$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5299180-b70f-3125-a781-6b51c883c759.roa File: e5299180-b70f-3125-a781-6b51c883c759.roa (raw, json) Hash identifier: A2VyC0dKa6BPfOsmCvrSoaip4fHe+ZFce5hycBnUbto= Subject key identifier: 8C:B2:64:C8:9F:C1:C6:EA:F5:11:A5:8A:E5:DF:1A:31:6A:45:7A:17 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F6292DEB48D2AFFF1E12BF100 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5299180-b70f-3125-a781-6b51c883c759.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 204670 IP address blocks: 128.121.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:de:b4:8d:2a:ff:f1:e1:2b:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=29b1c390-f3e2-4686-936f-c492825a6a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a0:f4:3c:48:05:d8:64:ed:ad:62:92:ed:1f: 77:d6:eb:3e:e2:0e:9f:f4:54:48:2e:1f:46:72:02: d0:6d:2d:37:ac:d7:32:61:a7:2e:03:1c:7c:64:6b: 1e:4f:06:ea:a4:5c:0e:93:8d:e4:30:c0:a6:81:4c: fe:75:57:2c:26:5a:2d:ba:13:0b:56:01:50:9d:dc: 76:f3:56:23:e6:ce:a5:b1:4b:0e:fa:8c:1f:f3:38: 0d:87:0f:44:ef:7c:90:25:9f:39:a8:63:24:c4:25: 74:f5:28:fb:4d:ff:7f:0d:c7:d8:3c:30:04:f3:63: 3e:c8:73:3e:42:b2:a8:96:ac:3a:e6:b2:01:e6:9f: 4a:17:92:30:1b:38:89:fa:40:11:96:e3:3e:95:66: e9:bf:c5:be:92:83:69:bf:58:d2:9c:4f:73:cf:67: e8:48:12:bc:a7:90:a1:20:d7:0e:92:64:72:aa:27: 1a:be:2c:b3:98:64:d7:42:a5:55:29:99:74:e9:bb: 10:71:e4:d6:bd:c7:d3:7f:1d:fc:7b:ef:85:bf:14: 20:fb:31:23:66:d1:20:b3:2a:ac:4d:6b:3f:8c:ce: 92:e4:e4:09:1e:7f:bc:28:93:57:5c:2b:aa:f0:b0: 55:75:44:08:80:7f:16:b5:af:ff:d2:0b:a9:ac:92: d8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B2:64:C8:9F:C1:C6:EA:F5:11:A5:8A:E5:DF:1A:31:6A:45:7A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5299180-b70f-3125-a781-6b51c883c759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:02:eb:c0:59:d8:0a:42:99:eb:ef:17:df:ce:73:7e:5b:15: dd:c6:36:4b:59:30:2b:4c:f4:64:99:74:59:a4:ee:56:24:8b: f1:af:e9:89:23:4e:b6:94:c3:c8:e5:3b:e6:95:c1:64:ef:14: 4b:8c:41:cf:af:e6:71:6a:26:a9:87:18:51:92:4a:90:b8:19: 95:54:12:40:df:d5:db:1d:cd:af:c1:27:b7:9f:27:f8:ab:1d: 15:a6:12:7f:05:67:24:ee:38:ad:eb:4b:e4:35:ef:97:e8:1d: 0f:1a:39:5c:20:66:ff:0b:e2:10:41:ba:5f:e1:4f:7f:a1:07: 3f:85:f3:a5:f8:82:ca:7a:a1:f2:d9:14:0c:1f:9f:51:22:37: fa:18:9b:9b:c5:3b:93:d4:73:49:eb:7a:ca:6c:a3:78:9f:c3: e6:ad:26:8d:88:12:1b:ba:dd:41:6d:f1:2a:a4:ff:b8:09:ea: f5:ee:58:da:bb:9c:66:de:c0:6a:c8:ad:8e:85:14:65:d7:28: 5c:04:4d:e3:a7:73:30:f0:aa:d4:70:e9:05:1e:6e:fd:75:54: f6:ed:22:f2:8a:02:ba:a7:c3:f1:67:c5:64:6c:77:33:1c:f2: 01:ea:bd:46:e2:10:cf:8f:39:3f:8f:eb:7f:55:31:0c:69:93: 94:ca:80:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikt60jSr/8eEr8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MjliMWMzOTAtZjNlMi00Njg2LTkzNmYtYzQ5MjgyNWE2YTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaD0PEgF2GTtrWKS7R931us+4g6f9FRILh9G cgLQbS03rNcyYacuAxx8ZGseTwbqpFwOk43kMMCmgUz+dVcsJlotuhMLVgFQndx2 81Yj5s6lsUsO+owf8zgNhw9E73yQJZ85qGMkxCV09Sj7Tf9/DcfYPDAE82M+yHM+ QrKolqw65rIB5p9KF5IwGziJ+kARluM+lWbpv8W+koNpv1jSnE9zz2foSBK8p5Ch INcOkmRyqicaviyzmGTXQqVVKZl06bsQceTWvcfTfx38e++FvxQg+zEjZtEgsyqs TWs/jM6S5OQJHn+8KJNXXCuq8LBVdUQIgH8Wta//0guprJLYdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyyZMifwcbq9RGliuXfGjFqRXoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZTUyOTkxODAtYjcwZi0z MTI1LWE3ODEtNmI1MWM4ODNjNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgC68BZ2ApCmevvF9/Oc35bFd3GNktZMCtM9GSZdFmk7lYki/Gv6Ykj TraUw8jlO+aVwWTvFEuMQc+v5nFqJqmHGFGSSpC4GZVUEkDf1dsdza/BJ7efJ/ir HRWmEn8FZyTuOK3rS+Q175foHQ8aOVwgZv8L4hBBul/hT3+hBz+F86X4gsp6ofLZ FAwfn1EiN/oYm5vFO5PUc0nrespso3ifw+atJo2IEhu63UFt8Sqk/7gJ6vXuWNq7 nGbewGrIrY6FFGXXKFwETeOnczDwqtRw6QUebv11VPbtIvKKArqnw/FnxWRsdzMc 8gHqvUbiEM+POT+P639VMQxpk5TKgA8= -----END CERTIFICATE-----Generated at Fri Oct 9 18:51:06 2026 by rpki-client