$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a3d64299-88e0-30b0-86eb-d53a0c17e673.roa File: a3d64299-88e0-30b0-86eb-d53a0c17e673.roa (raw, json) Hash identifier: PDHYZHbBWD3KKIY03cgKDnFoLORgHs9l62hR5nBD3Pc= Subject key identifier: 68:33:D3:73:79:C2:98:CE:C2:77:CB:D0:FE:C4:B8:86:99:E9:8E:D8 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584DA6B0081550CA5F7BBE1B6A80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a3d64299-88e0-30b0-86eb-d53a0c17e673.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 3939 IP address blocks: 129.250.15.160/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:08:15:50:ca:5f:7b:be:1b:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=4f154246-806d-4f61-bc0b-4894bfc0fd26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3b:ba:3c:68:13:ba:3f:e5:0d:31:f2:7a:a6: 81:24:3a:bb:ae:61:59:83:b1:1d:3b:72:03:5f:4d: ea:54:8e:05:35:6a:04:62:20:33:5c:97:dc:77:a2: e8:1f:3b:58:cc:ec:12:c9:03:a0:32:8e:d3:74:25: b4:b9:d3:1d:7d:8c:88:f6:f2:2a:18:62:2d:9b:2b: 1b:aa:cf:1f:7f:76:51:58:9b:d4:a1:86:6d:af:18: 38:f5:a5:2f:57:f0:bc:41:b5:22:72:c7:ae:c3:dd: 11:23:48:03:ab:8e:69:ee:aa:a0:77:31:15:99:5b: 98:f5:04:98:1a:36:b4:c3:1d:67:1a:ea:62:ea:7d: 0c:a2:c7:0c:91:20:15:5d:0d:2a:9c:e5:ae:53:0b: 4b:cb:03:f4:80:95:e3:17:a3:ef:bd:4d:07:6b:3f: e8:03:0c:3c:ab:27:1d:39:a6:f4:05:4f:86:79:95: 24:71:30:d8:cc:e1:47:3d:c3:49:7e:cc:a7:de:c2: b5:bb:4f:ee:d2:34:fe:d0:b0:4d:a1:23:dd:00:82: d3:f3:4b:11:6f:1c:b0:66:b8:5f:3a:1b:bc:5b:1d: 13:55:18:54:20:14:7a:35:c2:14:c9:b9:9b:3c:f4: 2f:62:28:7d:2d:71:b8:07:6f:f5:80:fb:89:a7:82: 76:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:33:D3:73:79:C2:98:CE:C2:77:CB:D0:FE:C4:B8:86:99:E9:8E:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a3d64299-88e0-30b0-86eb-d53a0c17e673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.15.160/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:2f:45:2b:be:13:a0:a0:79:e3:73:08:f3:33:e5:02:b9:e2: 6f:21:13:03:ba:ba:f9:ff:eb:a1:cd:1f:30:77:90:d8:23:aa: d2:ce:15:3b:09:b0:d9:9e:ca:8f:cc:97:aa:2a:78:94:ca:b3: 2b:df:24:9c:7f:91:b1:9b:19:0b:08:74:09:2b:4c:d5:99:79: fa:b0:2a:36:d2:be:53:a6:16:1b:d7:bc:07:2a:1e:a1:a3:f3: b9:04:57:07:d0:06:cc:44:ed:f5:67:62:ec:cf:26:83:30:4a: 46:13:4f:d8:bd:77:a7:b0:be:98:c8:85:15:a5:27:a3:77:88: 1d:e0:8f:99:f3:5b:84:56:1b:9e:a4:6f:52:91:84:0b:ea:f7: a8:20:c4:ae:d0:7b:19:38:1e:58:c2:b5:12:e0:a3:db:b0:25: 11:98:da:f5:17:84:1b:31:63:6a:ef:6b:d4:7b:2b:ab:93:25: 93:2d:2e:d6:9d:52:8b:c7:f6:8c:b1:2e:98:43:c7:33:80:1b: c3:87:e2:67:79:52:3d:74:a5:2c:36:f5:36:72:44:08:df:59: 4d:b5:bb:48:bc:d9:2f:d8:d8:31:4e:43:db:57:30:0b:7e:34: b1:c5:7b:96:1b:95:fc:fc:15:dd:77:86:ac:26:cd:c1:2a:b4: 23:d6:65:40 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2msAgVUMpfe74baoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NGYxNTQyNDYtODA2ZC00ZjYxLWJjMGItNDg5NGJmYzBmZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTu6PGgTuj/lDTHyeqaBJDq7rmFZg7EdO3ID X03qVI4FNWoEYiAzXJfcd6LoHztYzOwSyQOgMo7TdCW0udMdfYyI9vIqGGItmysb qs8ff3ZRWJvUoYZtrxg49aUvV/C8QbUicseuw90RI0gDq45p7qqgdzEVmVuY9QSY Gja0wx1nGupi6n0MoscMkSAVXQ0qnOWuUwtLywP0gJXjF6PvvU0Haz/oAww8qycd Oab0BU+GeZUkcTDYzOFHPcNJfsyn3sK1u0/u0jT+0LBNoSPdAILT80sRbxywZrhf Ohu8Wx0TVRhUIBR6NcIUybmbPPQvYih9LXG4B2/1gPuJp4J2wwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGgz03N5wpjOwnfL0P7EuIaZ6Y7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTNkNjQyOTktODhlMC0z MGIwLTg2ZWItZDUzYTBjMTdlNjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFgfoPoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQABL0UrvhOgoHnjcwjzM+UCueJvIRMDurr5/+uhzR8wd5DYI6rSzhU7 CbDZnsqPzJeqKniUyrMr3yScf5GxmxkLCHQJK0zVmXn6sCo20r5TphYb17wHKh6h o/O5BFcH0AbMRO31Z2LszyaDMEpGE0/YvXensL6YyIUVpSejd4gd4I+Z81uEVhue pG9SkYQL6veoIMSu0HsZOB5YwrUS4KPbsCURmNr1F4QbMWNq72vUeyurkyWTLS7W nVKLx/aMsS6YQ8czgBvDh+JneVI9dKUsNvU2ckQI31lNtbtIvNkv2NgxTkPbVzAL fjSxxXuWG5X8/BXdd4asJs3BKrQj1mVA -----END CERTIFICATE-----Generated at Wed May 13 09:04:55 2026 by rpki-client