$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/75282f19-c29f-3698-94c2-19f36dd1a8c0.roa File: 75282f19-c29f-3698-94c2-19f36dd1a8c0.roa (raw, json) Hash identifier: r1SNMnAOJu211tu+KazjUrwfyOpxCGy3Lvfd9K9oXjU= Subject key identifier: 95:61:9E:65:F7:A5:9B:0F:B0:83:FA:19:1E:E8:7A:83:66:67:F7:71 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D0647B6C6A298E4CFD7F6EB00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/75282f19-c29f-3698-94c2-19f36dd1a8c0.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 3257 IP address blocks: 128.121.64.0/18 maxlen: 24 128.241.128.0/18 maxlen: 24 131.103.192.0/18 maxlen: 24 157.238.0.0/18 maxlen: 24 168.143.0.0/18 maxlen: 24 192.204.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:b6:c6:a2:98:e4:cf:d7:f6:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=d71823e1-c58d-4c08-b8e2-daab0081d968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:c8:4c:4c:02:43:91:25:7c:19:cb:a2:9f: d0:3d:ba:3c:d7:be:fe:5d:db:5d:80:84:bc:04:c7: e0:70:75:b4:d8:70:e0:ff:dd:27:07:47:f4:f4:ed: 81:de:13:0a:6f:08:e1:e9:ca:3c:24:ac:a1:e4:f0: d9:12:24:ff:27:f3:69:0b:35:e0:e5:55:ac:a5:88: 9d:aa:1f:ef:28:07:79:e0:5c:7e:9d:6e:3d:af:86: af:4c:0b:35:58:79:a1:85:cb:97:7d:ef:0b:91:84: e7:d7:ed:e1:8c:b0:0b:1f:0c:10:99:ef:10:55:61: 6e:65:8d:d9:be:a0:85:64:bd:95:30:6b:34:38:cb: 8a:2a:5e:18:15:6a:1b:88:dc:7d:e4:37:5c:b3:80: 55:d3:26:6e:65:3c:c5:1f:da:d5:a5:99:a8:04:56: d8:81:89:c3:df:6b:d8:11:ca:97:b0:b4:f7:4e:5a: 79:c3:bf:83:3e:ca:57:b4:ef:b8:87:c3:ee:7e:31: 80:3f:b0:07:05:b5:da:f8:8b:7a:7f:66:57:1d:1c: 14:79:76:6e:eb:63:fa:a3:07:16:57:bb:84:60:9b: d3:c9:20:e4:93:95:15:c8:ba:3c:17:5c:4b:8e:75: ec:a6:a9:1f:fb:fd:90:95:1b:5e:b6:f4:3c:31:75: 92:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:61:9E:65:F7:A5:9B:0F:B0:83:FA:19:1E:E8:7A:83:66:67:F7:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/75282f19-c29f-3698-94c2-19f36dd1a8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.64.0/18 128.241.128.0/18 131.103.192.0/18 157.238.0.0/18 168.143.0.0/18 192.204.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:a5:58:e9:f1:47:16:bc:c9:f2:8a:f8:60:84:19:61:59:d2: 05:19:f4:97:a8:77:67:6d:92:5d:83:46:fd:fc:42:8f:df:8b: cf:5f:e0:b4:dc:b5:53:22:31:04:3e:d4:ac:fe:99:6a:ad:23: 09:79:4a:40:71:81:14:c1:5e:52:23:39:c7:28:24:c8:f7:c6: 8d:ca:fa:54:bb:b8:49:6a:b5:92:a2:29:b8:cd:14:52:d0:50: be:ed:ec:e8:b9:4e:3b:a4:16:e0:6f:6f:fe:e5:fd:a7:72:26: 6c:a1:c3:68:f1:1a:2e:d4:dd:80:37:41:4e:5b:03:b3:f9:55: 44:f4:dd:51:22:ab:d0:d7:e5:ee:25:a2:d4:77:20:79:59:72: 4d:20:59:ca:69:18:b5:c3:ab:89:9c:6f:b9:f0:2a:ec:e7:46: b7:69:60:fe:15:84:7d:e0:9b:5c:ec:22:2e:59:65:b4:98:df: a9:d4:db:89:6c:a6:c3:ed:33:84:93:c0:88:86:21:2d:86:1d: 5f:1e:bf:8c:ba:4d:c7:25:4e:f3:fd:f7:05:5e:32:21:41:43: a8:46:74:53:64:26:0a:a4:44:66:12:83:0c:e4:1f:92:a2:31: d5:93:32:7c:b7:a1:51:53:d9:a0:96:27:ad:ab:bb:5f:f6:78: 4d:17:8d:f8 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWE0GR7bGopjkz9f26wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZDcxODIzZTEtYzU4ZC00YzA4LWI4ZTItZGFhYjAwODFkOTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAHITEwCQ5ElfBnLop/QPbo8177+XdtdgIS8 BMfgcHW02HDg/90nB0f09O2B3hMKbwjh6co8JKyh5PDZEiT/J/NpCzXg5VWspYid qh/vKAd54Fx+nW49r4avTAs1WHmhhcuXfe8LkYTn1+3hjLALHwwQme8QVWFuZY3Z vqCFZL2VMGs0OMuKKl4YFWobiNx95Ddcs4BV0yZuZTzFH9rVpZmoBFbYgYnD32vY EcqXsLT3Tlp5w7+DPspXtO+4h8PufjGAP7AHBbXa+It6f2ZXHRwUeXZu62P6owcW V7uEYJvTySDkk5UVyLo8F1xLjnXspqkf+/2QlRtetvQ8MXWSewIDAQABo4IDczCC A28wHQYDVR0OBBYEFJVhnmX3pZsPsIP6GR7oeoNmZ/dxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNzUyODJmMTktYzI5Zi0z Njk4LTk0YzItMTlmMzZkZDFhOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQGgHlAAwQG gPGAAwQGg2fAAwQGne4AAwQGqI8AAwQGwMzAMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEqlWOnxRxa8yfKK +GCEGWFZ0gUZ9Jeod2dtkl2DRv38Qo/fi89f4LTctVMiMQQ+1Kz+mWqtIwl5SkBx gRTBXlIjOccoJMj3xo3K+lS7uElqtZKiKbjNFFLQUL7t7Oi5TjukFuBvb/7l/ady Jmyhw2jxGi7U3YA3QU5bA7P5VUT03VEiq9DX5e4lotR3IHlZck0gWcppGLXDq4mc b7nwKuznRrdpYP4VhH3gm1zsIi5ZZbSY36nU24lspsPtM4STwIiGIS2GHV8ev4y6 TcclTvP99wVeMiFBQ6hGdFNkJgqkRGYSgwzkH5KiMdWTMny3oVFT2aCWJ62ru1/2 eE0Xjfg= -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:57 2026 by rpki-client