$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/84c6b55b-d903-33e7-a64f-292b8c3f765b.roa File: 84c6b55b-d903-33e7-a64f-292b8c3f765b.roa (raw, json) Hash identifier: jrXXwVi2ACyb1KTaQovV0I7WBPUibfwilnvwSH/fNhQ= Subject key identifier: 2B:5E:EC:DF:9B:F9:8A:3B:B3:2F:6F:4E:12:14:1F:0F:C7:3F:17:25 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584CDC678AA6A94821F7D75D5400 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/84c6b55b-d903-33e7-a64f-292b8c3f765b.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 393249 IP address blocks: 128.189.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:8a:a6:a9:48:21:f7:d7:5d:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=db42cf21-eea3-4b89-ab2c-6bbe60c138c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fa:6e:ca:1f:06:ee:0c:9b:14:a1:b1:e6:69: 64:dd:80:a2:df:03:9c:4e:d7:e9:7c:58:b7:5e:0c: 3d:c9:6f:46:32:35:01:f7:67:d2:2d:99:2a:b6:85: a2:a2:59:b2:a4:99:72:8b:7e:5f:74:98:20:93:69: 5d:0f:82:48:1d:78:b8:07:2e:ae:fb:11:86:09:7b: 60:f0:67:34:06:88:47:32:05:30:6d:67:dc:35:1e: 01:b8:91:87:8f:17:2c:21:5a:65:ff:f8:e9:45:03: 5b:e0:78:fb:cb:fe:57:81:9e:67:8f:ea:f0:ef:29: d4:58:88:42:9b:11:e7:78:33:25:64:61:21:af:84: dc:52:e7:e0:5c:ec:12:7b:9b:d2:58:50:81:81:27: da:ab:4b:24:08:4a:f9:a9:46:d1:18:46:87:7e:e0: ce:72:f9:d9:ec:35:55:8f:32:eb:b9:ea:7b:f4:22: 19:e7:e2:c8:01:6d:be:83:ed:b6:54:46:ea:67:3e: 21:bc:ac:ee:23:f0:84:99:d3:83:0e:da:f3:8d:8d: a2:39:df:e6:21:cd:3e:33:b3:0a:64:1d:46:45:07: 4b:54:43:d5:7c:fb:7c:05:8a:82:45:45:e3:34:20: a1:54:67:09:e9:c1:1c:e1:91:20:01:b3:7d:c3:b3: 99:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5E:EC:DF:9B:F9:8A:3B:B3:2F:6F:4E:12:14:1F:0F:C7:3F:17:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/84c6b55b-d903-33e7-a64f-292b8c3f765b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b9:2c:40:81:e4:36:f4:15:7b:5e:86:80:5f:26:06:40:57: d8:a2:66:bc:f4:1a:53:ed:b4:a7:fe:82:19:3f:45:80:5d:ab: 08:68:85:95:16:6d:00:d8:67:ca:b8:ee:b2:08:fb:01:8c:5e: 99:61:85:f3:e3:5c:69:02:61:5e:43:59:a3:8c:ea:e4:d6:ab: a1:d2:47:7f:d3:df:86:86:5f:44:34:b9:a6:2a:50:14:e4:6f: 92:1f:b4:58:47:5f:23:af:77:6b:a5:2b:69:5a:91:b6:64:26: 32:15:43:59:ba:0f:4a:7c:25:66:18:4a:a7:f7:f7:69:43:53: ea:25:ea:eb:96:0b:ed:7e:3a:e5:b1:6a:ca:08:23:18:ed:55: 29:0b:c3:65:4a:f0:fa:bf:bc:df:0f:3e:aa:42:24:74:c0:84: 03:89:c8:08:6e:6b:50:7e:ce:8f:a6:f6:6c:c4:63:03:0b:10: d2:36:fe:e9:ca:43:9f:29:78:bb:6b:ef:25:09:85:1b:d8:81: 27:e2:b6:cc:44:74:d1:67:27:38:31:a7:4c:7c:46:6b:4e:6e: 5e:80:be:71:90:fe:6f:72:c1:a4:7b:94:4a:3b:f8:d2:2d:c9: b4:03:15:71:73:4e:a2:e4:c7:31:62:3d:f6:ac:bf:52:4b:27: da:cc:69:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ4qmqUgh99ddVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk ZGI0MmNmMjEtZWVhMy00Yjg5LWFiMmMtNmJiZTYwYzEzOGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vpuyh8G7gybFKGx5mlk3YCi3wOcTtfpfFi3 Xgw9yW9GMjUB92fSLZkqtoWiolmypJlyi35fdJggk2ldD4JIHXi4By6u+xGGCXtg 8Gc0BohHMgUwbWfcNR4BuJGHjxcsIVpl//jpRQNb4Hj7y/5XgZ5nj+rw7ynUWIhC mxHneDMlZGEhr4TcUufgXOwSe5vSWFCBgSfaq0skCEr5qUbRGEaHfuDOcvnZ7DVV jzLruep79CIZ5+LIAW2+g+22VEbqZz4hvKzuI/CEmdODDtrzjY2iOd/mIc0+M7MK ZB1GRQdLVEPVfPt8BYqCRUXjNCChVGcJ6cEc4ZEgAbN9w7OZgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCte7N+b+Yo7sy9vThIUHw/HPxclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvODRjNmI1NWItZDkwMy0z M2U3LWE2NGYtMjkyYjhjM2Y3NjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgL1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG5LECB5Db0FXtehoBfJgZAV9iiZrz0GlPttKf+ghk/RYBdqwhohZUW bQDYZ8q47rII+wGMXplhhfPjXGkCYV5DWaOM6uTWq6HSR3/T34aGX0Q0uaYqUBTk b5IftFhHXyOvd2ulK2lakbZkJjIVQ1m6D0p8JWYYSqf392lDU+ol6uuWC+1+OuWx asoIIxjtVSkLw2VK8Pq/vN8PPqpCJHTAhAOJyAhua1B+zo+m9mzEYwMLENI2/unK Q58peLtr7yUJhRvYgSfitsxEdNFnJzgxp0x8RmtObl6AvnGQ/m9ywaR7lEo7+NIt ybQDFXFzTqLkxzFiPfasv1JLJ9rMaQ0= -----END CERTIFICATE-----Generated at Mon Mar 2 15:53:34 2026 by rpki-client