$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/170b8283-1c49-3af2-a654-4d686ca3d3fa.roa File: 170b8283-1c49-3af2-a654-4d686ca3d3fa.roa (raw, json) Hash identifier: KgeWd/IRlIPgvg0GIEVtvTMHhVmJM0pBGOm30MuMPik= Subject key identifier: 83:9B:7D:B5:A6:92:74:1F:DD:D6:91:C3:74:FD:F7:6A:ED:41:44:40 Certificate issuer: /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1 Certificate serial: 010D0C9F4328584D6C0FB7756550205927E5C340 Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/170b8283-1c49-3af2-a654-4d686ca3d3fa.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 198949 IP address blocks: 128.135.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:b7:75:65:50:20:59:27:e5:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=991bad5c-59e5-4eb2-8b50-31658607b571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4a:9c:e5:fb:01:27:ae:8a:8e:37:fb:aa:68: d3:bc:36:f4:aa:8b:c7:85:79:24:ab:99:cf:de:31: 2c:8d:0b:ca:28:f4:fd:09:f0:93:87:69:e5:c2:62: 4d:9c:6c:7c:f4:c7:fe:bf:9e:bf:54:50:62:74:78: f3:b2:79:f9:fa:20:3d:19:9b:2b:2b:9a:95:e4:05: 3c:bf:83:c2:59:f0:c1:61:83:e6:ad:fe:84:2f:7c: 99:69:9d:a1:e4:36:b6:4f:4f:d0:97:82:24:82:8c: 39:65:2e:62:19:13:91:3d:9c:4a:34:92:37:04:20: 09:32:d4:71:a6:64:84:49:03:33:96:06:cc:45:ad: f2:96:58:81:da:8e:bc:cb:8f:48:c1:45:c2:b2:cf: fd:15:96:20:8a:7d:ca:51:0c:16:a0:cb:24:37:fe: 08:19:e4:01:06:df:eb:e0:74:00:b4:be:70:4b:02: 84:87:d0:36:1e:f5:82:32:0b:4c:f3:d0:0c:0f:93: 81:37:67:e0:12:6f:b2:72:f7:16:b2:6d:c1:e9:cd: 9f:a7:81:d9:46:d4:80:04:df:5d:1d:fe:08:ed:95: 69:dc:0d:27:d9:e4:f5:00:8c:56:e5:cd:c6:c9:73: aa:0d:54:44:37:5d:ad:17:fc:6c:dd:f9:07:33:69: 93:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9B:7D:B5:A6:92:74:1F:DD:D6:91:C3:74:FD:F7:6A:ED:41:44:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/170b8283-1c49-3af2-a654-4d686ca3d3fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl X509v3 Authority Key Identifier: keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer sbgp-ipAddrBlock: critical IPv4: 128.135.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:fe:5c:36:02:ac:fb:d9:52:30:25:3d:76:4c:11:4c:fa:06: 0e:56:27:fa:ea:cc:58:a9:55:16:11:6b:8b:2f:07:b4:06:50: e4:32:21:25:a4:66:66:b8:70:84:5f:d3:15:c1:73:0b:8f:d4: 37:1e:13:55:4f:a8:45:30:55:3e:70:13:66:2b:ce:42:bb:7f: 09:06:0c:46:37:33:9b:f7:bc:88:9f:7e:ef:2f:8c:26:ed:fc: f4:00:fb:3f:ed:41:90:82:c2:bd:c9:c2:81:a0:c4:67:3f:ae: 2d:55:0b:4c:2b:24:e9:ca:a9:5d:2e:d6:f4:ed:28:72:da:87: 2e:6b:a4:cf:64:27:fc:4a:af:a6:2c:70:c0:9f:5d:d1:53:ae: e3:6b:1c:a2:34:65:01:7a:19:1b:de:b5:8b:49:87:ad:4c:e7: fa:a7:96:cf:63:83:82:a1:75:b7:dc:75:8e:69:40:af:10:23: 95:d6:d2:5e:de:87:6f:a9:57:14:c3:60:57:40:1d:07:58:55: b8:79:69:4e:6c:8f:d3:b6:1f:7f:c6:8c:53:83:cc:78:48:fa: f4:82:ed:93:5b:4c:11:5e:f2:11:e7:de:7b:cd:dd:81:48:98: 4f:68:8c:e1:3b:42:b5:8f:97:ee:db:5d:d4:2a:90:90:5c:45: cd:bb:ca:5a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1sD7d1ZVAgWSflw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRiMzI2M2EtNGNjYy00YzBmLWEyMGMtMmY1OWJiYzdm YWMxMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk OTkxYmFkNWMtNTllNS00ZWIyLThiNTAtMzE2NTg2MDdiNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEqc5fsBJ66Kjjf7qmjTvDb0qovHhXkkq5nP 3jEsjQvKKPT9CfCTh2nlwmJNnGx89Mf+v56/VFBidHjzsnn5+iA9GZsrK5qV5AU8 v4PCWfDBYYPmrf6EL3yZaZ2h5Da2T0/Ql4Ikgow5ZS5iGRORPZxKNJI3BCAJMtRx pmSESQMzlgbMRa3ylliB2o68y49IwUXCss/9FZYgin3KUQwWoMskN/4IGeQBBt/r 4HQAtL5wSwKEh9A2HvWCMgtM89AMD5OBN2fgEm+ycvcWsm3B6c2fp4HZRtSABN9d Hf4I7ZVp3A0n2eT1AIxW5c3GyXOqDVREN12tF/xs3fkHM2mT9wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIObfbWmknQf3daRw3T992rtQURAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIz MjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5YmJjN2ZhYzEvMTcwYjgyODMtMWM0OS0z YWYyLWE2NTQtNGQ2ODZjYTNkM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDRiMzI2M2EtNGNjYy00YzBmLWEy MGMtMmY1OWJiYzdmYWMxL2Q0YjMyNjNhLTRjY2MtNGMwZi1hMjBjLTJmNTliYmM3 ZmFjMS5jcmwwHwYDVR0jBBgwFoAUWhVLReOxAsXOslYtuQ/OO+XFdRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIzMjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5 YmJjN2ZhYzEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgIcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMP5cNgKs+9lSMCU9dkwRTPoGDlYn+urMWKlVFhFriy8HtAZQ5DIhJaRm ZrhwhF/TFcFzC4/UNx4TVU+oRTBVPnATZivOQrt/CQYMRjczm/e8iJ9+7y+MJu38 9AD7P+1BkILCvcnCgaDEZz+uLVULTCsk6cqpXS7W9O0octqHLmukz2Qn/Eqvpixw wJ9d0VOu42scojRlAXoZG961i0mHrUzn+qeWz2ODgqF1t9x1jmlArxAjldbSXt6H b6lXFMNgV0AdB1hVuHlpTmyP07Yff8aMU4PMeEj69ILtk1tMEV7yEefee83dgUiY T2iM4TtCtY+X7ttd1CqQkFxFzbvKWg== -----END CERTIFICATE-----Generated at Fri Apr 17 17:46:40 2026 by rpki-client