$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa File: 900f5454-5a4b-3c72-a9e6-09f19630db71.roa (raw, json) Hash identifier: mZakyPiL/h/x/VZwxUv3ABr8mZjdMabnzgg/hrbySQg= Subject key identifier: 40:A6:A7:A5:C4:D4:C1:36:5A:58:B3:CA:53:A0:45:3A:F9:BC:D0:F7 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584CCBA74DD2855611B6A1DF9280 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 88 IP address blocks: 128.112.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:4d:d2:85:56:11:b6:a1:df:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=436a6238-d173-47c3-a4b3-00e56b2dfad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:9d:be:df:9b:98:74:54:22:fa:6a:8d:f5: d9:58:06:28:15:88:83:4e:0e:70:7c:8b:f5:63:6d: 3d:87:88:e7:5f:26:b5:12:6a:80:3e:dc:44:98:27: 0c:10:f5:36:88:31:34:ed:dd:97:2a:bf:73:f8:f5: 87:43:85:37:69:71:b8:3d:05:09:8a:02:a5:9e:ad: 10:e7:65:04:33:3d:fd:c4:b0:8e:1a:85:fb:0e:c2: a3:58:c3:08:8a:9e:71:46:8f:7d:19:3b:a6:65:0b: cd:a0:ff:c1:c7:dd:3f:6e:44:bc:75:97:64:13:44: d2:36:f0:06:42:c4:3e:09:51:4d:f4:b8:c8:4c:ab: 27:29:51:7c:29:14:9b:04:53:f9:88:d4:e0:da:34: 79:de:fb:ee:73:50:c4:a6:74:2a:58:ff:d5:de:65: f3:43:83:89:55:a9:92:95:57:fb:94:c1:65:67:e1: a7:c1:02:ec:32:8a:f2:c6:c6:87:67:4b:cd:9c:06: d4:b5:70:de:c5:cc:ed:28:a3:56:c4:6e:5f:15:86: 72:43:ac:5a:16:bd:53:b5:97:cb:1c:13:fa:84:ee: 89:21:86:16:68:7a:42:ec:16:3f:f0:f5:1e:7d:91: 7f:bd:8b:76:99:b6:0a:0a:34:a5:62:19:9c:13:c4: 78:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A6:A7:A5:C4:D4:C1:36:5A:58:B3:CA:53:A0:45:3A:F9:BC:D0:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 128.112.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:c1:55:41:48:45:84:7c:4c:5b:0f:f5:fd:cd:80:75:31:27: ee:5f:fc:9e:6e:40:53:2e:04:6b:a3:24:02:5e:a0:48:3f:f3: 17:09:97:b1:e1:c0:79:db:1b:bc:ba:fc:3f:91:77:c5:2e:60: 79:3f:f8:56:93:b5:bd:a4:1f:e6:26:0e:aa:d9:83:ac:44:9a: 71:a6:28:a4:b8:d1:7d:5e:6f:e1:60:dd:3c:b4:f9:d0:84:a6: de:d5:20:49:b9:6a:c3:2c:7a:a6:97:e9:69:55:b6:8a:c2:3a: ac:8f:da:81:95:19:75:f0:78:e2:46:4a:c6:3b:a1:99:47:c2: 89:07:3b:ca:c6:69:13:2c:7e:1f:b3:ad:c9:98:6e:69:3c:53: 71:7a:e0:de:4e:0b:85:88:b9:c9:fb:9b:ef:2d:da:a9:48:a7: 44:5d:3c:77:84:32:a7:82:15:c6:e1:f0:6e:c3:6a:8c:e8:db: ef:4c:d8:64:4c:21:70:91:c9:82:70:b9:9a:6f:00:09:e8:35: f2:af:0e:59:8f:64:25:17:6d:5a:26:48:e1:d9:90:54:40:83: 7f:c1:e9:82:7b:a1:d4:f3:87:9c:89:90:35:4e:d8:cb:a7:81: fd:f9:f7:83:9c:76:7c:6f:5d:48:e4:99:76:1c:f0:db:cd:42: c8:b6:ef:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp03ShVYRtqHfkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk NDM2YTYyMzgtZDE3My00N2MzLWE0YjMtMDBlNTZiMmRmYWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRGdvt+bmHRUIvpqjfXZWAYoFYiDTg5wfIv1 Y209h4jnXya1EmqAPtxEmCcMEPU2iDE07d2XKr9z+PWHQ4U3aXG4PQUJigKlnq0Q 52UEMz39xLCOGoX7DsKjWMMIip5xRo99GTumZQvNoP/Bx90/bkS8dZdkE0TSNvAG QsQ+CVFN9LjITKsnKVF8KRSbBFP5iNTg2jR53vvuc1DEpnQqWP/V3mXzQ4OJVamS lVf7lMFlZ+GnwQLsMoryxsaHZ0vNnAbUtXDexcztKKNWxG5fFYZyQ6xaFr1TtZfL HBP6hO6JIYYWaHpC7BY/8PUefZF/vYt2mbYKCjSlYhmcE8R4cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECmp6XE1ME2WlizylOgRTr5vND3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvOTAwZjU0NTQtNWE0Yi0z YzcyLWE5ZTYtMDlmMTk2MzBkYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgHACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXBVUFIRYR8TFsP9f3NgHUxJ+5f/J5uQFMuBGujJAJeoEg/8xcJl7Hh wHnbG7y6/D+Rd8UuYHk/+FaTtb2kH+YmDqrZg6xEmnGmKKS40X1eb+Fg3Ty0+dCE pt7VIEm5asMseqaX6WlVtorCOqyP2oGVGXXweOJGSsY7oZlHwokHO8rGaRMsfh+z rcmYbmk8U3F64N5OC4WIucn7m+8t2qlIp0RdPHeEMqeCFcbh8G7Daozo2+9M2GRM IXCRyYJwuZpvAAnoNfKvDlmPZCUXbVomSOHZkFRAg3/B6YJ7odTzh5yJkDVO2Mun gf3594OcdnxvXUjkmXYc8NvNQsi275M= -----END CERTIFICATE-----Generated at Mon Mar 2 05:56:55 2026 by rpki-client