$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e0fcaff-98ac-3544-92ee-5c038866c8d9.roa File: 3e0fcaff-98ac-3544-92ee-5c038866c8d9.roa (raw, json) Hash identifier: bmLfEflxOQyj1S8pJyT1+aZh8YWpdA/v4USeNmQ+heM= Subject key identifier: 7A:3C:A6:53:46:F0:93:AF:B9:C1:A8:72:BE:A6:FF:D9:81:FC:52:34 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584CCBA77E90116377BA760DB880 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e0fcaff-98ac-3544-92ee-5c038866c8d9.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 3949 IP address blocks: 128.121.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:7e:90:11:63:77:ba:76:0d:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=678a3036-f677-4f9a-a2bb-66ad531e3045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4f:23:a1:a2:dd:3a:ed:80:0f:79:1e:be:67: 5f:c3:19:9c:7a:c6:a5:90:1e:b9:67:62:71:4d:42: 6e:51:9a:93:76:b1:e1:82:0c:33:07:5c:fe:dd:18: 24:ad:43:89:66:87:66:71:44:16:03:ac:d0:55:8c: d7:29:2b:42:07:9f:7c:e6:52:4f:f3:2a:99:6d:e2: e5:61:eb:0a:21:23:33:a5:60:1d:19:1f:aa:a4:d4: eb:2c:f3:37:6c:2b:19:8e:c3:ce:26:ea:ea:b6:7e: 04:3b:16:77:1e:8e:b9:0b:32:42:19:2f:af:80:65: 05:1b:6d:f8:db:6b:9c:27:93:5f:67:17:ed:27:d7: 10:5e:9b:9b:a7:38:b3:b0:6a:29:c2:1a:78:ad:98: 14:c1:3d:41:54:06:dd:3f:34:ef:02:d6:b2:83:eb: 28:9a:d6:99:99:e4:81:ae:8e:40:0d:40:76:b3:24: 1f:82:36:0d:40:fe:13:4d:97:15:79:00:5e:a5:9a: e6:ad:0d:e5:b4:38:24:a4:98:af:e6:f4:f4:78:42: 3b:92:85:7d:fa:3d:8a:8e:d5:e5:94:df:75:31:47: 39:1e:47:1b:fe:5a:ee:13:8f:77:4b:4e:e8:71:c7: 65:76:c7:ae:5e:22:83:78:f7:3f:bd:0a:49:5c:d8: 98:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3C:A6:53:46:F0:93:AF:B9:C1:A8:72:BE:A6:FF:D9:81:FC:52:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e0fcaff-98ac-3544-92ee-5c038866c8d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ed:a2:95:02:93:62:cd:32:6e:98:f9:29:0c:0a:50:f5:57: 56:93:b7:aa:35:cf:c4:e3:c6:04:44:95:19:b5:16:56:04:98: f3:87:0d:12:41:dc:04:e1:da:e2:57:76:eb:8a:d7:49:cf:f3: 91:be:74:94:13:ca:f6:63:47:bb:65:30:f6:85:b3:16:af:5c: 8b:39:a1:80:70:07:45:05:4b:f6:36:d1:c7:9c:28:f0:55:d5: 32:49:22:88:a2:04:4f:82:0a:0f:56:44:0b:ad:90:82:66:97: 7f:13:3c:9d:e4:64:c0:4c:b9:c1:63:33:88:d6:5c:19:5b:e1: 3f:64:ff:4e:40:24:27:62:c8:15:21:6d:6a:4c:2a:22:90:aa: 85:83:de:57:c3:70:9b:54:62:f4:4a:8b:1b:82:55:72:b4:2e: 82:d5:9e:f2:00:c2:ef:18:1d:16:85:0a:0c:37:b7:c7:e9:80: 41:19:e8:8a:ee:d3:30:ce:86:71:ab:eb:28:26:a1:76:fd:d7: 91:42:42:97:bd:e5:48:d7:dc:db:88:b5:0c:7e:6f:7b:da:e0: db:85:34:35:1c:72:5a:c1:9a:e2:7c:91:5b:56:75:b3:7a:db: e4:fa:ac:c5:6c:56:c5:79:2d:64:e3:a9:0f:8e:20:40:2a:2f: 72:38:6e:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp36QEWN3unYNuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk Njc4YTMwMzYtZjY3Ny00ZjlhLWEyYmItNjZhZDUzMWUzMDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9U8joaLdOu2AD3kevmdfwxmcesalkB65Z2Jx TUJuUZqTdrHhggwzB1z+3RgkrUOJZodmcUQWA6zQVYzXKStCB5985lJP8yqZbeLl YesKISMzpWAdGR+qpNTrLPM3bCsZjsPOJurqtn4EOxZ3Ho65CzJCGS+vgGUFG234 22ucJ5NfZxftJ9cQXpubpzizsGopwhp4rZgUwT1BVAbdPzTvAtayg+somtaZmeSB ro5ADUB2syQfgjYNQP4TTZcVeQBepZrmrQ3ltDgkpJiv5vT0eEI7koV9+j2KjtXl lN91MUc5Hkcb/lruE493S07occdldseuXiKDePc/vQpJXNiYzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHo8plNG8JOvucGocr6m/9mB/FI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2UwZmNhZmYtOThhYy0z NTQ0LTkyZWUtNWMwMzg4NjZjOGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgHkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLtopUCk2LNMm6Y+SkMClD1V1aTt6o1z8TjxgRElRm1FlYEmPOHDRJB 3ATh2uJXduuK10nP85G+dJQTyvZjR7tlMPaFsxavXIs5oYBwB0UFS/Y20cecKPBV 1TJJIoiiBE+CCg9WRAutkIJml38TPJ3kZMBMucFjM4jWXBlb4T9k/05AJCdiyBUh bWpMKiKQqoWD3lfDcJtUYvRKixuCVXK0LoLVnvIAwu8YHRaFCgw3t8fpgEEZ6Iru 0zDOhnGr6ygmoXb915FCQpe95UjX3NuItQx+b3va4NuFNDUcclrBmuJ8kVtWdbN6 2+T6rMVsVsV5LWTjqQ+OIEAqL3I4bos= -----END CERTIFICATE-----Generated at Mon Mar 2 02:55:30 2026 by rpki-client