$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/b9bb34a8-3fb4-3229-af76-b084da323030.roa File: b9bb34a8-3fb4-3229-af76-b084da323030.roa (raw, json) Hash identifier: 7gGagqMVG+yw0zn/Bt7D4AbOg8Enitk1ZvcMNr0Uh+Y= Subject key identifier: 68:F9:E3:4C:4C:02:0C:10:83:A3:CA:78:B5:56:BC:FC:AA:28:FE:BB Certificate issuer: /CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235 Certificate serial: 010D0C9F4328584CC8DC9CB4EE2A977E5BDC3A00 Authority key identifier: 7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/b9bb34a8-3fb4-3229-af76-b084da323030.roa Signing time: Sat 07 Feb 2026 14:00:41 +0000 ROA not before: Sat 07 Feb 2026 14:00:41 +0000 ROA not after: Fri 08 May 2026 13:00:41 +0000 asID: 20 IP address blocks: 128.151.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c8:dc:9c:b4:ee:2a:97:7e:5b:dc:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e058e6-ff68-4d5d-b7b8-04d1661ec235 Validity Not Before: Feb 7 14:00:41 2026 GMT Not After : May 8 13:00:41 2026 GMT Subject: CN=273d39be-b782-4c58-b252-8ecfe8980098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:16:ea:8b:52:85:8c:1d:c5:b8:f7:48:72:a4: 27:38:62:79:ca:e8:cc:b7:6c:b0:71:d3:0e:9e:62: 42:73:59:a6:65:5c:5e:ed:3e:d6:fc:eb:5e:36:42: 27:e2:e6:f8:46:85:b0:02:d6:5f:6f:7c:b5:09:d2: 97:69:78:10:66:00:63:47:07:89:59:29:91:93:e2: f0:46:90:e6:37:0b:33:b9:de:66:52:0b:dc:50:68: 41:b0:c5:be:e6:3a:b6:ec:8d:9f:bc:b2:cd:cc:49: 00:e9:89:36:37:63:f1:c8:44:ec:2e:ed:23:00:4d: d7:97:58:25:0c:e6:d0:1f:35:df:a5:37:fe:76:dc: 30:fb:a5:d0:0a:a9:29:87:79:f8:ed:ee:89:e2:e5: 0d:e9:25:6c:90:1e:cd:1e:87:b0:3b:ab:c6:5c:c1: 7b:4a:a6:2b:63:cc:b2:f8:47:43:39:b8:27:26:b6: 6f:a9:42:21:fa:a7:ae:86:5d:e2:6c:c7:87:70:9a: 2e:0e:2d:34:8e:47:ac:61:48:bd:36:8f:64:c8:2e: 46:3e:70:b8:56:dd:e8:ce:02:b2:5d:ed:7f:a1:16: 41:3c:66:5c:8c:4c:de:a3:c9:6c:a2:59:00:78:f3: 52:0d:58:54:14:54:6d:29:ea:94:cf:02:b9:21:b8: 74:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F9:E3:4C:4C:02:0C:10:83:A3:CA:78:B5:56:BC:FC:AA:28:FE:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/b9bb34a8-3fb4-3229-af76-b084da323030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235/88e058e6-ff68-4d5d-b7b8-04d1661ec235.crl X509v3 Authority Key Identifier: keyid:7F:1F:72:F4:8D:1D:D7:6F:87:2D:2D:EA:F2:15:9E:CA:D3:6A:2D:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/88e058e6-ff68-4d5d-b7b8-04d1661ec235.cer sbgp-ipAddrBlock: critical IPv4: 128.151.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:52:ae:aa:ff:2b:77:b2:03:b4:da:02:32:e8:b5:a7:a9:45: 6b:d9:07:6d:d9:ea:1b:97:06:d5:ea:1a:1a:94:62:d3:c0:f3: 21:77:37:5e:b8:ac:a4:11:10:c8:c5:ae:1c:81:aa:84:53:73: 78:06:1c:ae:4b:46:67:ee:aa:4a:38:61:a6:f5:8f:ad:a1:9b: 04:8b:be:c2:7b:f5:26:ad:63:ba:79:f1:6e:90:ce:0a:da:1b: ae:73:72:ed:7a:c3:29:3a:b0:d4:24:25:83:46:11:8c:8b:bc: d2:41:31:15:6d:ba:83:d3:6b:83:a4:f6:d8:f2:cf:5b:e5:29: c2:20:33:88:80:0b:8d:4c:bb:f1:2a:da:cd:a4:9f:d1:49:aa: c7:0c:72:05:24:a8:36:ee:3b:ec:3c:65:0d:ec:36:da:c5:2a: d4:97:7c:7e:5a:5b:05:ad:ba:47:79:71:83:cf:d7:72:75:48: 5e:f8:29:67:cc:ef:59:35:a6:b7:03:06:99:42:aa:23:98:ae: 11:bc:03:88:8c:f4:6a:4b:b0:3d:4c:f1:41:48:bb:fb:35:80: 22:3f:66:60:e4:4e:61:62:c4:cd:61:59:25:05:37:63:24:25: e2:cc:26:10:4b:23:96:06:75:da:b0:a4:56:38:86:c7:fe:a6: ac:c6:2e:4b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEzI3Jy07iqXflvcOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhlMDU4ZTYtZmY2OC00ZDVkLWI3YjgtMDRkMTY2MWVj MjM1MB4XDTI2MDIwNzE0MDA0MVoXDTI2MDUwODEzMDA0MVowLzEtMCsGA1UEAxMk MjczZDM5YmUtYjc4Mi00YzU4LWIyNTItOGVjZmU4OTgwMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Bbqi1KFjB3FuPdIcqQnOGJ5yujMt2ywcdMO nmJCc1mmZVxe7T7W/OteNkIn4ub4RoWwAtZfb3y1CdKXaXgQZgBjRweJWSmRk+Lw RpDmNwszud5mUgvcUGhBsMW+5jq27I2fvLLNzEkA6Yk2N2PxyETsLu0jAE3Xl1gl DObQHzXfpTf+dtww+6XQCqkph3n47e6J4uUN6SVskB7NHoewO6vGXMF7SqYrY8yy +EdDObgnJrZvqUIh+qeuhl3ibMeHcJouDi00jkesYUi9No9kyC5GPnC4Vt3ozgKy Xe1/oRZBPGZcjEzeo8lsolkAePNSDVhUFFRtKeqUzwK5Ibh0GwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGj540xMAgwQg6PKeLVWvPyqKP67MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84OGUw NThlNi1mZjY4LTRkNWQtYjdiOC0wNGQxNjYxZWMyMzUvYjliYjM0YTgtM2ZiNC0z MjI5LWFmNzYtYjA4NGRhMzIzMDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODhlMDU4ZTYtZmY2OC00ZDVkLWI3 YjgtMDRkMTY2MWVjMjM1Lzg4ZTA1OGU2LWZmNjgtNGQ1ZC1iN2I4LTA0ZDE2NjFl YzIzNS5jcmwwHwYDVR0jBBgwFoAUfx9y9I0d12+HLS3q8hWeytNqLUIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84OGUwNThlNi1mZjY4LTRkNWQtYjdiOC0wNGQx NjYxZWMyMzUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgJcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgFKuqv8rd7IDtNoCMui1p6lFa9kHbdnqG5cG1eoaGpRi08DzIXc3Xris pBEQyMWuHIGqhFNzeAYcrktGZ+6qSjhhpvWPraGbBIu+wnv1Jq1junnxbpDOCtob rnNy7XrDKTqw1CQlg0YRjIu80kExFW26g9Nrg6T22PLPW+UpwiAziIALjUy78Sra zaSf0UmqxwxyBSSoNu477DxlDew22sUq1Jd8flpbBa26R3lxg8/XcnVIXvgpZ8zv WTWmtwMGmUKqI5iuEbwDiIz0akuwPUzxQUi7+zWAIj9mYOROYWLEzWFZJQU3YyQl 4swmEEsjlgZ12rCkVjiGx/6mrMYuSw== -----END CERTIFICATE-----Generated at Mon Mar 2 00:57:35 2026 by rpki-client