$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/67cd28d2-df4d-3b0d-9198-70c2a704fd66.roa File: 67cd28d2-df4d-3b0d-9198-70c2a704fd66.roa (raw, json) Hash identifier: lv9qtUFLA2uTCuBOX7Q6Lgxpsflv/MCxtkIn+FdGNGI= Subject key identifier: 0F:54:25:57:22:7F:4C:49:21:90:00:6B:2B:01:D4:05:4E:56:8C:0B Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F4328584D6251842A551FCAF0BF9AA700 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/67cd28d2-df4d-3b0d-9198-70c2a704fd66.roa Signing time: Fri 03 Apr 2026 13:15:02 +0000 ROA not before: Fri 03 Apr 2026 13:15:02 +0000 ROA not after: Thu 02 Jul 2026 13:15:02 +0000 asID: 3128 IP address blocks: 128.104.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:51:84:2a:55:1f:ca:f0:bf:9a:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: Apr 3 13:15:02 2026 GMT Not After : Jul 2 13:15:02 2026 GMT Subject: CN=986a84b2-6635-45ce-906a-3b6ba8bf9418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d9:84:0d:1e:9d:fc:a8:b5:79:e6:05:21:1f: 02:4c:be:ec:aa:8a:60:7d:a6:20:08:8f:36:75:15: 65:b3:9a:35:7a:bb:0c:61:aa:5b:c5:2d:13:58:39: da:e0:f7:f0:01:fc:e5:50:7f:0c:c8:11:ea:c8:df: 04:54:b9:10:06:e6:84:46:90:8c:eb:61:3b:65:fe: dc:ec:70:95:d7:26:1e:71:01:a9:28:33:c9:e2:b1: d7:08:2c:12:1a:3c:49:35:b7:c5:da:3f:d5:75:3b: 32:30:e8:fd:00:70:0d:b1:28:7c:89:17:2e:61:bc: 01:e3:55:9e:61:f3:68:47:ac:38:23:43:88:76:73: 07:d5:b3:ab:cf:2f:b9:a7:35:32:81:76:77:33:5b: 00:22:8d:7f:85:6a:8d:41:44:4f:40:6f:ff:40:57: 2f:ce:08:58:1b:fe:1d:5c:c2:77:7e:5a:43:f7:13: 97:c9:e5:3b:6a:8f:67:40:be:48:49:35:69:1a:e9: ab:06:ee:e5:28:56:5d:be:e8:c8:c1:35:6e:1f:42: 2e:87:02:b4:2e:df:fa:99:14:bb:f2:cf:9b:98:48: 8a:82:d3:b4:94:d9:95:b4:b9:dc:1d:32:96:c8:6c: 20:8a:8c:9d:c0:f7:1e:9f:79:59:a9:6f:b5:83:3b: 75:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:54:25:57:22:7F:4C:49:21:90:00:6B:2B:01:D4:05:4E:56:8C:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/67cd28d2-df4d-3b0d-9198-70c2a704fd66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 128.104.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b8:82:85:b9:0b:26:51:e4:10:de:15:41:21:9c:60:6d:f1: a5:b6:c0:31:8b:46:d2:09:4b:e9:c6:9e:11:c7:8f:d0:2b:0d: 6a:79:eb:b7:94:72:e7:11:be:77:65:ea:34:d5:f3:e9:90:ac: 75:36:e6:19:11:0f:44:d7:e1:7b:a8:3a:d9:4e:53:b6:93:55: 04:cd:34:4b:20:b5:49:2e:57:6d:20:10:90:99:57:33:57:a2: be:2f:18:e2:dd:68:75:c7:8a:40:14:32:18:79:af:96:09:3a: bd:32:f3:47:58:ed:73:50:22:7e:3f:3f:27:82:7e:e6:62:45: 5d:b3:76:7f:20:5b:65:6a:b3:1c:3b:5e:a2:11:7b:ed:10:f7: 8e:d7:db:7a:24:5b:98:fc:3b:1d:63:93:58:4f:03:98:9e:9e: 09:6d:b6:66:3e:33:ab:0b:d8:1d:e5:3a:0c:62:08:22:4c:70: b2:5d:01:fe:6a:d0:47:18:bf:44:72:5a:5a:41:88:65:e9:95: 8f:94:ec:92:92:c2:50:2d:bc:75:06:f7:59:69:b0:17:ec:2e: d8:4b:ed:d9:32:73:bb:b0:13:89:fb:86:f2:a9:93:0e:9e:84: c8:6e:db:d5:9b:d8:92:3f:98:23:b1:32:6b:e3:75:1b:b0:52: f7:7b:89:8d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1iUYQqVR/K8L+apwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI2MDQwMzEzMTUwMloXDTI2MDcwMjEzMTUwMlowLzEtMCsGA1UEAxMk OTg2YTg0YjItNjYzNS00NWNlLTkwNmEtM2I2YmE4YmY5NDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tmEDR6d/Ki1eeYFIR8CTL7sqopgfaYgCI82 dRVls5o1ersMYapbxS0TWDna4PfwAfzlUH8MyBHqyN8EVLkQBuaERpCM62E7Zf7c 7HCV1yYecQGpKDPJ4rHXCCwSGjxJNbfF2j/VdTsyMOj9AHANsSh8iRcuYbwB41We YfNoR6w4I0OIdnMH1bOrzy+5pzUygXZ3M1sAIo1/hWqNQURPQG//QFcvzghYG/4d XMJ3flpD9xOXyeU7ao9nQL5ISTVpGumrBu7lKFZdvujIwTVuH0IuhwK0Lt/6mRS7 8s+bmEiKgtO0lNmVtLncHTKWyGwgioydwPcen3lZqW+1gzt1ewIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFA9UJVcif0xJIZAAaysB1AVOVowLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvNjdjZDI4ZDItZGY0ZC0z YjBkLTkxOTgtNzBjMmE3MDRmZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgGgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAZLiChbkLJlHkEN4VQSGcYG3xpbbAMYtG0glL6caeEceP0CsNannrt5Ry 5xG+d2XqNNXz6ZCsdTbmGREPRNfhe6g62U5TtpNVBM00SyC1SS5XbSAQkJlXM1ei vi8Y4t1odceKQBQyGHmvlgk6vTLzR1jtc1Aifj8/J4J+5mJFXbN2fyBbZWqzHDte ohF77RD3jtfbeiRbmPw7HWOTWE8DmJ6eCW22Zj4zqwvYHeU6DGIIIkxwsl0B/mrQ Rxi/RHJaWkGIZemVj5TskpLCUC28dQb3WWmwF+wu2Evt2TJzu7ATifuG8qmTDp6E yG7b1ZvYkj+YI7Eya+N1G7BS93uJjQ== -----END CERTIFICATE-----Generated at Fri Apr 17 10:10:25 2026 by rpki-client