$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/97eaa9c1-a9ea-3e5d-b235-0940c5dd6938.roa File: 97eaa9c1-a9ea-3e5d-b235-0940c5dd6938.roa (raw, json) Hash identifier: Bl9TxkZBxPIEys5+1921jhL4fz6MKNdia7fsopujt7g= Subject key identifier: BB:74:CF:41:82:1A:A7:67:26:F8:A3:16:E1:BA:95:1D:F8:A0:6D:81 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584CF2BCFBF18E2E04506D990980 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/97eaa9c1-a9ea-3e5d-b235-0940c5dd6938.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 62610 IP address blocks: 128.1.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bc:fb:f1:8e:2e:04:50:6d:99:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=a86c20b2-df5f-466d-b361-8d7dc709ec8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b8:1d:29:c4:24:c3:7a:60:a3:34:2d:e9:a0: 73:98:01:75:55:47:68:e6:be:25:3a:5d:49:e1:4e: c0:41:61:82:05:4a:0a:37:20:19:32:71:23:79:d9: e8:5f:13:b8:84:51:59:12:79:2a:89:03:f5:55:c3: 5d:d2:46:6a:b4:27:c4:f5:f3:44:8d:4b:6b:0a:71: 63:e1:44:42:55:5a:3b:ee:43:3a:51:1b:78:67:5d: 3d:b6:b1:90:ae:0b:87:79:1a:44:b6:a5:bb:a5:9d: 38:45:5e:54:88:00:a9:4d:48:67:d8:6d:22:00:d5: cb:a5:52:0d:5e:c6:1d:1a:5d:40:f2:18:db:63:92: b4:ac:c9:5f:29:23:1b:f7:f8:9b:38:32:ec:18:1c: 39:42:4f:fd:86:35:77:66:c8:34:ca:4b:08:91:15: 24:09:bd:aa:21:0f:19:11:59:85:6d:9b:9e:f4:e5: dc:fe:2a:00:21:c9:25:97:76:63:d4:f4:07:f4:7a: 49:f2:76:7b:da:c9:a8:6d:87:39:77:81:0e:3c:0d: 51:5a:05:e5:4d:cb:11:0a:9b:79:bc:30:13:5b:68: 2b:5b:ea:65:da:a4:f5:e2:02:73:f6:1d:5e:d6:fa: c4:05:d7:3a:0a:7b:b8:81:8d:b8:c2:a8:29:ff:df: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:74:CF:41:82:1A:A7:67:26:F8:A3:16:E1:BA:95:1D:F8:A0:6D:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/97eaa9c1-a9ea-3e5d-b235-0940c5dd6938.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:19:44:8f:e1:8f:dd:17:e2:ad:7f:75:27:d8:25:ec:09:bd: 05:4a:2d:34:8a:ab:49:7b:99:18:ca:ad:b1:d8:72:86:a7:41: c4:53:02:2b:67:a0:7e:3d:96:71:0c:ea:e0:36:24:96:f6:39: 20:3e:f0:53:c0:aa:22:a2:45:a3:ae:92:ea:d2:79:d2:76:27: 8e:69:b7:c6:97:ce:80:4b:4f:56:74:e7:28:a0:c4:a9:d5:0f: a4:22:de:38:c5:97:67:64:b0:77:ec:a3:74:1a:e3:83:eb:b9: 8d:e8:b8:a1:46:6b:6f:33:24:76:2b:33:c8:be:45:f4:4a:7b: 0c:8e:5a:79:93:96:70:4b:01:fa:6b:1c:55:2b:83:c1:4b:18: ca:0c:5f:34:ff:eb:59:1e:cc:58:30:44:6b:10:e1:75:f8:33: 9d:6a:2c:f6:fd:5f:f1:53:04:97:ab:04:b2:47:69:0c:ea:89: 91:e1:e1:a3:f1:a8:eb:0b:dd:e1:b7:38:9a:b6:07:c1:c0:c0: 54:d6:57:b5:c3:1d:ef:c7:cc:5b:5b:51:16:3a:42:58:c3:ac: 3c:f7:97:43:50:8f:6f:0c:f8:bf:32:8b:e3:85:06:f6:4a:1d: 52:66:60:ec:0e:29:7b:ac:0e:89:c2:c8:70:11:28:4f:b8:82: d3:33:9b:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvPvxji4EUG2ZCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk YTg2YzIwYjItZGY1Zi00NjZkLWIzNjEtOGQ3ZGM3MDllYzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLgdKcQkw3pgozQt6aBzmAF1VUdo5r4lOl1J 4U7AQWGCBUoKNyAZMnEjednoXxO4hFFZEnkqiQP1VcNd0kZqtCfE9fNEjUtrCnFj 4URCVVo77kM6URt4Z109trGQrguHeRpEtqW7pZ04RV5UiACpTUhn2G0iANXLpVIN XsYdGl1A8hjbY5K0rMlfKSMb9/ibODLsGBw5Qk/9hjV3Zsg0yksIkRUkCb2qIQ8Z EVmFbZue9OXc/ioAIckll3Zj1PQH9HpJ8nZ72smobYc5d4EOPA1RWgXlTcsRCpt5 vDATW2grW+pl2qT14gJz9h1e1vrEBdc6Cnu4gY24wqgp/99jUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLt0z0GCGqdnJvijFuG6lR34oG2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvOTdlYWE5YzEtYTllYS0z ZTVkLWIyMzUtMDk0MGM1ZGQ2OTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0ZRI/hj90X4q1/dSfYJewJvQVKLTSKq0l7mRjKrbHYcoanQcRTAitn oH49lnEM6uA2JJb2OSA+8FPAqiKiRaOukurSedJ2J45pt8aXzoBLT1Z05yigxKnV D6Qi3jjFl2dksHfso3Qa44PruY3ouKFGa28zJHYrM8i+RfRKewyOWnmTlnBLAfpr HFUrg8FLGMoMXzT/61kezFgwRGsQ4XX4M51qLPb9X/FTBJerBLJHaQzqiZHh4aPx qOsL3eG3OJq2B8HAwFTWV7XDHe/HzFtbURY6QljDrDz3l0NQj28M+L8yi+OFBvZK HVJmYOwOKXusDonCyHARKE+4gtMzm0I= -----END CERTIFICATE-----Generated at Mon Mar 2 08:21:39 2026 by rpki-client