$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/02116e6d-8286-3367-ab7d-9693bb8dac50.roa File: 02116e6d-8286-3367-ab7d-9693bb8dac50.roa (raw, json) Hash identifier: 0+F2j/iudwgMfNPVv+bR19KsFIctaaaOWvBkOM2vuGQ= Subject key identifier: 07:0E:9A:87:7C:65:A2:16:5A:5C:70:32:1A:96:FA:E7:64:6A:89:08 Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F4328584D0A77A2D52BBE0F86089F5380 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/02116e6d-8286-3367-ab7d-9693bb8dac50.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 59 IP address blocks: 128.104.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a2:d5:2b:be:0f:86:08:9f:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=4234ad0b-a005-4217-a369-577a989f0357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a2:15:69:be:a7:bb:bb:9c:7f:20:df:e6:57: f2:67:6b:70:af:3f:30:26:94:ee:fc:6f:de:74:f2: 3a:d1:a4:a2:8a:d5:92:20:18:fd:4e:7a:e5:49:1d: 38:73:a4:8f:ba:cb:27:55:ee:87:2b:44:7e:ea:57: e1:1b:a5:7a:d3:54:a0:db:6e:8b:20:fd:1b:6e:50: 40:96:cb:cc:c1:5d:bb:94:44:ab:d3:44:1d:c9:3a: d6:14:6f:00:0a:d4:fc:86:5b:3e:9b:72:41:eb:40: b9:02:04:1a:40:d1:40:57:7b:9d:f6:d5:83:93:8c: 8c:03:2a:00:73:03:ef:f6:cd:12:72:b6:b7:50:17: 65:d4:88:e0:62:33:53:3b:4e:f5:17:c4:a3:07:50: c2:93:f6:d9:7d:b7:bb:75:0e:89:6a:86:9a:f2:67: 08:e9:ff:03:ea:37:59:d0:75:26:48:7f:d4:98:45: aa:71:26:c8:30:f8:a8:08:cc:4a:79:e7:d8:5d:19: 57:4e:98:bb:38:29:22:f4:4f:30:bb:f5:05:41:3b: 59:27:ee:22:aa:e1:66:34:3c:a6:d9:d6:5b:ea:f8: 7f:0d:81:98:0b:c6:86:ab:7c:6e:ae:02:3d:61:2b: 7d:f6:c2:23:cd:4c:b0:2b:40:5c:ed:73:a3:eb:53: 26:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0E:9A:87:7C:65:A2:16:5A:5C:70:32:1A:96:FA:E7:64:6A:89:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/02116e6d-8286-3367-ab7d-9693bb8dac50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 128.104.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:99:a6:6f:0b:bf:45:29:a7:2e:ba:32:1f:5d:f3:c5:91:5a: 51:35:79:80:7a:4d:22:90:8d:7c:72:61:7c:7e:9e:f8:42:e6: 46:02:91:54:71:23:ca:70:07:ed:d6:ca:91:e4:4a:41:82:57: 87:fa:12:3d:6e:8f:19:58:ff:05:dc:f2:b6:71:a6:ee:40:36: 5d:f1:f8:d9:49:6b:54:ff:51:61:df:2e:77:91:41:8d:da:c7: 62:a2:31:4f:07:75:38:87:6f:eb:42:9c:44:6a:c4:ed:e2:1e: 58:ef:98:99:2f:66:6d:e7:64:9a:93:59:86:11:6b:34:06:f7: 46:31:2c:39:bf:32:6e:f9:59:aa:35:25:53:56:80:ea:ed:73: 3f:b2:19:0f:ef:87:75:fa:3d:bb:af:79:a9:4b:22:3a:83:81: 93:20:94:2c:3c:36:09:f5:82:82:46:5c:dd:41:20:cc:7b:97: 84:5f:2c:22:3f:9e:71:fb:c9:34:63:3d:d4:e8:bd:79:b9:b4: 56:7e:29:92:92:fa:d1:28:80:2a:e8:2d:61:86:81:97:02:81: 4f:b6:bd:e4:4f:c7:e1:80:0c:29:1b:9f:47:fe:d1:ea:09:72: 2f:59:85:48:73:0a:ef:49:88:4a:c6:35:c5:71:fb:fc:2f:74: 98:ec:cc:66 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0Kd6LVK74PhgifU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk NDIzNGFkMGItYTAwNS00MjE3LWEzNjktNTc3YTk4OWYwMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaIVab6nu7ucfyDf5lfyZ2twrz8wJpTu/G/e dPI60aSiitWSIBj9TnrlSR04c6SPussnVe6HK0R+6lfhG6V601Sg226LIP0bblBA lsvMwV27lESr00QdyTrWFG8ACtT8hls+m3JB60C5AgQaQNFAV3ud9tWDk4yMAyoA cwPv9s0Scra3UBdl1IjgYjNTO071F8SjB1DCk/bZfbe7dQ6Jaoaa8mcI6f8D6jdZ 0HUmSH/UmEWqcSbIMPioCMxKeefYXRlXTpi7OCki9E8wu/UFQTtZJ+4iquFmNDym 2dZb6vh/DYGYC8aGq3xurgI9YSt99sIjzUywK0Bc7XOj61MmxwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAcOmod8ZaIWWlxwMhqW+udkaokIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvMDIxMTZlNmQtODI4Ni0z MzY3LWFiN2QtOTY5M2JiOGRhYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgGgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEZmmbwu/RSmnLroyH13zxZFaUTV5gHpNIpCNfHJhfH6e+ELmRgKRVHEj ynAH7dbKkeRKQYJXh/oSPW6PGVj/BdzytnGm7kA2XfH42UlrVP9RYd8ud5FBjdrH YqIxTwd1OIdv60KcRGrE7eIeWO+YmS9mbedkmpNZhhFrNAb3RjEsOb8ybvlZqjUl U1aA6u1zP7IZD++Hdfo9u695qUsiOoOBkyCULDw2CfWCgkZc3UEgzHuXhF8sIj+e cfvJNGM91Oi9ebm0Vn4pkpL60SiAKugtYYaBlwKBT7a95E/H4YAMKRufR/7R6gly L1mFSHMK70mISsY1xXH7/C90mOzMZg== -----END CERTIFICATE-----Generated at Thu Mar 19 09:08:20 2026 by rpki-client