$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33082064-85d3-3c03-a35c-1e9c0356d330.roa File: 33082064-85d3-3c03-a35c-1e9c0356d330.roa (raw, json) Hash identifier: qrdi/LYAOAw8MCxAnrJhtTPVMXiGif2G+GLAlq0QLYs= Subject key identifier: 5A:98:FD:43:7B:F5:01:9D:EE:CB:1E:FD:3D:D4:93:03:75:2D:82:40 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584D5884E4274B29BA5F250E7080 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33082064-85d3-3c03-a35c-1e9c0356d330.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 29752 IP address blocks: 128.14.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:e4:27:4b:29:ba:5f:25:0e:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=128f5840-583c-43bc-96f6-f5de67394f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:18:47:b3:74:d8:26:51:6e:bf:a7:08:a9:e4: 47:3f:e5:e0:a9:fb:bc:86:9c:e4:12:21:55:3c:3b: 05:ed:96:89:52:13:21:a2:77:42:73:d2:88:e2:78: 04:70:2d:ca:57:9e:07:3c:2f:49:5c:a5:a0:96:f4: 23:9c:b6:f3:2b:c2:c8:2f:9d:bb:48:63:16:00:6b: be:3e:2a:49:22:bb:7e:8d:55:14:0d:76:c7:d1:e0: 60:52:55:ed:0c:b8:ca:3a:7f:95:92:24:ae:8e:c3: 63:a5:4f:dc:16:2e:3d:93:89:f5:66:19:d6:31:70: 0f:a2:4b:7e:89:7d:51:3c:84:cc:fd:98:c8:b5:2a: b4:42:9d:a4:0d:68:fa:59:87:24:d9:51:40:ba:28: 2b:ff:f7:bf:4b:42:f9:70:15:33:ec:79:8e:96:2b: bf:ea:e8:b1:b7:c6:ce:2c:42:5c:32:30:9e:1e:09: 91:67:9e:9d:ac:b3:61:50:9f:c7:c5:bc:ec:33:39: 2d:b0:55:fd:2a:f8:bf:90:e9:16:33:54:33:e1:16: 61:0e:40:bb:c5:d1:fd:68:c7:5b:96:e1:ec:af:f3: c9:0e:48:a1:27:e0:41:49:3d:bf:81:97:e9:23:58: 19:51:b9:64:63:03:ae:03:18:84:f0:5c:b4:21:38: a2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:98:FD:43:7B:F5:01:9D:EE:CB:1E:FD:3D:D4:93:03:75:2D:82:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33082064-85d3-3c03-a35c-1e9c0356d330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.14.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:76:d7:5c:f7:7a:45:e3:bb:5a:f1:c0:01:63:e4:cc:6d:ce: b2:d6:28:a4:b4:1a:5d:84:3f:27:ff:f6:b6:20:49:4a:3e:0e: 2b:62:dd:ae:d8:37:3b:a7:ec:16:1e:a7:27:78:62:2c:c1:03: a5:83:b2:b4:2b:29:0a:ac:0c:16:03:2a:b1:6b:0b:64:5f:13: e1:f7:36:cf:bf:da:e0:7a:c2:ae:c7:e6:75:6f:97:17:ee:54: e5:7d:9e:0c:42:fb:eb:eb:8a:ec:ba:b0:c2:8f:c8:d4:3b:1b: 1d:ed:f3:1f:39:82:21:a1:45:49:9b:03:93:62:2e:3c:bf:d4: 93:3f:75:a8:bf:46:12:4f:57:c4:e6:ae:c8:df:ae:99:d4:ad: ab:d5:0f:e4:9f:9c:2c:06:3a:6e:93:4c:07:c7:28:46:bc:74: 74:7e:1b:de:f2:77:06:48:0b:b4:02:4b:0f:ba:79:39:c6:3f: f9:d8:9a:3d:7c:84:7a:10:d7:1d:a8:db:8a:db:a2:0e:8a:73: 4b:a9:cc:b7:ec:ed:43:df:9f:0f:b6:ac:6f:5e:db:0c:2f:7e: 3a:e0:1c:75:7f:76:6c:f8:01:86:7f:1f:73:8f:d9:bc:a6:80: 15:04:ad:b2:37:24:1f:d7:a7:b3:e8:c9:95:c8:cd:c8:fc:72: 6a:2a:b8:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhOQnSym6XyUOcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk MTI4ZjU4NDAtNTgzYy00M2JjLTk2ZjYtZjVkZTY3Mzk0ZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhhHs3TYJlFuv6cIqeRHP+Xgqfu8hpzkEiFV PDsF7ZaJUhMhondCc9KI4ngEcC3KV54HPC9JXKWglvQjnLbzK8LIL527SGMWAGu+ PipJIrt+jVUUDXbH0eBgUlXtDLjKOn+VkiSujsNjpU/cFi49k4n1ZhnWMXAPokt+ iX1RPITM/ZjItSq0Qp2kDWj6WYck2VFAuigr//e/S0L5cBUz7HmOliu/6uixt8bO LEJcMjCeHgmRZ56drLNhUJ/HxbzsMzktsFX9Kvi/kOkWM1Qz4RZhDkC7xdH9aMdb luHsr/PJDkihJ+BBST2/gZfpI1gZUblkYwOuAxiE8Fy0ITiiNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqY/UN79QGd7sse/T3UkwN1LYJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMzMwODIwNjQtODVkMy0z YzAzLWEzNWMtMWU5YzAzNTZkMzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA6hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKF211z3ekXju1rxwAFj5MxtzrLWKKS0Gl2EPyf/9rYgSUo+Diti3a7Y Nzun7BYepyd4YizBA6WDsrQrKQqsDBYDKrFrC2RfE+H3Ns+/2uB6wq7H5nVvlxfu VOV9ngxC++vriuy6sMKPyNQ7Gx3t8x85giGhRUmbA5NiLjy/1JM/dai/RhJPV8Tm rsjfrpnUravVD+SfnCwGOm6TTAfHKEa8dHR+G97ydwZIC7QCSw+6eTnGP/nYmj18 hHoQ1x2o24rbog6Kc0upzLfs7UPfnw+2rG9e2wwvfjrgHHV/dmz4AYZ/H3OP2bym gBUErbI3JB/Xp7PoyZXIzcj8cmoquPQ= -----END CERTIFICATE-----Generated at Fri Apr 17 16:50:45 2026 by rpki-client