$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa File: 9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa (raw, json) Hash identifier: dLDfhvxEUGGdmzbo0eMfZ7B1YgQ2SjZCf68yrag8+C0= Subject key identifier: BF:2E:57:3A:46:94:43:21:D2:21:73:56:B9:0C:64:36:70:9E:67:F0 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF57FFC855A7F9E2A98380 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 213122 IP address blocks: 128.254.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:57:ff:c8:55:a7:f9:e2:a9:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=419e3961-85e5-4b3b-a1eb-717b18f0ecad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:5d:d2:77:fc:e7:84:d4:0f:9b:47:ae:13: d2:49:e8:3c:5b:6e:51:ab:8c:27:12:c1:f4:64:64: af:0f:23:ae:80:a0:cf:8d:a9:a7:2a:7d:b2:1f:4a: fd:92:35:f8:3c:7f:0e:06:59:7c:eb:b3:7e:4c:09: 32:12:56:8a:71:f0:ce:98:95:e2:71:48:a3:ac:e4: af:7e:bb:81:b2:16:ed:74:8d:08:28:f7:1c:61:d4: fc:9d:c4:1f:3c:46:1a:b0:bf:65:fc:62:a8:c8:51: 4b:62:4e:b6:23:a2:a0:80:d3:a9:18:57:77:5b:cc: de:b2:7c:6c:7b:b0:a1:c3:1c:40:05:3d:7e:e8:e9: 19:70:f6:23:0b:c4:00:bf:b2:2e:20:1e:3a:5c:f4: f7:4c:59:82:aa:88:e8:b2:fc:41:27:ff:5c:f3:91: d4:ab:79:ce:b5:41:2c:67:36:33:8a:a7:6c:5f:f7: 71:b1:bf:ca:94:34:46:c4:07:d1:01:4d:bb:52:ea: d1:f5:16:65:19:1c:3a:db:3a:d5:55:84:78:b1:c5: 0f:6b:b0:62:e7:e8:fb:14:40:45:21:e5:9b:8a:1d: ae:f6:dc:84:86:7b:28:11:40:9e:67:bc:b4:ba:f1: c9:90:ee:55:c8:b7:8b:6a:ea:ed:75:da:84:e0:8d: b9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2E:57:3A:46:94:43:21:D2:21:73:56:B9:0C:64:36:70:9E:67:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/9a4b67d8-2cc1-3ab7-8ffe-1ffe8d3aaeee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:01:cd:1a:17:dc:ce:29:97:b2:39:9c:b5:e9:5b:05:dc:df: fa:76:37:b2:ac:df:e7:9e:a6:c1:62:9c:85:79:25:59:6a:ce: 21:f9:45:62:2b:f2:a7:a3:2c:5f:0e:bb:f2:bc:0e:ea:c2:ca: 04:e1:7c:9e:d5:3e:1a:b7:af:78:17:27:33:aa:4e:ec:5b:fd: 09:36:fe:81:90:dc:7c:47:c7:83:00:ff:f7:0f:b6:cf:59:80: f5:e4:50:43:3d:3e:f8:c0:e8:cc:38:35:10:09:be:50:2b:bf: 6e:8a:b6:c8:ee:c3:0b:b8:ff:38:ab:b3:13:35:5c:6e:37:21: b3:1d:8b:fc:2e:9b:93:5d:7d:0f:8a:bf:62:bf:f0:8b:da:5f: 72:fd:06:8d:60:27:a9:96:7f:11:a8:da:ec:07:f7:6d:8f:70: 85:36:d6:db:94:fa:0d:3f:5d:be:33:ae:bc:e4:f9:2f:fa:93: 8f:d4:06:c8:2b:ba:53:ef:02:6b:7a:21:46:fe:1f:37:d6:d2: c4:88:94:3c:02:af:d0:26:2f:85:96:10:da:5b:84:ed:dc:5b: fc:7d:33:7f:7c:3c:ac:e2:eb:b3:48:65:ef:76:93:c5:30:49: c8:38:e7:0b:d0:22:3c:d3:44:c5:68:19:7d:ba:35:bd:46:54: 13:84:40:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1f/yFWn+eKpg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk NDE5ZTM5NjEtODVlNS00YjNiLWExZWItNzE3YjE4ZjBlY2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT9d0nf854TUD5tHrhPSSeg8W25Rq4wnEsH0 ZGSvDyOugKDPjamnKn2yH0r9kjX4PH8OBll867N+TAkyElaKcfDOmJXicUijrOSv fruBshbtdI0IKPccYdT8ncQfPEYasL9l/GKoyFFLYk62I6KggNOpGFd3W8zesnxs e7ChwxxABT1+6OkZcPYjC8QAv7IuIB46XPT3TFmCqojosvxBJ/9c85HUq3nOtUEs ZzYziqdsX/dxsb/KlDRGxAfRAU27UurR9RZlGRw62zrVVYR4scUPa7Bi5+j7FEBF IeWbih2u9tyEhnsoEUCeZ7y0uvHJkO5VyLeLaurtddqE4I25bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8uVzpGlEMh0iFzVrkMZDZwnmfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvOWE0YjY3ZDgtMmNjMS0z YWI3LThmZmUtMWZmZThkM2FhZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYBzRoX3M4pl7I5nLXpWwXc3/p2N7Ks3+eepsFinIV5JVlqziH5RWIr 8qejLF8Ou/K8DurCygThfJ7VPhq3r3gXJzOqTuxb/Qk2/oGQ3HxHx4MA//cPts9Z gPXkUEM9PvjA6Mw4NRAJvlArv26Ktsjuwwu4/zirsxM1XG43IbMdi/wum5NdfQ+K v2K/8IvaX3L9Bo1gJ6mWfxGo2uwH922PcIU21tuU+g0/Xb4zrrzk+S/6k4/UBsgr ulPvAmt6IUb+HzfW0sSIlDwCr9AmL4WWENpbhO3cW/x9M398PKzi67NIZe92k8Uw Scg45wvQIjzTRMVoGX26Nb1GVBOEQPg= -----END CERTIFICATE-----Generated at Fri Mar 13 13:31:53 2026 by rpki-client