$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/990aa0ef-36aa-341c-8367-b39128c6febf.roa File: 990aa0ef-36aa-341c-8367-b39128c6febf.roa (raw, json) Hash identifier: xAt7403rCJwM+1kOAzub65wut5wjZ29dUdLjTxQxZa8= Subject key identifier: 20:8A:95:A3:E5:59:A8:DA:AF:04:87:B1:42:CF:8C:2B:3D:9C:FB:2C Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F4328584DA6B0345370D47C8F3841B180 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/990aa0ef-36aa-341c-8367-b39128c6febf.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 19624 IP address blocks: 128.254.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:34:53:70:d4:7c:8f:38:41:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=2fd15a2b-5b0c-440d-9a9a-3e0d95e280db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:97:32:80:3a:e5:51:94:f2:f5:67:df:e9:db: 9f:69:58:8d:9d:3d:e4:5d:39:ae:6b:f2:9c:2f:ec: 8b:cb:14:c9:b9:04:2d:60:09:90:5f:3a:04:52:05: eb:2d:22:6b:24:d5:d0:54:82:c7:8d:77:bc:b5:70: dc:85:83:2d:b7:c3:fd:55:1a:f0:aa:55:cd:2e:bd: f6:c0:15:18:36:8e:97:79:8a:c1:a3:a3:fc:b4:3b: d3:90:c7:3f:8b:fe:ac:51:b5:5c:1b:a0:9b:10:3b: c7:3d:a5:30:b0:64:b1:01:fd:12:e3:ea:d4:fd:6c: c8:a6:18:1c:f9:ba:7f:89:fa:e2:d3:8a:27:04:be: 68:53:63:e0:b4:8e:1c:1c:f8:b7:49:69:e6:e9:9b: a7:3c:92:6c:3a:5e:12:d8:87:33:82:1f:ef:2e:ee: fc:74:58:e1:07:b6:0e:3c:34:e0:74:97:0c:29:fe: b9:58:f5:1a:f7:a5:9c:70:76:ba:8a:fa:c7:dd:ad: b2:71:ef:91:fd:aa:76:f4:94:51:36:f1:ff:22:a1: a7:a6:2a:7d:03:f2:63:d1:17:08:59:dc:65:85:3f: e9:5d:6a:e1:55:42:c1:cc:36:d7:7d:45:97:eb:29: cd:a8:79:8d:f9:6e:5e:6c:5a:24:6e:ca:34:d1:61: c0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8A:95:A3:E5:59:A8:DA:AF:04:87:B1:42:CF:8C:2B:3D:9C:FB:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/990aa0ef-36aa-341c-8367-b39128c6febf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv4: 128.254.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:0d:63:34:78:15:b4:ff:8d:6e:ac:cc:45:2a:7d:80:22:95: 04:ac:53:fa:66:be:4a:68:14:c6:2a:22:95:af:cd:de:d1:fc: 0f:59:3e:6c:60:81:04:0d:a3:23:3c:ee:6e:19:8d:88:ba:a2: 81:81:4d:98:69:e3:97:1b:c3:ac:7e:5e:e8:a5:78:0b:44:ac: a4:af:2b:e9:40:85:3b:78:84:9e:e3:d7:d8:0c:37:3e:69:73: 0c:17:76:11:3f:c3:28:9c:15:ef:78:19:35:8c:01:6c:17:22: 61:93:c2:46:0c:e7:27:f6:00:a9:f5:66:a1:b7:d1:a7:64:22: c1:8f:5e:e1:a2:ba:09:0a:e9:22:52:eb:1a:6b:d0:cf:96:84: 16:d6:3e:7e:00:c1:3d:9c:23:89:f9:9c:e5:2a:13:55:90:0b: e5:12:af:f6:02:4a:09:59:85:af:b0:83:08:ca:38:1d:9c:7a: db:73:87:25:89:16:eb:cf:bf:0a:0d:34:91:17:88:2b:70:90: 06:68:48:2f:d2:26:f7:3b:f5:e4:67:74:2c:5f:0e:59:bc:10: d4:51:60:a7:a5:93:79:db:75:34:c8:83:9d:4c:cf:f4:04:e2: 54:00:b7:d9:c0:59:10:e9:45:16:f4:19:5f:eb:31:d2:11:75: 16:77:d8:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msDRTcNR8jzhBsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MmZkMTVhMmItNWIwYy00NDBkLTlhOWEtM2UwZDk1ZTI4MGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpcygDrlUZTy9Wff6dufaViNnT3kXTmua/Kc L+yLyxTJuQQtYAmQXzoEUgXrLSJrJNXQVILHjXe8tXDchYMtt8P9VRrwqlXNLr32 wBUYNo6XeYrBo6P8tDvTkMc/i/6sUbVcG6CbEDvHPaUwsGSxAf0S4+rU/WzIphgc +bp/ifri04onBL5oU2PgtI4cHPi3SWnm6ZunPJJsOl4S2Iczgh/vLu78dFjhB7YO PDTgdJcMKf65WPUa96WccHa6ivrH3a2yce+R/ap29JRRNvH/IqGnpip9A/Jj0RcI WdxlhT/pXWrhVULBzDbXfUWX6ynNqHmN+W5ebFokbso00WHAowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCKlaPlWajarwSHsULPjCs9nPssMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvOTkwYWEwZWYtMzZhYS0z NDFjLTgzNjctYjM5MTI4YzZmZWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP67MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYNYzR4FbT/jW6szEUqfYAilQSsU/pmvkpoFMYqIpWvzd7R/A9ZPmxg gQQNoyM87m4ZjYi6ooGBTZhp45cbw6x+XuileAtErKSvK+lAhTt4hJ7j19gMNz5p cwwXdhE/wyicFe94GTWMAWwXImGTwkYM5yf2AKn1ZqG30adkIsGPXuGiugkK6SJS 6xpr0M+WhBbWPn4AwT2cI4n5nOUqE1WQC+USr/YCSglZha+wgwjKOB2cettzhyWJ FuvPvwoNNJEXiCtwkAZoSC/SJvc79eRndCxfDlm8ENRRYKelk3nbdTTIg51Mz/QE 4lQAt9nAWRDpRRb0GV/rMdIRdRZ32Ec= -----END CERTIFICATE-----Generated at Wed May 13 11:02:28 2026 by rpki-client