$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/65dcf0e9-ce9e-3e27-af44-db92481491d9.roa File: 65dcf0e9-ce9e-3e27-af44-db92481491d9.roa (raw, json) Hash identifier: vek+bp9cx0Fn0j459gacdWvq8agq5SdqbPYjd8idFi4= Subject key identifier: 98:4D:6B:AE:D5:BB:22:18:4B:6D:12:18:69:29:1E:7C:90:AD:27:8D Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584CAE57169E79250F8E0F008090 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/65dcf0e9-ce9e-3e27-af44-db92481491d9.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 62610 IP address blocks: 128.14.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:16:9e:79:25:0f:8e:0f:00:80:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=32eb9050-c699-436f-aabb-41b0fb36e547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:42:9a:85:97:a1:7a:28:1a:1e:95:44:bd:c3: e3:8a:d2:6f:e3:54:c2:26:a7:c9:c0:69:16:dc:10: 5a:1b:55:7d:71:99:76:7b:3f:7f:01:06:67:33:29: 9c:c9:32:a9:0a:60:b7:05:47:16:8b:95:57:97:ea: 29:4f:0a:3e:41:39:09:bb:8f:50:ae:cc:3f:e0:cb: 2f:48:eb:6a:a6:51:d0:2c:3f:e7:61:a5:3e:da:3c: 6c:10:35:23:2a:db:cd:1e:14:76:29:69:4c:de:e4: 18:66:65:cb:ff:ea:0f:cf:8d:10:1c:39:6f:a4:9c: 71:9c:d4:b0:ca:07:8b:69:34:14:18:f1:fa:7d:6f: 24:c3:a7:fa:54:27:46:3f:f1:ea:4b:38:0a:7b:4b: c6:7e:b4:6a:0d:52:69:36:86:b1:c4:78:3e:5d:4f: 78:41:d4:da:f3:19:9c:fe:99:91:34:83:08:e5:64: 9e:20:7f:97:a8:67:3e:5d:34:19:e8:35:38:17:2c: 37:a7:06:bd:f5:2a:72:99:e8:dc:6c:75:f5:99:08: 01:01:e5:01:3c:f2:b1:d8:35:36:a1:cc:a1:81:86: 01:60:f3:df:94:75:4f:d7:f2:37:b6:e8:3b:81:51: cb:cb:00:69:f1:6e:7f:1c:dc:6c:d7:87:42:a3:4f: 09:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4D:6B:AE:D5:BB:22:18:4B:6D:12:18:69:29:1E:7C:90:AD:27:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/65dcf0e9-ce9e-3e27-af44-db92481491d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.14.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:49:94:2c:34:29:35:e3:fc:82:b2:ce:e5:68:7e:03:80:5b: 97:22:24:be:1d:51:bb:cb:41:54:49:ff:a8:6b:4c:6d:ad:df: 34:15:f1:cf:c8:90:15:d1:80:b6:05:f4:7b:74:1e:fe:84:37: b1:c2:1c:52:6c:61:4d:d0:3f:20:12:a6:51:5f:95:f9:59:32: 7d:d3:de:f5:d6:03:1c:66:a3:a8:7b:6f:19:44:31:7e:85:3e: a6:61:b9:f0:f7:ec:6f:70:62:b1:54:a1:71:13:e8:5b:67:8e: 2b:c0:b7:ce:ce:45:9a:4e:e2:dd:8b:f3:2f:95:6f:81:66:72: e1:c1:a2:f6:55:03:36:cb:33:18:26:6d:dc:2b:6f:5c:10:64: 21:1c:97:8a:3a:51:45:8e:d4:34:e7:27:c9:d9:60:4c:e7:26: fe:ea:2e:80:e8:f1:89:88:9b:26:ec:da:41:73:29:25:6d:c2: d3:f3:a3:e3:4d:89:94:b2:ba:67:93:87:4e:d8:4f:8c:da:7f: 3a:8a:96:b1:fa:53:57:71:7d:9f:ca:b8:10:eb:5d:f0:19:83: fb:02:1a:6b:64:47:e0:f9:99:a4:3e:55:32:ec:74:64:8e:c5: 14:1f:36:25:f6:7e:af:94:06:14:b5:15:9d:c1:6e:49:43:e3: b4:fb:e1:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVxaeeSUPjg8AgJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MzJlYjkwNTAtYzY5OS00MzZmLWFhYmItNDFiMGZiMzZlNTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0KahZeheigaHpVEvcPjitJv41TCJqfJwGkW 3BBaG1V9cZl2ez9/AQZnMymcyTKpCmC3BUcWi5VXl+opTwo+QTkJu49Qrsw/4Msv SOtqplHQLD/nYaU+2jxsEDUjKtvNHhR2KWlM3uQYZmXL/+oPz40QHDlvpJxxnNSw ygeLaTQUGPH6fW8kw6f6VCdGP/HqSzgKe0vGfrRqDVJpNoaxxHg+XU94QdTa8xmc /pmRNIMI5WSeIH+XqGc+XTQZ6DU4Fyw3pwa99SpymejcbHX1mQgBAeUBPPKx2DU2 ocyhgYYBYPPflHVP1/I3tug7gVHLywBp8W5/HNxs14dCo08JnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhNa67VuyIYS20SGGkpHnyQrSeNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNjVkY2YwZTktY2U5ZS0z ZTI3LWFmNDQtZGI5MjQ4MTQ5MWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA5GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVJlCw0KTXj/IKyzuVofgOAW5ciJL4dUbvLQVRJ/6hrTG2t3zQV8c/I kBXRgLYF9Ht0Hv6EN7HCHFJsYU3QPyASplFflflZMn3T3vXWAxxmo6h7bxlEMX6F PqZhufD37G9wYrFUoXET6FtnjivAt87ORZpO4t2L8y+Vb4FmcuHBovZVAzbLMxgm bdwrb1wQZCEcl4o6UUWO1DTnJ8nZYEznJv7qLoDo8YmImybs2kFzKSVtwtPzo+NN iZSyumeTh07YT4zafzqKlrH6U1dxfZ/KuBDrXfAZg/sCGmtkR+D5maQ+VTLsdGSO xRQfNiX2fq+UBhS1FZ3BbklD47T74QA= -----END CERTIFICATE-----Generated at Sun Mar 1 23:28:40 2026 by rpki-client