$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d7629e57-fb1d-3896-a762-8a600abdc3fa.roa File: d7629e57-fb1d-3896-a762-8a600abdc3fa.roa (raw, json) Hash identifier: pGCXGJhcdtMvvr9c41NDGJWnBJHMXj+Z3UlzXuSqEWs= Subject key identifier: D1:33:AB:A0:D2:C1:4F:65:6A:11:4F:6F:FA:20:39:DA:E6:53:31:19 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F43DD6D9D02A74F9E12C29100 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d7629e57-fb1d-3896-a762-8a600abdc3fa.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 148996 IP address blocks: 128.242.122.0/23 maxlen: 23 128.242.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:6d:9d:02:a7:4f:9e:12:c2:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=99960caf-8167-4b07-8e7b-65b50801cb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b6:e6:98:d2:65:a5:9d:b3:4f:f7:00:dd:c5: 20:a6:d3:1f:59:36:f9:21:e3:5d:bc:6c:52:79:4b: 69:9f:7e:23:d0:ae:71:02:44:68:16:87:46:28:9b: a9:fc:9b:40:9d:a6:11:96:3d:50:6f:4c:e1:2c:3d: 5a:87:30:e3:4c:7e:8a:2d:5d:83:43:2c:cf:88:40: d4:cc:1a:00:8d:a7:d7:4c:56:ad:c9:b3:86:9c:40: 8e:65:89:73:b5:05:8f:dd:9f:84:ed:e2:47:1d:b3: ed:a4:0d:68:80:44:cf:d2:89:4f:fb:99:30:d5:9b: 9e:f3:84:40:75:77:3e:03:ec:5b:16:01:69:82:c1: ad:43:d6:e5:96:f2:f4:46:da:db:88:f6:ca:d6:5a: 2d:1d:d9:84:7d:f4:d0:77:7b:57:73:90:8a:4b:7a: a1:52:fd:13:67:22:26:ca:86:61:06:75:07:51:86: 10:95:ca:32:98:44:41:0f:8d:06:ec:55:dc:04:fc: 73:59:6f:33:fd:3b:94:5e:1e:c8:43:25:47:c5:2d: 28:aa:22:4d:22:5b:a9:67:b2:ec:fc:56:ab:78:88: 85:06:be:5d:1e:ff:79:32:88:c8:f4:35:bf:79:89: 07:56:de:c1:3f:75:c6:c5:cc:9e:e1:98:d7:06:fc: ba:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:33:AB:A0:D2:C1:4F:65:6A:11:4F:6F:FA:20:39:DA:E6:53:31:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d7629e57-fb1d-3896-a762-8a600abdc3fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.122.0-128.242.125.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:81:93:17:bb:e8:5a:93:6c:69:7c:7a:e3:6b:fa:e5:a7:49: 75:dc:ff:1b:1b:49:af:b0:91:b7:ee:69:b7:f3:aa:11:a9:29: 0e:a1:66:47:99:ac:15:a0:71:2b:f1:b7:1f:77:f3:d1:5e:b0: 05:d2:c9:d8:7d:39:f6:2b:30:85:af:88:13:8c:74:f1:8d:04: da:21:49:de:a2:01:49:5a:0b:92:71:61:66:a7:8d:b0:4e:c7: b9:dc:7b:9e:d7:9c:a5:34:f9:d1:43:1c:75:dd:88:a3:c2:d5: 59:0d:b7:14:f5:c1:5c:78:c4:75:85:c1:93:d7:de:62:07:a9: 4c:19:a7:a7:cd:7b:f4:6c:ee:fb:21:8a:94:bf:1c:38:8f:3a: 50:2b:8b:2d:45:c1:d5:24:ce:6d:c3:ce:b5:07:e3:9e:56:48: c1:93:e9:2f:a8:f1:74:84:f4:18:83:83:97:6f:7b:4e:fd:b6: 4f:b0:7d:9e:af:b5:88:8e:dd:a9:3a:d2:dc:d3:8d:f4:55:06: 4c:b8:ca:63:c2:e3:6f:83:5f:63:f4:89:21:ba:58:9d:30:10: f5:f0:7a:cc:97:df:cf:2d:05:30:6f:d7:8d:02:a8:cf:90:d9: d2:99:cd:d1:7c:3a:5c:62:10:90:68:d8:9e:d8:a1:7f:2f:d6: e9:ae:20:21 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9D3W2dAqdPnhLCkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk OTk5NjBjYWYtODE2Ny00YjA3LThlN2ItNjViNTA4MDFjYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7bmmNJlpZ2zT/cA3cUgptMfWTb5IeNdvGxS eUtpn34j0K5xAkRoFodGKJup/JtAnaYRlj1Qb0zhLD1ahzDjTH6KLV2DQyzPiEDU zBoAjafXTFatybOGnECOZYlztQWP3Z+E7eJHHbPtpA1ogETP0olP+5kw1Zue84RA dXc+A+xbFgFpgsGtQ9bllvL0RtrbiPbK1lotHdmEffTQd3tXc5CKS3qhUv0TZyIm yoZhBnUHUYYQlcoymERBD40G7FXcBPxzWW8z/TuUXh7IQyVHxS0oqiJNIlupZ7Ls /FareIiFBr5dHv95MojI9DW/eYkHVt7BP3XGxcye4ZjXBvy6NwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFNEzq6DSwU9lahFPb/ogOdrmUzEZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDc2MjllNTctZmIxZC0z ODk2LWE3NjItOGE2MDBhYmRjM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGA8noD BAGA8nwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAgIGTF7voWpNsaXx642v65adJddz/GxtJr7CRt+5pt/Oq EakpDqFmR5msFaBxK/G3H3fz0V6wBdLJ2H059iswha+IE4x08Y0E2iFJ3qIBSVoL knFhZqeNsE7Hudx7ntecpTT50UMcdd2Io8LVWQ23FPXBXHjEdYXBk9feYgepTBmn p8179Gzu+yGKlL8cOI86UCuLLUXB1STObcPOtQfjnlZIwZPpL6jxdIT0GIODl297 Tv22T7B9nq+1iI7dqTrS3NON9FUGTLjKY8Ljb4NfY/SJIbpYnTAQ9fB6zJffzy0F MG/XjQKoz5DZ0pnN0Xw6XGIQkGjYntihfy/W6a4gIQ== -----END CERTIFICATE-----Generated at Wed Sep 23 03:04:41 2026 by rpki-client