$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa File: dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa (raw, json) Hash identifier: jQrzPPej4xEBAwYkxJSgQOyj8F4oDTMCI8YsZDHo7P4= Subject key identifier: 6B:F4:D1:32:F1:56:C5:DA:73:A6:6F:27:6C:E8:63:06:79:0E:60:E3 Certificate issuer: /CN=b5f49734-696b-4966-8db9-1388a58a153f Certificate serial: 010D0C9F4328584CA32C7630856B59F477300600 Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa Signing time: Sun 25 Jan 2026 02:00:31 +0000 ROA not before: Sun 25 Jan 2026 02:00:31 +0000 ROA not after: Sat 25 Apr 2026 01:00:31 +0000 asID: 17055 IP address blocks: 204.99.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a3:2c:76:30:85:6b:59:f4:77:30:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f Validity Not Before: Jan 25 02:00:31 2026 GMT Not After : Apr 25 01:00:31 2026 GMT Subject: CN=686a5d90-7e7d-4715-8bbd-7b305964002d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:67:fd:6b:9c:f1:93:36:8c:99:a0:88:ec:64: 55:9c:99:1c:db:54:db:f9:06:5f:3d:a2:90:ef:07: be:0a:5f:70:58:12:36:ab:56:be:69:70:72:ff:b3: 95:0e:5b:14:51:c3:11:75:a6:a4:05:fd:65:47:8a: 7d:77:9e:51:20:ea:35:b4:c7:67:5b:13:97:42:59: 21:cf:63:35:9e:ee:cf:68:34:b9:1d:b6:f6:cd:82: a5:09:87:8b:ac:7e:3d:ca:a4:01:30:e4:44:64:0e: b5:b9:59:ce:c2:db:7a:88:f5:cb:1e:86:a4:30:52: 8d:e9:48:06:e2:80:d2:6a:af:c0:42:0a:cd:d1:a2: 60:16:6b:85:7a:7a:2c:ef:b7:39:11:f2:eb:a4:f1: db:39:ee:08:1b:04:e6:16:43:66:20:a1:a8:64:da: 7b:6d:1c:1b:15:25:e8:ba:55:2a:73:59:24:41:4d: a9:66:a5:70:88:fc:da:15:98:21:b3:92:87:33:15: ef:42:1b:c1:ce:be:40:d9:34:3f:2c:53:0c:48:0f: 48:48:58:8a:08:51:eb:57:ce:01:08:0c:1e:2c:81: 1a:57:cb:f2:85:8e:cb:7e:22:db:ca:de:19:70:d1: f1:d0:f5:9b:71:66:9d:13:83:db:ee:26:42:2a:73: 81:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F4:D1:32:F1:56:C5:DA:73:A6:6F:27:6C:E8:63:06:79:0E:60:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl X509v3 Authority Key Identifier: keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer sbgp-ipAddrBlock: critical IPv4: 204.99.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:6e:d1:ee:99:54:7a:e0:85:b5:61:d7:31:a7:5a:8b:81:9a: 45:39:9e:c7:d0:0b:6b:41:fc:03:a4:d2:35:0d:64:4c:1b:7d: 3d:b6:97:7c:fa:86:9f:c8:c0:ba:a9:f1:69:45:ef:07:dc:7f: 4e:9e:b3:41:a8:86:e7:0d:91:ed:8e:ea:11:34:17:c4:4d:ff: ed:28:bb:4f:e7:ad:0f:6f:30:71:2f:27:1f:bc:14:79:8b:8b: b3:b9:7b:59:ce:23:97:e5:03:96:63:1a:9b:e5:8a:7c:72:cc: 10:e1:fb:10:c4:96:2b:a3:37:2d:8c:0d:62:5b:8d:8c:d9:ae: 20:0a:a1:d7:01:fe:13:72:c3:c2:d9:30:ee:8b:a8:7e:e9:54: ea:e5:8f:3a:e2:6c:59:4f:74:c6:92:47:37:f4:61:0d:8e:58: 59:92:4b:40:86:30:15:a0:6d:a2:3a:ae:5f:56:53:49:a0:45: 94:22:b6:fb:d6:df:5c:a6:ef:61:d1:21:95:30:d6:2e:4c:97: a5:5c:9c:f3:96:04:bd:c8:9e:25:fc:44:9d:b8:a5:e1:6e:3e: 5e:9f:85:c8:df:a6:8d:d8:c5:e5:66:75:16:8b:04:2b:b8:0e: 82:52:20:92:2c:34:55:cd:6b:51:0a:86:a5:40:22:dc:4f:dd: ac:28:e1:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyjLHYwhWtZ9HcwBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVmNDk3MzQtNjk2Yi00OTY2LThkYjktMTM4OGE1OGEx NTNmMB4XDTI2MDEyNTAyMDAzMVoXDTI2MDQyNTAxMDAzMVowLzEtMCsGA1UEAxMk Njg2YTVkOTAtN2U3ZC00NzE1LThiYmQtN2IzMDU5NjQwMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Gf9a5zxkzaMmaCI7GRVnJkc21Tb+QZfPaKQ 7we+Cl9wWBI2q1a+aXBy/7OVDlsUUcMRdaakBf1lR4p9d55RIOo1tMdnWxOXQlkh z2M1nu7PaDS5Hbb2zYKlCYeLrH49yqQBMOREZA61uVnOwtt6iPXLHoakMFKN6UgG 4oDSaq/AQgrN0aJgFmuFenos77c5EfLrpPHbOe4IGwTmFkNmIKGoZNp7bRwbFSXo ulUqc1kkQU2pZqVwiPzaFZghs5KHMxXvQhvBzr5A2TQ/LFMMSA9ISFiKCFHrV84B CAweLIEaV8vyhY7LfiLbyt4ZcNHx0PWbcWadE4Pb7iZCKnOB7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGv00TLxVsXac6ZvJ2zoYwZ5DmDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNWY0 OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4YTU4YTE1M2YvZGZiODlkMzYtZTgzMS0z ZmNlLWFhZTAtY2ZmMzg0MmExYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjVmNDk3MzQtNjk2Yi00OTY2LThk YjktMTM4OGE1OGExNTNmL2I1ZjQ5NzM0LTY5NmItNDk2Ni04ZGI5LTEzODhhNThh MTUzZi5jcmwwHwYDVR0jBBgwFoAUDLJv/j0nJzPwwGkOySwup4UtWSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iNWY0OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4 YTU4YTE1M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVu0e6ZVHrghbVh1zGnWouBmkU5nsfQC2tB/AOk0jUNZEwbfT22l3z6 hp/IwLqp8WlF7wfcf06es0GohucNke2O6hE0F8RN/+0ou0/nrQ9vMHEvJx+8FHmL i7O5e1nOI5flA5ZjGpvlinxyzBDh+xDEliujNy2MDWJbjYzZriAKodcB/hNyw8LZ MO6LqH7pVOrljzribFlPdMaSRzf0YQ2OWFmSS0CGMBWgbaI6rl9WU0mgRZQitvvW 31ym72HRIZUw1i5Ml6VcnPOWBL3IniX8RJ24peFuPl6fhcjfpo3YxeVmdRaLBCu4 DoJSIJIsNFXNa1EKhqVAItxP3awo4c4= -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:15 2026 by rpki-client