$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9feab245-a594-3dee-9158-896a2d26f46d.roa File: 9feab245-a594-3dee-9158-896a2d26f46d.roa (raw, json) Hash identifier: XllTov0A/u3B/t3NeykxP0Mxf3YJ82MPSn1UNjYU+8g= Subject key identifier: 7D:9C:C2:94:60:B5:11:C8:B4:89:B9:56:95:34:AB:8A:89:E1:56:C4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D3DFFB2F0425AD47ACF08FF50 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9feab245-a594-3dee-9158-896a2d26f46d.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 19893 IP address blocks: 128.121.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b2:f0:42:5a:d4:7a:cf:08:ff:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=1c6b376e-1f30-40a3-82a0-a9d2fc7e887b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e2:7b:5b:12:07:6e:c7:88:c9:53:3d:d1:d9: a3:b8:95:ba:3e:68:08:94:09:c1:42:7d:3c:d3:36: dd:54:29:ed:bb:9d:e3:5c:2e:f8:2e:62:0a:73:9d: b4:73:c3:9a:f6:eb:bc:3a:0e:15:93:f3:d8:a6:60: 42:5e:d3:67:b7:2d:a6:fd:5c:01:28:55:1f:c9:5e: 71:15:d0:55:24:7e:fc:25:1c:31:d5:3d:b9:4f:b4: d3:1e:5d:1d:03:b3:b4:fb:b0:1c:97:39:5c:8c:de: 7f:17:56:88:5b:2b:80:85:9b:02:6c:06:1d:2d:75: 91:7a:51:46:8d:a8:de:46:83:a4:16:35:05:f4:dc: 4d:6d:1b:4f:64:8d:ca:cf:ef:5f:bf:39:ed:43:d2: 42:4a:48:53:e5:f1:7a:77:89:37:af:d8:18:e1:dc: 61:82:b6:6c:85:a4:56:e7:27:ca:8b:c1:93:03:f3: c4:22:c3:2a:c2:52:4d:c8:a1:ae:90:12:c2:4f:6e: d9:82:9c:12:99:93:b4:78:56:03:68:80:80:46:eb: a2:84:b0:7c:b9:b1:ed:b3:f6:aa:3d:87:76:f7:0f: 09:aa:c0:52:78:29:43:f3:79:0d:73:78:f0:40:3f: 54:95:46:28:3e:c8:0b:6a:aa:eb:92:cf:e5:dd:c2: 15:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9C:C2:94:60:B5:11:C8:B4:89:B9:56:95:34:AB:8A:89:E1:56:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9feab245-a594-3dee-9158-896a2d26f46d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:eb:3f:1c:76:f8:e5:e3:25:d2:db:36:c6:69:99:a2:21:28: 97:7f:e2:23:38:c7:a6:57:d1:27:5c:c4:bb:96:eb:21:d0:c3: 9d:a4:6b:6d:39:e5:4a:cd:cf:27:04:a5:68:04:40:51:0f:a6: a1:aa:16:23:b4:c0:c4:b0:5e:24:d0:95:ec:15:fc:7d:64:6b: 94:b3:29:80:20:5b:d5:e5:cc:50:1e:6b:a5:2c:dc:48:c0:77: 2c:e7:76:3b:01:c8:4b:d1:ff:7a:25:b6:a2:61:49:8a:75:b9: 36:9a:c7:7d:b0:bc:56:fb:fd:eb:36:d7:8d:d8:a2:d4:a8:7a: 3f:99:a9:e7:69:c5:bb:62:35:9f:d0:4f:44:07:e4:9d:ae:19: 61:d7:63:b7:46:64:c4:d7:36:64:32:98:d2:f3:1c:3c:71:b4: db:75:52:93:55:f1:55:cb:61:36:91:99:31:c2:01:5f:3d:c7: 08:18:10:d3:c3:dd:61:b3:aa:9e:31:48:dc:69:2a:2f:9f:21: fe:75:70:cd:79:15:1f:18:4d:00:70:bb:90:a0:73:f4:b1:83: ae:56:d7:ca:cd:54:52:df:ce:f4:7b:62:cc:86:ee:8d:cf:a9: c2:9c:8d:c4:f6:b0:b3:63:f5:79:c3:48:05:25:de:87:16:2a: 6e:7f:6a:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7LwQlrUes8I/1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MWM2YjM3NmUtMWYzMC00MGEzLTgyYTAtYTlkMmZjN2U4ODdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeJ7WxIHbseIyVM90dmjuJW6PmgIlAnBQn08 0zbdVCntu53jXC74LmIKc520c8Oa9uu8Og4Vk/PYpmBCXtNnty2m/VwBKFUfyV5x FdBVJH78JRwx1T25T7TTHl0dA7O0+7AclzlcjN5/F1aIWyuAhZsCbAYdLXWRelFG jajeRoOkFjUF9NxNbRtPZI3Kz+9fvzntQ9JCSkhT5fF6d4k3r9gY4dxhgrZshaRW 5yfKi8GTA/PEIsMqwlJNyKGukBLCT27ZgpwSmZO0eFYDaICARuuihLB8ubHts/aq PYd29w8JqsBSeClD83kNc3jwQD9UlUYoPsgLaqrrks/l3cIVxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2cwpRgtRHItIm5VpU0q4qJ4VbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOWZlYWIyNDUtYTU5NC0z ZGVlLTkxNTgtODk2YTJkMjZmNDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALvrPxx2+OXjJdLbNsZpmaIhKJd/4iM4x6ZX0SdcxLuW6yHQw52ka205 5UrNzycEpWgEQFEPpqGqFiO0wMSwXiTQlewV/H1ka5SzKYAgW9XlzFAea6Us3EjA dyzndjsByEvR/3oltqJhSYp1uTaax32wvFb7/es2143YotSoej+ZqedpxbtiNZ/Q T0QH5J2uGWHXY7dGZMTXNmQymNLzHDxxtNt1UpNV8VXLYTaRmTHCAV89xwgYENPD 3WGzqp4xSNxpKi+fIf51cM15FR8YTQBwu5Cgc/Sxg65W18rNVFLfzvR7YsyG7o3P qcKcjcT2sLNj9XnDSAUl3ocWKm5/aiI= -----END CERTIFICATE-----Generated at Thu Mar 26 15:42:36 2026 by rpki-client