$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/72590a81-0372-3494-a8c9-c4c50e29c4e4.roa File: 72590a81-0372-3494-a8c9-c4c50e29c4e4.roa (raw, json) Hash identifier: OBgeEPKmctLOZOrAVenneC9fyM8UMlwFLCBiWH7hcEg= Subject key identifier: 0B:36:35:A9:C4:48:B3:37:7E:E5:C7:69:CB:83:43:75:61:2B:5E:25 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584CB3EC63BAC04B18D548A00D80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/72590a81-0372-3494-a8c9-c4c50e29c4e4.roa Signing time: Sat 31 Jan 2026 02:00:32 +0000 ROA not before: Sat 31 Jan 2026 02:00:32 +0000 ROA not after: Fri 01 May 2026 01:00:32 +0000 asID: 210187 IP address blocks: 128.242.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b3:ec:63:ba:c0:4b:18:d5:48:a0:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jan 31 02:00:32 2026 GMT Not After : May 1 01:00:32 2026 GMT Subject: CN=75e530a6-e2d1-4cec-9040-bfd65b47d89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8f:2e:42:c7:a9:fe:53:5f:1d:d3:a7:3f:80: a3:54:f6:98:04:a6:4d:37:93:a9:b8:a5:59:ee:71: e6:b5:b0:8e:35:a2:28:dd:71:cf:df:29:68:b6:27: f7:29:72:2f:68:a0:d2:cb:ec:4c:f9:cb:23:64:fc: 11:07:12:56:a7:f8:86:2c:16:ea:96:cf:83:3f:7e: e9:14:d9:90:a3:c4:f7:06:55:00:13:cf:48:00:99: 93:aa:14:d3:78:26:b3:aa:df:11:4b:58:7a:5e:4a: ea:d8:6b:31:cb:17:b4:20:1f:6c:77:b1:a0:a2:ba: 7d:c4:5e:8d:6b:d0:79:dc:bf:93:ef:4d:35:17:07: 2e:75:c5:6e:58:7b:90:8e:33:08:ff:13:f4:cd:37: a7:ec:f7:eb:7c:70:83:0c:0d:40:b9:fc:dd:97:1a: db:ff:69:6c:f8:00:38:ba:08:3a:c1:81:5a:a3:84: b1:bb:66:f0:86:11:ae:4f:46:e3:7c:24:43:41:2d: c2:5a:6b:45:e6:50:8e:5a:b0:fe:97:ea:51:83:6c: 7b:b5:b4:1a:c8:07:9a:6f:de:91:74:3e:1f:5f:8a: 0e:e7:64:51:0e:79:95:be:b1:f9:2d:b5:15:8b:89: 7b:fd:0c:2a:5f:aa:5c:1b:56:b7:6b:9e:8d:be:d2: 48:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:36:35:A9:C4:48:B3:37:7E:E5:C7:69:CB:83:43:75:61:2B:5E:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/72590a81-0372-3494-a8c9-c4c50e29c4e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:39:88:bc:14:8a:66:b4:48:51:f1:7a:0d:89:a2:c0:31:96: 19:d0:32:07:61:32:33:82:db:24:6d:e3:0b:d2:22:a8:8b:23: 5f:9e:82:9b:79:4b:19:9e:19:a0:c1:81:0d:69:d0:71:e7:8b: 34:e9:36:13:80:3e:e7:bb:cf:29:fb:44:66:5d:25:78:78:66: 48:7f:30:e2:af:90:86:db:1b:48:f8:cc:f9:c6:a4:78:c0:01: 1b:ad:76:58:ac:cb:3c:27:3b:7b:25:70:f3:42:07:21:60:60: 40:1e:18:28:98:3e:07:47:d0:bc:2d:da:09:b2:44:73:f3:24: 33:fb:a7:c2:38:81:44:c9:99:16:66:cf:e2:33:7f:86:51:c4: e9:a9:af:ce:ac:ee:cd:b6:cc:f9:ab:bc:f8:cc:da:9b:82:f4: e6:1e:9f:8c:42:7a:0e:30:60:2d:b6:de:14:c4:fd:4f:66:55: 20:ea:2c:12:b8:68:87:30:53:83:5c:2e:0f:34:44:8a:cf:94: 32:26:e6:b7:ad:4f:80:de:dc:3b:b4:35:49:c7:f3:33:27:00: 6a:48:09:fd:aa:6e:d0:b5:91:bb:d7:84:52:60:39:f4:ce:5a: 14:8b:68:a3:3c:3e:45:79:53:85:e9:e3:20:6f:88:03:de:20: c2:54:41:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyz7GO6wEsY1UigDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDEzMTAyMDAzMloXDTI2MDUwMTAxMDAzMlowLzEtMCsGA1UEAxMk NzVlNTMwYTYtZTJkMS00Y2VjLTkwNDAtYmZkNjViNDdkODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI8uQsep/lNfHdOnP4CjVPaYBKZNN5OpuKVZ 7nHmtbCONaIo3XHP3ylotif3KXIvaKDSy+xM+csjZPwRBxJWp/iGLBbqls+DP37p FNmQo8T3BlUAE89IAJmTqhTTeCazqt8RS1h6Xkrq2Gsxyxe0IB9sd7Ggorp9xF6N a9B53L+T7001FwcudcVuWHuQjjMI/xP0zTen7PfrfHCDDA1Aufzdlxrb/2ls+AA4 ugg6wYFao4Sxu2bwhhGuT0bjfCRDQS3CWmtF5lCOWrD+l+pRg2x7tbQayAeab96R dD4fX4oO52RRDnmVvrH5LbUVi4l7/QwqX6pcG1a3a56NvtJISwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAs2NanESLM3fuXHacuDQ3VhK14lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNzI1OTBhODEtMDM3Mi0z NDk0LWE4YzktYzRjNTBlMjljNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgPK9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK45iLwUima0SFHxeg2JosAxlhnQMgdhMjOC2yRt4wvSIqiLI1+egpt5 SxmeGaDBgQ1p0HHnizTpNhOAPue7zyn7RGZdJXh4Zkh/MOKvkIbbG0j4zPnGpHjA ARutdlisyzwnO3slcPNCByFgYEAeGCiYPgdH0Lwt2gmyRHPzJDP7p8I4gUTJmRZm z+Izf4ZRxOmpr86s7s22zPmrvPjM2puC9OYen4xCeg4wYC223hTE/U9mVSDqLBK4 aIcwU4NcLg80RIrPlDIm5retT4De3Du0NUnH8zMnAGpICf2qbtC1kbvXhFJgOfTO WhSLaKM8PkV5U4Xp4yBviAPeIMJUQXY= -----END CERTIFICATE-----Generated at Mon Feb 23 11:54:38 2026 by rpki-client