$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/b1e66ddd-f5af-39e8-93f9-c38eff664429.roa File: b1e66ddd-f5af-39e8-93f9-c38eff664429.roa (raw, json) Hash identifier: sDu/Ce8n5YUuw7Hp4ArJJdF2NYBC2LyHpIYSEKRMm0s= Subject key identifier: C0:5B:8D:32:4A:DE:CB:60:D1:B6:2F:08:E2:81:2A:DD:FD:D0:38:82 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF57CF8B2138F954238880 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/b1e66ddd-f5af-39e8-93f9-c38eff664429.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 213122 IP address blocks: 128.254.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:57:cf:8b:21:38:f9:54:23:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=f6c49ab2-a835-4edf-b1ea-b070a46fa4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:24:49:ae:5f:cf:25:21:10:44:67:cc:cf: 2b:4f:7a:b4:0d:74:ce:88:ef:54:f6:1c:e9:cd:ea: 7a:14:87:98:d3:1d:83:06:7c:ff:d0:97:ec:a5:5c: 27:8a:df:01:93:a4:6e:ce:74:1b:dd:8c:fc:54:65: 38:9e:42:58:5b:a8:30:5c:21:13:40:79:f5:01:84: 4b:ec:74:02:de:5e:72:8e:26:a8:56:e7:77:e3:9e: bd:70:c5:35:f4:8c:20:2e:40:dc:c4:44:29:c7:75: 99:99:d4:04:79:5b:f6:f9:1b:7e:f8:92:c7:d3:04: 8a:d3:d6:b4:58:58:4d:3c:34:2e:a0:a7:af:ff:43: b9:55:8c:3f:ce:f5:40:f3:a4:e1:ba:16:5d:aa:72: 56:4a:57:a9:9e:96:fa:91:3a:89:0b:ba:fc:ee:c6: 22:3e:a3:e1:4f:77:7a:75:00:21:74:63:a3:9e:1d: 6b:4e:ac:79:b6:bf:94:d7:f0:6b:22:23:c2:f4:10: 39:2a:69:9d:77:62:5b:b2:01:75:98:5c:b0:40:4b: 6c:20:ef:a3:80:9f:56:bd:41:ad:51:c6:a8:b5:79: 83:25:b8:71:2f:25:70:0b:dc:dc:93:9c:85:02:6f: 13:7b:fc:dc:76:3f:fe:c7:06:c6:9c:2f:02:24:63: fa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5B:8D:32:4A:DE:CB:60:D1:B6:2F:08:E2:81:2A:DD:FD:D0:38:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/b1e66ddd-f5af-39e8-93f9-c38eff664429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:92:81:f2:63:bd:a6:76:16:04:fd:9c:08:d9:09:cb:36:5c: 8c:2f:d0:ce:5a:df:5a:48:93:50:03:da:8e:7f:26:01:68:47: 5d:e9:90:dd:7a:30:1f:e3:2a:c9:a3:7b:b3:f8:62:93:c2:40: 8a:84:7c:40:a7:63:4d:4d:ce:85:83:68:c8:bf:2d:38:db:0e: 78:ea:63:52:f7:0a:7f:e1:fe:eb:58:82:58:72:33:a1:52:20: a1:5d:5c:c4:80:d2:47:9d:52:bd:46:32:58:9d:4a:d4:e9:86: ec:66:b7:66:a5:6b:d7:e9:73:7e:7f:54:ec:36:a2:fa:4c:80: 04:20:c4:99:5a:20:80:08:83:4c:59:5e:87:2c:5d:52:dd:89: 1e:06:5c:16:d5:09:88:38:9d:a4:b7:8f:7c:2a:04:ec:99:19: ce:a8:8b:e9:01:2c:02:54:0e:e2:2f:a6:ed:bb:e8:5d:04:a8: e3:75:e3:bc:3e:3b:28:f9:23:58:fa:54:97:bf:51:6d:da:c5: a5:b4:a2:b6:b9:df:5e:61:44:f3:5f:3e:90:9b:e7:33:58:81: 42:39:ac:06:4f:94:54:38:27:af:cf:c6:6c:b7:53:92:74:c9: 3b:b7:95:a3:5f:fb:c8:30:0f:4e:a3:a8:da:6e:e4:4a:e8:95: 5b:23:3a:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1fPiyE4+VQjiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjZjNDlhYjItYTgzNS00ZWRmLWIxZWEtYjA3MGE0NmZhNGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnIkSa5fzyUhEERnzM8rT3q0DXTOiO9U9hzp zep6FIeY0x2DBnz/0JfspVwnit8Bk6RuznQb3Yz8VGU4nkJYW6gwXCETQHn1AYRL 7HQC3l5yjiaoVud34569cMU19IwgLkDcxEQpx3WZmdQEeVv2+Rt++JLH0wSK09a0 WFhNPDQuoKev/0O5VYw/zvVA86ThuhZdqnJWSlepnpb6kTqJC7r87sYiPqPhT3d6 dQAhdGOjnh1rTqx5tr+U1/BrIiPC9BA5Kmmdd2JbsgF1mFywQEtsIO+jgJ9WvUGt UcaotXmDJbhxLyVwC9zck5yFAm8Te/zcdj/+xwbGnC8CJGP68QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBbjTJK3stg0bYvCOKBKt390DiCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYjFlNjZkZGQtZjVhZi0z OWU4LTkzZjktYzM4ZWZmNjY0NDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCSgfJjvaZ2FgT9nAjZCcs2XIwv0M5a31pIk1AD2o5/JgFoR13pkN16 MB/jKsmje7P4YpPCQIqEfECnY01NzoWDaMi/LTjbDnjqY1L3Cn/h/utYglhyM6FS IKFdXMSA0kedUr1GMlidStTphuxmt2ala9fpc35/VOw2ovpMgAQgxJlaIIAIg0xZ XocsXVLdiR4GXBbVCYg4naS3j3wqBOyZGc6oi+kBLAJUDuIvpu276F0EqON147w+ Oyj5I1j6VJe/UW3axaW0ora5315hRPNfPpCb5zNYgUI5rAZPlFQ4J6/Pxmy3U5J0 yTu3laNf+8gwD06jqNpu5ErolVsjOrI= -----END CERTIFICATE-----Generated at Fri Mar 13 13:35:19 2026 by rpki-client