$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ae2e07e2-0345-34df-ae2e-cc5cbd28d387.roa File: ae2e07e2-0345-34df-ae2e-cc5cbd28d387.roa (raw, json) Hash identifier: gaKl88AE7jtiFCY87yI1Y+2LCLNkaWBEZlO0rD9XCEU= Subject key identifier: E4:07:2D:0B:5B:4A:AE:F7:41:F6:BF:C3:D9:BE:50:DD:DC:3A:38:84 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584D40CA5B1501D75545612A9900 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ae2e07e2-0345-34df-ae2e-cc5cbd28d387.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 271 IP address blocks: 128.189.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:5b:15:01:d7:55:45:61:2a:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=2f2e7380-f9c5-4e79-a079-82fe233a0ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:cf:2d:c1:57:8f:b6:f8:44:d7:55:4b:71: 13:d8:b3:58:56:b7:e8:03:0d:4a:d2:4a:68:20:10: 5c:6e:af:22:35:7a:98:6d:bd:33:92:e0:f4:b9:19: 65:06:f4:3d:11:9f:70:7c:de:39:6d:ab:ea:63:86: ab:d7:a8:fa:89:aa:81:da:52:f0:08:d9:f5:ff:ed: 0c:40:fc:5d:99:dc:6d:d8:13:a4:47:21:11:e2:ec: b0:3d:bb:0c:14:1b:55:a1:02:ef:cb:8b:27:14:83: 95:e0:84:ce:46:fd:9a:0c:dc:f8:0b:0e:e1:f1:c5: 65:00:84:bf:b2:36:bd:e7:9a:39:fe:86:92:3b:35: dd:64:34:58:d0:92:4c:86:69:6a:18:e6:b2:b5:12: 6f:15:08:35:ce:42:6b:6f:f1:b3:28:db:46:8e:8c: 77:66:d7:e7:de:0a:f4:d8:cf:e1:c4:b7:50:60:12: 18:99:5b:7f:2b:95:5e:85:08:73:53:a6:6e:d8:ae: 9c:ec:fd:a7:6b:67:fe:ea:0d:c8:b5:20:82:79:f6: 4e:4e:71:de:fe:ef:b0:e0:06:dd:c9:9e:2b:c1:33: d0:f6:29:14:b9:38:42:91:84:00:97:35:08:35:62: 3a:f3:e3:54:06:d0:43:e6:ae:b8:8e:ec:f5:af:b2: ad:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:07:2D:0B:5B:4A:AE:F7:41:F6:BF:C3:D9:BE:50:DD:DC:3A:38:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ae2e07e2-0345-34df-ae2e-cc5cbd28d387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:70:b5:46:6e:ec:a4:98:46:3b:c6:15:88:9b:a4:cd:4b:3e: 55:df:29:51:60:f1:3e:ef:5b:77:f2:b7:18:80:03:ca:74:57: 6e:ce:f5:22:25:0c:fe:ab:7a:d9:52:9d:a5:2f:c4:d1:b2:88: bd:e2:f7:8c:fb:94:32:26:e8:cb:73:b3:ab:59:38:60:2f:03: 9c:ca:87:4d:d1:1e:39:83:44:cc:e9:34:a9:75:07:72:05:24: 2b:97:1d:8e:1f:40:01:cb:49:51:02:48:ae:79:a9:e6:11:46: cc:91:ac:4f:17:c0:ff:a2:9c:1d:8a:3c:6e:65:9b:41:e8:32: 21:61:69:16:47:26:f1:01:a8:65:de:46:94:fa:2a:72:f1:ea: fb:92:22:41:2d:2e:d3:49:61:a9:5b:b0:5c:eb:3b:75:ed:e4: 93:be:a6:33:48:74:11:44:12:7a:52:35:6e:8c:b9:f3:3d:2e: 69:4b:ac:32:1b:da:3e:2b:ac:5c:87:44:ee:88:84:e8:65:bb: 2a:f8:34:78:67:1b:6a:cd:a4:2f:35:7e:09:aa:8b:f7:22:24: 88:ca:b0:c9:72:b7:03:13:68:73:4e:97:ef:bb:f8:c2:2f:24: e7:00:1f:3c:3b:1b:7d:11:07:e3:bb:36:4b:1e:a1:13:56:34: fe:d2:2d:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AylsVAddVRWEqmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MmYyZTczODAtZjljNS00ZTc5LWEwNzktODJmZTIzM2EwZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWHPLcFXj7b4RNdVS3ET2LNYVrfoAw1K0kpo IBBcbq8iNXqYbb0zkuD0uRllBvQ9EZ9wfN45bavqY4ar16j6iaqB2lLwCNn1/+0M QPxdmdxt2BOkRyER4uywPbsMFBtVoQLvy4snFIOV4ITORv2aDNz4Cw7h8cVlAIS/ sja955o5/oaSOzXdZDRY0JJMhmlqGOaytRJvFQg1zkJrb/GzKNtGjox3Ztfn3gr0 2M/hxLdQYBIYmVt/K5VehQhzU6Zu2K6c7P2na2f+6g3ItSCCefZOTnHe/u+w4Abd yZ4rwTPQ9ikUuThCkYQAlzUINWI68+NUBtBD5q64juz1r7Kt6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQHLQtbSq73Qfa/w9m+UN3cOjiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYWUyZTA3ZTItMDM0NS0z NGRmLWFlMmUtY2M1Y2JkMjhkMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgL0FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJwtUZu7KSYRjvGFYibpM1LPlXfKVFg8T7vW3fytxiAA8p0V27O9SIl DP6retlSnaUvxNGyiL3i94z7lDIm6Mtzs6tZOGAvA5zKh03RHjmDRMzpNKl1B3IF JCuXHY4fQAHLSVECSK55qeYRRsyRrE8XwP+inB2KPG5lm0HoMiFhaRZHJvEBqGXe RpT6KnLx6vuSIkEtLtNJYalbsFzrO3Xt5JO+pjNIdBFEEnpSNW6MufM9LmlLrDIb 2j4rrFyHRO6IhOhluyr4NHhnG2rNpC81fgmqi/ciJIjKsMlytwMTaHNOl++7+MIv JOcAHzw7G30RB+O7NkseoRNWNP7SLYo= -----END CERTIFICATE-----Generated at Thu Mar 26 20:07:26 2026 by rpki-client