$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/92f2c802-42e2-3523-b76d-9e4a8ad76ca5.roa File: 92f2c802-42e2-3523-b76d-9e4a8ad76ca5.roa (raw, json) Hash identifier: EeFbIF5aZWoGK5v4eYMwI8ks7ESJl//4KGsUodjm8CM= Subject key identifier: A1:33:C2:C1:93:7B:5A:4E:34:C2:52:95:03:32:AD:A5:3F:BB:7C:F6 Certificate issuer: /CN=dd8a2d71-ea3e-4a69-a215-5ee717cd29e5 Certificate serial: 010D0C9F4328584D204D159806209D7E83887040 Authority key identifier: 15:B8:ED:7D:E1:4B:40:3A:F1:5D:42:53:BF:E7:13:A4:A7:2E:8E:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/92f2c802-42e2-3523-b76d-9e4a8ad76ca5.roa Signing time: Tue 10 Mar 2026 21:42:45 +0000 ROA not before: Tue 10 Mar 2026 21:42:45 +0000 ROA not after: Mon 08 Jun 2026 21:42:45 +0000 asID: 2914 IP address blocks: 128.254.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:4d:15:98:06:20:9d:7e:83:88:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd8a2d71-ea3e-4a69-a215-5ee717cd29e5 Validity Not Before: Mar 10 21:42:45 2026 GMT Not After : Jun 8 21:42:45 2026 GMT Subject: CN=c295344a-717e-4a9b-a8e5-cb31a6a42f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2d:ee:57:cd:3c:b1:26:81:5a:bb:96:49:d6: ec:0b:6c:e8:c1:27:ed:63:a0:66:cb:6f:1f:55:d9: 81:90:a1:6c:d0:b4:4a:d1:47:d0:f3:62:72:35:6c: 3e:2f:2c:f8:ca:cd:05:d7:97:70:47:3f:33:04:ec: 5e:b1:20:b8:a9:0c:04:cb:cf:47:27:d9:47:43:5b: 6e:49:4e:52:71:3a:df:ee:2d:2d:ff:a9:39:88:87: 49:e4:3b:5b:92:d0:92:33:80:3b:3e:5c:ad:e0:2f: 48:af:60:1d:c7:94:a9:11:a9:c5:14:1b:2d:6f:af: 97:b0:40:84:1c:24:bc:79:21:10:84:74:85:9d:bd: 5b:a4:22:af:a7:11:da:30:81:29:ff:03:5c:03:27: 98:d3:d0:5e:7a:39:02:16:17:93:0e:2a:58:ca:32: 19:ab:06:6a:04:7e:28:25:11:e6:01:71:9f:19:1c: 87:64:78:f1:fc:c3:0e:b8:59:e4:a0:f8:c5:b2:69: 55:8c:ba:6e:3b:ab:0d:6c:de:c7:4f:b9:56:f6:60: 17:e3:b7:e0:1e:92:f2:c2:62:53:5c:84:ea:92:cd: 50:20:07:96:05:9c:9a:90:38:89:a0:2f:b8:44:14: 9e:10:6a:ee:10:93:4d:2a:88:00:3c:72:23:40:7b: ac:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:33:C2:C1:93:7B:5A:4E:34:C2:52:95:03:32:AD:A5:3F:BB:7C:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/92f2c802-42e2-3523-b76d-9e4a8ad76ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.crl X509v3 Authority Key Identifier: keyid:15:B8:ED:7D:E1:4B:40:3A:F1:5D:42:53:BF:E7:13:A4:A7:2E:8E:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.cer sbgp-ipAddrBlock: critical IPv4: 128.254.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6c:cc:3b:77:01:b7:29:aa:9a:bb:8c:f4:a9:a4:f3:9c:30: 15:26:5b:89:23:28:e4:fe:0a:00:60:6c:01:ce:57:5a:1a:04: 70:10:f5:8c:d6:7a:07:42:6d:9d:18:19:c0:7a:ed:3e:b1:ce: ce:ed:db:93:7b:8e:56:38:0d:29:44:3f:a6:32:34:b0:42:ba: 1c:47:ca:67:20:3b:0b:ed:23:01:5b:6f:9c:25:cf:38:e1:7c: e6:84:3f:6b:20:fa:0d:83:8c:2f:41:90:76:7a:a6:a2:a2:a4: b0:41:2a:bd:12:9e:5b:b0:98:f5:01:5b:3b:dd:72:52:85:fa: a9:8e:b2:af:61:09:d8:be:1e:6e:94:67:62:cc:c0:e2:57:f7: f1:f0:5b:c4:70:c3:6c:4e:fc:e2:92:f5:0b:8c:48:90:37:cb: 3f:96:d5:94:13:24:bd:da:b5:2e:a3:df:14:6e:f9:d1:50:39: cb:a8:af:ca:20:d3:25:e8:52:cf:ea:a0:a8:6c:0e:55:19:a3: 44:37:18:7d:55:ed:d3:da:cd:4e:8c:a7:30:ad:7d:4c:de:4e: bb:a1:57:f9:08:25:26:07:4f:cb:eb:f3:f1:0e:e2:e7:20:a4: 1a:b4:81:bb:ba:3e:6d:b1:bc:6b:9c:70:6f:67:8c:85:38:77: bd:91:a7:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gTRWYBiCdfoOIcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ4YTJkNzEtZWEzZS00YTY5LWEyMTUtNWVlNzE3Y2Qy OWU1MB4XDTI2MDMxMDIxNDI0NVoXDTI2MDYwODIxNDI0NVowLzEtMCsGA1UEAxMk YzI5NTM0NGEtNzE3ZS00YTliLWE4ZTUtY2IzMWE2YTQyZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS3uV808sSaBWruWSdbsC2zowSftY6Bmy28f VdmBkKFs0LRK0UfQ82JyNWw+Lyz4ys0F15dwRz8zBOxesSC4qQwEy89HJ9lHQ1tu SU5ScTrf7i0t/6k5iIdJ5DtbktCSM4A7Plyt4C9Ir2Adx5SpEanFFBstb6+XsECE HCS8eSEQhHSFnb1bpCKvpxHaMIEp/wNcAyeY09BeejkCFheTDipYyjIZqwZqBH4o JRHmAXGfGRyHZHjx/MMOuFnkoPjFsmlVjLpuO6sNbN7HT7lW9mAX47fgHpLywmJT XITqks1QIAeWBZyakDiJoC+4RBSeEGruEJNNKogAPHIjQHus6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEzwsGTe1pONMJSlQMyraU/u3z2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZDhh MmQ3MS1lYTNlLTRhNjktYTIxNS01ZWU3MTdjZDI5ZTUvOTJmMmM4MDItNDJlMi0z NTIzLWI3NmQtOWU0YThhZDc2Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGQ4YTJkNzEtZWEzZS00YTY5LWEy MTUtNWVlNzE3Y2QyOWU1L2RkOGEyZDcxLWVhM2UtNGE2OS1hMjE1LTVlZTcxN2Nk MjllNS5jcmwwHwYDVR0jBBgwFoAUFbjtfeFLQDrxXUJTv+cTpKcujpgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZDhhMmQ3MS1lYTNlLTRhNjktYTIxNS01ZWU3 MTdjZDI5ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJszDt3Abcpqpq7jPSppPOcMBUmW4kjKOT+CgBgbAHOV1oaBHAQ9YzW egdCbZ0YGcB67T6xzs7t25N7jlY4DSlEP6YyNLBCuhxHymcgOwvtIwFbb5wlzzjh fOaEP2sg+g2DjC9BkHZ6pqKipLBBKr0SnluwmPUBWzvdclKF+qmOsq9hCdi+Hm6U Z2LMwOJX9/HwW8Rww2xO/OKS9QuMSJA3yz+W1ZQTJL3atS6j3xRu+dFQOcuor8og 0yXoUs/qoKhsDlUZo0Q3GH1V7dPazU6MpzCtfUzeTruhV/kIJSYHT8vr8/EO4ucg pBq0gbu6Pm2xvGuccG9njIU4d72Rp3k= -----END CERTIFICATE-----Generated at Sun Mar 22 09:53:48 2026 by rpki-client