$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa File: 129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa (raw, json) Hash identifier: kQroQ1zLz7a/UwUvgkBA57PD+rN8kXtKo+EXKI88yW4= Subject key identifier: 7A:76:CF:90:68:E7:C3:10:A8:DA:A1:F9:AD:6C:19:2F:14:53:BC:AA Certificate issuer: /CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Certificate serial: 010D0C9F4328584CA5F6FA077048A3768F9CCAC0 Authority key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 14618 IP address blocks: 144.86.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f6:fa:07:70:48:a3:76:8f:9c:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=6ac54251-f59b-4245-b578-3d19faed8465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cc:70:f5:03:95:c5:ff:26:2f:a6:07:9f:61: c3:49:2b:1b:75:fd:f4:0e:8a:31:7a:5f:0b:2b:a0: b9:16:d7:8d:12:1c:02:ae:7e:a2:91:73:c1:ae:92: 67:9c:fa:ed:fe:68:3c:c0:99:1e:d8:13:ba:d1:91: eb:2c:54:8c:e7:e0:47:ea:7d:07:32:2f:8c:0f:16: 1a:83:95:89:91:a0:e4:10:08:50:1c:7b:a6:6f:e9: a2:52:ba:06:df:52:0c:e6:6e:60:cb:40:64:ff:33: 16:dc:45:5a:bc:5d:e5:bd:fc:4b:89:67:b7:95:58: ce:be:39:08:2a:69:a4:0a:ad:c3:0a:2a:79:95:98: 41:d1:10:dd:21:7c:68:31:09:f7:a6:8f:76:59:5e: 7f:55:0b:b3:00:83:0c:07:e5:65:e7:02:c2:00:11: 62:4b:bb:d2:32:28:de:15:82:b0:cf:a8:d4:20:9a: 73:6c:11:f6:81:c7:13:9c:95:c1:39:e5:3c:6c:55: 8b:e7:f7:b6:02:55:59:c6:56:3e:8a:37:a4:a3:26: f9:0d:23:7c:14:a8:9d:25:9c:aa:2e:b0:86:12:e3: 7c:60:7a:7b:82:73:a6:90:ab:ec:6d:3d:dd:c3:fd: e6:97:36:cd:5a:5c:20:ed:4f:59:36:d0:b3:fb:34: 06:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:76:CF:90:68:E7:C3:10:A8:DA:A1:F9:AD:6C:19:2F:14:53:BC:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/129ee52b-609d-36d9-a5ac-1108e0b0d2bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl X509v3 Authority Key Identifier: keyid:F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer sbgp-ipAddrBlock: critical IPv4: 144.86.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:c2:81:72:cb:c5:c4:97:5a:1a:d0:a3:a7:c9:69:f2:85:17: 33:fe:4b:25:4d:a3:04:6b:48:81:9b:fe:38:41:37:4e:89:6a: 7c:44:27:76:24:b3:5d:22:f6:93:ca:92:90:7e:da:22:80:a7: fe:e3:ad:0a:39:37:af:79:75:11:80:3d:03:43:17:99:c5:0d: a2:98:41:67:5c:fc:44:7a:15:0c:2b:f1:7a:27:30:6a:68:68: a7:57:83:0c:90:2b:fc:e6:ab:9e:5f:05:6b:e1:e9:c4:35:37: 50:6b:38:cf:d3:e0:6b:a0:91:17:6b:8c:af:b8:2d:fe:4d:ee: 12:37:ca:ee:07:8b:9e:fd:01:38:45:c3:72:c1:47:e1:c6:3f: 1b:46:bb:7b:c1:3c:03:41:97:15:f2:f9:b2:4a:10:dd:a7:3a: 96:5d:30:ed:3b:04:d8:39:3d:03:c4:dc:11:a2:8e:c6:5f:9b: 92:fa:24:94:6b:53:97:cc:93:43:4c:53:66:7b:6f:85:1f:49: ca:a3:cb:43:e5:15:19:17:e0:fc:9d:6b:d0:d1:ad:29:2a:e7: 73:e0:11:2d:82:a8:1a:e6:ea:a3:42:3c:04:97:54:4e:9b:19: 4a:e1:1c:ba:52:26:7f:ab:92:1b:c2:ae:ea:71:24:fd:28:90: 84:ce:88:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9voHcEijdo+cysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2MzhhNjYtMTU3ZC00YjM3LWI0ODctYzJiNWY0ZGJl OTQwMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk NmFjNTQyNTEtZjU5Yi00MjQ1LWI1NzgtM2QxOWZhZWQ4NDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsxw9QOVxf8mL6YHn2HDSSsbdf30Dooxel8L K6C5FteNEhwCrn6ikXPBrpJnnPrt/mg8wJke2BO60ZHrLFSM5+BH6n0HMi+MDxYa g5WJkaDkEAhQHHumb+miUroG31IM5m5gy0Bk/zMW3EVavF3lvfxLiWe3lVjOvjkI KmmkCq3DCip5lZhB0RDdIXxoMQn3po92WV5/VQuzAIMMB+Vl5wLCABFiS7vSMije FYKwz6jUIJpzbBH2gccTnJXBOeU8bFWL5/e2AlVZxlY+ijekoyb5DSN8FKidJZyq LrCGEuN8YHp7gnOmkKvsbT3dw/3mlzbNWlwg7U9ZNtCz+zQGXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHp2z5Bo58MQqNqh+a1sGS8UU7yqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYz OGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1ZjRkYmU5NDAvMTI5ZWU1MmItNjA5ZC0z NmQ5LWE1YWMtMTEwOGUwYjBkMmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGQ2MzhhNjYtMTU3ZC00YjM3LWI0 ODctYzJiNWY0ZGJlOTQwL2RkNjM4YTY2LTE1N2QtNGIzNy1iNDg3LWMyYjVmNGRi ZTk0MC5jcmwwHwYDVR0jBBgwFoAU8SMlgUkCtMcqnJBtJsWQEnyWtlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYzOGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1 ZjRkYmU5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFbKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfCgXLLxcSXWhrQo6fJafKFFzP+SyVNowRrSIGb/jhBN06JanxEJ3Yk s10i9pPKkpB+2iKAp/7jrQo5N695dRGAPQNDF5nFDaKYQWdc/ER6FQwr8XonMGpo aKdXgwyQK/zmq55fBWvh6cQ1N1BrOM/T4GugkRdrjK+4Lf5N7hI3yu4Hi579AThF w3LBR+HGPxtGu3vBPANBlxXy+bJKEN2nOpZdMO07BNg5PQPE3BGijsZfm5L6JJRr U5fMk0NMU2Z7b4UfScqjy0PlFRkX4Pyda9DRrSkq53PgES2CqBrm6qNCPASXVE6b GUrhHLpSJn+rkhvCrupxJP0okITOiK4= -----END CERTIFICATE-----Generated at Mon Mar 2 04:44:52 2026 by rpki-client