$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa File: f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa (raw, json) Hash identifier: kdf0zrKiGijLDYpXnkKzo8+Ljgr96b3u4LKcXl4LcNA= Subject key identifier: 07:9F:98:D0:AF:8D:98:3B:C7:3C:6C:A9:58:6D:70:06:11:06:D3:E1 Certificate issuer: /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Certificate serial: 010D0C9F4328584CED27811BB0298B48FF45E8C0 Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa Signing time: Fri 20 Feb 2026 14:00:41 +0000 ROA not before: Fri 20 Feb 2026 14:00:41 +0000 ROA not after: Thu 21 May 2026 13:00:41 +0000 asID: 53768 IP address blocks: 162.134.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:27:81:1b:b0:29:8b:48:ff:45:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92 Validity Not Before: Feb 20 14:00:41 2026 GMT Not After : May 21 13:00:41 2026 GMT Subject: CN=2572e7c5-415a-4e29-895d-8b46b0bd523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c0:d1:54:07:fa:7e:6c:42:45:f2:37:5a:98: a8:c2:fd:f4:c3:fd:11:0b:5f:89:96:e4:ca:c1:a1: 90:72:15:14:57:3b:6d:5b:44:29:eb:98:04:bf:54: 92:dc:aa:b5:75:99:03:e5:f2:13:6b:bb:f0:4a:9f: 3c:49:5a:bf:81:61:c3:68:a1:7e:cc:92:e2:ca:98: af:61:5d:32:c7:e0:73:fd:5b:31:dc:56:f8:3f:16: dc:f5:cf:3c:0d:8e:ae:ff:23:04:a8:f7:15:07:85: 83:1c:c6:bb:6f:91:2f:3f:d1:ed:e7:9f:ba:f2:dc: 7a:59:13:3c:eb:50:0d:b3:78:f0:69:99:e9:68:cf: 7a:df:5f:0d:df:da:94:00:a5:bf:d0:35:04:84:5f: d3:88:33:71:ad:98:b1:6e:c7:f8:f0:68:bc:29:22: c8:3f:93:b7:c2:c6:1f:9a:33:8f:ca:4a:fa:2b:fa: 1c:d7:82:83:c7:a1:45:0b:e4:54:ba:c2:10:66:29: 22:ad:62:78:5f:32:35:f7:3c:f2:67:11:1a:19:04: 59:0b:9f:63:08:6a:e9:e0:95:6a:d3:bc:d6:38:5e: 03:1d:36:34:86:d4:f3:27:f7:ea:10:b6:d9:fe:31: a2:28:f2:62:c0:32:e6:34:3a:a6:52:de:49:c6:5c: ba:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:9F:98:D0:AF:8D:98:3B:C7:3C:6C:A9:58:6D:70:06:11:06:D3:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl X509v3 Authority Key Identifier: keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer sbgp-ipAddrBlock: critical IPv4: 162.134.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:36:07:a0:a4:b2:4b:0a:f5:5a:c1:ad:18:fc:80:f9:cd:c9: 56:58:89:98:c4:67:6a:49:46:98:53:6b:ce:a0:50:cb:6c:dc: 35:2f:91:a7:f6:e7:cb:cb:f3:27:4e:22:d8:f2:8a:18:e5:d8: 1f:2c:0d:56:30:da:8a:67:c6:79:c9:a4:95:ea:d4:2f:76:92: df:f7:4f:cf:59:c5:84:90:2f:1f:69:4f:bc:c1:18:76:f4:4c: 99:4b:74:b3:be:fd:72:b1:fc:9c:2c:51:b5:dd:b5:d6:4e:56: 8a:43:24:10:ce:58:3b:44:36:1a:14:96:eb:5c:67:ac:5c:2f: 48:ca:06:9f:23:b8:03:c2:5a:a7:40:dc:c3:e4:2f:f9:57:54: 0d:7e:d6:26:13:51:d8:3a:ac:9a:b7:2a:20:c6:6a:2d:ac:fc: cd:9a:22:3f:e5:fb:41:3a:a4:a6:10:22:fb:dd:ba:13:ed:5d: 89:72:17:32:d7:19:c5:23:b0:19:2f:66:d0:46:17:6e:10:41: 95:9d:c2:67:51:5b:86:f9:2b:ea:b9:e2:ee:4e:5e:08:1b:aa: 92:51:4a:fa:81:f9:9e:a3:7b:e7:3a:a8:05:08:72:77:64:e3: b3:87:15:d1:78:2e:42:84:78:8f:d5:60:a1:2c:6c:63:b9:cf: 98:ce:19:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ4EbsCmLSP9F6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTBmOWFjZjItNWExMS00OTJmLTkzZTEtMWUyMjFhNmY0 YTkyMB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk MjU3MmU3YzUtNDE1YS00ZTI5LTg5NWQtOGI0NmIwYmQ1MjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcDRVAf6fmxCRfI3Wpiowv30w/0RC1+JluTK waGQchUUVzttW0Qp65gEv1SS3Kq1dZkD5fITa7vwSp88SVq/gWHDaKF+zJLiypiv YV0yx+Bz/Vsx3Fb4Pxbc9c88DY6u/yMEqPcVB4WDHMa7b5EvP9Ht55+68tx6WRM8 61ANs3jwaZnpaM96318N39qUAKW/0DUEhF/TiDNxrZixbsf48Gi8KSLIP5O3wsYf mjOPykr6K/oc14KDx6FFC+RUusIQZikirWJ4XzI19zzyZxEaGQRZC59jCGrp4JVq 07zWOF4DHTY0htTzJ/fqELbZ/jGiKPJiwDLmNDqmUt5Jxly6FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAefmNCvjZg7xzxsqVhtcAYRBtPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5 YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIyMWE2ZjRhOTIvZjUzOWNmZDEtOTUwMy0z MWUwLWEzODMtMmRiZTNiYWNkODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTBmOWFjZjItNWExMS00OTJmLTkz ZTEtMWUyMjFhNmY0YTkyL2EwZjlhY2YyLTVhMTEtNDkyZi05M2UxLTFlMjIxYTZm NGE5Mi5jcmwwHwYDVR0jBBgwFoAU/4vCxbqVi6kRyVwnWnCARvtLmYgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIy MWE2ZjRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAooaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFg2B6CksksK9VrBrRj8gPnNyVZYiZjEZ2pJRphTa86gUMts3DUvkaf2 58vL8ydOItjyihjl2B8sDVYw2opnxnnJpJXq1C92kt/3T89ZxYSQLx9pT7zBGHb0 TJlLdLO+/XKx/JwsUbXdtdZOVopDJBDOWDtENhoUlutcZ6xcL0jKBp8juAPCWqdA 3MPkL/lXVA1+1iYTUdg6rJq3KiDGai2s/M2aIj/l+0E6pKYQIvvduhPtXYlyFzLX GcUjsBkvZtBGF24QQZWdwmdRW4b5K+q54u5OXggbqpJRSvqB+Z6je+c6qAUIcndk 47OHFdF4LkKEeI/VYKEsbGO5z5jOGcE= -----END CERTIFICATE-----Generated at Mon Mar 2 16:30:00 2026 by rpki-client