$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/88c96948-a5a4-3002-ab65-1978d3810e9a.roa File: 88c96948-a5a4-3002-ab65-1978d3810e9a.roa (raw, json) Hash identifier: 7CaaF6B6/sQPTH54SQHbx2ss4OIazSZn+IVkixXY9OI= Subject key identifier: 68:44:1B:F8:7D:A8:03:FC:33:78:7A:22:37:76:1B:F2:68:C6:CE:08 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E5FDF5A1377EE68609542FA80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/88c96948-a5a4-3002-ab65-1978d3810e9a.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 2914 IP address blocks: 129.250.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:5a:13:77:ee:68:60:95:42:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=0c5c9127-fe48-4c29-8079-cb4df5d5a2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3e:c4:ab:01:62:9c:5c:03:9a:6f:38:d0:8e: 1f:0b:0f:21:36:7a:70:59:20:9f:6f:53:5f:59:5f: 1a:7c:7e:f1:67:af:ab:13:cc:8d:3f:99:7e:a6:20: 7d:52:e4:dc:cb:3b:ce:ed:1b:44:40:9b:50:62:a1: c1:cf:41:35:59:72:71:9a:fc:d9:39:7c:9e:23:4e: 4c:e5:a3:55:a2:2a:00:50:c7:4e:97:9b:c2:b1:79: 78:c7:8b:78:29:fb:f0:f5:f5:88:c0:da:c6:83:83: 84:a3:57:0b:28:e5:1f:8a:84:8b:27:40:ad:2c:3e: cc:67:11:0e:b1:25:14:6d:d0:4f:91:c0:2e:13:00: b1:0b:34:5f:24:db:60:89:c3:ad:83:92:75:4f:21: ca:68:ed:58:1b:ca:9a:09:f2:e1:7f:ab:8e:96:71: bd:ca:6d:ec:ec:2c:94:3b:cc:75:85:88:aa:6d:87: b1:70:eb:e2:68:e8:16:a6:b1:39:41:17:ec:9c:23: bb:31:38:87:b0:d1:67:0c:2c:86:4c:2b:6e:ae:1c: d2:c5:4f:12:66:5b:fa:b1:79:91:2d:fa:47:fd:42: 59:d7:71:80:b2:6e:9a:09:98:c9:b6:82:ba:45:8d: 89:7d:49:12:63:c9:7d:1d:10:7c:be:2b:78:07:00: 63:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:44:1B:F8:7D:A8:03:FC:33:78:7A:22:37:76:1B:F2:68:C6:CE:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/88c96948-a5a4-3002-ab65-1978d3810e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:44:c8:2c:58:37:c4:e2:73:30:4a:0c:49:59:34:cd:1b:68: c0:a9:8f:98:82:2c:f1:85:e1:d9:98:6d:0c:f6:64:27:ce:70: 52:78:52:c6:90:9b:10:3a:b0:11:07:7a:5a:a2:b2:7b:87:5d: b8:fe:32:62:ed:42:47:5a:c3:cc:9a:ce:5d:ba:70:81:4d:61: b8:c5:5a:48:3e:a5:85:f9:54:87:1a:76:e4:e8:6c:42:22:98: c4:d7:10:c7:87:84:ff:7b:0c:71:69:84:36:a1:6b:22:47:66: 34:7d:15:54:5a:45:9d:81:6f:aa:ea:4d:43:fb:83:cf:93:90: 86:b3:5a:dc:6a:cf:40:59:53:92:72:d9:4d:4d:bc:d4:20:4c: 17:78:5c:d1:44:d9:54:53:ac:c0:97:15:7d:0c:3a:17:b5:cb: e9:85:92:d8:4a:95:59:92:cb:2b:68:40:df:48:79:79:63:b8: c5:7d:74:c5:25:47:fd:14:ca:18:ed:74:7e:25:ac:bc:e3:f7: bf:7b:2c:f0:7a:1c:e5:85:02:b6:28:f8:18:95:93:82:11:b8: 98:09:5d:66:c2:fe:6e:ea:6b:c9:b8:b0:4e:4d:f1:1e:de:6b: ec:00:48:9a:5f:97:bd:3e:89:05:8d:c8:60:3f:66:e1:38:c5: 78:63:27:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f31oTd+5oYJVC+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk MGM1YzkxMjctZmU0OC00YzI5LTgwNzktY2I0ZGY1ZDVhMmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz7EqwFinFwDmm840I4fCw8hNnpwWSCfb1Nf WV8afH7xZ6+rE8yNP5l+piB9UuTcyzvO7RtEQJtQYqHBz0E1WXJxmvzZOXyeI05M 5aNVoioAUMdOl5vCsXl4x4t4Kfvw9fWIwNrGg4OEo1cLKOUfioSLJ0CtLD7MZxEO sSUUbdBPkcAuEwCxCzRfJNtgicOtg5J1TyHKaO1YG8qaCfLhf6uOlnG9ym3s7CyU O8x1hYiqbYexcOviaOgWprE5QRfsnCO7MTiHsNFnDCyGTCturhzSxU8SZlv6sXmR LfpH/UJZ13GAsm6aCZjJtoK6RY2JfUkSY8l9HRB8vit4BwBjLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhEG/h9qAP8M3h6Ijd2G/Joxs4IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODhjOTY5NDgtYTVhNC0z MDAyLWFiNjUtMTk3OGQzODEwZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgfogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZEyCxYN8TiczBKDElZNM0baMCpj5iCLPGF4dmYbQz2ZCfOcFJ4UsaQ mxA6sBEHelqisnuHXbj+MmLtQkdaw8yazl26cIFNYbjFWkg+pYX5VIcaduTobEIi mMTXEMeHhP97DHFphDahayJHZjR9FVRaRZ2Bb6rqTUP7g8+TkIazWtxqz0BZU5Jy 2U1NvNQgTBd4XNFE2VRTrMCXFX0MOhe1y+mFkthKlVmSyytoQN9IeXljuMV9dMUl R/0UyhjtdH4lrLzj9797LPB6HOWFArYo+BiVk4IRuJgJXWbC/m7qa8m4sE5N8R7e a+wASJpfl70+iQWNyGA/ZuE4xXhjJ1I= -----END CERTIFICATE-----Generated at Fri Jul 24 00:51:40 2026 by rpki-client