$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d6662b11-52cc-379c-b1ae-9d1cf18e7f41.roa File: d6662b11-52cc-379c-b1ae-9d1cf18e7f41.roa (raw, json) Hash identifier: yft+aJCkmNNpgDY/O7Uz3DTVZSRx/qAXoXWL9NcgUN8= Subject key identifier: AE:46:EA:FE:29:80:55:16:66:40:22:B4:10:F9:6E:DC:7F:A6:8F:82 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584CEBC2173FF33CCE1541439680 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d6662b11-52cc-379c-b1ae-9d1cf18e7f41.roa Signing time: Fri 20 Feb 2026 02:00:32 +0000 ROA not before: Fri 20 Feb 2026 02:00:32 +0000 ROA not after: Thu 21 May 2026 01:00:32 +0000 asID: 81 IP address blocks: 128.109.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:eb:c2:17:3f:f3:3c:ce:15:41:43:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Feb 20 02:00:32 2026 GMT Not After : May 21 01:00:32 2026 GMT Subject: CN=352e73a8-3c05-4a24-912f-74b7531989c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:ae:45:57:eb:6c:46:1d:cf:17:9b:12:e4: 32:dc:d2:84:a9:65:61:00:4f:5f:67:61:57:8a:67: 87:30:06:cd:da:ed:ce:a8:4a:a8:d8:95:fc:37:1e: 49:18:0a:ee:3f:53:13:11:d9:97:e5:07:fd:49:4c: 64:03:e2:c3:d2:d1:65:ca:0c:c6:95:b7:c7:a2:ca: 97:c5:06:c5:d6:bd:f0:02:3b:09:61:ac:74:2c:21: 9f:9f:18:97:c3:ab:50:04:f3:66:f1:e5:e9:33:b9: 01:e7:22:69:8b:a4:d7:e2:10:32:1d:db:44:1c:43: 40:4a:df:af:5b:22:25:30:c5:81:b4:52:f5:e4:cc: a2:ee:ac:8a:db:45:88:42:6a:44:a7:4a:85:ed:4c: 0a:74:81:b9:39:af:e5:aa:e3:5a:72:e7:38:4f:53: 56:bd:41:cc:9d:23:a2:9f:f8:96:08:8a:fe:09:eb: 5f:7d:b3:b4:2a:8c:60:17:a3:e8:58:24:ea:3b:d0: bc:35:34:ac:06:15:1c:9e:3c:fc:fb:59:c8:24:03: bc:c6:bb:11:e2:93:50:f2:ce:e0:f6:ee:d2:02:30: 17:91:53:6a:6d:dd:2a:0e:95:2c:47:d3:ef:64:d7: 4e:2e:90:df:9c:b0:83:13:85:6f:a8:59:b5:14:ab: b2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:46:EA:FE:29:80:55:16:66:40:22:B4:10:F9:6E:DC:7F:A6:8F:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d6662b11-52cc-379c-b1ae-9d1cf18e7f41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 128.109.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:b9:dd:a5:f5:f1:e2:84:82:ce:95:09:b3:57:60:e5:1f:e4: bf:a0:72:50:19:ca:1a:56:48:72:cc:a2:2d:da:bc:25:27:1a: 7c:91:22:ae:46:d8:8a:8b:e6:da:c2:02:b1:f4:18:e9:80:6c: 24:54:95:25:ce:d1:35:03:ba:46:0c:7a:d4:9d:2d:c5:f0:0f: a9:9c:5c:42:b8:45:f1:ea:64:ba:59:fb:50:86:1d:b2:14:f1: f4:48:c2:07:9d:1d:fc:29:aa:bd:8e:b3:99:ef:8d:79:73:c5: 14:af:8d:e9:b9:20:da:46:a1:2f:27:35:29:c8:e8:21:22:24: fb:ed:ea:d4:9b:a4:3b:88:58:52:e8:df:39:33:a1:ba:f0:65: 66:e0:78:0e:01:79:d9:98:c3:24:9e:c9:b8:5c:6f:ec:f3:6f: af:d0:b7:2b:38:00:21:80:d0:a7:4c:f6:27:a1:d3:2f:d1:b5: d4:27:4f:5c:f9:b1:ba:e7:b0:f5:de:64:75:6b:0b:d7:0e:74: f4:54:ee:4f:a3:dc:e4:63:62:84:56:32:03:f1:17:0a:da:a2: 16:40:e9:6d:29:e5:3d:cc:73:d3:e1:f3:1d:83:46:27:c7:f0: 5b:8d:2d:4d:d5:4f:52:3b:5a:84:1a:ea:df:11:a4:de:a6:da: c5:5f:b4:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwhc/8zzOFUFDloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk MzUyZTczYTgtM2MwNS00YTI0LTkxMmYtNzRiNzUzMTk4OWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXKuRVfrbEYdzxebEuQy3NKEqWVhAE9fZ2FX imeHMAbN2u3OqEqo2JX8Nx5JGAruP1MTEdmX5Qf9SUxkA+LD0tFlygzGlbfHosqX xQbF1r3wAjsJYax0LCGfnxiXw6tQBPNm8eXpM7kB5yJpi6TX4hAyHdtEHENASt+v WyIlMMWBtFL15Myi7qyK20WIQmpEp0qF7UwKdIG5Oa/lquNacuc4T1NWvUHMnSOi n/iWCIr+CetffbO0KoxgF6PoWCTqO9C8NTSsBhUcnjz8+1nIJAO8xrsR4pNQ8s7g 9u7SAjAXkVNqbd0qDpUsR9PvZNdOLpDfnLCDE4VvqFm1FKuyDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5G6v4pgFUWZkAitBD5btx/po+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZDY2NjJiMTEtNTJjYy0z NzljLWIxYWUtOWQxY2YxOGU3ZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG1WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS53aX18eKEgs6VCbNXYOUf5L+gclAZyhpWSHLMoi3avCUnGnyRIq5G 2IqL5trCArH0GOmAbCRUlSXO0TUDukYMetSdLcXwD6mcXEK4RfHqZLpZ+1CGHbIU 8fRIwgedHfwpqr2Os5nvjXlzxRSvjem5INpGoS8nNSnI6CEiJPvt6tSbpDuIWFLo 3zkzobrwZWbgeA4BedmYwySeybhcb+zzb6/Qtys4ACGA0KdM9ieh0y/RtdQnT1z5 sbrnsPXeZHVrC9cOdPRU7k+j3ORjYoRWMgPxFwraohZA6W0p5T3Mc9Ph8x2DRifH 8FuNLU3VT1I7WoQa6t8RpN6m2sVftCY= -----END CERTIFICATE-----Generated at Mon Mar 2 20:14:45 2026 by rpki-client