$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/84ca2728-b0e3-391d-8237-b70d83a756d8.roa File: 84ca2728-b0e3-391d-8237-b70d83a756d8.roa (raw, json) Hash identifier: H3fjsG+ntbJjTvxcYXbYdV1TbP2sOCRBCr17sBL30zA= Subject key identifier: A0:1B:00:7C:D9:42:1C:92:63:E4:50:CE:10:64:A0:83:14:41:AD:FD Certificate issuer: /CN=a84229b8-4341-4c6e-9665-bb4d991b9cdb Certificate serial: 010D0C9F4328584D2644A2E7BCDC875814EAB100 Authority key identifier: 14:F9:A4:42:11:36:C9:E8:D1:AB:75:9D:CF:2A:CD:AE:7F:19:87:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/84ca2728-b0e3-391d-8237-b70d83a756d8.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 16509 IP address blocks: 159.119.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:a2:e7:bc:dc:87:58:14:ea:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a84229b8-4341-4c6e-9665-bb4d991b9cdb Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=4b552dc2-aaf1-42ad-859e-5884aa350aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bb:5a:2e:ea:7b:d6:2d:45:0a:da:ee:00:44: c6:4a:61:2c:db:3d:f3:37:48:b5:9e:3e:54:38:5b: 07:73:f2:67:48:28:e5:12:ad:02:0c:bb:36:bb:f2: ce:41:8e:e8:b0:8d:8d:3d:00:8b:21:76:37:89:f4: c5:a7:61:65:b5:d4:44:4d:d0:a6:dc:41:9c:96:d2: 94:b4:3e:3a:ad:43:a4:b1:43:67:d1:ac:3d:ee:72: 25:f8:b3:20:21:d3:03:ac:61:f7:82:b1:ff:18:80: 4a:20:2a:52:58:da:cf:fc:26:e4:2b:9f:e7:86:92: c7:42:b7:b3:f1:31:ee:52:6a:68:35:9d:50:30:1a: 55:cc:24:8b:8b:a4:8c:b6:a8:9c:b7:9e:89:b3:54: df:7f:81:84:f1:59:ef:22:40:50:97:b6:d5:2f:51: a7:31:9c:f3:95:57:c2:dd:36:5e:03:c1:c1:ea:54: be:02:06:a5:ab:3c:f1:58:0e:65:05:9f:53:42:f3: 6f:34:4c:44:b7:d7:61:2a:24:21:8a:a3:8d:26:f2: d7:1e:fa:6b:03:76:63:6d:fa:bb:89:f4:d7:2e:2f: 11:f6:21:9c:c6:cd:ea:bc:fc:19:12:5a:a2:e8:c5: 89:fa:ce:a4:a9:b7:07:f2:81:b7:60:f8:80:42:2d: 43:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1B:00:7C:D9:42:1C:92:63:E4:50:CE:10:64:A0:83:14:41:AD:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/84ca2728-b0e3-391d-8237-b70d83a756d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb/a84229b8-4341-4c6e-9665-bb4d991b9cdb.crl X509v3 Authority Key Identifier: keyid:14:F9:A4:42:11:36:C9:E8:D1:AB:75:9D:CF:2A:CD:AE:7F:19:87:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a84229b8-4341-4c6e-9665-bb4d991b9cdb.cer sbgp-ipAddrBlock: critical IPv4: 159.119.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:1d:83:31:0e:70:eb:a5:cb:5d:1a:14:72:5e:9a:d9:60:fd: c0:c9:92:85:82:40:d3:3b:fc:c4:16:6c:18:d1:3c:da:69:25: c0:e3:97:4d:8d:18:51:e5:15:e2:61:92:00:8c:61:14:2e:52: 87:93:3e:d3:10:da:d4:32:e8:d1:ed:93:21:12:cb:40:1e:57: c7:aa:2d:bb:0c:3a:49:39:65:33:0b:9a:c7:7c:8d:1e:a9:f8: f1:49:43:0e:ef:e6:37:b6:7c:fc:b4:02:73:3a:a7:74:56:98: 1c:4e:dd:ae:89:d2:07:9b:1c:22:a5:bc:c7:2b:4d:dc:41:7f: 76:3a:74:42:5b:af:79:6b:af:91:45:82:d5:16:f5:33:80:0c: e1:c6:db:b8:f6:10:ab:66:c6:86:54:bb:4f:52:4d:45:9e:3b: db:a1:77:d2:61:eb:f5:20:39:be:f4:d1:b0:f7:70:fe:45:46: c6:4d:3a:71:51:5e:f9:58:f9:8e:1c:52:39:e1:e1:90:18:de: 6c:21:3a:c8:df:66:9d:0d:10:c1:99:dc:c1:8c:74:d9:d4:ba: 28:53:2f:d5:c0:3e:0d:93:50:1c:c9:bf:a3:d3:99:c9:61:71: 64:d1:75:da:3f:df:98:92:a9:cb:03:85:9c:55:2b:89:07:2b: 4a:65:cf:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRKLnvNyHWBTqsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg0MjI5YjgtNDM0MS00YzZlLTk2NjUtYmI0ZDk5MWI5 Y2RiMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk NGI1NTJkYzItYWFmMS00MmFkLTg1OWUtNTg4NGFhMzUwYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7taLup71i1FCtruAETGSmEs2z3zN0i1nj5U OFsHc/JnSCjlEq0CDLs2u/LOQY7osI2NPQCLIXY3ifTFp2FltdRETdCm3EGcltKU tD46rUOksUNn0aw97nIl+LMgIdMDrGH3grH/GIBKICpSWNrP/CbkK5/nhpLHQrez 8THuUmpoNZ1QMBpVzCSLi6SMtqict56Js1Tff4GE8VnvIkBQl7bVL1GnMZzzlVfC 3TZeA8HB6lS+AgalqzzxWA5lBZ9TQvNvNExEt9dhKiQhiqONJvLXHvprA3Zjbfq7 ifTXLi8R9iGcxs3qvPwZElqi6MWJ+s6kqbcH8oG3YPiAQi1DkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAbAHzZQhySY+RQzhBkoIMUQa39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hODQy MjliOC00MzQxLTRjNmUtOTY2NS1iYjRkOTkxYjljZGIvODRjYTI3MjgtYjBlMy0z OTFkLTgyMzctYjcwZDgzYTc1NmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTg0MjI5YjgtNDM0MS00YzZlLTk2 NjUtYmI0ZDk5MWI5Y2RiL2E4NDIyOWI4LTQzNDEtNGM2ZS05NjY1LWJiNGQ5OTFi OWNkYi5jcmwwHwYDVR0jBBgwFoAUFPmkQhE2yejRq3WdzyrNrn8Zh6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hODQyMjliOC00MzQxLTRjNmUtOTY2NS1iYjRk OTkxYjljZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn3eBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEdgzEOcOuly10aFHJemtlg/cDJkoWCQNM7/MQWbBjRPNppJcDjl02N GFHlFeJhkgCMYRQuUoeTPtMQ2tQy6NHtkyESy0AeV8eqLbsMOkk5ZTMLmsd8jR6p +PFJQw7v5je2fPy0AnM6p3RWmBxO3a6J0gebHCKlvMcrTdxBf3Y6dEJbr3lrr5FF gtUW9TOADOHG27j2EKtmxoZUu09STUWeO9uhd9Jh6/UgOb700bD3cP5FRsZNOnFR XvlY+Y4cUjnh4ZAY3mwhOsjfZp0NEMGZ3MGMdNnUuihTL9XAPg2TUBzJv6PTmclh cWTRddo/35iSqcsDhZxVK4kHK0plz+g= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:46 2026 by rpki-client