$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5299180-b70f-3125-a781-6b51c883c759.roa File: e5299180-b70f-3125-a781-6b51c883c759.roa (raw, json) Hash identifier: j9x3AgaU+V+1lj4C/8ojDcshqd4UFIXJX5OzSvd+b7w= Subject key identifier: B9:0D:E4:BD:22:E5:85:EE:C9:F4:7B:AC:3B:B2:B7:6F:AC:F9:5E:02 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D3DFFB29F7F9B26EC8FAC90C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5299180-b70f-3125-a781-6b51c883c759.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 204670 IP address blocks: 128.121.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b2:9f:7f:9b:26:ec:8f:ac:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=79f9d15c-f110-4981-b2fe-e80fb3e3534f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:69:a4:3d:12:71:3e:66:96:f9:98:01:94:f9: 91:51:3a:df:4e:13:2d:f6:16:79:67:96:80:6f:17: 67:57:d4:97:1c:09:cf:bf:28:8a:3d:f0:f8:91:c9: 66:80:54:27:78:48:d2:b4:94:1b:8a:47:d0:be:a8: 60:09:db:e7:6e:44:61:13:bd:70:9e:51:d0:6b:ee: d5:93:c2:5c:3f:25:66:74:47:99:2e:b0:c5:3e:dd: 18:2b:83:ed:5b:a0:48:4c:41:17:00:2e:9a:d6:49: ba:10:39:89:ad:4a:34:3e:9e:6a:d0:65:7f:8d:3d: ea:98:8d:fe:4d:7f:7b:94:1d:06:f1:e8:61:5b:9a: ba:97:d5:e1:44:35:f7:ab:b0:b1:9b:40:04:24:11: 72:4f:87:79:1e:53:e1:5b:b5:b8:54:af:68:f2:c6: 28:cc:e9:1a:91:fc:b3:5e:d6:17:2c:3c:d1:59:bb: d4:46:a8:7d:74:cd:41:06:14:49:9e:9e:24:f3:9f: de:ef:db:c3:9f:33:a7:98:46:9c:4f:69:12:4e:c7: 72:f2:ed:6d:39:ff:cd:f7:75:93:f9:00:61:e2:b7: 79:d2:11:38:d5:a2:fa:21:42:d7:42:63:21:0d:2e: 8e:c3:78:15:93:24:2b:c2:b4:c6:17:b1:0d:7f:5b: 8e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0D:E4:BD:22:E5:85:EE:C9:F4:7B:AC:3B:B2:B7:6F:AC:F9:5E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5299180-b70f-3125-a781-6b51c883c759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:e1:1e:21:d6:f9:0a:c2:61:bc:c7:a6:75:e8:7b:8d:cf:05: f8:eb:65:a6:f9:a1:45:25:75:46:5a:13:85:e9:d1:e1:7f:8f: d5:a0:b6:4d:9e:5d:7a:71:c3:80:92:6a:39:bc:ce:e2:4e:65: 96:7f:01:8c:71:1f:48:c6:ff:93:e7:f8:93:4e:84:22:1c:82: 5d:b8:63:7b:67:51:6a:cb:63:9d:51:ef:af:5f:ad:2b:22:e3: ae:af:8a:99:76:f9:e0:31:12:ef:ac:56:b0:9d:af:52:7c:77: e4:dc:c0:29:88:6d:42:94:be:72:2f:40:29:25:3e:f8:33:e5: f8:5c:68:f6:6b:3d:61:e1:c0:3f:34:5f:4a:fb:6f:63:61:c8: d5:61:0e:16:db:f6:79:7a:fd:23:5f:24:64:e7:d3:3e:fd:13: eb:74:98:eb:7f:f7:86:ce:cf:a9:74:a1:25:93:d3:a3:23:77: ca:97:8a:f6:23:9c:1e:c2:65:dc:20:a2:b0:3e:2c:ee:6d:96: 1d:8c:e1:08:56:a5:fa:10:b5:2f:36:20:fe:b6:66:8b:ed:a1: 8a:40:cb:b9:a2:6b:e7:1d:b3:48:dc:92:d8:fc:da:be:0d:8a: 8d:b3:79:5a:36:f3:04:6d:10:98:ff:ce:4c:d5:cf:df:e7:00: 1b:d3:dc:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7Kff5sm7I+skMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NzlmOWQxNWMtZjExMC00OTgxLWIyZmUtZTgwZmIzZTM1MzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWmkPRJxPmaW+ZgBlPmRUTrfThMt9hZ5Z5aA bxdnV9SXHAnPvyiKPfD4kclmgFQneEjStJQbikfQvqhgCdvnbkRhE71wnlHQa+7V k8JcPyVmdEeZLrDFPt0YK4PtW6BITEEXAC6a1km6EDmJrUo0Pp5q0GV/jT3qmI3+ TX97lB0G8ehhW5q6l9XhRDX3q7Cxm0AEJBFyT4d5HlPhW7W4VK9o8sYozOkakfyz XtYXLDzRWbvURqh9dM1BBhRJnp4k85/e79vDnzOnmEacT2kSTsdy8u1tOf/N93WT +QBh4rd50hE41aL6IULXQmMhDS6Ow3gVkyQrwrTGF7ENf1uO0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkN5L0i5YXuyfR7rDuyt2+s+V4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZTUyOTkxODAtYjcwZi0z MTI1LWE3ODEtNmI1MWM4ODNjNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPhHiHW+QrCYbzHpnXoe43PBfjrZab5oUUldUZaE4Xp0eF/j9Wgtk2e XXpxw4CSajm8zuJOZZZ/AYxxH0jG/5Pn+JNOhCIcgl24Y3tnUWrLY51R769frSsi 466vipl2+eAxEu+sVrCdr1J8d+TcwCmIbUKUvnIvQCklPvgz5fhcaPZrPWHhwD80 X0r7b2NhyNVhDhbb9nl6/SNfJGTn0z79E+t0mOt/94bOz6l0oSWT06Mjd8qXivYj nB7CZdwgorA+LO5tlh2M4QhWpfoQtS82IP62ZovtoYpAy7mia+cds0jcktj82r4N io2zeVo28wRtEJj/zkzVz9/nABvT3JE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:55:20 2026 by rpki-client