$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e0fcaff-98ac-3544-92ee-5c038866c8d9.roa File: 3e0fcaff-98ac-3544-92ee-5c038866c8d9.roa (raw, json) Hash identifier: cSMB0fpQLzXrNnmX9w9OHIf8hNnMLgvFrF4G+u5crUE= Subject key identifier: BA:58:6B:1B:81:AD:4F:B0:FC:57:17:47:56:4E:3A:5D:AB:05:FE:B4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E8C8A5FF69DE628DEA4724480 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e0fcaff-98ac-3544-92ee-5c038866c8d9.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 3949 IP address blocks: 128.121.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:5f:f6:9d:e6:28:de:a4:72:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=94bbc44d-85e7-4054-929a-c18b552dc7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:f0:11:dd:cc:b1:31:fb:be:d5:bf:df:cd: 60:78:de:e6:47:78:40:03:dd:b5:de:53:33:75:0a: ad:5d:51:a7:6c:bf:5b:b8:f7:e1:50:c0:29:99:c3: 56:59:7b:6d:4a:c2:3f:da:25:88:3d:1f:0c:c6:7d: d4:4f:ce:33:a1:f7:1c:73:e1:65:a4:ac:f3:99:e3: fa:2c:7d:fa:01:2b:a3:62:c2:68:4f:a8:7e:86:00: d7:11:38:ac:8d:e4:b6:06:64:0a:50:b3:83:f9:6c: 99:f3:78:95:e0:a5:9c:bc:0d:89:69:cc:56:d2:fd: 7f:70:75:71:6f:a5:d5:6c:90:c2:30:33:10:50:95: 98:8c:e0:db:c7:4f:4c:04:23:d6:0a:8b:ce:cf:a0: c7:0d:57:ab:6f:b8:f4:1e:53:f1:06:fb:cd:2f:47: 9f:01:cc:60:85:a1:99:7f:bd:a5:eb:7d:e2:c3:d2: af:e1:2b:38:0f:d1:1d:45:d5:b8:8c:5b:52:f6:cc: 5c:a3:c3:6f:64:69:88:96:30:ba:f0:f3:42:f9:ed: 60:93:7e:ed:ad:b8:38:a8:6c:e1:8b:79:38:94:c6: 2f:0b:1b:32:00:d3:7c:20:80:f6:32:7d:84:bf:21: fb:11:70:24:ab:70:d7:62:19:48:13:95:95:f6:aa: 3a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:58:6B:1B:81:AD:4F:B0:FC:57:17:47:56:4E:3A:5D:AB:05:FE:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3e0fcaff-98ac-3544-92ee-5c038866c8d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:39:d3:49:52:99:b8:d7:19:ce:59:2e:c5:6f:ad:d6:4c:fa: b7:f9:c1:42:a3:a6:45:56:e1:1b:b6:69:f3:ba:1a:93:9b:8a: bf:6f:74:c3:51:52:90:05:63:16:62:d0:7e:7c:90:6a:44:a9: f4:ce:8c:20:03:3b:b8:b0:c4:90:34:24:ae:27:f6:3a:d5:24: e9:c9:8b:95:54:d3:14:8d:88:1b:66:e8:fd:fe:b2:17:42:4d: 76:b1:ec:fa:c9:4a:29:bd:3f:ea:99:3d:89:35:37:77:c9:27: c2:d6:29:c3:a9:ee:b2:8b:e9:e1:4d:59:ac:33:9e:cb:4a:1a: e2:5e:ef:46:86:33:39:ea:f3:d6:0b:96:6c:a6:84:99:e8:1e: 71:d2:c8:e8:c4:7e:88:78:10:a7:25:14:17:bc:cc:e7:e2:6d: 0a:51:e9:2e:a8:8a:5a:34:95:68:72:a9:0a:9b:cc:1b:d3:09: 2e:b3:4f:40:4b:0c:3a:4b:e9:10:51:1d:94:e9:9e:19:20:d1: b1:0a:53:74:be:ce:cc:a2:8e:ff:33:02:f0:7f:0e:54:75:c1: ec:ee:f4:5d:e8:4e:d1:72:07:f2:bf:c8:72:bc:62:94:30:4a: 7c:64:ff:a3:45:7f:db:92:9d:51:eb:7b:02:fd:ff:66:e6:d2: 75:ff:4f:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Mil/2neYo3qRyRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk OTRiYmM0NGQtODVlNy00MDU0LTkyOWEtYzE4YjU1MmRjN2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRvwEd3MsTH7vtW/381geN7mR3hAA9213lMz dQqtXVGnbL9buPfhUMApmcNWWXttSsI/2iWIPR8Mxn3UT84zofccc+FlpKzzmeP6 LH36ASujYsJoT6h+hgDXETisjeS2BmQKULOD+WyZ83iV4KWcvA2JacxW0v1/cHVx b6XVbJDCMDMQUJWYjODbx09MBCPWCovOz6DHDVerb7j0HlPxBvvNL0efAcxghaGZ f72l633iw9Kv4Ss4D9EdRdW4jFtS9sxco8NvZGmIljC68PNC+e1gk37trbg4qGzh i3k4lMYvCxsyANN8IID2Mn2EvyH7EXAkq3DXYhlIE5WV9qo6GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpYaxuBrU+w/FcXR1ZOOl2rBf60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2UwZmNhZmYtOThhYy0z NTQ0LTkyZWUtNWMwMzg4NjZjOGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgHkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJc500lSmbjXGc5ZLsVvrdZM+rf5wUKjpkVW4Ru2afO6GpObir9vdMNR UpAFYxZi0H58kGpEqfTOjCADO7iwxJA0JK4n9jrVJOnJi5VU0xSNiBtm6P3+shdC TXax7PrJSim9P+qZPYk1N3fJJ8LWKcOp7rKL6eFNWawznstKGuJe70aGMznq89YL lmymhJnoHnHSyOjEfoh4EKclFBe8zOfibQpR6S6oilo0lWhyqQqbzBvTCS6zT0BL DDpL6RBRHZTpnhkg0bEKU3S+zsyijv8zAvB/DlR1wezu9F3oTtFyB/K/yHK8YpQw Snxk/6NFf9uSnVHrewL9/2bm0nX/T8o= -----END CERTIFICATE-----Generated at Fri Jul 24 18:40:24 2026 by rpki-client