$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa File: 672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa (raw, json) Hash identifier: RyvsqFXlSfgML5n/7Umgxk1y8qRlHuYre9/7mySC6JE= Subject key identifier: 12:63:20:6C:F1:32:51:D1:2F:76:30:E9:A6:CE:D6:A7:BF:3D:5B:2D Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF5629C097ABDEA72A7E00 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 931 IP address blocks: 128.254.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:56:29:c0:97:ab:de:a7:2a:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=cbe4ba1f-bdc8-4488-a45a-b2c1130762c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d1:e1:c3:9b:70:0e:6d:16:47:71:4e:df:d0: 07:25:73:0a:be:0a:20:8a:d3:82:f0:33:83:c2:31: 21:4f:00:1c:47:a5:60:21:8c:13:19:fa:63:98:06: 15:4e:47:eb:a9:49:e9:28:55:52:00:d9:07:0b:11: 7f:55:b7:94:2c:ef:01:5c:0f:67:29:f6:3a:0e:2d: f8:47:74:bf:9a:16:80:6c:97:63:c5:6a:fa:fe:1c: 27:21:31:09:fb:2e:03:0d:08:76:fc:96:fd:50:e9: 96:9f:21:66:84:a8:88:69:62:7d:83:81:69:bb:62: f3:22:d7:0c:51:34:93:5b:7c:f5:3d:a6:4c:d8:89: 0c:31:21:4a:86:a0:bf:b9:6a:27:e0:08:ab:e9:2e: 2a:c5:da:dc:35:26:df:3c:fb:f8:d4:fe:ed:af:9d: 68:59:ac:37:81:b1:f2:ba:72:c2:22:b5:47:ce:41: 35:44:da:7a:ae:3d:b7:8c:c7:9f:99:df:f9:5e:7d: f4:dc:4b:f9:75:fa:b8:f9:1b:4a:34:b1:27:9c:e2: 26:64:a1:80:b6:a8:d0:65:89:ea:5f:38:f7:de:c3: 97:73:65:47:da:61:e6:94:8a:22:2b:80:25:74:57: e8:7d:7c:05:58:a7:5f:4f:cb:9c:c3:a7:59:fa:bd: f5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:63:20:6C:F1:32:51:D1:2F:76:30:E9:A6:CE:D6:A7:BF:3D:5B:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/672194c2-4aa1-3c84-a9d8-b8e89566f3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:85:06:e0:8b:72:32:02:37:45:f0:70:b6:45:56:ca:87:fb: a3:2e:e5:c0:16:ee:15:8e:f4:93:12:54:e8:a7:00:3b:9c:3a: 51:ab:00:05:f8:d4:5a:05:44:ca:bf:e8:48:22:6e:c0:72:86: df:10:11:c4:2d:2f:a8:4f:78:e3:69:68:33:72:af:b8:4a:ab: 0a:51:6f:6d:8c:8d:d2:ed:0c:d3:bc:19:58:2f:93:df:dc:62: a8:02:d0:91:bf:f7:7c:50:56:87:0c:c8:35:3a:cc:84:ac:0b: b4:91:78:67:0c:26:74:6f:66:0f:be:47:66:a0:36:e6:cb:64: 58:da:90:87:00:99:bf:29:4f:1b:96:7f:11:b2:11:dc:2b:63: 27:fb:47:a6:df:34:a5:1c:77:ce:bb:2f:cb:8b:93:cf:32:59: ad:4f:a4:ac:8f:7b:8e:c9:db:3c:8d:00:aa:3f:bf:ef:03:7a: a3:11:19:7e:e4:22:fe:cd:05:63:d1:a7:98:7c:e6:23:a8:87: a4:25:be:5a:5c:cd:8a:d7:27:48:3c:34:f9:f2:d5:48:7c:e1: a5:7b:9b:fa:0a:92:b4:7e:ab:e1:e7:0b:a9:10:7e:99:b3:8a: 7b:1b:05:f2:fb:62:ff:a9:10:f8:76:1f:22:f0:a1:e4:b9:4d: 5d:d2:7c:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1YpwJer3qcqfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk Y2JlNGJhMWYtYmRjOC00NDg4LWE0NWEtYjJjMTEzMDc2MmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tHhw5twDm0WR3FO39AHJXMKvgogitOC8DOD wjEhTwAcR6VgIYwTGfpjmAYVTkfrqUnpKFVSANkHCxF/VbeULO8BXA9nKfY6Di34 R3S/mhaAbJdjxWr6/hwnITEJ+y4DDQh2/Jb9UOmWnyFmhKiIaWJ9g4Fpu2LzItcM UTSTW3z1PaZM2IkMMSFKhqC/uWon4Air6S4qxdrcNSbfPPv41P7tr51oWaw3gbHy unLCIrVHzkE1RNp6rj23jMefmd/5Xn303Ev5dfq4+RtKNLEnnOImZKGAtqjQZYnq Xzj33sOXc2VH2mHmlIoiK4AldFfofXwFWKdfT8ucw6dZ+r31owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJjIGzxMlHRL3Yw6abO1qe/PVstMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvNjcyMTk0YzItNGFhMS0z Yzg0LWE5ZDgtYjhlODk1NjZmM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCFBuCLcjICN0XwcLZFVsqH+6Mu5cAW7hWO9JMSVOinADucOlGrAAX4 1FoFRMq/6EgibsByht8QEcQtL6hPeONpaDNyr7hKqwpRb22MjdLtDNO8GVgvk9/c YqgC0JG/93xQVocMyDU6zISsC7SReGcMJnRvZg++R2agNubLZFjakIcAmb8pTxuW fxGyEdwrYyf7R6bfNKUcd867L8uLk88yWa1PpKyPe47J2zyNAKo/v+8DeqMRGX7k Iv7NBWPRp5h85iOoh6QlvlpczYrXJ0g8NPny1Uh84aV7m/oKkrR+q+HnC6kQfpmz insbBfL7Yv+pEPh2HyLwoeS5TV3SfMs= -----END CERTIFICATE-----Generated at Fri Mar 13 10:58:19 2026 by rpki-client