$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/91f24323-5721-372a-9ac8-d0891fca6151.roa File: 91f24323-5721-372a-9ac8-d0891fca6151.roa (raw, json) Hash identifier: 7jYC2P3KTUiAKhZwbZXD12/MtxiTQHZQJqL/VniFO/A= Subject key identifier: 53:A3:ED:8C:4B:D0:CC:A8:80:E4:AD:A8:9D:8F:6F:A8:4A:C1:DF:8D Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584CCBA7520FCBF7694C6CE61780 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/91f24323-5721-372a-9ac8-d0891fca6151.roa Signing time: Sun 08 Feb 2026 14:00:41 +0000 ROA not before: Sun 08 Feb 2026 14:00:41 +0000 ROA not after: Sat 09 May 2026 13:00:41 +0000 asID: 88 IP address blocks: 128.112.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cb:a7:52:0f:cb:f7:69:4c:6c:e6:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Feb 8 14:00:41 2026 GMT Not After : May 9 13:00:41 2026 GMT Subject: CN=337e7f59-da74-48c5-9b1e-30bd7a7b1e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c3:29:47:4b:e8:a0:57:71:96:13:27:29:11: a0:73:6d:ae:df:f1:7e:67:85:dd:ca:72:0f:37:5d: b4:86:fa:13:ee:0c:aa:5c:9e:83:fd:c6:c1:cd:5e: d4:00:4d:65:8b:61:8e:be:0e:f5:46:62:12:3b:86: 49:a5:92:76:a9:28:77:32:48:10:ef:75:65:9d:00: 97:65:79:c3:fb:f0:86:a9:7b:47:a8:60:4d:e1:a5: 67:83:00:6b:3c:06:37:37:d0:e4:3d:58:43:89:83: 80:c5:82:4c:34:a8:d0:9d:fe:58:2b:e6:0b:2e:21: 99:cc:0d:74:f3:a5:7c:fd:05:48:bf:0a:11:ad:83: 16:af:ab:d1:8c:7d:f9:60:fb:bd:0b:1e:83:24:0b: 4c:74:09:50:1d:4a:c1:d2:91:da:fb:41:e5:05:4c: c9:33:df:79:1e:a4:c5:82:3e:1f:0b:e4:de:71:00: 7f:ab:23:a6:2a:94:71:86:28:e7:d9:df:4a:2f:8d: e2:9d:df:6c:59:4c:89:fb:75:36:20:b6:7d:49:32: 96:c4:42:bf:55:6e:63:b1:66:ad:af:4f:a4:6c:8f: 57:4a:ee:03:e7:83:68:89:2c:1e:23:1e:e6:0e:4a: ca:22:57:b0:54:98:45:40:dc:5e:90:4a:78:f0:ce: 57:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A3:ED:8C:4B:D0:CC:A8:80:E4:AD:A8:9D:8F:6F:A8:4A:C1:DF:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/91f24323-5721-372a-9ac8-d0891fca6151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 128.112.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:83:1c:5c:25:00:ba:18:42:18:97:72:8c:37:3d:2e:3a:0b: 13:4c:91:6f:12:5d:cd:0a:66:e0:c2:90:ea:82:a1:bc:d8:c7: b9:48:69:6f:4f:44:2c:6b:d8:74:bd:3c:72:c7:12:f8:d6:e7: 26:28:34:63:74:5f:e0:47:1d:c4:52:12:af:12:80:3e:b1:47: 8a:ed:b8:18:6f:dc:ee:1b:08:bb:e7:f0:a2:df:ec:ba:99:9c: 6a:25:a0:a8:68:a5:28:48:0a:a0:19:c7:46:9e:b3:62:b2:ff: 3f:f2:03:e6:1d:b0:84:11:a8:56:30:a1:5d:ee:24:a8:14:0f: fc:2f:4c:6f:d0:58:0b:e4:65:fb:ef:bc:66:c1:72:75:40:ac: 79:cd:79:5d:d4:db:7e:9f:94:3b:5b:df:54:5a:c9:47:ec:cd: fa:33:63:21:aa:20:e7:f7:e8:28:d6:ad:32:6d:7e:05:43:29: 48:68:d9:14:dc:19:b0:62:82:a2:e6:f7:a2:55:31:e4:39:a5: 04:a0:ee:c7:ef:28:ce:81:80:98:c8:37:c9:60:ba:14:0d:7c: c2:c1:c5:78:9c:5c:36:e7:e2:bd:7d:7c:23:af:06:af:1f:e1: 5b:be:7d:74:86:17:8a:99:06:27:2b:e6:77:7b:ad:65:2e:10: 54:bc:f1:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp1IPy/dpTGzmF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk MzM3ZTdmNTktZGE3NC00OGM1LTliMWUtMzBiZDdhN2IxZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsMpR0vooFdxlhMnKRGgc22u3/F+Z4XdynIP N120hvoT7gyqXJ6D/cbBzV7UAE1li2GOvg71RmISO4ZJpZJ2qSh3MkgQ73VlnQCX ZXnD+/CGqXtHqGBN4aVngwBrPAY3N9DkPVhDiYOAxYJMNKjQnf5YK+YLLiGZzA10 86V8/QVIvwoRrYMWr6vRjH35YPu9Cx6DJAtMdAlQHUrB0pHa+0HlBUzJM995HqTF gj4fC+TecQB/qyOmKpRxhijn2d9KL43ind9sWUyJ+3U2ILZ9STKWxEK/VW5jsWat r0+kbI9XSu4D54NoiSweIx7mDkrKIlewVJhFQNxekEp48M5XwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOj7YxL0MyogOStqJ2Pb6hKwd+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvOTFmMjQzMjMtNTcyMS0z NzJhLTlhYzgtZDA4OTFmY2E2MTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHDkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCDHFwlALoYQhiXcow3PS46CxNMkW8SXc0KZuDCkOqCobzYx7lIaW9P RCxr2HS9PHLHEvjW5yYoNGN0X+BHHcRSEq8SgD6xR4rtuBhv3O4bCLvn8KLf7LqZ nGoloKhopShICqAZx0aes2Ky/z/yA+YdsIQRqFYwoV3uJKgUD/wvTG/QWAvkZfvv vGbBcnVArHnNeV3U236flDtb31RayUfszfozYyGqIOf36CjWrTJtfgVDKUho2RTc GbBigqLm96JVMeQ5pQSg7sfvKM6BgJjIN8lguhQNfMLBxXicXDbn4r19fCOvBq8f 4Vu+fXSGF4qZBicr5nd7rWUuEFS88aQ= -----END CERTIFICATE-----Generated at Mon Mar 2 07:43:17 2026 by rpki-client