$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/95f3b12c-fbc5-3b30-bade-a3126d702a46.roa File: 95f3b12c-fbc5-3b30-bade-a3126d702a46.roa (raw, json) Hash identifier: 7LM8m3IAoYauiMJKCJdaJtAgprbMOZaNpIaGr4lboIM= Subject key identifier: 9B:47:15:42:76:AD:15:F9:71:9D:31:F2:7B:1F:39:72:B5:F7:04:B4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D3DFFB2DDD8A161564F084640 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/95f3b12c-fbc5-3b30-bade-a3126d702a46.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 204670 IP address blocks: 128.121.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b2:dd:d8:a1:61:56:4f:08:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=69f1572a-2835-4510-827f-bf36e390eb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d3:aa:02:53:d8:1a:21:53:c7:02:60:c6:f7: cb:a1:08:d2:8b:89:d3:62:a3:89:e0:4a:ea:5a:cf: c8:fc:34:e9:d8:a6:1b:1f:79:82:74:1f:1f:3a:27: 8c:9b:41:30:7a:e8:8a:10:d6:77:5d:91:e3:29:ef: e9:8b:1c:50:cd:3c:bf:fd:4d:f6:67:f0:22:65:11: c8:0c:33:eb:cb:2d:5a:d7:b5:d2:b1:78:53:b5:f8: cc:09:06:9c:dd:e3:ba:a8:c2:ca:79:30:58:8e:5b: a8:5f:62:3a:a0:7b:a8:c2:20:eb:5f:97:10:e5:a0: 73:57:7f:ca:87:ad:b3:66:ce:51:67:67:0e:81:c0: b8:09:61:ea:64:12:d4:77:4d:67:8f:7a:d7:e3:31: 0a:d3:33:c9:b7:2d:c5:58:32:70:83:10:1b:5b:1f: a6:3e:14:8f:e2:42:d8:8d:2b:e5:72:13:c7:94:7c: 47:37:0a:79:4d:57:b7:e3:1c:c9:41:77:99:8e:cc: a1:8b:43:5d:af:8b:a2:3e:45:60:59:0a:d3:34:03: 01:2b:05:99:af:d3:ce:df:b2:95:d2:fa:1f:15:d1: f7:b7:df:20:1a:39:c4:24:64:ff:4a:6b:22:80:bb: 37:10:02:5a:dc:87:f5:6c:de:c9:9b:81:73:57:19: 17:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:47:15:42:76:AD:15:F9:71:9D:31:F2:7B:1F:39:72:B5:F7:04:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/95f3b12c-fbc5-3b30-bade-a3126d702a46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d7:15:c2:b6:16:dc:a6:21:28:66:ba:a8:f6:37:6c:c3:b2: c4:d3:0b:6f:0b:13:3a:99:84:ce:d6:13:ef:13:fe:a1:bf:5c: 11:95:c5:be:a3:82:37:45:e5:16:2f:d8:1d:80:9e:e0:56:5f: 59:64:a0:23:bf:88:56:d8:fe:3f:e7:99:dc:72:d9:ed:f7:87: de:a8:24:bd:44:a9:27:1d:4b:27:66:1b:e9:c4:13:51:52:5d: 91:f9:3f:2d:84:a8:a7:57:e4:cc:26:83:c6:c6:48:cf:9e:f7: 59:0b:c4:79:e8:b0:dd:52:76:23:8f:d7:6e:8e:aa:c6:c0:cf: 0c:38:91:c0:59:a9:31:05:57:e4:79:d4:55:21:84:a1:10:3c: 5e:95:1b:5a:c0:50:e0:8a:d5:de:52:26:f7:22:b6:40:23:b8: 18:78:4b:29:85:1d:3d:3a:48:e2:ca:f7:f6:f1:32:51:d3:ac: 84:2a:76:26:d7:b4:26:90:09:03:e7:50:44:95:53:ae:3c:77: 57:9f:11:c8:a4:4a:c3:ba:f3:2c:c2:13:f8:78:90:3d:fa:6e: 2b:22:b1:ca:3e:a4:fc:e9:53:71:16:e5:5c:bf:7c:2a:2f:a3: 56:1f:87:bf:c3:4c:1e:87:9f:ba:27:4b:c0:19:f0:99:77:f1: c8:50:1b:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7Ld2KFhVk8IRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NjlmMTU3MmEtMjgzNS00NTEwLTgyN2YtYmYzNmUzOTBlYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNOqAlPYGiFTxwJgxvfLoQjSi4nTYqOJ4Erq Ws/I/DTp2KYbH3mCdB8fOieMm0EweuiKENZ3XZHjKe/pixxQzTy//U32Z/AiZRHI DDPryy1a17XSsXhTtfjMCQac3eO6qMLKeTBYjluoX2I6oHuowiDrX5cQ5aBzV3/K h62zZs5RZ2cOgcC4CWHqZBLUd01nj3rX4zEK0zPJty3FWDJwgxAbWx+mPhSP4kLY jSvlchPHlHxHNwp5TVe34xzJQXeZjsyhi0Ndr4uiPkVgWQrTNAMBKwWZr9PO37KV 0vofFdH3t98gGjnEJGT/SmsigLs3EAJa3If1bN7Jm4FzVxkXvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtHFUJ2rRX5cZ0x8nsfOXK19wS0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTVmM2IxMmMtZmJjNS0z YjMwLWJhZGUtYTMxMjZkNzAyYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfXFcK2FtymIShmuqj2N2zDssTTC28LEzqZhM7WE+8T/qG/XBGVxb6j gjdF5RYv2B2AnuBWX1lkoCO/iFbY/j/nmdxy2e33h96oJL1EqScdSydmG+nEE1FS XZH5Py2EqKdX5Mwmg8bGSM+e91kLxHnosN1SdiOP126OqsbAzww4kcBZqTEFV+R5 1FUhhKEQPF6VG1rAUOCK1d5SJvcitkAjuBh4SymFHT06SOLK9/bxMlHTrIQqdibX tCaQCQPnUESVU648d1efEcikSsO68yzCE/h4kD36bisisco+pPzpU3EW5Vy/fCov o1Yfh7/DTB6Hn7onS8AZ8Jl38chQG6Y= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:02 2026 by rpki-client