$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/34356c57-8521-34f3-a43c-872918075c40.roa File: 34356c57-8521-34f3-a43c-872918075c40.roa (raw, json) Hash identifier: aLfRgVTBFgU0lxY3niaWicwqtwWOcR9WXdMKlqAmYpk= Subject key identifier: B0:70:1F:88:93:FA:B1:8F:7A:FF:4D:DA:AE:39:4F:D5:82:15:AD:42 Certificate issuer: /CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Certificate serial: 010D0C9F4328584CF2BCE555093B049AF47BCB00 Authority key identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/34356c57-8521-34f3-a43c-872918075c40.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 8075 IP address blocks: 138.128.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bc:e5:55:09:3b:04:9a:f4:7b:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=c9bd594a-7948-476b-a05f-d703b11c92ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d1:6d:ef:4a:65:58:5b:3c:5c:3e:fb:ec:30: 00:d6:24:0d:49:24:b8:da:9f:2c:14:a1:88:7e:45: 67:f2:9e:37:20:5a:7f:17:0f:c9:40:7e:36:60:88: 52:6c:fb:40:f1:7a:08:86:f0:27:ce:84:4f:a8:44: c9:45:9d:df:6d:bc:77:98:19:35:f1:f5:b4:cd:e2: cf:c2:eb:55:8b:bb:7e:32:2f:d2:dc:31:c6:f2:1d: 99:cd:67:99:ca:76:30:dc:cf:c0:9f:df:0d:46:9b: 83:f6:28:ae:0b:47:bb:76:44:5b:e7:23:2d:ec:79: 28:c1:ee:3c:ef:e4:8f:6e:96:03:c2:02:10:e8:2f: e6:65:5c:3a:7e:29:7a:b4:0c:4f:18:81:d2:a0:45: cb:f1:a4:a6:50:52:ba:d0:88:77:b8:c7:05:2d:d3: 5a:9c:c7:e4:38:3e:57:61:78:b6:49:84:81:e1:86: 28:af:c6:f1:e6:d7:f4:66:c2:99:51:b0:80:90:e3: fb:23:d4:67:38:04:e5:5d:85:a5:55:35:63:88:50: 33:16:26:ba:45:94:f2:01:1d:37:fe:d0:39:ad:0d: 80:19:c6:e7:7d:9d:e1:0e:a4:c8:4a:ee:fe:a6:c0: a6:6d:4a:a3:d4:17:fb:fd:2b:58:32:a6:9b:43:42: 2e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:70:1F:88:93:FA:B1:8F:7A:FF:4D:DA:AE:39:4F:D5:82:15:AD:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/34356c57-8521-34f3-a43c-872918075c40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.crl X509v3 Authority Key Identifier: keyid:B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer sbgp-ipAddrBlock: critical IPv4: 138.128.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:95:3e:62:8a:5a:53:51:3a:47:10:a4:57:5c:e3:70:cd:c8: 6d:ce:9f:3d:d6:4d:40:3f:c0:4a:a6:b5:dc:a1:60:7b:0f:16: 1f:6f:62:90:9f:f1:6d:5e:c9:95:dd:ae:dc:00:db:12:78:de: 2c:b3:cc:91:c8:3c:d1:70:8f:dc:d9:c7:e8:1a:ff:31:f4:a9: 5a:1d:46:df:f2:1f:04:29:88:b2:3c:e0:9a:8e:ae:38:ec:f7: 7a:73:e6:8a:10:6b:0f:9e:fd:e0:bd:10:53:f1:d2:56:89:f1: 3b:78:7c:4e:3f:92:d8:da:a1:41:88:31:47:d5:a5:46:05:a6: 66:7d:a9:19:d7:bc:a4:0e:52:a7:e3:5e:02:1f:6e:40:23:0a: b7:4f:46:c2:db:5e:36:05:c4:21:82:a9:93:03:49:da:64:2f: 23:d1:9b:3b:18:31:3c:c9:cb:76:0a:1e:b5:75:b3:8e:48:ee: 49:3d:74:e0:38:53:bb:b6:0d:1a:a2:11:02:1f:6f:e7:9d:0c: c6:67:d0:c2:3d:2a:be:d5:d9:a2:88:d3:be:57:94:ea:33:64: 06:bb:4e:16:d2:03:87:d2:2e:3e:8e:31:58:fc:6b:da:67:3d: f3:8b:8b:bf:9a:1c:5b:c1:6d:d6:e3:c3:40:66:ad:a9:b2:09: 29:09:2c:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvOVVCTsEmvR7ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmIzYmNiNDctNWYxOC00NmQzLTliNTAtNjNkNWNiYjll OWRkMB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk YzliZDU5NGEtNzk0OC00NzZiLWEwNWYtZDcwM2IxMWM5MmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntFt70plWFs8XD777DAA1iQNSSS42p8sFKGI fkVn8p43IFp/Fw/JQH42YIhSbPtA8XoIhvAnzoRPqETJRZ3fbbx3mBk18fW0zeLP wutVi7t+Mi/S3DHG8h2ZzWeZynYw3M/An98NRpuD9iiuC0e7dkRb5yMt7Hkowe48 7+SPbpYDwgIQ6C/mZVw6fil6tAxPGIHSoEXL8aSmUFK60Ih3uMcFLdNanMfkOD5X YXi2SYSB4YYor8bx5tf0ZsKZUbCAkOP7I9RnOATlXYWlVTVjiFAzFia6RZTyAR03 /tA5rQ2AGcbnfZ3hDqTISu7+psCmbUqj1Bf7/StYMqabQ0IuAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBwH4iT+rGPev9N2q45T9WCFa1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNi Y2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1Y2JiOWU5ZGQvMzQzNTZjNTctODUyMS0z NGYzLWE0M2MtODcyOTE4MDc1YzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmIzYmNiNDctNWYxOC00NmQzLTli NTAtNjNkNWNiYjllOWRkLzJiM2JjYjQ3LTVmMTgtNDZkMy05YjUwLTYzZDVjYmI5 ZTlkZC5jcmwwHwYDVR0jBBgwFoAUteboBGJM8WceBokEZtHmJS27gq0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYjNiY2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1 Y2JiOWU5ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAioD6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOVPmKKWlNROkcQpFdc43DNyG3Onz3WTUA/wEqmtdyhYHsPFh9vYpCf 8W1eyZXdrtwA2xJ43iyzzJHIPNFwj9zZx+ga/zH0qVodRt/yHwQpiLI84JqOrjjs 93pz5ooQaw+e/eC9EFPx0laJ8Tt4fE4/ktjaoUGIMUfVpUYFpmZ9qRnXvKQOUqfj XgIfbkAjCrdPRsLbXjYFxCGCqZMDSdpkLyPRmzsYMTzJy3YKHrV1s45I7kk9dOA4 U7u2DRqiEQIfb+edDMZn0MI9Kr7V2aKI075XlOozZAa7ThbSA4fSLj6OMVj8a9pn PfOLi7+aHFvBbdbjw0BmramyCSkJLII= -----END CERTIFICATE-----Generated at Mon Mar 2 14:48:03 2026 by rpki-client