$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d32f3f1b-47a5-3201-b5c4-5f710806e110.roa File: d32f3f1b-47a5-3201-b5c4-5f710806e110.roa (raw, json) Hash identifier: bDuiUtvsP8S6p5cdbqv59fqYYnzFxAj3IEVD9kUCh20= Subject key identifier: E1:87:56:5E:30:34:39:A4:D2:E6:E8:8F:EE:F6:0A:22:1F:72:5F:EC Certificate issuer: /CN=4edd6357-2935-4b92-8130-68071d4eaf01 Certificate serial: 010D0C9F4328584D4A8F90AD4AF5967A720F9E80 Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d32f3f1b-47a5-3201-b5c4-5f710806e110.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 20127 IP address blocks: 69.128.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:90:ad:4a:f5:96:7a:72:0f:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=add43233-d90c-4aee-88b2-19e6d2670a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dc:88:b7:bf:3d:d8:e1:a0:84:3f:c8:1c:22: b2:5d:f2:5e:98:b2:d8:af:d5:af:03:2f:57:0c:08: e3:b0:5d:e0:cd:23:b8:49:77:8f:40:b3:57:14:57: 90:c4:0a:eb:14:8f:3b:92:1a:f3:2d:ae:ba:c5:b2: ff:e3:09:d2:21:67:10:8f:ed:0c:b6:eb:00:89:d5: 6e:de:ac:1f:2a:d7:e0:b9:af:8d:98:61:dd:db:c3: d9:6c:df:2d:57:e0:85:6f:9d:58:5e:d0:d4:89:d1: 07:8f:a7:a5:17:45:bc:2c:94:7f:6d:7c:d7:8c:e5: 07:8a:c6:75:28:0e:7e:36:b3:0f:82:ff:5a:35:82: 77:07:ac:7e:12:52:30:2e:7b:4c:aa:61:03:f0:ad: fa:0c:f4:41:ea:25:09:43:95:c0:12:1d:67:8f:60: 0a:f0:1e:5c:7b:db:ab:42:88:7a:e0:7e:3c:39:83: dd:c5:55:ad:cb:67:a2:2a:00:c8:62:be:df:e6:c3: 45:7c:3e:41:64:eb:8c:65:5b:15:e1:eb:05:44:99: df:9a:90:45:42:4f:82:23:f7:4f:32:b5:31:61:67: 6e:e4:a0:0c:6b:dd:dd:10:88:01:06:cb:74:38:61: d3:34:18:18:8d:a9:00:9c:3c:2b:db:ef:52:f6:f7: 72:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:87:56:5E:30:34:39:A4:D2:E6:E8:8F:EE:F6:0A:22:1F:72:5F:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/d32f3f1b-47a5-3201-b5c4-5f710806e110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl X509v3 Authority Key Identifier: keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer sbgp-ipAddrBlock: critical IPv4: 69.128.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:33:f8:8b:0d:80:45:9f:48:3c:6c:c6:aa:0b:5d:5d:b1:4b: d2:f5:68:ad:0e:8a:64:4c:f9:c9:12:58:3f:f6:c9:bc:e8:b9: 04:d8:04:31:63:56:b5:91:85:c3:87:a2:b1:93:fc:9a:18:cc: f8:de:9d:d1:13:52:c5:95:3d:e4:44:82:2d:2b:4f:ca:29:82: 3e:31:51:3a:c5:43:d6:b5:f4:36:69:dd:5c:43:68:84:25:f7: af:74:70:e8:04:e7:8e:98:8d:b2:f9:4b:ec:9b:de:34:d7:2b: 82:97:18:9a:af:33:cb:fe:cb:53:f1:ca:92:65:0d:90:4d:47: 29:cb:86:9f:5b:17:8e:34:c4:0c:b0:e7:90:c8:a1:07:41:c6: 52:f9:88:13:4b:fd:ec:e4:86:57:b2:89:97:17:1f:fc:8e:42: 12:de:b4:55:cc:6a:3b:44:8c:e4:ce:76:cb:8f:e5:1d:17:4b: 1d:5e:28:53:61:34:5c:a5:af:58:3e:ba:80:fb:a2:1a:b5:c7: 74:b8:1a:9c:da:b9:82:c2:9b:3d:34:c4:03:33:fc:cc:ed:5d: dd:e8:40:73:b6:5c:88:15:89:54:dd:cb:13:02:27:c6:6f:b3: 7a:ab:01:d2:c9:f2:cb:b2:cf:ea:db:e2:98:3e:d9:cd:34:18: 93:80:a4:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj5CtSvWWenIPnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh ZjAxMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk YWRkNDMyMzMtZDkwYy00YWVlLTg4YjItMTllNmQyNjcwYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNyIt7892OGghD/IHCKyXfJemLLYr9WvAy9X DAjjsF3gzSO4SXePQLNXFFeQxArrFI87khrzLa66xbL/4wnSIWcQj+0MtusAidVu 3qwfKtfgua+NmGHd28PZbN8tV+CFb51YXtDUidEHj6elF0W8LJR/bXzXjOUHisZ1 KA5+NrMPgv9aNYJ3B6x+ElIwLntMqmED8K36DPRB6iUJQ5XAEh1nj2AK8B5ce9ur Qoh64H48OYPdxVWty2eiKgDIYr7f5sNFfD5BZOuMZVsV4esFRJnfmpBFQk+CI/dP MrUxYWdu5KAMa93dEIgBBst0OGHTNBgYjakAnDwr2+9S9vdy7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGHVl4wNDmk0uboj+72CiIfcl/sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvZDMyZjNmMWItNDdhNS0z MjAxLWI1YzQtNWY3MTA4MDZlMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3 MWQ0ZWFmMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARYCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEz+IsNgEWfSDxsxqoLXV2xS9L1aK0OimRM+ckSWD/2ybzouQTYBDFj VrWRhcOHorGT/JoYzPjendETUsWVPeREgi0rT8opgj4xUTrFQ9a19DZp3VxDaIQl 9690cOgE546YjbL5S+yb3jTXK4KXGJqvM8v+y1PxypJlDZBNRynLhp9bF440xAyw 55DIoQdBxlL5iBNL/ezkhleyiZcXH/yOQhLetFXMajtEjOTOdsuP5R0XSx1eKFNh NFylr1g+uoD7ohq1x3S4GpzauYLCmz00xAMz/MztXd3oQHO2XIgViVTdyxMCJ8Zv s3qrAdLJ8suyz+rb4pg+2c00GJOApN8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:54:59 2026 by rpki-client