$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/1a008aed-6d77-3f19-adac-15583acb9d8d.roa File: 1a008aed-6d77-3f19-adac-15583acb9d8d.roa (raw, json) Hash identifier: zgIeJM0uMJ2XMTlJIK8s86jAvCKmJ7aT0hUDFe4DRTs= Subject key identifier: 5A:A1:1E:B3:DF:78:28:7D:3F:CC:61:5D:B2:55:95:79:B9:A3:B3:09 Certificate issuer: /CN=75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5 Certificate serial: 010D0C9F4328584D5234EBDBB7CF834947CEE700 Authority key identifier: 58:5D:77:66:28:0A:AE:1C:F1:EF:FB:C5:79:8B:79:BF:53:7C:73:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/1a008aed-6d77-3f19-adac-15583acb9d8d.roa Signing time: Sat 28 Mar 2026 18:44:29 +0000 ROA not before: Sat 28 Mar 2026 18:44:29 +0000 ROA not after: Wed 17 Jun 2026 20:34:42 +0000 asID: 30437 IP address blocks: 165.156.34.0/24 maxlen: 24 165.156.37.0/24 maxlen: 24 165.156.68.0/24 maxlen: 24 165.156.69.0/24 maxlen: 24 165.156.70.0/24 maxlen: 24 192.131.184.0/24 maxlen: 24 192.131.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:eb:db:b7:cf:83:49:47:ce:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5 Validity Not Before: Mar 28 18:44:29 2026 GMT Not After : Jun 17 20:34:42 2026 GMT Subject: CN=819abfe7-0f46-4dbc-a652-5d45ce100148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:86:aa:68:45:9d:63:4c:ab:3d:97:b2:40:51: 28:e0:ab:03:6b:e6:47:95:87:e2:d5:a1:29:29:38: dc:d2:b3:92:2a:53:e4:f3:22:ac:df:ba:2c:b0:2e: e8:e8:26:a6:04:c6:a0:6b:f5:73:1f:31:a9:0c:42: 7a:41:0a:8c:db:20:8b:06:c8:b5:c4:2f:07:ce:df: 77:20:7d:68:5d:fa:e4:c1:ad:1e:72:95:4e:e3:57: c2:85:b9:3b:15:5a:ed:79:9b:df:ac:da:73:ce:19: 49:f7:99:00:e0:03:d0:80:c5:07:95:ff:fa:9d:41: a6:93:ad:02:c7:69:ff:94:b8:52:96:7c:3a:da:61: 13:c7:74:46:19:b7:0a:ba:a8:e6:e2:34:dc:dc:e3: bd:d6:54:10:89:dc:98:01:52:be:3f:2d:2c:b8:6d: 64:17:33:f3:36:5a:e8:f3:be:d4:14:df:47:62:99: 5a:fa:e0:89:a4:fb:de:01:db:e9:38:da:c4:de:65: 59:94:39:bb:67:e3:8a:4f:18:86:12:df:c4:35:78: 39:0d:00:3d:46:b6:07:8a:2c:c1:b3:13:c3:1b:02: 60:af:11:40:2b:b5:19:0e:33:8e:9e:98:8c:a9:9f: b0:43:17:7b:b3:ac:28:70:e7:c9:03:e8:2b:36:61: d1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A1:1E:B3:DF:78:28:7D:3F:CC:61:5D:B2:55:95:79:B9:A3:B3:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/1a008aed-6d77-3f19-adac-15583acb9d8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.crl X509v3 Authority Key Identifier: keyid:58:5D:77:66:28:0A:AE:1C:F1:EF:FB:C5:79:8B:79:BF:53:7C:73:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer sbgp-ipAddrBlock: critical IPv4: 165.156.34.0/24 165.156.37.0/24 165.156.68.0-165.156.70.255 192.131.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:64:81:16:7f:7b:39:e0:11:83:74:b2:61:93:05:c5:d5:ee: 54:9e:88:40:77:d9:9c:cf:07:9a:36:b0:90:51:f0:3b:66:92: 0a:36:b1:e7:15:98:44:46:1a:0b:c9:04:fb:59:13:03:7d:dd: 0d:1e:12:f1:65:de:3b:4a:d1:95:14:25:1e:0e:16:35:59:e4: 47:b7:c9:17:a0:af:ae:9b:06:cc:f2:b1:e1:77:72:a6:1f:2b: 33:c3:a2:2c:9c:a2:05:ac:03:1f:76:95:ee:32:27:70:b7:b6: 13:92:29:af:6f:8d:0a:52:c5:93:54:80:ac:a2:11:f2:c6:6b: ff:a7:a2:55:be:f5:83:d0:46:5c:92:31:56:c0:58:6e:15:ea: 07:cc:02:4d:7a:1c:20:3d:72:20:ec:e4:99:f3:d4:86:13:0f: 8d:47:ba:c3:e3:09:f0:70:de:aa:db:99:ba:55:12:46:4a:f8: d7:4e:09:85:6b:e7:ac:1b:dd:92:4d:75:6e:50:1d:ab:85:50: b7:91:69:33:09:38:41:8f:b0:fc:ad:77:86:12:95:7b:a4:da: 94:77:d9:cd:28:41:7a:6c:c5:e5:d6:89:50:bb:5f:85:f4:ce: f1:00:5a:66:a2:fa:a4:32:f6:37:07:7c:55:d4:2a:6a:85:44: ac:4b:13:d5 -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWE1SNOvbt8+DSUfO5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVmZTUyYjItMzhiYi00MmNiLTkxOWItNWY4ZmRiZmM0 YmQ1MB4XDTI2MDMyODE4NDQyOVoXDTI2MDYxNzIwMzQ0MlowLzEtMCsGA1UEAxMk ODE5YWJmZTctMGY0Ni00ZGJjLWE2NTItNWQ0NWNlMTAwMTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIaqaEWdY0yrPZeyQFEo4KsDa+ZHlYfi1aEp KTjc0rOSKlPk8yKs37ossC7o6CamBMaga/VzHzGpDEJ6QQqM2yCLBsi1xC8Hzt93 IH1oXfrkwa0ecpVO41fChbk7FVrteZvfrNpzzhlJ95kA4APQgMUHlf/6nUGmk60C x2n/lLhSlnw62mETx3RGGbcKuqjm4jTc3OO91lQQidyYAVK+Py0suG1kFzPzNlro 877UFN9HYpla+uCJpPveAdvpONrE3mVZlDm7Z+OKTxiGEt/ENXg5DQA9RrYHiizB sxPDGwJgrxFAK7UZDjOOnpiMqZ+wQxd7s6wocOfJA+grNmHR3wIDAQABo4IDbzCC A2swHQYDVR0OBBYEFFqhHrPfeCh9P8xhXbJVlXm5o7MJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83NWZl NTJiMi0zOGJiLTQyY2ItOTE5Yi01ZjhmZGJmYzRiZDUvMWEwMDhhZWQtNmQ3Ny0z ZjE5LWFkYWMtMTU1ODNhY2I5ZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzVmZTUyYjItMzhiYi00MmNiLTkx OWItNWY4ZmRiZmM0YmQ1Lzc1ZmU1MmIyLTM4YmItNDJjYi05MTliLTVmOGZkYmZj NGJkNS5jcmwwHwYDVR0jBBgwFoAUWF13ZigKrhzx7/vFeYt5v1N8cyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS83NWZlNTJiMi0zOGJiLTQyY2ItOTE5Yi01Zjhm ZGJmYzRiZDUuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQApZwiAwQA pZwlMAwDBAKlnEQDBAClnEYDBAHAg7gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARGSBFn97OeARg3SyYZMF xdXuVJ6IQHfZnM8HmjawkFHwO2aSCjax5xWYREYaC8kE+1kTA33dDR4S8WXeO0rR lRQlHg4WNVnkR7fJF6CvrpsGzPKx4Xdyph8rM8OiLJyiBawDH3aV7jIncLe2E5Ip r2+NClLFk1SArKIR8sZr/6eiVb71g9BGXJIxVsBYbhXqB8wCTXocID1yIOzkmfPU hhMPjUe6w+MJ8HDeqtuZulUSRkr4104JhWvnrBvdkk11blAdq4VQt5FpMwk4QY+w /K13hhKVe6TalHfZzShBemzF5daJULtfhfTO8QBaZqL6pDL2Nwd8VdQqaoVErEsT 1Q== -----END CERTIFICATE-----Generated at Sun Mar 29 19:49:45 2026 by rpki-client