$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/f6772905-9e78-3f55-87a4-e8da870aa987.roa File: f6772905-9e78-3f55-87a4-e8da870aa987.roa (raw, json) Hash identifier: QCRtkftoXsg28m5fJTb750zFMfNJjISX0oRPj6tzpxY= Subject key identifier: BC:DE:84:FF:0B:9C:45:75:7A:AD:D7:87:92:E2:42:EA:6A:D5:F2:C7 Certificate issuer: /CN=acfb2995-9ee5-423c-a521-8d6490303e2d Certificate serial: 010D0C9F4328584C926C1F6B9EA7B68E6BD1EE80 Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/f6772905-9e78-3f55-87a4-e8da870aa987.roa Signing time: Mon 19 Jan 2026 02:00:29 +0000 ROA not before: Mon 19 Jan 2026 02:00:29 +0000 ROA not after: Sun 19 Apr 2026 01:00:29 +0000 asID: 812 IP address blocks: 209.148.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:92:6c:1f:6b:9e:a7:b6:8e:6b:d1:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d Validity Not Before: Jan 19 02:00:29 2026 GMT Not After : Apr 19 01:00:29 2026 GMT Subject: CN=2aefe78b-1b2b-4d2a-aa26-25ee9d90507e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f3:ef:17:7a:27:e3:cf:48:e5:95:35:3d:3a: c0:35:dd:bd:08:07:03:cb:6c:9f:9a:52:f5:c4:5c: f6:0c:0a:8d:08:ef:39:a2:e0:e7:a5:f4:66:f6:2b: e9:91:40:f4:75:2c:8d:7f:dc:12:1a:1b:ce:6c:dd: 34:53:68:cc:16:ba:48:e0:44:d6:a6:51:c9:7b:34: a0:c0:f3:7a:45:4b:75:a5:75:00:36:3f:be:37:cf: 71:0d:8e:e0:5c:ce:c1:8e:4e:bd:f7:e3:15:6b:91: a8:a0:45:71:60:b1:a9:65:f3:ef:3b:89:6c:16:e2: c3:12:d8:7e:d7:8a:d1:a8:b3:35:ab:17:01:87:ec: ca:8c:0c:13:18:5c:54:7e:89:cd:0b:ec:be:fa:a1: 4c:63:a8:0e:04:36:f2:c5:2d:f0:75:d4:c1:bb:20: 04:a1:63:ef:12:a5:77:d4:76:58:ee:39:50:35:5a: 01:37:dd:1e:9c:9b:7b:cb:44:16:33:e2:e7:c3:da: 8d:20:bf:70:84:ba:6b:91:a0:35:9c:9e:04:c3:06: b7:ee:87:ae:53:a8:5f:23:7b:1e:29:22:18:95:d3: cf:c6:12:cd:fa:eb:54:4a:41:fc:78:9d:a3:88:f5: 21:ca:62:0a:3a:4a:a9:50:49:22:21:b4:ac:9c:fd: 5f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DE:84:FF:0B:9C:45:75:7A:AD:D7:87:92:E2:42:EA:6A:D5:F2:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/f6772905-9e78-3f55-87a4-e8da870aa987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl X509v3 Authority Key Identifier: keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer sbgp-ipAddrBlock: critical IPv4: 209.148.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ed:28:cc:86:d6:63:47:b7:4d:99:7e:3d:bc:da:99:70:5b: df:01:8e:1c:1b:7c:2f:c9:be:57:3c:fd:d8:e2:b4:97:6b:df: 19:4e:03:2c:4f:d9:f3:66:83:8a:8e:cc:6b:9d:6d:f5:54:47: 3b:ff:1d:7b:76:8b:d3:b4:5a:41:9e:8b:9e:81:54:af:e0:41: a5:c6:72:9f:0c:4a:d9:36:16:dc:1a:ff:4d:4e:22:42:9a:00: f9:5e:65:25:3d:d8:8d:09:d7:05:95:a0:ba:a2:20:a3:23:69: ef:b0:6c:8b:76:7e:69:f7:a6:2c:64:83:87:12:9c:b6:e6:ad: 7d:83:0e:af:b3:f1:0c:70:16:78:73:ed:56:d9:dd:fe:a3:2f: b5:e2:db:bd:86:56:8b:bb:e8:dc:d7:f3:73:a7:47:2b:09:e4: de:60:65:57:df:16:8b:c8:73:c0:0e:04:6b:40:09:73:2a:d0: 69:ae:38:6c:9e:a2:d4:bc:3d:c1:7c:b5:5d:fb:9c:8e:6e:a7: ca:fb:c3:ff:aa:00:8d:e3:ff:dc:2b:5e:16:67:a9:6b:a8:f0: 21:3e:b5:f8:13:1f:f1:24:f4:49:bc:89:e0:21:c6:29:44:4b: f8:4f:0d:7b:1a:53:54:c3:1c:49:aa:92:3e:8b:42:ef:cb:11: d0:43:09:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEySbB9rnqe2jmvR7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWNmYjI5OTUtOWVlNS00MjNjLWE1MjEtOGQ2NDkwMzAz ZTJkMB4XDTI2MDExOTAyMDAyOVoXDTI2MDQxOTAxMDAyOVowLzEtMCsGA1UEAxMk MmFlZmU3OGItMWIyYi00ZDJhLWFhMjYtMjVlZTlkOTA1MDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvPvF3on489I5ZU1PTrANd29CAcDy2yfmlL1 xFz2DAqNCO85ouDnpfRm9ivpkUD0dSyNf9wSGhvObN00U2jMFrpI4ETWplHJezSg wPN6RUt1pXUANj++N89xDY7gXM7Bjk699+MVa5GooEVxYLGpZfPvO4lsFuLDEth+ 14rRqLM1qxcBh+zKjAwTGFxUfonNC+y++qFMY6gOBDbyxS3wddTBuyAEoWPvEqV3 1HZY7jlQNVoBN90enJt7y0QWM+Lnw9qNIL9whLprkaA1nJ4Ewwa37oeuU6hfI3se KSIYldPPxhLN+utUSkH8eJ2jiPUhymIKOkqpUEkiIbSsnP1f1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzehP8LnEV1eq3Xh5LiQupq1fLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hY2Zi Mjk5NS05ZWU1LTQyM2MtYTUyMS04ZDY0OTAzMDNlMmQvZjY3NzI5MDUtOWU3OC0z ZjU1LTg3YTQtZThkYTg3MGFhOTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWNmYjI5OTUtOWVlNS00MjNjLWE1 MjEtOGQ2NDkwMzAzZTJkL2FjZmIyOTk1LTllZTUtNDIzYy1hNTIxLThkNjQ5MDMw M2UyZC5jcmwwHwYDVR0jBBgwFoAUehSoKkY4vznA/kUKxvqKtp/wp5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hY2ZiMjk5NS05ZWU1LTQyM2MtYTUyMS04ZDY0 OTAzMDNlMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0ZSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvtKMyG1mNHt02Zfj282plwW98BjhwbfC/Jvlc8/djitJdr3xlOAyxP 2fNmg4qOzGudbfVURzv/HXt2i9O0WkGei56BVK/gQaXGcp8MStk2Ftwa/01OIkKa APleZSU92I0J1wWVoLqiIKMjae+wbIt2fmn3pixkg4cSnLbmrX2DDq+z8QxwFnhz 7VbZ3f6jL7Xi272GVou76NzX83OnRysJ5N5gZVffFovIc8AOBGtACXMq0GmuOGye otS8PcF8tV37nI5up8r7w/+qAI3j/9wrXhZnqWuo8CE+tfgTH/Ek9Em8ieAhxilE S/hPDXsaU1TDHEmqkj6LQu/LEdBDCdo= -----END CERTIFICATE-----Generated at Mon Mar 2 03:50:53 2026 by rpki-client