$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/7a124059-8167-385d-841b-71708d4474a3.roa File: 7a124059-8167-385d-841b-71708d4474a3.roa (raw, json) Hash identifier: aZeDqKfTqd1bKomr/mFQUMtp0sV+9mHQKn29mfzaX1w= Subject key identifier: 1D:4D:BC:42:D8:A8:49:8C:D3:BA:50:B2:8A:25:B8:23:28:23:0F:CA Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F4328584C754CD7DF67D1A68C65DCCA80 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/7a124059-8167-385d-841b-71708d4474a3.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 0 IP address blocks: 23.134.216.0/24 maxlen: 24 128.254.185.0/24 maxlen: 24 128.254.186.0/24 maxlen: 24 128.254.187.0/24 maxlen: 24 2602:fbca::/36 maxlen: 36 2602:fbd0::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:4c:d7:df:67:d1:a6:8c:65:dc:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=d4d3402a-e661-4f08-b6a8-9aa4b89bd595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:09:1e:f2:1f:fa:00:20:33:b1:b6:c2:fe:66: 8c:63:fa:03:d4:3e:47:aa:dd:60:d7:0d:d8:ae:24: de:04:63:dd:38:55:08:65:47:db:d7:d6:a5:84:31: 3f:0f:fa:9f:ea:1f:46:25:c7:05:c1:8f:e7:f4:9b: 99:d9:e1:d3:e6:92:ec:0f:cc:c4:b6:e7:e7:f3:d4: 56:b9:f8:f4:ab:9c:4d:1d:1a:17:4b:19:df:22:63: d8:b5:1b:0a:a4:74:85:39:37:26:fe:d5:d9:b0:69: 94:ee:59:52:3f:21:80:2a:12:b7:eb:65:07:af:12: 3d:d9:60:76:cd:a8:c4:a6:b2:24:ae:98:09:7b:1e: 73:e6:02:29:33:f7:c0:a3:8c:bf:3b:78:4c:1a:0a: 01:81:5c:4c:91:1d:8a:3f:8d:19:92:59:36:65:9a: cb:27:f5:d3:46:0d:b3:e6:e6:67:b9:da:4f:0a:24: 46:9b:b0:99:89:5e:03:17:76:4e:65:e0:24:7e:1c: 39:b5:8e:51:9e:82:04:4b:bc:3c:2a:38:a9:cd:99: b5:b5:0d:45:59:b6:f2:0e:5f:47:fa:32:eb:d9:84: 0a:e5:e5:01:55:00:9d:e0:89:d8:b8:26:70:57:02: 7f:d8:91:3a:58:6b:4b:3c:f5:8a:bb:b5:55:26:0e: 33:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4D:BC:42:D8:A8:49:8C:D3:BA:50:B2:8A:25:B8:23:28:23:0F:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/7a124059-8167-385d-841b-71708d4474a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv4: 23.134.216.0/24 128.254.185.0-128.254.187.255 IPv6: 2602:fbca::/36 2602:fbd0::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:53:ab:80:17:21:b9:8b:a8:a9:f9:9b:61:97:9f:75:8a:65: 38:68:46:0b:e8:04:0e:8d:7e:2d:2f:e6:88:f8:9d:d0:de:07: 55:8f:37:50:1e:6d:26:88:20:51:bc:ee:8b:c1:ac:4c:a4:1f: 6d:f2:c3:b9:1c:4d:c4:e7:09:22:3a:bf:3a:8c:cd:1c:7f:70: 14:e0:f8:a7:e0:b5:db:a8:c6:4d:c6:8b:4a:3b:f7:60:58:5f: 71:d5:88:79:97:52:23:2a:ab:47:99:0c:d8:02:3f:49:15:c0: ef:2b:ec:8f:b0:7c:f2:23:7b:3b:99:5d:75:f4:6f:fb:ef:3a: 27:12:38:18:3c:96:c2:88:bb:ff:a1:30:10:57:84:60:f0:08: 28:57:13:98:75:98:8d:72:19:47:b8:f1:24:31:0d:db:b8:57: 37:cb:e0:8d:f1:d3:38:71:91:cf:92:de:e1:c4:8c:29:1c:25: 63:4c:8f:23:3e:da:fd:3a:d1:b3:4f:20:a1:90:e1:4b:e4:c3: 83:4d:52:3a:3f:21:ce:1a:29:62:d8:0f:26:97:da:b0:7c:8e: a5:99:94:0c:34:90:78:dd:79:5a:66:e2:f6:5a:93:05:57:c9: 12:60:b5:fa:95:ec:be:60:ee:f2:eb:71:b7:b3:9b:4c:c4:eb: ed:cb:d2:72 -----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWEx1TNffZ9GmjGXcyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk ZDRkMzQwMmEtZTY2MS00ZjA4LWI2YTgtOWFhNGI4OWJkNTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAke8h/6ACAzsbbC/maMY/oD1D5Hqt1g1w3Y riTeBGPdOFUIZUfb19alhDE/D/qf6h9GJccFwY/n9JuZ2eHT5pLsD8zEtufn89RW ufj0q5xNHRoXSxnfImPYtRsKpHSFOTcm/tXZsGmU7llSPyGAKhK362UHrxI92WB2 zajEprIkrpgJex5z5gIpM/fAo4y/O3hMGgoBgVxMkR2KP40Zklk2ZZrLJ/XTRg2z 5uZnudpPCiRGm7CZiV4DF3ZOZeAkfhw5tY5RnoIES7w8KjipzZm1tQ1FWbbyDl9H +jLr2YQK5eUBVQCd4InYuCZwVwJ/2JE6WGtLPPWKu7VVJg4zJwIDAQABo4IDezCC A3cwHQYDVR0OBBYEFB1NvELYqEmM07pQsooluCMoIw/KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvN2ExMjQwNTktODE2Ny0z ODVkLTg0MWItNzE3MDhkNDQ3NGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAaBAIAATAUAwQAF4bYMAwD BACA/rkDBAKA/rgwFgQCAAIwEAMGBCYC+8oAAwYEJgL70AAwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcVOr gBchuYuoqfmbYZefdYplOGhGC+gEDo1+LS/miPid0N4HVY83UB5tJoggUbzui8Gs TKQfbfLDuRxNxOcJIjq/OozNHH9wFOD4p+C126jGTcaLSjv3YFhfcdWIeZdSIyqr R5kM2AI/SRXA7yvsj7B88iN7O5lddfRv++86JxI4GDyWwoi7/6EwEFeEYPAIKFcT mHWYjXIZR7jxJDEN27hXN8vgjfHTOHGRz5Le4cSMKRwlY0yPIz7a/TrRs08goZDh S+TDg01SOj8hzhopYtgPJpfasHyOpZmUDDSQeN15Wmbi9lqTBVfJEmC1+pXsvmDu 8utxt7ObTMTr7cvScg== -----END CERTIFICATE-----Generated at Mon Mar 2 10:03:14 2026 by rpki-client