$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/b9bb34a8-3fb4-3229-af76-b084da323030.roa File: b9bb34a8-3fb4-3229-af76-b084da323030.roa (raw, json) Hash identifier: dISbeIG6i+K0Yopl1zF/V5Nim+Kt/SjEqcTO8XuX+RY= Subject key identifier: 66:49:44:F6:0D:27:58:D3:DF:E8:5D:CC:BF:33:48:76:7D:FB:6B:3A Certificate issuer: /CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235 Certificate serial: 010D0C9F4328584DA97ABA8C38F453C0E1EE6BC0 Authority key identifier: 7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/b9bb34a8-3fb4-3229-af76-b084da323030.roa Signing time: Wed 29 Apr 2026 01:00:23 +0000 ROA not before: Wed 29 Apr 2026 01:00:23 +0000 ROA not after: Tue 28 Jul 2026 01:00:23 +0000 asID: 20 IP address blocks: 128.151.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a9:7a:ba:8c:38:f4:53:c0:e1:ee:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235 Validity Not Before: Apr 29 01:00:23 2026 GMT Not After : Jul 28 01:00:23 2026 GMT Subject: CN=3bbca3ee-d1a5-4909-9740-03dce4278a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:26:09:c0:73:70:2d:4a:68:42:4a:5c:19:37: b0:de:3b:2b:90:01:71:78:14:fb:b9:86:c4:00:ea: 55:83:dc:73:9e:70:f7:1e:ef:7c:d7:81:bc:f0:b3: d5:7f:85:12:b3:2d:1f:86:32:2b:0a:f2:1c:17:f5: 8b:65:e8:e5:12:ab:19:a8:9e:10:b7:03:e0:ba:38: 82:96:45:4f:aa:88:0b:4b:76:4d:db:0d:e9:4b:20: ac:d7:06:c2:cb:47:99:a0:1a:13:df:90:22:b6:fa: d3:c9:ff:0b:1f:3a:d8:ae:81:6c:7f:c9:81:d4:15: 5b:49:04:b1:13:25:7c:8b:bd:0f:d8:23:33:fe:b6: f0:8d:10:f4:4a:89:7d:32:ef:8b:a6:5a:1a:bc:b9: 3b:9d:6c:c9:be:87:46:87:55:56:2c:78:7b:c9:14: 54:26:b4:1d:41:c6:51:ef:55:5a:3d:03:d6:69:e9: 98:e5:c3:c5:a4:3a:50:8f:20:8e:2c:31:fb:0c:d4: ac:dd:ec:16:d7:2f:65:b6:c1:33:22:ba:b8:14:79: d4:b9:06:96:8a:04:13:0d:24:f0:11:57:b7:fe:1a: 19:6c:55:65:80:05:b1:5e:bb:17:d9:8e:28:b1:de: e3:27:11:1b:7e:38:0f:e4:3d:2f:47:79:42:c4:90: bc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:49:44:F6:0D:27:58:D3:DF:E8:5D:CC:BF:33:48:76:7D:FB:6B:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/b9bb34a8-3fb4-3229-af76-b084da323030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl X509v3 Authority Key Identifier: keyid:7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer sbgp-ipAddrBlock: critical IPv4: 128.151.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:2d:63:ee:b2:23:34:46:31:3b:a1:cf:fa:9c:10:bf:e1:db: 50:f3:ac:95:1a:36:4e:69:52:a3:43:59:ed:9e:c5:26:84:47: 37:e7:42:ef:29:d1:ce:a2:85:fa:cc:43:2f:27:a4:9c:e2:8f: 41:ed:93:07:33:1d:c3:3c:92:5e:6f:46:34:50:83:9d:42:65: 7d:28:10:99:ae:a4:11:ad:6d:60:94:41:44:c5:52:b5:15:2f: 6a:27:d4:11:7d:40:dd:88:fc:98:ea:a0:dc:3e:71:5a:ab:28: da:37:67:1d:d8:da:fe:43:25:5a:6e:cb:d4:a5:3a:ca:2e:c5: 9d:c3:34:c6:d2:c5:e9:7f:bf:8d:c7:dd:11:c6:55:76:99:ff: e0:63:f1:60:ed:d3:ae:28:8f:8b:fe:40:3f:36:e1:df:24:de: a7:58:8a:f8:d7:12:b2:d9:98:56:db:bc:5e:bd:6e:dd:ca:5f: 65:27:6b:bf:24:7a:c9:d1:8f:55:ff:b3:47:a3:e8:1d:e6:88: c9:d0:d5:e2:33:b3:d4:be:32:c3:c2:72:a8:fa:78:f3:de:3e: 5e:05:14:a6:a5:12:75:ac:2f:0c:62:f8:55:6c:89:e0:a5:a3: 20:65:4f:80:5d:35:8b:7e:32:9f:43:a4:af:86:35:aa:13:eb: de:0b:46:0f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2perqMOPRTwOHua8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhlMDU4ZTYtZmY2OC00ZDVkLWI3YjgtMDRkMTY2MWVj MjM1MB4XDTI2MDQyOTAxMDAyM1oXDTI2MDcyODAxMDAyM1owLzEtMCsGA1UEAxMk M2JiY2EzZWUtZDFhNS00OTA5LTk3NDAtMDNkY2U0Mjc4YTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiYJwHNwLUpoQkpcGTew3jsrkAFxeBT7uYbE AOpVg9xznnD3Hu9814G88LPVf4USsy0fhjIrCvIcF/WLZejlEqsZqJ4QtwPgujiC lkVPqogLS3ZN2w3pSyCs1wbCy0eZoBoT35AitvrTyf8LHzrYroFsf8mB1BVbSQSx EyV8i70P2CMz/rbwjRD0Sol9Mu+LploavLk7nWzJvodGh1VWLHh7yRRUJrQdQcZR 71VaPQPWaemY5cPFpDpQjyCOLDH7DNSs3ewW1y9ltsEzIrq4FHnUuQaWigQTDSTw EVe3/hoZbFVlgAWxXrsX2Y4osd7jJxEbfjgP5D0vR3lCxJC85QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGZJRPYNJ1jT3+hdzL8zSHZ9+2s6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84OGUw NThlNi1mZjY4LTRkNWQtYjdiOC0wNGQxNjYxZWMyMzUvYjliYjM0YTgtM2ZiNC0z MjI5LWFmNzYtYjA4NGRhMzIzMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODhlMDU4ZTYtZmY2OC00ZDVkLWI3 YjgtMDRkMTY2MWVjMjM1Lzg4ZTA1OGU2LWZmNjgtNGQ1ZC1iN2I4LTA0ZDE2NjFl YzIzNS5jcmwwHwYDVR0jBBgwFoAUfx9y9I0d12+HLS3q8hWeytNqLUIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84OGUwNThlNi1mZjY4LTRkNWQtYjdiOC0wNGQx NjYxZWMyMzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgJcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAcy1j7rIjNEYxO6HP+pwQv+HbUPOslRo2TmlSo0NZ7Z7FJoRHN+dC7ynR zqKF+sxDLyeknOKPQe2TBzMdwzySXm9GNFCDnUJlfSgQma6kEa1tYJRBRMVStRUv aifUEX1A3Yj8mOqg3D5xWqso2jdnHdja/kMlWm7L1KU6yi7FncM0xtLF6X+/jcfd EcZVdpn/4GPxYO3TriiPi/5APzbh3yTep1iK+NcSstmYVtu8Xr1u3cpfZSdrvyR6 ydGPVf+zR6PoHeaIydDV4jOz1L4yw8JyqPp4894+XgUUpqUSdawvDGL4VWyJ4KWj IGVPgF01i34yn0Okr4Y1qhPr3gtGDw== -----END CERTIFICATE-----Generated at Wed May 13 08:33:34 2026 by rpki-client