$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3af3f3e9-925f-3f08-8530-42b4b99328f5.roa File: 3af3f3e9-925f-3f08-8530-42b4b99328f5.roa (raw, json) Hash identifier: g7Z0tjWSgoFTLh53702n4tTUakXKLcQrgqCtXYYp8Fc= Subject key identifier: F7:9E:3C:6F:D6:43:0E:4A:69:94:6C:77:C8:E0:34:26:0A:95:D9:C3 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D20AF4A759170BCCD5EEBC3C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3af3f3e9-925f-3f08-8530-42b4b99328f5.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 203020 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:4a:75:91:70:bc:cd:5e:eb:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=9f55ab76-f607-40e5-b188-4bcaa4870a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:17:57:d2:e1:35:5c:6b:c2:c6:ad:e6:07:fe: c0:ed:89:aa:c4:0b:d4:60:a0:51:41:8e:d2:55:f7: 3f:54:b6:de:76:e5:b5:5b:94:7e:37:73:06:1a:f3: d1:65:d2:4f:eb:d9:5f:80:c0:78:3f:25:99:1f:6e: 81:c9:46:69:6c:9c:bd:12:82:5b:40:38:95:dc:ad: 07:ea:bc:3f:12:32:0b:7d:ed:3d:68:33:a3:48:db: 10:ab:c7:f1:d8:34:9b:bc:8e:c1:4d:5c:f7:ce:3f: 0f:c8:31:85:e9:47:83:87:9b:a5:47:47:ee:d7:01: be:bd:cc:55:07:5f:74:9c:8a:28:9c:ab:c3:e1:83: 60:fa:23:61:0d:bd:0c:fa:3f:01:3e:a9:e4:39:da: aa:14:70:63:43:3b:c9:5d:60:a5:96:70:46:6d:bf: ce:00:a2:5e:33:8a:ec:07:92:f0:10:8b:b9:0e:2c: e2:02:e8:77:63:1f:68:31:a4:04:34:28:07:7e:d4: a4:38:0e:f2:b5:ec:3c:b0:2e:85:54:f8:b7:a3:f1: af:58:41:3f:96:c8:04:cf:b1:89:4b:a2:42:f2:d3: af:d5:32:97:77:43:87:b5:1c:d4:16:df:92:3e:1e: 8f:f4:25:8b:eb:46:3d:e0:cd:67:9b:39:64:2d:49: 9a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9E:3C:6F:D6:43:0E:4A:69:94:6C:77:C8:E0:34:26:0A:95:D9:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3af3f3e9-925f-3f08-8530-42b4b99328f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c1:08:31:dd:01:c4:bc:c9:59:7e:26:cf:4b:ca:b8:aa:9b: f6:4f:af:be:23:b5:1b:5b:b8:b4:3c:f1:c8:fd:68:92:3c:79: 1f:8b:f6:28:1e:41:b7:c7:9b:2b:8e:09:68:02:47:de:e1:6b: 47:13:49:28:db:f4:6b:4e:f2:0d:5e:3f:cc:7c:2d:5a:5d:fe: 4f:8d:dc:ad:e3:fc:23:47:67:10:1f:9d:72:7e:ec:fe:c4:02: a8:ee:85:ae:91:8e:4e:1c:88:f2:01:55:5c:ee:b8:e6:de:95: f9:16:f3:8d:1c:51:50:f8:8e:21:1b:9e:d1:bb:05:c2:99:2a: f4:f9:4e:36:12:0b:cd:32:16:da:e4:e9:bb:e9:5c:da:07:77: 9c:73:b1:ec:b7:04:11:0a:18:97:74:b5:80:98:74:4c:15:b2: df:20:56:ff:f7:e3:ef:df:64:84:da:6f:7a:ff:cf:4d:66:e0: d6:20:68:23:1f:7a:cd:77:0e:d3:f7:89:23:b1:df:f4:86:f5: 5f:6c:dc:3c:bf:eb:63:0d:0f:47:02:26:4c:99:2c:99:a3:df: 96:fd:d3:28:19:5a:a6:33:7c:4f:73:a0:59:7a:ab:39:61:2c: bf:41:3b:7b:b2:75:15:dd:a0:91:03:41:fd:44:a8:56:b6:14: 77:10:56:3f -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWE0gr0p1kXC8zV7rw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk OWY1NWFiNzYtZjYwNy00MGU1LWIxODgtNGJjYWE0ODcwYTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRdX0uE1XGvCxq3mB/7A7YmqxAvUYKBRQY7S Vfc/VLbeduW1W5R+N3MGGvPRZdJP69lfgMB4PyWZH26ByUZpbJy9EoJbQDiV3K0H 6rw/EjILfe09aDOjSNsQq8fx2DSbvI7BTVz3zj8PyDGF6UeDh5ulR0fu1wG+vcxV B190nIoonKvD4YNg+iNhDb0M+j8BPqnkOdqqFHBjQzvJXWCllnBGbb/OAKJeM4rs B5LwEIu5DiziAuh3Yx9oMaQENCgHftSkOA7ytew8sC6FVPi3o/GvWEE/lsgEz7GJ S6JC8tOv1TKXd0OHtRzUFt+SPh6P9CWL60Y94M1nmzlkLUmaBQIDAQABo4IDkTCC A40wHQYDVR0OBBYEFPeePG/WQw5KaZRsd8jgNCYKldnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2FmM2YzZTktOTI1Zi0z ZjA4LTg1MzAtNDJiNGI5OTMyOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAnBCDHdAcS8yVl+Js9Lyriqm/ZPr74jtRtbuLQ8 8cj9aJI8eR+L9igeQbfHmyuOCWgCR97ha0cTSSjb9GtO8g1eP8x8LVpd/k+N3K3j /CNHZxAfnXJ+7P7EAqjuha6Rjk4ciPIBVVzuuObelfkW840cUVD4jiEbntG7BcKZ KvT5TjYSC80yFtrk6bvpXNoHd5xzsey3BBEKGJd0tYCYdEwVst8gVv/34+/fZITa b3r/z01m4NYgaCMfes13DtP3iSOx3/SG9V9s3Dy/62MND0cCJkyZLJmj35b90ygZ WqYzfE9zoFl6qzlhLL9BO3uydRXdoJEDQf1EqFa2FHcQVj8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:11:38 2026 by rpki-client