$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3fd79230-8b15-3843-b22f-fa52a7724e39.roa File: 3fd79230-8b15-3843-b22f-fa52a7724e39.roa (raw, json) Hash identifier: VSVX/ixyohGoF8guuMh8EZevWU2GLAKyznmSDNJqsgQ= Subject key identifier: 05:77:46:F7:AB:DA:0A:D2:C2:E9:BB:F5:BD:AB:8F:0E:49:7A:C3:8F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584DA6B03024C748A7A3FCA16040 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3fd79230-8b15-3843-b22f-fa52a7724e39.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 3939 IP address blocks: 129.250.53.112/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:30:24:c7:48:a7:a3:fc:a1:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=2eab8701-65e4-4dee-b448-5a1348dffa5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ad:d5:df:57:52:06:2e:35:69:43:31:32:1d: 9c:23:c3:b1:53:b5:d4:9b:61:f5:33:c2:4d:c4:93: b3:30:74:cd:3e:e0:54:17:7d:0d:a1:ba:4d:92:ee: b1:1b:20:cf:40:d8:df:94:9f:16:22:b2:80:4e:f0: c5:55:8d:be:fb:76:3b:18:93:e8:db:eb:02:da:9e: bb:5d:4e:90:54:5a:32:81:9e:ac:0e:62:29:e5:8b: d3:5d:77:c8:c3:3a:25:95:eb:8e:d6:1a:f0:35:8e: 6c:28:28:b0:89:36:a6:39:d6:2c:97:1d:51:35:50: e7:48:13:63:9c:3c:05:48:0c:1d:a0:0e:c1:42:57: 97:ae:6e:2f:a3:34:3b:07:55:43:a0:53:88:99:aa: f8:ae:29:1b:a8:13:75:3e:d9:b4:14:c2:cb:2e:c4: 88:fd:12:78:f2:79:f4:a4:35:48:0f:d9:c8:5f:cb: 7a:2b:03:51:94:b5:73:ab:13:b5:d9:5c:ab:b8:22: e1:af:49:0f:37:61:51:70:6e:dc:8f:58:b5:c8:c2: 84:33:ce:14:a5:c5:06:46:14:d8:1a:95:fd:bd:c3: 3f:97:89:09:80:61:be:48:8f:3c:44:36:f5:1a:5b: 3e:ba:8f:c5:e4:a0:cb:eb:38:25:71:d0:0e:d2:1e: e6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:77:46:F7:AB:DA:0A:D2:C2:E9:BB:F5:BD:AB:8F:0E:49:7A:C3:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3fd79230-8b15-3843-b22f-fa52a7724e39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.53.112/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:0c:7d:fc:eb:27:0a:ef:4a:3d:97:d1:80:ce:04:4b:35:49: 0f:40:16:ef:60:6a:8b:1a:b1:6a:cd:30:ba:f1:3d:7b:b6:76: 3c:49:06:f5:45:20:31:1b:8f:a8:ec:fd:4d:15:d4:f0:6b:65: 72:1d:1f:e4:62:46:83:02:83:ad:ed:e1:e7:5c:72:6b:5b:e1: 20:d7:ff:c0:62:75:74:b3:41:b2:d6:1f:6f:80:0b:e0:de:ce: db:b9:92:eb:c1:4e:0d:c9:a8:e6:5a:16:17:db:63:8d:16:ab: d3:c3:6a:74:4f:e3:86:e3:a5:33:81:4b:4d:c8:2e:07:05:78: 61:8f:37:46:01:80:f7:e3:6a:4b:b9:29:4a:42:ad:53:9e:c7: 38:95:7f:e5:b1:08:00:64:8e:07:54:1e:d7:d3:c5:b2:a6:78: f8:f1:d3:c6:0f:f3:21:7c:98:89:2d:5d:d2:82:b6:4b:eb:36: 64:19:62:46:58:9c:0a:19:ba:35:27:d2:9d:60:ee:5d:d5:5a: d2:07:6c:e0:2d:b4:83:ab:31:23:97:c9:a1:c9:0f:bb:06:5e: 0f:f0:2e:c9:12:a7:43:ba:0b:60:08:17:cc:1d:66:1a:f4:74: 3c:22:96:12:0d:c4:2e:bd:ef:ee:b0:cf:d2:99:ba:bf:cb:ac: ef:5d:ef:2d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2msDAkx0ino/yhYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk MmVhYjg3MDEtNjVlNC00ZGVlLWI0NDgtNWExMzQ4ZGZmYTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK3V31dSBi41aUMxMh2cI8OxU7XUm2H1M8JN xJOzMHTNPuBUF30NobpNku6xGyDPQNjflJ8WIrKATvDFVY2++3Y7GJPo2+sC2p67 XU6QVFoygZ6sDmIp5YvTXXfIwzolleuO1hrwNY5sKCiwiTamOdYslx1RNVDnSBNj nDwFSAwdoA7BQleXrm4vozQ7B1VDoFOImar4rikbqBN1Ptm0FMLLLsSI/RJ48nn0 pDVID9nIX8t6KwNRlLVzqxO12VyruCLhr0kPN2FRcG7cj1i1yMKEM84UpcUGRhTY GpX9vcM/l4kJgGG+SI88RDb1Gls+uo/F5KDL6zglcdAO0h7mHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAV3Rver2grSwum79b2rjw5JesOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2ZkNzkyMzAtOGIxNS0z ODQzLWIyMmYtZmE1MmE3NzI0ZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfo1cDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC8DH386ycK70o9l9GAzgRLNUkPQBbvYGqLGrFqzTC68T17tnY8SQb1 RSAxG4+o7P1NFdTwa2VyHR/kYkaDAoOt7eHnXHJrW+Eg1//AYnV0s0Gy1h9vgAvg 3s7buZLrwU4NyajmWhYX22ONFqvTw2p0T+OG46UzgUtNyC4HBXhhjzdGAYD342pL uSlKQq1Tnsc4lX/lsQgAZI4HVB7X08Wypnj48dPGD/MhfJiJLV3SgrZL6zZkGWJG WJwKGbo1J9KdYO5d1VrSB2zgLbSDqzEjl8mhyQ+7Bl4P8C7JEqdDugtgCBfMHWYa 9HQ8IpYSDcQuve/usM/Smbq/y6zvXe8t -----END CERTIFICATE-----Generated at Wed May 13 08:38:37 2026 by rpki-client