$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8f84fc28-6c73-3455-b271-5ba66161728a.roa File: 8f84fc28-6c73-3455-b271-5ba66161728a.roa (raw, json) Hash identifier: 3wXLnZ6r3NkqC32ClQgMLbKNjH686vI1ff1jQpk/b/g= Subject key identifier: 4E:EE:16:D8:66:8E:7A:FE:41:36:08:9E:DF:DF:B2:47:96:79:9C:FD Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584C5EC6CF15FEE4EAFBA3A7BA00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8f84fc28-6c73-3455-b271-5ba66161728a.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 19893 IP address blocks: 128.242.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:cf:15:fe:e4:ea:fb:a3:a7:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=df5da1ad-7ced-4f8f-a946-01ded825cb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5a:2e:a6:f9:57:dd:a6:48:60:d6:b8:37:38: 94:e6:b6:4b:49:a0:81:69:61:95:36:c7:4c:76:ec: f4:27:62:94:38:11:7a:25:76:82:76:b6:a5:6f:d8: 87:c6:6c:3a:fc:30:25:a9:6b:54:64:2c:b9:fa:be: b4:59:59:cd:4a:01:1d:4d:53:22:7e:80:20:70:87: 7b:06:9e:79:87:91:38:03:0e:3e:67:dc:ed:eb:6d: 6b:95:41:7a:72:79:75:35:48:c5:8b:ae:d9:75:01: 9f:be:8a:15:cd:80:67:5d:b4:ac:09:9a:0f:f6:f9: 83:61:48:62:d9:3f:54:b0:47:76:91:c7:96:85:ba: 2d:6a:3b:a0:88:ab:65:05:69:4b:4b:bb:e9:78:f0: 46:cd:73:c9:d5:79:00:aa:fc:84:79:92:04:96:b6: be:59:2e:8c:2d:ed:37:ee:72:18:b5:f9:ad:37:90: d7:0e:9b:2e:73:1e:1e:1d:ad:3b:7b:92:43:ce:58: c0:05:ad:9d:c0:6f:c2:6d:24:48:38:38:2e:ba:67: a2:b0:92:ef:da:70:fa:50:be:e8:72:5e:c0:23:2d: f4:ca:dc:77:0f:20:8d:1b:b8:21:c3:36:7d:27:b6: 4f:41:44:10:c2:f0:d7:bd:15:b0:3e:a8:d9:93:db: 20:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EE:16:D8:66:8E:7A:FE:41:36:08:9E:DF:DF:B2:47:96:79:9C:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8f84fc28-6c73-3455-b271-5ba66161728a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:0d:e7:8b:45:56:8e:e3:3a:56:9e:5d:56:97:e6:7b:98:7d: 44:57:71:22:a5:f9:b3:57:98:e7:58:69:ab:05:a9:20:ae:2f: 9d:f3:7f:c9:48:6c:41:f3:c9:ad:20:90:17:a3:db:23:35:eb: 82:e3:6d:e8:72:11:7e:9a:ea:ad:ae:61:13:ef:be:4d:ca:14: 08:c3:e9:2d:f3:1c:93:20:6f:b5:3a:79:4f:a5:46:b8:45:50: 58:8f:6e:34:28:71:ed:75:1c:d0:2a:f9:24:82:e1:a5:df:ad: 57:e5:4b:61:3d:5d:c6:c9:ef:2f:33:a5:20:73:8e:f6:8b:6f: 74:43:e8:48:0e:0d:07:73:0d:e9:a6:3d:83:e4:3e:34:fb:68: 06:82:9d:f5:e6:65:ba:0d:46:cf:e1:44:d2:36:bc:12:1f:f0: 25:ab:cc:aa:87:5a:08:4c:39:49:42:ec:df:24:c1:d0:49:b5: 78:45:b2:7b:88:20:e6:6b:c7:ed:10:1e:50:a6:a9:b5:8b:3d: a8:19:82:1f:42:b3:40:0b:2a:3c:80:84:41:03:dc:25:b4:06: 4e:b3:99:f1:18:1c:62:9a:b0:d7:af:e6:7e:9d:29:0f:fa:7e: f0:5d:28:0b:7c:12:6d:5c:83:6b:b5:f9:89:d2:0e:bd:a8:b0: 40:ea:87:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexs8V/uTq+6OnugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk ZGY1ZGExYWQtN2NlZC00ZjhmLWE5NDYtMDFkZWQ4MjVjYjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1oupvlX3aZIYNa4NziU5rZLSaCBaWGVNsdM duz0J2KUOBF6JXaCdralb9iHxmw6/DAlqWtUZCy5+r60WVnNSgEdTVMifoAgcId7 Bp55h5E4Aw4+Z9zt621rlUF6cnl1NUjFi67ZdQGfvooVzYBnXbSsCZoP9vmDYUhi 2T9UsEd2kceWhbotajugiKtlBWlLS7vpePBGzXPJ1XkAqvyEeZIElra+WS6MLe03 7nIYtfmtN5DXDpsucx4eHa07e5JDzljABa2dwG/CbSRIODguumeisJLv2nD6UL7o cl7AIy30ytx3DyCNG7ghwzZ9J7ZPQUQQwvDXvRWwPqjZk9sgcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7uFthmjnr+QTYInt/fskeWeZz9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGY4NGZjMjgtNmM3My0z NDU1LWIyNzEtNWJhNjYxNjE3MjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgPJeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgN54tFVo7jOlaeXVaX5nuYfURXcSKl+bNXmOdYaasFqSCuL53zf8lI bEHzya0gkBej2yM164LjbehyEX6a6q2uYRPvvk3KFAjD6S3zHJMgb7U6eU+lRrhF UFiPbjQoce11HNAq+SSC4aXfrVflS2E9XcbJ7y8zpSBzjvaLb3RD6EgODQdzDemm PYPkPjT7aAaCnfXmZboNRs/hRNI2vBIf8CWrzKqHWghMOUlC7N8kwdBJtXhFsnuI IOZrx+0QHlCmqbWLPagZgh9Cs0ALKjyAhEED3CW0Bk6zmfEYHGKasNev5n6dKQ/6 fvBdKAt8Em1cg2u1+YnSDr2osEDqhxc= -----END CERTIFICATE-----Generated at Mon Feb 23 11:54:41 2026 by rpki-client