$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1d21d7c4-3716-32d4-8b69-65aecb294268.roa File: 1d21d7c4-3716-32d4-8b69-65aecb294268.roa (raw, json) Hash identifier: s9iPixDVFYsU38YjmE3M3Xm7ZbXPauuRAg/IjwPbWD0= Subject key identifier: E7:58:D4:51:5D:1C:15:33:AB:9E:C5:90:B1:5F:7E:22:07:33:90:8A Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584CCBA749D6D69E988ECD72C400 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1d21d7c4-3716-32d4-8b69-65aecb294268.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 3257 IP address blocks: 204.0.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:49:d6:d6:9e:98:8e:cd:72:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=4ae2c3df-d2a4-452a-abdd-97e9cecc4cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:00:e8:1c:7e:e0:f6:81:c0:85:ab:ae:9c: 1d:41:fc:c0:eb:fc:3b:bd:1f:3a:77:d1:bf:0b:a6: 97:28:a4:1a:ea:5d:92:2a:e2:44:53:86:f0:2e:3b: 5e:00:5e:43:de:67:bf:7d:67:c7:6e:59:22:13:93: ff:b8:f5:1f:bb:a6:ae:16:79:d8:61:6b:ee:b2:65: 7f:a5:55:7d:7c:f3:fb:db:4b:04:1a:c2:63:c5:02: 83:d3:e0:45:d1:a7:17:5a:55:56:58:dc:26:32:56: a3:1d:a8:d8:fd:03:61:e4:23:3c:8d:49:ac:27:f3: be:86:22:1b:3c:bc:f2:eb:51:a7:f3:6d:fd:ab:34: 84:35:a6:98:80:9b:29:0b:10:cf:a8:51:d7:2e:26: 18:5e:74:74:dc:17:7f:d5:60:05:aa:56:01:6d:08: 28:b5:67:4f:9f:8a:9d:ae:c7:62:31:ab:58:94:28: 57:30:ec:15:76:e9:70:f3:b2:c1:30:a2:06:e5:03: 1e:5a:77:45:2f:ae:e7:11:af:5e:2e:68:f2:7d:47: 7c:c6:a4:0f:28:83:1f:4e:c7:5f:33:f2:74:96:9e: 99:13:c3:9c:51:48:26:d2:34:b6:7d:2d:b8:89:a2: 67:c3:86:61:73:c8:99:7e:b6:80:ac:31:e6:9a:39: ff:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:58:D4:51:5D:1C:15:33:AB:9E:C5:90:B1:5F:7E:22:07:33:90:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1d21d7c4-3716-32d4-8b69-65aecb294268.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:02:b4:19:b0:5a:9c:ef:59:4c:db:53:67:9a:3b:55:8e:cc: f7:cc:b6:e7:fa:97:5d:42:40:ec:8b:78:a3:3c:53:54:65:00: 5b:17:19:b6:9b:61:8e:92:26:94:e8:e8:24:d2:8a:94:28:10: 4d:26:38:f0:3b:4d:8c:8a:39:91:08:6c:66:4e:ef:84:f9:8a: fa:01:9e:59:07:ce:87:c1:ef:0a:d3:61:e2:d7:23:49:35:b7: fe:d8:42:84:51:00:8c:58:9a:30:08:36:47:25:49:ea:08:fa: 69:2d:f8:f4:94:45:fc:a7:aa:2c:de:8b:7d:9a:fd:4f:1f:f6: 5b:82:05:d0:d4:d1:d9:29:0e:c3:9d:5d:3f:bc:5a:a8:4e:47: 71:59:71:92:83:a5:d1:12:34:7d:b7:94:37:c7:bb:21:2e:ce: c0:1e:c6:4c:4c:be:9d:e3:61:09:97:c5:66:bf:1c:b8:2c:18: e8:ea:59:a0:2d:83:f6:59:f2:0a:38:dc:fc:22:01:e8:b6:33: 1b:fd:7d:16:e9:91:7e:66:c2:7a:b0:2d:5f:38:97:60:a4:bf: e4:fa:01:0f:00:bb:54:08:fa:ff:2e:1b:8f:07:e3:0d:da:22: ce:43:74:54:50:15:a0:24:9d:96:d5:b9:d4:7e:f5:31:51:0a: d3:b1:64:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp0nW1p6Yjs1yxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk NGFlMmMzZGYtZDJhNC00NTJhLWFiZGQtOTdlOWNlY2M0Y2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBQA6Bx+4PaBwIWrrpwdQfzA6/w7vR86d9G/ C6aXKKQa6l2SKuJEU4bwLjteAF5D3me/fWfHblkiE5P/uPUfu6auFnnYYWvusmV/ pVV9fPP720sEGsJjxQKD0+BF0acXWlVWWNwmMlajHajY/QNh5CM8jUmsJ/O+hiIb PLzy61Gn8239qzSENaaYgJspCxDPqFHXLiYYXnR03Bd/1WAFqlYBbQgotWdPn4qd rsdiMatYlChXMOwVdulw87LBMKIG5QMeWndFL67nEa9eLmjyfUd8xqQPKIMfTsdf M/J0lp6ZE8OcUUgm0jS2fS24iaJnw4Zhc8iZfraArDHmmjn/WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdY1FFdHBUzq57FkLFffiIHM5CKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWQyMWQ3YzQtMzcxNi0z MmQ0LThiNjktNjVhZWNiMjk0MjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUCtBmwWpzvWUzbU2eaO1WOzPfMtuf6l11CQOyLeKM8U1RlAFsXGbab YY6SJpTo6CTSipQoEE0mOPA7TYyKOZEIbGZO74T5ivoBnlkHzofB7wrTYeLXI0k1 t/7YQoRRAIxYmjAINkclSeoI+mkt+PSURfynqizei32a/U8f9luCBdDU0dkpDsOd XT+8WqhOR3FZcZKDpdESNH23lDfHuyEuzsAexkxMvp3jYQmXxWa/HLgsGOjqWaAt g/ZZ8go43PwiAei2Mxv9fRbpkX5mwnqwLV84l2Ckv+T6AQ8Au1QI+v8uG48H4w3a Is5DdFRQFaAknZbVudR+9TFRCtOxZLQ= -----END CERTIFICATE-----Generated at Mon Mar 2 04:42:13 2026 by rpki-client