$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e16817f4-208f-3572-8ca8-303204586c20.roa File: e16817f4-208f-3572-8ca8-303204586c20.roa (raw, json) Hash identifier: YKN3sOQoACzphmAJ7t3ukLeyiEBn8L7nNN7ZnbGpMn8= Subject key identifier: 02:8D:84:EC:1A:55:B7:19:D5:6A:06:92:F1:00:7B:02:10:28:04:C5 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584D146D8A6E890640A9E8C87910 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e16817f4-208f-3572-8ca8-303204586c20.roa Signing time: Fri 06 Mar 2026 15:38:27 +0000 ROA not before: Fri 06 Mar 2026 15:38:27 +0000 ROA not after: Thu 04 Jun 2026 14:38:27 +0000 asID: 81 IP address blocks: 128.109.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:6d:8a:6e:89:06:40:a9:e8:c8:79:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 6 15:38:27 2026 GMT Not After : Jun 4 14:38:27 2026 GMT Subject: CN=e6112151-b536-47cf-ba58-7c9a05a21b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cc:ad:79:4b:7f:97:91:9b:42:4f:be:86:50: 20:46:94:0d:04:d0:d6:05:c5:9c:86:3e:84:3d:72: 5c:8b:80:4b:c1:07:2e:6a:f9:47:c3:18:4f:0b:ac: 83:cb:69:59:1b:3b:e7:c2:25:af:68:59:67:61:53: 83:9f:5e:32:42:09:5b:02:af:dc:cf:76:7a:48:19: c9:b3:f7:35:bd:cd:27:d5:da:3e:7b:c2:e7:3c:72: 0d:0d:bd:a5:23:e0:d4:91:4c:17:72:21:71:f9:02: 28:24:93:e6:a0:87:f8:e7:0e:38:b4:dd:f1:09:49: cd:79:16:ef:97:6f:4f:1b:22:cc:5e:79:1c:9b:26: 40:92:1b:df:0f:5a:60:60:48:c4:f3:d2:fa:31:07: f3:2b:4a:3e:51:ad:b2:0d:97:ed:74:d3:79:77:89: 8b:7a:60:a9:aa:0f:d6:e4:40:f3:ba:3e:bd:f4:5b: b0:b3:35:73:17:da:70:3f:33:07:7c:61:10:c5:12: fe:23:f8:4d:a9:ae:4c:9d:de:55:0d:f4:39:d3:44: de:45:93:9f:da:07:87:be:6a:f0:92:8a:70:f0:35: 2d:b7:f4:94:ae:84:33:d0:e3:32:79:4c:f7:08:3d: 52:2d:ba:e8:34:00:05:63:b8:97:a8:d1:7b:71:04: 55:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8D:84:EC:1A:55:B7:19:D5:6A:06:92:F1:00:7B:02:10:28:04:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e16817f4-208f-3572-8ca8-303204586c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:24:e6:3f:fa:41:b2:63:7f:5e:22:ae:d7:9b:c1:aa:82:39: 87:54:5b:a5:c7:b3:30:e3:6e:86:d9:aa:78:71:4c:15:d0:27: 00:b4:1e:88:e6:16:3e:3a:cc:e8:bc:c2:f2:cd:02:f8:6a:1f: fe:b7:47:61:0d:b2:9c:33:1c:ce:c9:25:ea:f8:4c:b3:bf:45: 3e:52:24:87:4e:6d:f3:d0:1b:7c:7e:25:5d:20:d4:04:04:23: e5:64:34:2c:6e:7d:a8:1b:00:c0:56:35:4d:ae:2b:7c:6a:68: 74:e4:58:8c:dd:79:48:f8:37:03:d1:97:8e:8f:ad:49:5f:48: ac:68:3a:42:40:dc:8f:8b:81:f1:bd:13:58:db:9f:11:4a:21: de:25:8d:6d:e5:0e:07:cf:9b:bc:bc:5c:f5:6d:b2:b1:67:ba: 36:57:8e:16:85:31:c8:6b:c3:22:62:38:32:36:6f:bf:f2:da: df:00:0b:39:f0:59:22:80:2c:90:2d:a1:17:15:12:bb:08:dd: 7e:3e:fb:a4:11:21:9f:81:55:fe:35:41:d9:86:e8:86:32:ec: 61:fc:1f:b1:54:e8:be:b9:37:25:ef:ec:1c:10:85:ed:ff:7b: 27:06:21:06:7c:ff:85:d9:f7:95:42:7d:b7:b6:5d:07:fe:c5: 1c:ab:66:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbYpuiQZAqejIeRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDMwNjE1MzgyN1oXDTI2MDYwNDE0MzgyN1owLzEtMCsGA1UEAxMk ZTYxMTIxNTEtYjUzNi00N2NmLWJhNTgtN2M5YTA1YTIxYjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcyteUt/l5GbQk++hlAgRpQNBNDWBcWchj6E PXJci4BLwQcuavlHwxhPC6yDy2lZGzvnwiWvaFlnYVODn14yQglbAq/cz3Z6SBnJ s/c1vc0n1do+e8LnPHINDb2lI+DUkUwXciFx+QIoJJPmoIf45w44tN3xCUnNeRbv l29PGyLMXnkcmyZAkhvfD1pgYEjE89L6MQfzK0o+Ua2yDZftdNN5d4mLemCpqg/W 5EDzuj699FuwszVzF9pwPzMHfGEQxRL+I/hNqa5Mnd5VDfQ500TeRZOf2geHvmrw kopw8DUtt/SUroQz0OMyeUz3CD1SLbroNAAFY7iXqNF7cQRVNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKNhOwaVbcZ1WoGkvEAewIQKATFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZTE2ODE3ZjQtMjA4Zi0z NTcyLThjYTgtMzAzMjA0NTg2YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG1WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4k5j/6QbJjf14irtebwaqCOYdUW6XHszDjbobZqnhxTBXQJwC0Hojm Fj46zOi8wvLNAvhqH/63R2ENspwzHM7JJer4TLO/RT5SJIdObfPQG3x+JV0g1AQE I+VkNCxufagbAMBWNU2uK3xqaHTkWIzdeUj4NwPRl46PrUlfSKxoOkJA3I+LgfG9 E1jbnxFKId4ljW3lDgfPm7y8XPVtsrFnujZXjhaFMchrwyJiODI2b7/y2t8ACznw WSKALJAtoRcVErsI3X4++6QRIZ+BVf41QdmG6IYy7GH8H7FU6L65NyXv7BwQhe3/ eycGIQZ8/4XZ95VCfbe2XQf+xRyrZpU= -----END CERTIFICATE-----Generated at Thu Mar 26 13:06:53 2026 by rpki-client