$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/12f25d35-c636-31fa-a0b4-d96b47fb707f.roa File: 12f25d35-c636-31fa-a0b4-d96b47fb707f.roa (raw, json) Hash identifier: +cNex7YrWlX0NcX4+2PEqqZB/S5yIQc+LJ7cwL4Mgng= Subject key identifier: C7:D8:78:C1:79:72:4E:BE:D1:D4:F3:D4:32:D0:43:BF:41:C0:7A:E2 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584C8046E6716A444B23223A0440 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/12f25d35-c636-31fa-a0b4-d96b47fb707f.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 13445 IP address blocks: 170.133.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:e6:71:6a:44:4b:23:22:3a:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=269281b0-6aae-4735-ad0b-553e36891976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:bb:ff:d3:33:7e:8a:ba:85:d1:72:93:27: 38:3d:a8:49:c0:da:9f:22:aa:fe:56:9f:56:ce:6c: da:1e:b6:35:40:1d:0c:e9:e9:f4:cb:98:96:11:fc: bf:a4:64:a4:0b:7e:e1:71:86:29:43:c4:80:af:25: 3e:7a:b7:18:ad:3e:8f:65:16:21:ba:a6:eb:86:48: 41:ce:ee:f2:51:68:51:34:9a:fc:95:bd:85:9d:3c: 95:1b:15:e6:23:1f:65:76:7a:32:67:8c:0b:f8:c5: 01:a0:41:e9:c4:08:7b:6b:67:b7:df:fa:0d:e0:01: 27:76:3d:c6:87:4d:d3:09:c6:00:91:33:c3:f6:a1: 54:66:8d:8a:07:8e:61:0f:91:b2:fe:e0:c4:a2:c3: 83:fb:27:9a:9c:43:a5:7a:b7:e3:87:a3:4b:f8:ab: 77:89:1d:ba:1d:cc:16:73:b2:bf:e3:8f:05:67:4e: a1:17:e4:09:37:a1:f2:1a:3e:7e:cb:7c:d3:a2:69: e9:5a:3a:fa:86:37:c2:ff:90:5f:f1:5d:e6:d4:af: 71:b2:8c:34:a2:1f:4e:ac:66:9d:cc:91:ca:83:1d: f3:cf:0c:06:ca:e3:84:d3:f8:b4:53:61:33:b7:db: 27:50:c4:d3:33:7b:9c:ba:02:63:a4:90:02:96:bd: 4a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D8:78:C1:79:72:4E:BE:D1:D4:F3:D4:32:D0:43:BF:41:C0:7A:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/12f25d35-c636-31fa-a0b4-d96b47fb707f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 170.133.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:b1:24:82:94:36:83:eb:bc:bf:3e:e0:d4:13:6e:43:d8:f8: ef:2f:c2:a6:a0:de:39:6a:b0:d4:dd:29:e4:cc:f0:32:24:37: 25:1a:61:5f:62:cd:a5:b4:80:bf:91:67:54:55:1f:31:53:e6: 7c:dd:3a:28:ac:22:1b:23:d6:50:f9:f0:e6:09:65:76:77:16: 09:9e:2d:a2:0e:2b:9c:86:b6:0c:f7:ce:57:d5:b7:3b:9d:37: 3e:83:31:cb:f6:34:25:c0:bd:0f:e8:2a:8d:5d:da:51:f2:c3: 46:a2:1d:40:77:cb:ec:05:11:d7:c4:a6:93:34:59:ac:31:c3: cc:dd:ed:2f:0e:ed:f4:85:6f:ba:f7:63:cf:f3:ca:1e:15:4b: 02:76:06:3b:36:b8:30:37:2f:74:4f:94:d9:f0:a1:c4:8e:27: 44:7e:7b:be:a8:38:fe:96:d9:67:5f:85:bb:11:2c:2f:d6:37: 3b:8c:c8:61:10:56:20:ee:aa:82:3c:66:54:2c:dd:74:2e:85: bc:31:f1:4e:01:84:5c:56:32:22:ce:e8:44:60:10:4e:c8:be: 76:09:29:f2:0e:e9:7e:00:fa:5c:3e:03:83:ea:35:2f:b3:61: b8:79:6e:d1:54:41:df:bf:9e:41:c5:a4:68:fb:a5:db:d3:71: 1a:c4:44:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARuZxakRLIyI6BEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk MjY5MjgxYjAtNmFhZS00NzM1LWFkMGItNTUzZTM2ODkxOTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrO7/9Mzfoq6hdFykyc4PahJwNqfIqr+Vp9W zmzaHrY1QB0M6en0y5iWEfy/pGSkC37hcYYpQ8SAryU+ercYrT6PZRYhuqbrhkhB zu7yUWhRNJr8lb2FnTyVGxXmIx9ldnoyZ4wL+MUBoEHpxAh7a2e33/oN4AEndj3G h03TCcYAkTPD9qFUZo2KB45hD5Gy/uDEosOD+yeanEOlerfjh6NL+Kt3iR26HcwW c7K/448FZ06hF+QJN6HyGj5+y3zTomnpWjr6hjfC/5Bf8V3m1K9xsow0oh9OrGad zJHKgx3zzwwGyuOE0/i0U2Ezt9snUMTTM3ucugJjpJAClr1K6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfYeMF5ck6+0dTz1DLQQ79BwHriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvMTJmMjVkMzUtYzYzNi0z MWZhLWEwYjQtZDk2YjQ3ZmI3MDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqoWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJixJIKUNoPrvL8+4NQTbkPY+O8vwqag3jlqsNTdKeTM8DIkNyUaYV9i zaW0gL+RZ1RVHzFT5nzdOiisIhsj1lD58OYJZXZ3FgmeLaIOK5yGtgz3zlfVtzud Nz6DMcv2NCXAvQ/oKo1d2lHyw0aiHUB3y+wFEdfEppM0Wawxw8zd7S8O7fSFb7r3 Y8/zyh4VSwJ2Bjs2uDA3L3RPlNnwocSOJ0R+e76oOP6W2WdfhbsRLC/WNzuMyGEQ ViDuqoI8ZlQs3XQuhbwx8U4BhFxWMiLO6ERgEE7IvnYJKfIO6X4A+lw+A4PqNS+z Ybh5btFUQd+/nkHFpGj7pdvTcRrERNY= -----END CERTIFICATE-----Generated at Thu Feb 26 10:44:09 2026 by rpki-client