$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2de69ed9-2ace-3a7d-a179-ec558d624fa9.roa File: 2de69ed9-2ace-3a7d-a179-ec558d624fa9.roa (raw, json) Hash identifier: x3XPzXk1JZDB5DnSU1sL/rwzZUMmGnjFnwADPzJDk5Y= Subject key identifier: 4E:10:4B:5E:8D:27:12:0B:33:D8:A5:7A:C6:3E:ED:7B:19:8B:BE:3E Certificate issuer: /CN=2c96f64f-6506-4f99-a6ef-5e8a264b2845 Certificate serial: 010D0C9F4328584D59EA5626DF87A829CA89CAE0 Authority key identifier: AA:26:F4:E0:97:B6:85:C6:CE:55:2F:A3:B2:60:63:4D:59:AA:29:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2de69ed9-2ace-3a7d-a179-ec558d624fa9.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 198949 IP address blocks: 128.220.0.0/16 maxlen: 24 192.12.13.0/24 maxlen: 24 192.12.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2c96f64f-6506-4f99-a6ef-5e8a264b2845.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2c96f64f-6506-4f99-a6ef-5e8a264b2845.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:56:26:df:87:a8:29:ca:89:ca:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c96f64f-6506-4f99-a6ef-5e8a264b2845 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=59098c67-9f55-40cf-9587-23e84e24ecf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ab:8a:42:f0:78:1b:55:f1:70:75:81:35:c1: 6f:1a:2a:93:ea:ea:eb:f3:57:df:94:b5:c0:e2:5c: 29:7b:a0:54:89:7b:e8:15:ca:91:5c:1b:60:a3:b7: 71:96:84:46:9c:13:04:a0:19:60:d3:f3:99:f9:63: 00:cc:8e:04:22:d5:d3:45:ce:89:f1:f2:19:bd:a5: e0:b9:64:b1:0a:a6:42:bd:2f:f3:a0:58:8b:b5:29: e9:77:56:16:85:26:54:f3:f8:32:dd:4f:4d:24:22: 28:6a:1b:43:35:13:94:fa:13:9e:fa:aa:81:4d:67: 75:d8:58:13:69:ed:c8:34:04:d9:ed:ad:87:8f:c8: 3a:42:89:19:06:21:68:0c:39:07:52:50:bb:7b:3c: 39:12:a5:59:cf:c4:8a:c7:be:c8:90:1d:08:ca:f5: 84:6e:4b:6e:79:09:2e:ed:49:85:79:64:30:9e:50: 3e:49:3a:ef:d1:ec:3f:53:51:e1:2f:4e:db:2a:a6: ed:e8:63:35:d2:fd:c0:02:3c:3d:97:4d:d9:7f:ca: ac:1f:29:c0:55:e8:32:0f:38:33:2c:cf:43:d4:a9: 0c:55:58:34:df:d3:8f:72:2e:5f:87:09:e1:c9:16: 3b:78:d4:52:3b:5a:b2:d3:26:1f:7f:ce:b3:73:70: c0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:10:4B:5E:8D:27:12:0B:33:D8:A5:7A:C6:3E:ED:7B:19:8B:BE:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2de69ed9-2ace-3a7d-a179-ec558d624fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2c96f64f-6506-4f99-a6ef-5e8a264b2845.crl X509v3 Authority Key Identifier: keyid:AA:26:F4:E0:97:B6:85:C6:CE:55:2F:A3:B2:60:63:4D:59:AA:29:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845.cer sbgp-ipAddrBlock: critical IPv4: 128.220.0.0/16 192.12.13.0-192.12.14.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a6:90:58:8a:b8:06:01:28:44:95:f9:1c:13:63:87:9e:f5: 1f:c3:94:e1:62:af:ef:ed:d4:7c:fa:db:fe:0b:43:02:2f:54: 59:19:32:f2:28:1d:ad:19:40:af:f9:1c:cd:93:72:9f:5c:41: 6f:cb:b8:2e:b8:a6:34:d8:03:ce:c4:4a:30:fb:0c:e9:e1:08: d1:20:b6:25:3a:91:9c:46:01:1a:ec:32:8a:e0:89:36:9b:d6: 9a:eb:2f:d9:9c:d2:22:8b:0d:6b:64:b0:cc:33:5a:f0:63:7f: 25:6f:3d:bb:f0:53:25:ae:7c:c0:38:c4:cf:95:48:f0:10:6f: 8d:97:7d:60:e4:38:f5:25:d3:94:73:8d:7d:dd:90:12:5c:04: 23:ce:eb:41:f1:3a:5a:b1:df:00:9d:16:ab:7b:ea:63:aa:2f: 13:c5:30:d1:15:29:bf:5e:d5:f5:a0:c9:19:29:c2:05:96:fb: 64:f0:2b:8c:c8:2f:83:e7:03:20:3a:f4:5e:79:73:ab:df:8e: 76:3d:75:72:20:c5:7b:eb:cf:97:7e:55:0e:c2:63:8e:09:7c: 81:74:bc:46:92:e5:8b:69:6d:48:c1:73:ff:ef:cc:83:36:b6: 44:71:f2:70:1c:11:07:8a:15:a3:81:06:ae:89:2b:fe:89:83: 3a:a3:a8:a2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1Z6lYm34eoKcqJyuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmM5NmY2NGYtNjUwNi00Zjk5LWE2ZWYtNWU4YTI2NGIy ODQ1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NTkwOThjNjctOWY1NS00MGNmLTk1ODctMjNlODRlMjRlY2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhauKQvB4G1XxcHWBNcFvGiqT6urr81fflLXA 4lwpe6BUiXvoFcqRXBtgo7dxloRGnBMEoBlg0/OZ+WMAzI4EItXTRc6J8fIZvaXg uWSxCqZCvS/zoFiLtSnpd1YWhSZU8/gy3U9NJCIoahtDNROU+hOe+qqBTWd12FgT ae3INATZ7a2Hj8g6QokZBiFoDDkHUlC7ezw5EqVZz8SKx77IkB0IyvWEbktueQku 7UmFeWQwnlA+STrv0ew/U1HhL07bKqbt6GM10v3AAjw9l03Zf8qsHynAVegyDzgz LM9D1KkMVVg039OPci5fhwnhyRY7eNRSO1qy0yYff86zc3DAtQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE4QS16NJxILM9ilesY+7XsZi74+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yYzk2 ZjY0Zi02NTA2LTRmOTktYTZlZi01ZThhMjY0YjI4NDUvMmRlNjllZDktMmFjZS0z YTdkLWExNzktZWM1NThkNjI0ZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmM5NmY2NGYtNjUwNi00Zjk5LWE2 ZWYtNWU4YTI2NGIyODQ1LzJjOTZmNjRmLTY1MDYtNGY5OS1hNmVmLTVlOGEyNjRi Mjg0NS5jcmwwHwYDVR0jBBgwFoAUqib04Je2hcbOVS+jsmBjTVmqKQwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yYzk2ZjY0Zi02NTA2LTRmOTktYTZlZi01ZThh MjY0YjI4NDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwMAgNwwDAME AMAMDQMEAMAMDjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAlppBYirgGAShElfkcE2OHnvUfw5ThYq/v7dR8 +tv+C0MCL1RZGTLyKB2tGUCv+RzNk3KfXEFvy7guuKY02APOxEow+wzp4QjRILYl OpGcRgEa7DKK4Ik2m9aa6y/ZnNIiiw1rZLDMM1rwY38lbz278FMlrnzAOMTPlUjw EG+Nl31g5Dj1JdOUc4193ZASXAQjzutB8Tpasd8AnRare+pjqi8TxTDRFSm/XtX1 oMkZKcIFlvtk8CuMyC+D5wMgOvReeXOr3452PXVyIMV768+XflUOwmOOCXyBdLxG kuWLaW1IwXP/78yDNrZEcfJwHBEHihWjgQauiSv+iYM6o6ii -----END CERTIFICATE-----Generated at Fri Apr 17 05:08:56 2026 by rpki-client