$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/59525a60-9667-3eb3-a43a-29fdd75d8d4d.roa File: 59525a60-9667-3eb3-a43a-29fdd75d8d4d.roa (raw, json) Hash identifier: BdKtDBqEgQ+bMLnYnNA3cKZy6YZ914hP0y+p8K5nS5s= Subject key identifier: 71:0B:68:E3:C2:12:A3:1E:50:EC:5A:24:11:4A:F9:67:03:02:2D:45 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D0647A0FE8CD36FD625205710 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/59525a60-9667-3eb3-a43a-29fdd75d8d4d.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 398465 IP address blocks: 128.121.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:a0:fe:8c:d3:6f:d6:25:20:57:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=d27edf95-62eb-473a-b6aa-d69052b50105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:69:c4:a5:bb:2a:54:7a:69:a8:b4:a9:cf:bf: 7a:df:b9:26:2b:c7:14:1b:93:a9:16:bf:b1:0c:cd: 5b:a5:a7:87:4e:29:3e:8d:94:1a:ee:5d:3c:63:b5: f6:17:12:81:f8:45:d8:1d:01:b1:3d:03:00:e6:c0: bb:4c:49:d6:a3:d4:64:d1:f7:f4:17:be:87:a1:ae: 8e:5a:c7:9e:c6:0d:c8:bc:a1:bc:3d:27:71:88:28: 5f:f0:b3:c2:36:e1:ef:3b:32:5c:f6:83:80:86:86: b3:35:69:6f:2d:21:b6:26:9d:81:2b:bf:5a:69:2f: 21:d2:e6:f4:c8:f6:2a:7a:40:7d:3f:a2:9d:1b:8b: f7:d4:23:d1:e4:9c:45:04:86:5c:60:3e:62:f2:7f: d9:d1:2d:26:bf:64:89:4c:ee:ef:76:f4:d8:61:be: d3:3c:9c:76:28:77:7a:64:5e:22:02:4b:28:3b:31: a7:7a:2a:24:fc:c6:9f:59:29:a8:be:4e:3c:3b:ce: 77:79:a1:8d:7b:f4:d4:15:42:48:47:25:f5:40:72: d3:ca:38:a8:77:e2:35:dc:9f:2b:cb:8c:cb:24:bf: 24:c1:2a:e2:a8:ce:08:45:6c:ff:a9:a8:c2:19:e8: b3:0a:13:84:2c:dc:74:cd:f2:d3:d1:ec:04:5f:93: 53:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0B:68:E3:C2:12:A3:1E:50:EC:5A:24:11:4A:F9:67:03:02:2D:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/59525a60-9667-3eb3-a43a-29fdd75d8d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:33:27:ed:0e:ef:67:d6:da:c4:38:10:c1:10:53:f2:e8:12: 17:3f:d6:ad:fc:5a:24:af:21:13:bf:86:39:1b:ea:b8:ce:93: db:06:51:23:2e:01:df:04:24:14:70:f3:91:94:c4:7d:f5:2e: 4e:54:45:9e:b2:22:eb:7a:7a:4c:79:49:9f:1e:30:62:1a:74: 33:8c:b5:0f:7e:01:a2:2a:cf:a9:66:23:e2:0e:70:55:8f:e9: 9e:48:f2:2d:0c:c4:87:5e:41:97:8a:b0:76:71:50:bf:e7:90: 6a:d9:26:19:e6:b4:33:da:39:ce:69:6d:66:0e:64:d3:52:4e: f7:09:a8:dc:1c:e5:6a:76:e0:c2:02:41:23:8f:6e:2e:44:7e: 34:42:b6:a7:2d:4c:8e:86:c6:4e:6c:58:8b:a4:05:71:0c:3c: 07:95:4c:d9:3c:7c:d1:a5:eb:b1:9b:b1:32:99:ce:85:59:52: e5:d4:71:11:30:02:4b:09:44:28:ff:bf:26:f6:64:87:28:c6: c1:65:be:5c:39:99:b9:b3:3f:63:66:c6:3c:73:85:6d:84:fa: 80:f6:45:00:b9:1a:32:24:a8:6e:94:ab:9b:3e:61:10:01:97: 59:d3:01:5e:eb:f1:9a:81:e6:10:9b:c9:26:44:ac:a3:ec:f9: ec:25:6c:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR6D+jNNv1iUgVxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZDI3ZWRmOTUtNjJlYi00NzNhLWI2YWEtZDY5MDUyYjUwMTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mnEpbsqVHppqLSpz79637kmK8cUG5OpFr+x DM1bpaeHTik+jZQa7l08Y7X2FxKB+EXYHQGxPQMA5sC7TEnWo9Rk0ff0F76Hoa6O Wseexg3IvKG8PSdxiChf8LPCNuHvOzJc9oOAhoazNWlvLSG2Jp2BK79aaS8h0ub0 yPYqekB9P6KdG4v31CPR5JxFBIZcYD5i8n/Z0S0mv2SJTO7vdvTYYb7TPJx2KHd6 ZF4iAksoOzGneiok/MafWSmovk48O853eaGNe/TUFUJIRyX1QHLTyjiod+I13J8r y4zLJL8kwSriqM4IRWz/qajCGeizChOELNx0zfLT0ewEX5NTdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHELaOPCEqMeUOxaJBFK+WcDAi1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTk1MjVhNjAtOTY2Ny0z ZWIzLWE0M2EtMjlmZGQ3NWQ4ZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgHlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8zJ+0O72fW2sQ4EMEQU/LoEhc/1q38WiSvIRO/hjkb6rjOk9sGUSMu Ad8EJBRw85GUxH31Lk5URZ6yIut6ekx5SZ8eMGIadDOMtQ9+AaIqz6lmI+IOcFWP 6Z5I8i0MxIdeQZeKsHZxUL/nkGrZJhnmtDPaOc5pbWYOZNNSTvcJqNwc5Wp24MIC QSOPbi5EfjRCtqctTI6Gxk5sWIukBXEMPAeVTNk8fNGl67GbsTKZzoVZUuXUcREw AksJRCj/vyb2ZIcoxsFlvlw5mbmzP2NmxjxzhW2E+oD2RQC5GjIkqG6Uq5s+YRAB l1nTAV7r8ZqB5hCbySZErKPs+ewlbEw= -----END CERTIFICATE-----Generated at Mon Mar 2 04:18:51 2026 by rpki-client