$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a7c26953-08dd-3e25-acbe-b4b5e3caee62.roa File: a7c26953-08dd-3e25-acbe-b4b5e3caee62.roa (raw, json) Hash identifier: OCyA0U6JMvoYvExe/UtQeGVUILH5eWhqeTrRWNEZ3wg= Subject key identifier: 28:CB:D3:58:5C:AC:ED:24:27:18:B1:31:FA:A9:1B:21:02:C3:6E:65 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D730A71B86E806EFC3E1A7A00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a7c26953-08dd-3e25-acbe-b4b5e3caee62.roa Signing time: Thu 09 Apr 2026 13:00:30 +0000 ROA not before: Thu 09 Apr 2026 13:00:30 +0000 ROA not after: Wed 08 Jul 2026 13:00:30 +0000 asID: 13443 IP address blocks: 128.242.116.0/24 maxlen: 24 128.242.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:0a:71:b8:6e:80:6e:fc:3e:1a:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 9 13:00:30 2026 GMT Not After : Jul 8 13:00:30 2026 GMT Subject: CN=d22d1146-ef47-43ca-8462-8b739551f913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e4:ab:cf:b9:87:a0:ab:37:2d:c9:f2:64:9c: 12:ed:3f:41:1e:32:7d:a0:6f:b4:66:33:e1:5f:16: e2:d7:22:5f:a8:e9:7a:dc:fa:65:c3:ab:71:85:72: 97:28:6f:db:88:1b:c9:45:59:db:fb:de:7d:05:64: e5:dc:4f:26:56:c6:64:45:56:e3:e1:99:e2:1a:e9: bb:c0:82:2f:9f:6e:dc:4d:f1:60:2a:64:6d:0c:ab: 3c:a0:22:5a:ae:4f:0d:97:c7:5b:0d:60:99:22:0d: 7f:83:a1:47:69:16:ec:b8:8f:d8:ff:c5:92:4a:57: 0c:3a:28:21:94:49:fe:7d:f6:0f:00:ce:df:1b:9c: ab:2b:e9:fc:c6:e8:8f:a6:f9:91:b7:c1:be:dc:fb: 9d:d2:12:a3:fa:ea:a9:86:19:fc:11:43:9b:ac:8b: f0:a8:6e:f1:b8:67:47:74:69:0c:50:5f:02:8b:30: 43:db:20:f2:38:53:ab:a8:93:26:c5:eb:02:3d:ac: a2:ee:8c:5e:80:75:b4:c6:c9:bc:a4:95:22:05:17: 17:a3:df:85:65:7c:de:5f:96:aa:87:33:7a:a9:34: ca:62:0d:fc:9d:ae:61:fd:b1:69:89:2e:35:47:43: 52:f0:18:72:5d:e2:7b:fa:a3:f6:81:39:f1:b2:b8: 74:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CB:D3:58:5C:AC:ED:24:27:18:B1:31:FA:A9:1B:21:02:C3:6E:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a7c26953-08dd-3e25-acbe-b4b5e3caee62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.116.0/24 128.242.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b3:fd:08:cc:44:4a:0c:30:a8:7a:4a:e4:04:89:94:67:29: a3:ea:fb:d2:87:0d:f2:5e:c5:78:71:9f:50:cf:28:bb:c9:8d: 4b:15:80:97:26:50:c1:2b:9a:26:82:aa:f3:44:34:87:cf:b2: 3e:95:8f:8f:b6:bb:fd:cb:1c:a9:1f:24:ee:5a:16:83:6e:87: ad:45:fa:18:e4:ec:96:d5:ca:a3:33:72:61:e3:07:75:c0:4b: b0:b3:79:b2:04:a2:c4:33:8f:7f:f7:bc:d3:e6:14:72:17:de: c0:83:f7:b4:8f:93:8c:ad:24:25:33:e3:e9:fa:e4:f9:10:0d: 99:ff:03:7c:3a:81:c3:75:be:c0:e4:dd:4b:a3:8b:af:ee:db: cb:95:23:f6:e6:a2:2a:ee:93:17:47:6b:bc:a7:a4:ab:d2:69: ed:c8:3f:65:de:d4:77:59:ad:e5:c8:4e:cc:30:33:4b:33:1c: 08:83:46:17:8b:23:73:32:6b:ff:14:fd:66:0b:56:8f:22:20: c0:89:07:b5:b0:1b:3e:e4:8a:b7:82:0f:4b:d8:02:a4:ca:44: 94:10:10:d5:5b:8c:f3:7b:98:92:71:ee:f7:66:75:5d:ef:ec: f6:92:07:94:e8:3a:4c:c4:46:19:68:67:29:04:72:3f:95:61: 4a:94:ef:d8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1zCnG4boBu/D4aegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQwOTEzMDAzMFoXDTI2MDcwODEzMDAzMFowLzEtMCsGA1UEAxMk ZDIyZDExNDYtZWY0Ny00M2NhLTg0NjItOGI3Mzk1NTFmOTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuSrz7mHoKs3LcnyZJwS7T9BHjJ9oG+0ZjPh Xxbi1yJfqOl63Pplw6txhXKXKG/biBvJRVnb+959BWTl3E8mVsZkRVbj4ZniGum7 wIIvn27cTfFgKmRtDKs8oCJark8Nl8dbDWCZIg1/g6FHaRbsuI/Y/8WSSlcMOigh lEn+ffYPAM7fG5yrK+n8xuiPpvmRt8G+3Pud0hKj+uqphhn8EUObrIvwqG7xuGdH dGkMUF8CizBD2yDyOFOrqJMmxesCPayi7oxegHW0xsm8pJUiBRcXo9+FZXzeX5aq hzN6qTTKYg38na5h/bFpiS41R0NS8BhyXeJ7+qP2gTnxsrh00wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCjL01hcrO0kJxixMfqpGyECw25lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTdjMjY5NTMtMDhkZC0z ZTI1LWFjYmUtYjRiNWUzY2FlZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgPJ0AwQA gPK1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGGz/QjMREoMMKh6SuQEiZRnKaPq+9KHDfJexXhxn1DPKLvJ jUsVgJcmUMErmiaCqvNENIfPsj6Vj4+2u/3LHKkfJO5aFoNuh61F+hjk7JbVyqMz cmHjB3XAS7CzebIEosQzj3/3vNPmFHIX3sCD97SPk4ytJCUz4+n65PkQDZn/A3w6 gcN1vsDk3Uuji6/u28uVI/bmoirukxdHa7ynpKvSae3IP2Xe1HdZreXITswwM0sz HAiDRheLI3Mya/8U/WYLVo8iIMCJB7WwGz7kireCD0vYAqTKRJQQENVbjPN7mJJx 7vdmdV3v7PaSB5ToOkzERhloZykEcj+VYUqU79g= -----END CERTIFICATE-----Generated at Fri Apr 17 11:44:13 2026 by rpki-client