$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/86af315a-812f-3f1f-a43f-8f50cbe24315.roa File: 86af315a-812f-3f1f-a43f-8f50cbe24315.roa (raw, json) Hash identifier: kqSTQQas5qoQPiALxhmBwseBvsRCcwGv8O/wcthP5RU= Subject key identifier: C0:88:D2:53:4E:7D:6B:54:25:8F:61:A5:C6:FB:3C:87:76:38:7E:5D Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584D15A26EAE6DEC00ED5B779A00 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/86af315a-812f-3f1f-a43f-8f50cbe24315.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 29802 IP address blocks: 75.127.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:6e:ae:6d:ec:00:ed:5b:77:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=0e9eaaa8-2cf1-4862-86b2-3b244b3c2499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7f:60:a7:3b:1b:8e:0c:92:4c:de:c0:39:18: 1b:e9:db:96:72:24:fb:8c:cf:c3:cd:75:d5:14:89: b6:ba:6c:97:90:aa:8c:76:4d:30:ac:6a:a9:cc:2b: 44:72:71:cc:52:b7:fa:bb:40:f8:fb:79:3f:0a:65: 4c:c1:e2:a7:c9:f0:b1:83:41:a7:e9:32:d6:35:1d: 6a:d2:23:01:e7:86:1f:fb:01:3e:e6:94:60:c5:4c: ef:97:84:b7:b1:38:26:4f:47:18:3b:09:79:e9:fe: 9a:61:04:0a:1f:42:22:a0:51:cd:d7:43:f4:c0:26: 47:90:e8:cb:e9:a0:01:94:81:11:5d:e7:a9:01:74: 15:2c:1e:3a:37:47:42:59:14:09:7b:65:ea:3a:9a: be:f7:81:ad:23:fb:53:dc:a9:62:5b:df:46:a8:40: 24:43:e5:82:71:eb:5a:47:b7:ba:a2:25:46:4e:8c: f2:ad:a7:e7:a2:03:cb:c6:5a:60:f8:f1:93:f7:9e: cc:b7:19:9f:8e:3b:a0:cb:7c:81:de:f2:9c:25:45: 4f:53:fb:0c:8f:87:16:c3:36:fa:42:56:3a:30:eb: 5c:7f:37:e8:43:9a:47:e1:ad:4f:53:ad:e6:41:89: bb:5f:ce:39:45:35:f7:64:5f:29:67:31:d4:0e:a7: 49:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:88:D2:53:4E:7D:6B:54:25:8F:61:A5:C6:FB:3C:87:76:38:7E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/86af315a-812f-3f1f-a43f-8f50cbe24315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 75.127.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:2b:aa:66:b0:a4:e0:2c:3f:73:3d:cc:16:48:cf:e8:8d:a5: 6e:2f:be:65:79:d3:59:0f:11:84:d3:b4:58:f9:88:43:83:cd: 17:7a:ce:94:38:f9:c9:f3:6f:49:16:23:c5:66:fd:15:2f:7d: d1:b9:c7:9b:fb:2a:46:c7:33:a0:96:ca:d9:34:43:3d:01:e4: ea:ec:21:e4:0e:f6:4d:4d:92:7e:d6:d7:1b:d4:8a:df:70:7e: fa:9b:c2:ef:7d:b0:f5:67:32:b0:cf:ac:ec:f0:e3:e6:45:03: fd:81:a6:b1:27:e7:92:27:bd:62:e3:d1:3e:37:5d:62:2d:fb: d0:b8:96:98:d6:87:03:8c:ad:3e:15:3b:72:07:c6:76:f5:01: 01:3a:54:ea:03:37:d4:b9:5b:fb:2c:f5:0c:73:13:cf:d9:87: b5:96:e9:83:73:d1:54:ae:d2:30:62:43:50:cc:73:0a:59:bf: 96:9f:5a:09:0c:6e:7c:c9:0b:74:b3:34:f1:5b:b1:ea:12:2c: 8c:64:93:b6:80:a2:21:06:71:ff:ff:0c:71:19:21:08:fa:9a: 83:b4:8d:ff:c3:93:ac:b1:6b:e6:bb:66:38:cc:09:36:34:e3: 3b:c3:79:b3:ae:3e:c9:dd:78:f2:59:3f:38:81:3a:db:3b:e2: 95:b2:d7:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Vom6ubewA7Vt3mgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk MGU5ZWFhYTgtMmNmMS00ODYyLTg2YjItM2IyNDRiM2MyNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX9gpzsbjgySTN7AORgb6duWciT7jM/DzXXV FIm2umyXkKqMdk0wrGqpzCtEcnHMUrf6u0D4+3k/CmVMweKnyfCxg0Gn6TLWNR1q 0iMB54Yf+wE+5pRgxUzvl4S3sTgmT0cYOwl56f6aYQQKH0IioFHN10P0wCZHkOjL 6aABlIERXeepAXQVLB46N0dCWRQJe2XqOpq+94GtI/tT3KliW99GqEAkQ+WCceta R7e6oiVGTozyrafnogPLxlpg+PGT957Mtxmfjjugy3yB3vKcJUVPU/sMj4cWwzb6 QlY6MOtcfzfoQ5pH4a1PU63mQYm7X845RTX3ZF8pZzHUDqdJ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCI0lNOfWtUJY9hpcb7PId2OH5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvODZhZjMxNWEtODEyZi0z ZjFmLWE0M2YtOGY1MGNiZTI0MzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS395MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUrqmawpOAsP3M9zBZIz+iNpW4vvmV501kPEYTTtFj5iEODzRd6zpQ4 +cnzb0kWI8Vm/RUvfdG5x5v7KkbHM6CWytk0Qz0B5OrsIeQO9k1Nkn7W1xvUit9w fvqbwu99sPVnMrDPrOzw4+ZFA/2BprEn55InvWLj0T43XWIt+9C4lpjWhwOMrT4V O3IHxnb1AQE6VOoDN9S5W/ss9QxzE8/Zh7WW6YNz0VSu0jBiQ1DMcwpZv5afWgkM bnzJC3SzNPFbseoSLIxkk7aAoiEGcf//DHEZIQj6moO0jf/Dk6yxa+a7ZjjMCTY0 4zvDebOuPsndePJZPziBOts74pWy14Y= -----END CERTIFICATE-----Generated at Tue Mar 17 02:21:15 2026 by rpki-client