$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f2d7b4a5-e2d0-3b93-9551-0b768869c67b.roa File: f2d7b4a5-e2d0-3b93-9551-0b768869c67b.roa (raw, json) Hash identifier: DW5jle8T9Zitc6A7PRvFQV3EuTBhknUNbZbZ7GjFzVI= Subject key identifier: CC:67:26:3E:A2:75:EA:90:70:98:59:80:8A:5E:DB:14:1C:41:A0:9B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584DE6E5C3AE3AEA861D3CFF6F00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f2d7b4a5-e2d0-3b93-9551-0b768869c67b.roa Signing time: Thu 21 May 2026 01:00:25 +0000 ROA not before: Thu 21 May 2026 01:00:25 +0000 ROA not after: Wed 19 Aug 2026 01:00:25 +0000 asID: 11404 IP address blocks: 128.121.64.0/18 maxlen: 24 128.241.128.0/18 maxlen: 24 131.103.192.0/18 maxlen: 24 157.238.0.0/18 maxlen: 24 168.143.0.0/18 maxlen: 24 192.204.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e6:e5:c3:ae:3a:ea:86:1d:3c:ff:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 21 01:00:25 2026 GMT Not After : Aug 19 01:00:25 2026 GMT Subject: CN=37364a96-9f4e-4177-ab44-abb86f7d5a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c3:9d:be:f9:48:58:32:f8:69:a5:a5:57:df: d8:fa:e8:08:4b:bd:1c:dd:4e:13:5c:5c:0d:36:98: 4c:26:bf:39:08:3a:08:d3:bf:6f:b2:2e:61:22:93: 23:fa:0c:c5:d4:48:fc:e9:ec:55:02:2a:57:ae:1b: c5:93:81:96:ce:31:69:31:39:c3:d6:63:89:43:5f: 50:61:d7:42:1f:82:33:ba:95:fc:4e:03:9f:a5:cb: 10:71:83:7f:1d:de:5f:46:b9:69:4f:65:4c:2b:59: 5b:8f:43:e9:e2:42:ba:06:f6:ef:a4:32:94:8b:c8: a0:1c:64:ff:b8:c9:60:49:91:26:52:a7:6c:fc:96: e2:02:66:2b:8d:a1:8d:63:14:ba:ee:9d:8d:a7:60: 89:80:31:bc:c4:db:e5:9f:b7:10:fa:4a:58:eb:15: 62:65:2a:e4:11:17:37:b1:a3:52:08:9c:43:6c:1a: 66:ea:b7:c4:f7:18:75:8d:f2:67:51:11:62:cc:a8: 50:05:59:ea:89:d9:25:a5:40:a0:89:a5:7a:8c:df: c5:22:7c:45:91:9d:9d:d1:bb:3b:b9:75:31:14:7d: 5b:d3:4f:65:f0:0c:e1:4d:58:a9:dd:de:e5:c2:6c: 30:51:42:d0:2a:58:1a:27:3f:84:da:22:be:5c:a6: 92:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:67:26:3E:A2:75:EA:90:70:98:59:80:8A:5E:DB:14:1C:41:A0:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f2d7b4a5-e2d0-3b93-9551-0b768869c67b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.64.0/18 128.241.128.0/18 131.103.192.0/18 157.238.0.0/18 168.143.0.0/18 192.204.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:28:f7:a5:6f:6a:f5:71:ca:04:5e:b3:c6:f5:40:a3:2e:a9: 33:30:04:93:ea:89:12:24:0f:51:be:88:14:00:75:5c:e0:7e: b3:d0:24:ef:e8:1a:cb:24:8d:47:cb:d6:a0:68:f6:66:ba:80: f2:da:38:1b:c1:32:aa:7a:dd:fc:4a:62:35:36:c7:ee:3f:78: d5:be:06:47:3c:c5:21:08:cd:5f:b3:17:20:de:c0:49:b1:b9: b8:37:df:38:45:24:96:dd:15:32:be:7b:2c:6f:b1:ba:0b:21: d6:57:5a:ad:38:95:fd:8a:fc:38:25:47:e4:65:e7:e2:95:24: b0:41:3c:cd:3d:b3:4e:48:39:c2:c8:f7:5b:eb:d4:50:4d:63: 64:20:19:7a:89:4b:bd:0a:68:00:5f:0e:b5:85:54:ba:35:01: 42:04:82:1b:1d:cc:28:fe:a9:89:fb:b1:3f:42:ca:d7:02:fd: 3a:8f:8d:4f:fa:40:fe:6e:13:44:41:50:cd:b8:d3:e9:0f:81: 2e:65:4b:c8:7e:9a:29:47:3f:5d:a4:2a:21:92:a9:20:77:b9: c5:85:9c:fb:d3:27:c9:8e:ce:ac:8f:99:d1:d6:91:03:a3:4d: e3:ff:fe:45:d1:74:b6:b2:8d:0e:6e:c8:71:bb:ab:bc:1f:82: 2f:8a:85:14 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWE3m5cOuOuqGHTz/bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDUyMTAxMDAyNVoXDTI2MDgxOTAxMDAyNVowLzEtMCsGA1UEAxMk MzczNjRhOTYtOWY0ZS00MTc3LWFiNDQtYWJiODZmN2Q1YTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsOdvvlIWDL4aaWlV9/Y+ugIS70c3U4TXFwN NphMJr85CDoI079vsi5hIpMj+gzF1Ej86exVAipXrhvFk4GWzjFpMTnD1mOJQ19Q YddCH4IzupX8TgOfpcsQcYN/Hd5fRrlpT2VMK1lbj0Pp4kK6BvbvpDKUi8igHGT/ uMlgSZEmUqds/JbiAmYrjaGNYxS67p2Np2CJgDG8xNvln7cQ+kpY6xViZSrkERc3 saNSCJxDbBpm6rfE9xh1jfJnURFizKhQBVnqidklpUCgiaV6jN/FInxFkZ2d0bs7 uXUxFH1b009l8AzhTVip3d7lwmwwUULQKlgaJz+E2iK+XKaSDwIDAQABo4IDczCC A28wHQYDVR0OBBYEFMxnJj6ideqQcJhZgIpe2xQcQaCbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjJkN2I0YTUtZTJkMC0z YjkzLTk1NTEtMGI3Njg4NjljNjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQGgHlAAwQG gPGAAwQGg2fAAwQGne4AAwQGqI8AAwQGwMzAMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHoo96VvavVxygRe s8b1QKMuqTMwBJPqiRIkD1G+iBQAdVzgfrPQJO/oGsskjUfL1qBo9ma6gPLaOBvB Mqp63fxKYjU2x+4/eNW+Bkc8xSEIzV+zFyDewEmxubg33zhFJJbdFTK+eyxvsboL IdZXWq04lf2K/DglR+Rl5+KVJLBBPM09s05IOcLI91vr1FBNY2QgGXqJS70KaABf DrWFVLo1AUIEghsdzCj+qYn7sT9CytcC/TqPjU/6QP5uE0RBUM240+kPgS5lS8h+ milHP12kKiGSqSB3ucWFnPvTJ8mOzqyPmdHWkQOjTeP//kXRdLayjQ5uyHG7q7wf gi+KhRQ= -----END CERTIFICATE-----Generated at Wed May 27 15:23:38 2026 by rpki-client