$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/100036a5-3ecc-3953-ad52-6114836271e0.roa File: 100036a5-3ecc-3953-ad52-6114836271e0.roa (raw, json) Hash identifier: JKSoZIu3IML09TAyqirU+HOwSPHVj3C6JHerRVW/kn8= Subject key identifier: 00:7B:2A:89:58:31:66:59:AA:68:E5:D7:63:B0:5C:8E:02:9A:0E:30 Certificate issuer: /CN=db9c5868-bb9c-4fd1-9aca-05762a850994 Certificate serial: 010D0C9F4328584D07AD0023D82D64F3F8E74E40 Authority key identifier: C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/100036a5-3ecc-3953-ad52-6114836271e0.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 15046 IP address blocks: 128.230.152.0/24 maxlen: 24 128.230.157.128/25 maxlen: 25 128.230.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:00:23:d8:2d:64:f3:f8:e7:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9c5868-bb9c-4fd1-9aca-05762a850994 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=e9e4fa7f-cab3-4ca3-a6c8-26e841aa4d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:69:e0:8d:91:c6:79:e8:7f:f0:81:46:b5:a4: 4c:3c:1e:07:fb:23:8a:9c:3d:1f:d1:ba:1b:b0:b5: d1:12:de:49:17:ac:1e:40:1b:2b:bf:ce:8c:ce:77: f5:76:bb:1c:37:23:19:61:14:75:3d:4c:ab:04:c5: f5:c0:53:75:ac:70:5f:c0:55:14:4a:11:b4:4a:f0: 9d:79:2b:48:bb:66:c0:ba:07:e9:9e:ad:27:57:3b: b5:d3:7b:b4:17:e9:16:15:38:cb:84:94:6b:70:37: 44:f6:6f:67:af:35:d3:ea:3a:2e:88:b1:f7:1a:f4: 4c:8d:69:b2:7a:83:ce:24:90:64:58:67:98:4a:6e: 19:3b:af:9b:ab:d4:2e:a1:93:a2:b9:1c:31:8c:61: 8b:20:18:3e:ee:e0:c9:63:f6:55:a6:8f:5d:f3:09: 88:88:14:20:78:67:14:28:46:92:e1:3e:a4:8b:f0: 26:46:36:23:a8:84:28:12:63:dd:f0:d4:12:23:c0: 9f:b2:c3:f4:b7:25:6d:40:c4:74:0b:0e:10:ad:00: 20:73:7d:c9:6a:87:d7:89:98:fd:15:59:93:b5:ad: 9e:cc:81:68:4d:04:c5:84:3d:ef:80:df:e3:18:78: 55:5b:b8:23:8c:93:27:8e:ec:04:aa:51:11:71:77: f2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7B:2A:89:58:31:66:59:AA:68:E5:D7:63:B0:5C:8E:02:9A:0E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/100036a5-3ecc-3953-ad52-6114836271e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl X509v3 Authority Key Identifier: keyid:C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer sbgp-ipAddrBlock: critical IPv4: 128.230.152.0/24 128.230.157.128/25 128.230.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:cb:1e:b1:df:5e:99:1a:4c:ed:c7:d8:29:70:04:b7:56:97: 64:52:f6:61:02:e0:2f:c9:7c:90:0f:8d:81:0e:44:ee:6f:25: 0b:e1:1e:07:99:d7:b3:b1:1c:1f:8d:f8:17:fd:17:79:a7:e3: ce:a3:c5:c4:10:32:ee:45:a1:a7:09:b7:07:ca:9d:41:f7:8a: bc:6c:b6:8b:2d:9e:81:b6:e7:c8:40:e7:9a:96:5d:d5:3b:34: 87:a3:35:10:4c:22:ca:6d:47:f6:fc:83:0e:d5:10:a7:6c:53: bc:13:2e:d6:00:2e:e0:b4:c0:44:2d:6e:d0:84:b0:b0:0c:1b: 75:71:be:bb:19:8d:4c:0c:fe:b9:b3:3a:68:4a:c5:93:df:46: 7f:7e:7d:bc:a6:bf:9b:a6:3c:58:19:31:05:f6:61:c5:18:1c: 36:9d:1a:f2:c8:07:27:66:06:18:3e:fa:6d:f2:70:36:1b:ea: a1:73:af:64:17:8c:9f:43:ab:9b:f9:c1:2f:27:fc:24:a7:c5: c7:e2:cd:3e:f1:d5:5b:d7:28:a5:b6:01:99:f1:14:ce:6a:0f: 91:42:ca:09:41:78:1e:81:67:23:ae:9a:b8:44:9f:c6:11:c0: 86:2b:c5:bc:43:af:d6:a8:f4:60:e8:2d:22:db:52:4c:2f:4a: d1:18:1f:2e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0HrQAj2C1k8/jnTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI5YzU4NjgtYmI5Yy00ZmQxLTlhY2EtMDU3NjJhODUw OTk0MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk ZTllNGZhN2YtY2FiMy00Y2EzLWE2YzgtMjZlODQxYWE0ZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmngjZHGeeh/8IFGtaRMPB4H+yOKnD0f0bob sLXREt5JF6weQBsrv86Mznf1drscNyMZYRR1PUyrBMX1wFN1rHBfwFUUShG0SvCd eStIu2bAugfpnq0nVzu103u0F+kWFTjLhJRrcDdE9m9nrzXT6jouiLH3GvRMjWmy eoPOJJBkWGeYSm4ZO6+bq9QuoZOiuRwxjGGLIBg+7uDJY/ZVpo9d8wmIiBQgeGcU KEaS4T6ki/AmRjYjqIQoEmPd8NQSI8CfssP0tyVtQMR0Cw4QrQAgc33JaofXiZj9 FVmTta2ezIFoTQTFhD3vgN/jGHhVW7gjjJMnjuwEqlERcXfyQwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAB7KolYMWZZqmjl12OwXI4Cmg4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjlj NTg2OC1iYjljLTRmZDEtOWFjYS0wNTc2MmE4NTA5OTQvMTAwMDM2YTUtM2VjYy0z OTUzLWFkNTItNjExNDgzNjI3MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGI5YzU4NjgtYmI5Yy00ZmQxLTlh Y2EtMDU3NjJhODUwOTk0L2RiOWM1ODY4LWJiOWMtNGZkMS05YWNhLTA1NzYyYTg1 MDk5NC5jcmwwHwYDVR0jBBgwFoAUwuKfSSn3ynvZHRMd3xye8zm7PxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjljNTg2OC1iYjljLTRmZDEtOWFjYS0wNTc2 MmE4NTA5OTQuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQAgOaYAwUH gOadgAMEAIDmvDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBNyx6x316ZGkztx9gpcAS3VpdkUvZhAuAvyXyQ D42BDkTubyUL4R4HmdezsRwfjfgX/Rd5p+POo8XEEDLuRaGnCbcHyp1B94q8bLaL LZ6BtufIQOeall3VOzSHozUQTCLKbUf2/IMO1RCnbFO8Ey7WAC7gtMBELW7QhLCw DBt1cb67GY1MDP65szpoSsWT30Z/fn28pr+bpjxYGTEF9mHFGBw2nRryyAcnZgYY Pvpt8nA2G+qhc69kF4yfQ6ub+cEvJ/wkp8XH4s0+8dVb1yiltgGZ8RTOag+RQsoJ QXgegWcjrpq4RJ/GEcCGK8W8Q6/WqPRg6C0i21JML0rRGB8u -----END CERTIFICATE-----Generated at Mon Mar 2 17:31:55 2026 by rpki-client