a1:b7:67:fd:6b:32:f9:ba:80:ac:cc:3b:13:d9:e4:77:7c:e0: bd:2f:22:cb:9f:cc:34:7a:9c:50:7b:ba:92:63:d6:7e:b1:58: 1c:c3:fe:51:00:27:75:79:61:8a:a7:79:0d:7b:f4:c9:db:87: 4c:fd:76:a0:ef:17:1a:e1:70:d4:b1:b0:4a:43:58:3a:54:40: 07:c1:e7:ac:e7:b1:4b:88:16:52:41:fb:41:6a:5b:c0:5e:ce: 47:64:34:9b:5d:8a:ed:43:67:0b:c5:0f:df:11:09:47:dc:71: cb:dd:97:2a:3b:62:75:2e:00:79:92:08:2a:2c:2c:12:68:79: 3a:18:7d:61:be:bc:7c:33:fa:90:1d:52:f1:dd:ee:dc:bc:8c: a2:bd:3d:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFT4+qPX6ATrKw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODljZjJkNzgtYTk0OC00N2Q3LWExNGEtYThiOWE2MjMx MWJmMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk M2Y0Yzc5NjctNWZmYS00ZGU3LTk2YTItMjgxNzYwMTkyZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow17XHD3BaAEQPPRnPZ+TiZgPhfOkeO9w0DV aj6lCZSFfaqojBZkrSLRoMqd6TndxYd+FJ867QW48nGOGQgQ8Dcoi3dWV80AkDeV woORgJOQtaQmBQyT86n1aCZbzScOrmLFHBb+vRGwKb+6Cw5H90bq5x59F8vnUlqy bqzm0rBzQa+DwciQZyYrpC5aouWUT47REbEVV581iBt0ovg2+vgps5+UsSyZnTlN oF8rTsxz/XspHslea67sBpIIW455zA5B5X8eyMJA6whv9tWUIBfF8t3Ron6D/IKp 0ygk5UorSsFCG0xDW5YKBhDfLoLvZcTOE/NGs7CyXHhmlAd/HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCR9TPQrDX2yf/w4rNgzsdkTlCHKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84OWNm MmQ3OC1hOTQ4LTQ3ZDctYTE0YS1hOGI5YTYyMzExYmYvOWU1MzllYjktMjc2Ni0z MDUwLTk2NTgtOWJhZWE5MDBiNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODljZjJkNzgtYTk0OC00N2Q3LWEx NGEtYThiOWE2MjMxMWJmLzg5Y2YyZDc4LWE5NDgtNDdkNy1hMTRhLWE4YjlhNjIz MTFiZi5jcmwwHwYDVR0jBBgwFoAU14ZP6eu0rUFV4cvW4uQpSXlqPdcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84OWNmMmQ3OC1hOTQ4LTQ3ZDctYTE0YS1hOGI5 YTYyMzExYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCm2dwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnpxQ1KmOaJ29aeIx/TAyfsQWsOYjHtE3gp5SyHjhrXAsKv6ydZ0kOl 36LjQ99adQ+P0cBhVxlFW4JrK8SG8GzyfyXEyzhh/PRGJ7r1Uhre0A8zUQoqMnp4 UogFu69un3vcOF5hIPlhSjTzSqG3Z/1rMvm6gKzMOxPZ5Hd84L0vIsufzDR6nFB7 upJj1n6xWBzD/lEAJ3V5YYqneQ179Mnbh0z9dqDvFxrhcNSxsEpDWDpUQAfB56zn sUuIFlJB+0FqW8BezkdkNJtdiu1DZwvFD98RCUfcccvdlyo7YnUuAHmSCCosLBJo eToYfWG+vHwz+pAdUvHd7ty8jKK9PQY= -----END CERTIFICATE-----Generated at Mon Apr 6 12:29:49 2026 by rpki-client