$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d7717f60-de75-372f-b4a7-3706f6fa274b.roa File: d7717f60-de75-372f-b4a7-3706f6fa274b.roa (raw, json) Hash identifier: h55TGLcpqH2jsG8/amKSVOLRLX4aPTJfb56wTIWr3Cc= Subject key identifier: 24:23:58:19:AB:95:D0:CE:63:DF:E7:3D:00:58:57:09:11:E7:6E:99 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D20AF7C93784E2B7D461DD220 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d7717f60-de75-372f-b4a7-3706f6fa274b.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 34425 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:7c:93:78:4e:2b:7d:46:1d:d2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=c99b14dd-b27c-450d-869d-9987a9113495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2c:a9:c0:10:70:28:89:4d:99:55:81:e3:14: 2b:a6:f3:1d:2e:4d:82:04:9f:d8:7a:8e:d1:76:98: 79:8a:1c:5c:94:4e:16:69:9e:7f:37:a4:39:f6:52: d0:56:e5:ce:ea:0e:0a:6b:f3:d3:c4:98:9f:f8:62: 14:18:6a:0b:ef:96:09:cc:d2:4d:58:b7:5b:85:55: c9:56:92:96:8b:6b:6c:30:72:8d:2f:6b:50:b5:87: 88:8f:da:d4:b0:99:6e:8a:bd:3d:b1:f9:83:c1:df: 87:96:a1:71:e3:c7:c8:29:3a:73:ca:89:86:57:72: 5a:a3:1b:a8:2c:d0:44:af:6d:a6:16:56:dd:95:81: 5a:45:94:d1:7e:38:16:ca:3c:57:f9:21:39:72:aa: d0:49:40:45:e9:6e:0a:5b:a5:1c:72:af:df:14:bc: 08:0f:17:08:7b:f6:28:63:77:74:11:5b:6f:f3:c3: f4:dd:08:e9:57:b6:c5:ba:66:b4:64:ff:8d:e2:6c: d7:a3:37:da:3b:90:73:d0:fe:32:99:51:f4:0a:55: 61:d7:9b:e8:6b:c0:9b:17:d7:5f:19:f2:39:62:6f: 1a:47:61:5f:2e:c8:6e:46:8f:22:49:d0:7b:7c:b3: 17:d9:ae:3e:c8:3b:da:6b:b9:95:69:34:49:bf:0d: 6b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:23:58:19:AB:95:D0:CE:63:DF:E7:3D:00:58:57:09:11:E7:6E:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d7717f60-de75-372f-b4a7-3706f6fa274b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:0a:ad:99:ea:44:4e:f4:e7:95:3c:d6:97:4c:e6:78:75:d3: 2d:25:38:55:09:c5:95:1c:8e:85:78:83:fa:79:0e:a2:c0:ec: 89:c2:af:28:5d:ec:d8:54:e7:6b:ef:d5:70:78:02:37:d3:83: af:24:3f:e6:d3:cc:3f:d4:ad:8b:1e:c9:9a:67:81:c9:4e:d9: e1:5e:52:58:77:1a:74:27:98:bc:64:85:f1:d8:a9:a7:e8:92: dc:be:23:cd:96:a6:a2:7b:71:c1:11:22:a5:72:2c:70:53:13: dd:06:d6:66:ab:a1:1a:21:0c:3b:32:b9:ad:77:23:29:77:89: 01:fb:57:b8:3e:7c:6d:03:f9:ea:ca:36:a7:33:bb:9e:b6:ff: 1c:5c:bc:56:92:86:93:e0:a8:1f:8c:89:18:36:fc:be:f3:04: 79:27:8c:70:3a:1d:e1:e1:13:cd:e8:ac:eb:34:a3:e1:18:04: 9b:d3:91:4f:69:a7:b3:a3:d7:82:70:b0:fa:ee:15:14:9a:b6: 8d:2f:88:c3:05:13:41:51:1c:db:2f:34:e8:35:8f:92:7d:e2: f7:29:d0:51:ac:3d:18:e2:ea:c6:41:44:14:06:fa:a2:2e:f1: da:5b:64:d9:50:f2:03:a1:e8:ea:b3:59:a8:4e:33:c6:fa:af: b9:8f:22:23 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWE0gr3yTeE4rfUYd0iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk Yzk5YjE0ZGQtYjI3Yy00NTBkLTg2OWQtOTk4N2E5MTEzNDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyypwBBwKIlNmVWB4xQrpvMdLk2CBJ/Yeo7R dph5ihxclE4WaZ5/N6Q59lLQVuXO6g4Ka/PTxJif+GIUGGoL75YJzNJNWLdbhVXJ VpKWi2tsMHKNL2tQtYeIj9rUsJluir09sfmDwd+HlqFx48fIKTpzyomGV3Jaoxuo LNBEr22mFlbdlYFaRZTRfjgWyjxX+SE5cqrQSUBF6W4KW6Uccq/fFLwIDxcIe/Yo Y3d0EVtv88P03QjpV7bFuma0ZP+N4mzXozfaO5Bz0P4ymVH0ClVh15voa8CbF9df GfI5Ym8aR2FfLshuRo8iSdB7fLMX2a4+yDvaa7mVaTRJvw1rjwIDAQABo4IDkTCC A40wHQYDVR0OBBYEFCQjWBmrldDOY9/nPQBYVwkR526ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDc3MTdmNjAtZGU3NS0z NzJmLWI0YTctMzcwNmY2ZmEyNzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAH4KrZnqRE7055U81pdM5nh10y0lOFUJxZUcjoV4 g/p5DqLA7InCryhd7NhU52vv1XB4AjfTg68kP+bTzD/UrYseyZpngclO2eFeUlh3 GnQnmLxkhfHYqafokty+I82WpqJ7ccERIqVyLHBTE90G1maroRohDDsyua13Iyl3 iQH7V7g+fG0D+erKNqczu562/xxcvFaShpPgqB+MiRg2/L7zBHknjHA6HeHhE83o rOs0o+EYBJvTkU9pp7Oj14JwsPruFRSato0viMMFE0FRHNsvNOg1j5J94vcp0FGs PRji6sZBRBQG+qIu8dpbZNlQ8gOh6OqzWahOM8b6r7mPIiM= -----END CERTIFICATE-----Generated at Wed Mar 25 21:29:11 2026 by rpki-client