$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ebb843c9-7189-3e02-9911-bb156d795e8a.roa File: ebb843c9-7189-3e02-9911-bb156d795e8a.roa (raw, json) Hash identifier: 1457XCvkNbdvF/NnQA/pDYfbEuiRuDDvhyuL8KZx4rM= Subject key identifier: 05:DB:DE:B3:F8:6B:D7:B1:4B:93:01:B2:90:CF:14:78:06:49:17:84 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584D146D8A08A9C75B99B04A6000 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ebb843c9-7189-3e02-9911-bb156d795e8a.roa Signing time: Fri 06 Mar 2026 15:38:27 +0000 ROA not before: Fri 06 Mar 2026 15:38:27 +0000 ROA not after: Thu 04 Jun 2026 14:38:27 +0000 asID: 81 IP address blocks: 128.109.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:6d:8a:08:a9:c7:5b:99:b0:4a:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 6 15:38:27 2026 GMT Not After : Jun 4 14:38:27 2026 GMT Subject: CN=1271d2fb-c7f7-4605-940d-25f7f9d3eb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:24:35:0b:42:07:3d:32:60:4d:b7:df:6c:95: 8e:d8:14:b3:09:f4:12:0d:d4:87:95:e6:94:16:da: 39:ac:b2:1d:eb:3e:e1:8f:d9:df:64:50:c6:2d:9f: 44:16:65:01:e5:51:f1:c7:b2:eb:9f:da:c3:80:0a: c7:c4:de:26:77:78:dc:2f:c7:83:20:ab:db:fc:d4: 14:d7:95:59:09:6a:04:84:40:c9:15:d6:be:16:47: d1:5f:e1:9c:a8:05:fd:4c:ff:47:50:1d:06:26:61: cc:69:91:70:82:5f:f7:52:90:43:bc:6f:fa:b4:56: ac:42:ad:36:02:bb:2b:3e:49:92:90:c4:40:c6:1e: c2:26:29:c8:29:5a:ac:48:70:a5:8e:fa:7c:4f:f4: 1a:2e:18:71:06:a6:20:40:62:6c:30:7b:bf:5b:e0: 15:98:6d:57:f6:4f:3d:a8:77:50:c1:7f:90:a8:96: c2:a1:97:2c:f4:bb:91:61:34:8c:84:96:a5:7f:e5: d1:49:63:0a:66:5e:d8:64:b8:71:50:1d:5c:11:50: 41:7a:3d:dd:c9:81:af:d9:11:c3:12:83:e9:54:48: ad:6a:c6:32:10:09:df:fb:0d:b7:3c:80:c2:41:01: 50:13:0c:ed:a3:68:07:b7:dd:a9:1c:e2:d1:67:72: 2c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DB:DE:B3:F8:6B:D7:B1:4B:93:01:B2:90:CF:14:78:06:49:17:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ebb843c9-7189-3e02-9911-bb156d795e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:93:cb:6c:ed:0e:49:04:2d:b9:26:64:4d:2a:d3:76:e5:74: 76:99:1d:2a:91:b4:7a:c5:77:40:83:f1:f3:69:61:34:a4:d4: ab:90:55:6c:ff:30:f0:89:94:36:4c:ab:26:3d:95:d8:0c:6e: 86:cf:57:4d:43:98:2b:cb:62:2a:45:93:58:32:88:98:d5:46: 2e:95:c5:07:e5:ef:ed:79:fc:93:5f:af:dc:a1:96:a7:d2:94: 16:6b:0f:c7:f1:87:e1:d8:d1:57:fd:dc:bd:13:cf:70:0b:9a: f2:a0:4d:21:a2:48:10:5a:35:85:f3:63:69:96:29:39:da:f7: 40:60:2a:76:fb:e2:ec:04:61:ad:18:ee:98:68:f3:68:f9:76: 8f:ff:89:26:1e:e1:e8:1f:9a:1a:45:d4:7b:6e:32:01:f6:04: f2:bd:78:b0:81:18:72:e0:d4:f7:38:9c:98:27:38:80:8c:7b: b9:0b:2c:6f:00:69:59:34:b0:72:f3:38:5e:fd:9d:2b:de:92: ce:77:a5:8d:16:29:84:fe:60:ed:fa:df:75:51:ad:07:7c:b0: 5b:01:cb:bf:0f:f7:da:1f:81:af:60:a5:b1:28:d8:57:a0:ae: 43:fc:8a:60:d3:75:54:e4:ba:bf:b0:ab:1e:6f:3c:6f:19:1c: 17:f5:57:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbYoIqcdbmbBKYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDMwNjE1MzgyN1oXDTI2MDYwNDE0MzgyN1owLzEtMCsGA1UEAxMk MTI3MWQyZmItYzdmNy00NjA1LTk0MGQtMjVmN2Y5ZDNlYjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiQ1C0IHPTJgTbffbJWO2BSzCfQSDdSHleaU Fto5rLId6z7hj9nfZFDGLZ9EFmUB5VHxx7Lrn9rDgArHxN4md3jcL8eDIKvb/NQU 15VZCWoEhEDJFda+FkfRX+GcqAX9TP9HUB0GJmHMaZFwgl/3UpBDvG/6tFasQq02 ArsrPkmSkMRAxh7CJinIKVqsSHCljvp8T/QaLhhxBqYgQGJsMHu/W+AVmG1X9k89 qHdQwX+QqJbCoZcs9LuRYTSMhJalf+XRSWMKZl7YZLhxUB1cEVBBej3dyYGv2RHD EoPpVEitasYyEAnf+w23PIDCQQFQEwzto2gHt92pHOLRZ3IspQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXb3rP4a9exS5MBspDPFHgGSReEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZWJiODQzYzktNzE4OS0z ZTAyLTk5MTEtYmIxNTZkNzk1ZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeTy2ztDkkELbkmZE0q03bldHaZHSqRtHrFd0CD8fNpYTSk1KuQVWz/ MPCJlDZMqyY9ldgMbobPV01DmCvLYipFk1gyiJjVRi6VxQfl7+15/JNfr9yhlqfS lBZrD8fxh+HY0Vf93L0Tz3ALmvKgTSGiSBBaNYXzY2mWKTna90BgKnb74uwEYa0Y 7pho82j5do//iSYe4egfmhpF1HtuMgH2BPK9eLCBGHLg1Pc4nJgnOICMe7kLLG8A aVk0sHLzOF79nSveks53pY0WKYT+YO3633VRrQd8sFsBy78P99ofga9gpbEo2Feg rkP8imDTdVTkur+wqx5vPG8ZHBf1V28= -----END CERTIFICATE-----Generated at Thu Mar 26 10:05:37 2026 by rpki-client