$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2d6c3e-ed41-3d11-975b-494ee976312d.roa File: 3d2d6c3e-ed41-3d11-975b-494ee976312d.roa (raw, json) Hash identifier: EFCrBPips+lxLZXqIj9lRz2al7YRqxlb32HcA6gZcx4= Subject key identifier: BD:98:93:BA:63:D7:E1:1C:10:66:84:B7:DC:92:4D:0C:F3:E2:86:06 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E6F3A34F2F573C09EAC2CCB40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2d6c3e-ed41-3d11-975b-494ee976312d.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 2914 IP address blocks: 129.250.161.160/27 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:34:f2:f5:73:c0:9e:ac:2c:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=a98b7b6e-3c63-4f24-ba2c-5415d3b8b0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:93:4a:4b:1a:fb:68:33:ed:84:87:cc:31:97: ba:de:51:d4:8b:c0:df:ab:1f:ff:f0:f8:5a:ed:b6: f4:58:4c:a7:70:d7:c4:cc:1e:ed:bf:8c:c4:30:29: 37:61:8f:a6:87:27:d9:1e:4f:2f:25:41:73:26:18: 48:a0:29:9e:b8:8a:90:c7:e9:8c:70:71:24:3d:6b: 17:c7:1c:36:f1:1c:20:0c:27:ec:0a:e9:55:3c:1f: 50:71:d9:2f:3d:5a:37:1b:12:31:37:f7:2d:1c:5c: 44:0e:3f:33:6f:33:e2:3d:48:70:84:39:af:3e:fd: 76:ee:0d:97:29:50:be:f8:5d:a6:ae:a7:39:34:4a: fd:ed:dc:f9:70:8e:1e:4f:ff:92:7f:24:98:01:12: b7:78:e7:a9:10:b4:5a:37:71:20:9c:88:34:dc:3d: bd:ad:75:db:55:66:11:c1:d4:ad:09:d7:be:f7:64: 69:1c:68:f3:31:89:c5:c7:67:fb:24:9d:eb:00:e8: e9:c1:0a:37:67:87:05:73:44:cb:26:97:ef:74:9e: 10:a3:8e:9b:95:07:98:1f:c4:f0:80:2d:5c:ee:e4: 7f:c8:38:64:d2:f8:d3:45:35:51:48:18:fa:ad:aa: b3:06:34:da:53:fb:20:f6:bb:2c:d7:5e:ca:e2:6b: 76:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:98:93:BA:63:D7:E1:1C:10:66:84:B7:DC:92:4D:0C:F3:E2:86:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2d6c3e-ed41-3d11-975b-494ee976312d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.161.160/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:d4:1e:28:31:df:e4:6d:99:b5:44:bd:5a:f6:1a:0c:16:3f: 4a:a8:46:7c:25:14:d0:21:b9:15:ac:d8:d0:26:d8:2a:df:72: 65:c5:1c:a8:46:9d:91:1d:c0:cf:a1:89:5e:2a:ec:c7:15:f5: ed:a8:8d:f7:9d:ef:97:b1:d6:fa:e9:0f:6f:6a:20:1f:89:71: 29:3a:3d:8c:76:cc:c1:2e:de:b9:de:4a:27:f4:f2:d7:eb:b4: 97:ad:c1:f5:9e:b3:d4:9e:c5:aa:a5:dc:d4:45:dd:02:c6:d6: f3:fd:94:6d:d8:c4:9d:e5:bf:75:85:64:ed:13:63:a3:9e:4a: 17:0f:38:70:0e:79:9f:72:e7:d7:70:70:1a:ea:8a:3d:10:88: 8d:fa:6f:f6:bc:c5:a0:8e:90:be:c8:48:11:bc:a8:73:68:2b: b2:22:1c:08:98:72:d2:c2:83:c8:b7:f1:e0:2c:3b:96:c8:8d: 4e:eb:02:25:b2:c5:f6:61:c9:a7:5c:a9:93:ab:97:8b:3e:8a: 68:4d:fc:b3:e0:a6:7f:e8:96:f6:6d:ff:35:07:3c:40:60:f7: bd:3a:07:84:f2:9f:f8:70:1c:35:7c:c2:dd:9d:ba:09:3e:11: c8:98:45:dd:3a:64:db:07:e1:b0:07:e3:05:88:2e:4e:40:93: 41:86:93:75 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5vOjTy9XPAnqwsy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk YTk4YjdiNmUtM2M2My00ZjI0LWJhMmMtNTQxNWQzYjhiMGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJNKSxr7aDPthIfMMZe63lHUi8Dfqx//8Pha 7bb0WEyncNfEzB7tv4zEMCk3YY+mhyfZHk8vJUFzJhhIoCmeuIqQx+mMcHEkPWsX xxw28RwgDCfsCulVPB9QcdkvPVo3GxIxN/ctHFxEDj8zbzPiPUhwhDmvPv127g2X KVC++F2mrqc5NEr97dz5cI4eT/+SfySYARK3eOepELRaN3EgnIg03D29rXXbVWYR wdStCde+92RpHGjzMYnFx2f7JJ3rAOjpwQo3Z4cFc0TLJpfvdJ4Qo46blQeYH8Tw gC1c7uR/yDhk0vjTRTVRSBj6raqzBjTaU/sg9rss117K4mt21QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL2Yk7pj1+EcEGaEt9ySTQzz4oYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2QyZDZjM2UtZWQ0MS0z ZDExLTk3NWItNDk0ZWU5NzYzMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFgfqhoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCy1B4oMd/kbZm1RL1a9hoMFj9KqEZ8JRTQIbkVrNjQJtgq33JlxRyo Rp2RHcDPoYleKuzHFfXtqI33ne+Xsdb66Q9vaiAfiXEpOj2MdszBLt653kon9PLX 67SXrcH1nrPUnsWqpdzURd0Cxtbz/ZRt2MSd5b91hWTtE2OjnkoXDzhwDnmfcufX cHAa6oo9EIiN+m/2vMWgjpC+yEgRvKhzaCuyIhwImHLSwoPIt/HgLDuWyI1O6wIl ssX2YcmnXKmTq5eLPopoTfyz4KZ/6Jb2bf81BzxAYPe9OgeE8p/4cBw1fMLdnboJ PhHImEXdOmTbB+GwB+MFiC5OQJNBhpN1 -----END CERTIFICATE-----Generated at Thu Jul 23 23:07:07 2026 by rpki-client