$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d20e6e8e-1e06-3114-8e4b-c1f3e693f54b.roa File: d20e6e8e-1e06-3114-8e4b-c1f3e693f54b.roa (raw, json) Hash identifier: IWbeAJepkPEd1xXYNCcLIl8zCVsBZ+XL1s7VNcvzSpc= Subject key identifier: 70:DB:5E:2B:52:13:AF:16:7A:7D:1B:14:F3:C1:83:A9:04:EB:81:81 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584D492A802D1AC38F4707A093A8 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d20e6e8e-1e06-3114-8e4b-c1f3e693f54b.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 62610 IP address blocks: 128.1.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:80:2d:1a:c3:8f:47:07:a0:93:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=b0f34323-f53f-4398-ae92-a0836fd98da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ae:4b:e1:48:28:fc:e3:44:0e:9a:0c:42:79: 61:1a:c0:91:cb:26:66:8a:b3:76:fb:39:91:8b:ba: 6b:2d:46:0a:49:ac:db:e3:b9:c4:25:96:6b:7b:a2: 86:1d:6d:21:d6:96:5e:e7:00:3b:40:3b:8c:05:e0: 54:0e:70:18:54:fc:68:7c:da:d2:fe:28:c7:71:87: ee:8c:b2:73:5e:fc:37:b4:3e:76:75:76:fe:f0:15: 92:c9:0b:12:93:78:93:e7:fc:d9:37:17:01:ae:51: 38:fa:75:18:a1:a1:ce:25:b9:23:9f:e1:c5:95:ff: e2:4f:26:73:d8:0d:a2:9d:0f:b6:c4:63:c8:bc:0d: 73:d1:85:7d:20:bb:25:4e:a5:c7:9b:b3:69:83:7c: ab:c9:fb:30:99:2b:f9:2a:46:c9:5f:e3:29:65:ac: d2:59:11:26:1a:47:d5:c4:b5:dd:72:77:ef:b6:49: fd:d4:eb:7f:49:6a:49:d3:7d:a2:c0:c4:1b:67:7f: 1d:75:f3:0c:35:b6:0b:6c:8e:65:b8:54:18:ce:da: cf:fb:e5:c0:46:7e:ca:08:6c:9a:33:e4:a4:5b:4f: 61:de:9e:9d:26:2b:97:da:3d:79:a8:67:39:fe:2d: 0f:2f:ed:7f:6c:19:13:74:d4:31:17:6b:09:83:88: 34:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DB:5E:2B:52:13:AF:16:7A:7D:1B:14:F3:C1:83:A9:04:EB:81:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d20e6e8e-1e06-3114-8e4b-c1f3e693f54b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:56:05:eb:ee:44:3e:62:ef:6f:d4:cf:df:d3:66:82:82:6b: dc:a8:d9:17:39:4b:a2:8a:34:c6:2f:59:8d:0f:b2:7a:be:d7: 0e:a2:2f:c4:fc:5b:6f:c9:2a:ce:0b:06:ea:56:58:f1:92:7e: 29:e2:9e:8d:4c:f3:dc:b6:dd:0e:8c:5f:c8:94:c7:9c:0b:7e: 26:ff:23:62:40:2c:ad:77:89:88:c1:cb:d0:69:43:49:5a:59: 8e:44:d7:f5:9c:44:b1:5d:e0:16:8d:da:2a:94:50:80:77:f2: 1b:8f:d0:47:30:19:44:08:4c:01:48:cc:37:ea:bb:ff:b3:9a: 11:ff:23:b9:0a:44:0f:a6:59:48:39:b5:e2:42:40:85:79:10: 9a:f2:95:68:4b:0b:51:19:ee:91:76:ac:12:47:51:26:2e:cf: 9d:76:16:47:ae:27:51:d5:65:ae:f8:d1:67:f5:11:94:b0:df: 8a:30:a8:9c:41:21:3a:99:3d:11:51:57:42:5f:93:58:ec:06: c9:04:e5:a9:5a:d8:61:3e:4c:02:59:82:bb:00:21:73:7d:be: 9d:b6:3f:c5:25:d6:a0:1c:28:02:10:4b:3a:34:fa:04:44:ab: 19:0e:2f:2f:0b:7e:2a:fc:d7:3b:06:6e:5b:67:30:3c:a4:3b: 36:bc:99:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKoAtGsOPRwegk6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk YjBmMzQzMjMtZjUzZi00Mzk4LWFlOTItYTA4MzZmZDk4ZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka5L4Ugo/ONEDpoMQnlhGsCRyyZmirN2+zmR i7prLUYKSazb47nEJZZre6KGHW0h1pZe5wA7QDuMBeBUDnAYVPxofNrS/ijHcYfu jLJzXvw3tD52dXb+8BWSyQsSk3iT5/zZNxcBrlE4+nUYoaHOJbkjn+HFlf/iTyZz 2A2inQ+2xGPIvA1z0YV9ILslTqXHm7Npg3yryfswmSv5KkbJX+MpZazSWREmGkfV xLXdcnfvtkn91Ot/SWpJ032iwMQbZ38ddfMMNbYLbI5luFQYztrP++XARn7KCGya M+SkW09h3p6dJiuX2j15qGc5/i0PL+1/bBkTdNQxF2sJg4g0wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDbXitSE68Wen0bFPPBg6kE64GBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvZDIwZTZlOGUtMWUwNi0z MTE0LThlNGItYzFmM2U2OTNmNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtWBevuRD5i72/Uz9/TZoKCa9yo2Rc5S6KKNMYvWY0Psnq+1w6iL8T8 W2/JKs4LBupWWPGSfinino1M89y23Q6MX8iUx5wLfib/I2JALK13iYjBy9BpQ0la WY5E1/WcRLFd4BaN2iqUUIB38huP0EcwGUQITAFIzDfqu/+zmhH/I7kKRA+mWUg5 teJCQIV5EJrylWhLC1EZ7pF2rBJHUSYuz512FkeuJ1HVZa740Wf1EZSw34owqJxB ITqZPRFRV0Jfk1jsBskE5ala2GE+TAJZgrsAIXN9vp22P8Ul1qAcKAIQSzo0+gRE qxkOLy8Lfir81zsGbltnMDykOza8mUE= -----END CERTIFICATE-----Generated at Thu Mar 26 04:40:33 2026 by rpki-client