$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/885503bb-67f7-33bb-a275-0063d04ac58e.roa File: 885503bb-67f7-33bb-a275-0063d04ac58e.roa (raw, json) Hash identifier: Kt0fmJt/0lWj8q2kJdKnhXHyRc0UgEWLXk9RotreMzU= Subject key identifier: 77:A9:8B:45:28:13:ED:5C:1D:FB:7C:35:0F:7E:07:1D:25:EE:C8:16 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E5FDF5A384E1748CD1F4A92C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/885503bb-67f7-33bb-a275-0063d04ac58e.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 2914 IP address blocks: 129.250.53.0/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:5a:38:4e:17:48:cd:1f:4a:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=2f4199c7-fe9e-48f0-acf4-c74a3fb7a370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6a:b4:42:2f:5b:0b:c2:cf:a2:b9:dc:2a:e4: 3f:3f:37:d9:2c:dd:ce:e5:b6:34:14:bb:df:04:40: 4a:2a:8b:bc:72:3c:6f:19:49:92:1f:7a:4b:2d:5e: 57:db:61:cf:84:0e:e1:ba:ae:82:a1:57:f9:a8:a0: d8:a3:31:62:76:6d:b5:8e:a6:37:b5:30:5b:db:56: 6f:6b:64:68:c4:89:4d:21:c6:6a:45:25:3e:ee:f4: b3:6f:b1:03:07:02:82:73:34:f5:81:3e:89:f5:6b: 74:fe:58:b3:90:f9:45:97:bf:26:c9:8c:c8:a9:1b: 70:29:54:4f:06:4f:70:7a:06:8c:86:2e:44:b7:f7: 05:65:7c:58:2b:b9:d5:59:ad:de:26:44:77:24:4c: 7f:86:3b:25:0d:13:ca:c7:ca:4f:54:5e:56:29:18: 28:cd:0d:96:c3:39:9e:ac:c0:f7:05:fc:5f:e2:80: ff:7e:73:f5:4b:d1:3e:23:84:e3:0f:fb:29:23:25: ff:6b:94:78:d9:8b:05:bd:88:13:c5:69:4e:18:64: 48:90:37:6e:87:d0:17:8d:bf:32:09:7f:7a:04:c0: 93:3c:07:fe:b7:4c:44:eb:42:19:63:98:18:0e:0e: 49:26:a5:56:0a:62:f8:65:f2:80:a1:f5:87:a0:a0: e4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A9:8B:45:28:13:ED:5C:1D:FB:7C:35:0F:7E:07:1D:25:EE:C8:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/885503bb-67f7-33bb-a275-0063d04ac58e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.53.0/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:86:fc:04:b7:be:44:a6:4a:33:0b:d4:86:ea:a1:91:b7:58: 45:22:1a:59:64:bc:ca:78:2c:30:69:9c:60:72:ad:23:16:db: 83:6b:a3:b7:7b:05:86:40:89:26:7d:37:6b:e0:ff:e6:f2:cb: 10:72:ee:83:96:c6:21:3e:e5:a6:04:0b:f1:b7:0d:0b:a2:16: 11:35:a5:f3:d5:92:48:73:79:58:fa:19:75:ec:8f:cb:59:0b: 08:0c:d5:42:80:13:88:df:ad:76:b2:5c:18:c1:bb:d1:24:5f: 55:83:55:a0:2c:87:ca:90:f5:60:99:cd:2f:8b:73:ad:40:84: 0c:b1:76:0d:10:87:26:05:0f:98:ae:cf:e3:71:82:73:38:7e: 66:6b:0c:25:22:79:12:72:e2:50:4f:c8:3e:dc:f0:0e:15:e6: 19:3d:59:70:24:7e:29:a8:19:e6:4a:91:64:fb:69:c1:c6:f3: 86:b1:14:1b:8f:04:30:eb:7a:64:6e:95:68:70:2a:a3:b7:f6: 06:09:08:2a:1b:56:6f:ad:47:df:85:b9:b8:d6:6a:33:18:96: 68:77:45:5e:d8:be:c7:c2:92:78:db:9b:20:a7:77:d2:89:a8: f6:00:ad:48:3d:2a:18:86:32:95:e9:04:82:34:fb:1e:09:26: 01:7a:43:ee -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5f31o4ThdIzR9KksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk MmY0MTk5YzctZmU5ZS00OGYwLWFjZjQtYzc0YTNmYjdhMzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2q0Qi9bC8LPorncKuQ/PzfZLN3O5bY0FLvf BEBKKou8cjxvGUmSH3pLLV5X22HPhA7huq6CoVf5qKDYozFidm21jqY3tTBb21Zv a2RoxIlNIcZqRSU+7vSzb7EDBwKCczT1gT6J9Wt0/lizkPlFl78myYzIqRtwKVRP Bk9wegaMhi5Et/cFZXxYK7nVWa3eJkR3JEx/hjslDRPKx8pPVF5WKRgozQ2Wwzme rMD3Bfxf4oD/fnP1S9E+I4TjD/spIyX/a5R42YsFvYgTxWlOGGRIkDduh9AXjb8y CX96BMCTPAf+t0xE60IZY5gYDg5JJqVWCmL4ZfKAofWHoKDkIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHepi0UoE+1cHft8NQ9+Bx0l7sgWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODg1NTAzYmItNjdmNy0z M2JiLWEyNzUtMDA2M2QwNGFjNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFgfo1ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCXhvwEt75EpkozC9SG6qGRt1hFIhpZZLzKeCwwaZxgcq0jFtuDa6O3 ewWGQIkmfTdr4P/m8ssQcu6DlsYhPuWmBAvxtw0LohYRNaXz1ZJIc3lY+hl17I/L WQsIDNVCgBOI3612slwYwbvRJF9Vg1WgLIfKkPVgmc0vi3OtQIQMsXYNEIcmBQ+Y rs/jcYJzOH5mawwlInkScuJQT8g+3PAOFeYZPVlwJH4pqBnmSpFk+2nBxvOGsRQb jwQw63pkbpVocCqjt/YGCQgqG1ZvrUffhbm41mozGJZod0Ve2L7HwpJ425sgp3fS iaj2AK1IPSoYhjKV6QSCNPseCSYBekPu -----END CERTIFICATE-----Generated at Thu Jul 23 21:50:15 2026 by rpki-client