$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f94ec96a-c759-3d90-8e48-f3234e9a4b2b.roa File: f94ec96a-c759-3d90-8e48-f3234e9a4b2b.roa (raw, json) Hash identifier: is/OEH3DON8GRkZbICJsBNMgVGi/0/1/MdTbhkVcRXM= Subject key identifier: 08:4A:63:F9:BB:6D:72:5A:64:3D:93:3C:73:39:00:7F:96:92:25:DB Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F050CC6A566C058A2DB06FA80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f94ec96a-c759-3d90-8e48-f3234e9a4b2b.roa Signing time: Mon 31 Aug 2026 13:00:12 +0000 ROA not before: Mon 31 Aug 2026 13:00:12 +0000 ROA not after: Sun 29 Nov 2026 14:00:12 +0000 asID: 23013 IP address blocks: 128.241.0.168/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:05:0c:c6:a5:66:c0:58:a2:db:06:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 31 13:00:12 2026 GMT Not After : Nov 29 14:00:12 2026 GMT Subject: CN=351e84eb-7865-4192-b238-d6eeda0e8e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:22:6a:5f:17:1c:20:59:7f:02:f1:5c:4e:6e: 66:f2:89:c0:c4:84:25:8d:40:11:39:9a:07:7e:69: 1a:bc:04:7b:e3:2e:96:0f:d5:8e:dc:7e:b6:2d:7a: fb:9b:58:62:00:37:9b:67:3d:28:74:aa:f0:49:dd: 1e:c5:ef:80:8a:21:66:3d:a0:98:29:c8:96:f9:a3: d1:f0:ad:b6:2e:13:25:e6:6e:d0:1c:6b:b4:d4:7b: 08:2a:6f:5c:e8:00:51:ff:b7:f8:b4:e0:dc:71:21: 78:86:cf:98:f6:4e:c8:1e:92:f8:68:f4:09:c1:66: 6c:ab:9a:ca:a5:8b:d5:3c:81:22:e9:2c:0b:88:a8: e3:f6:e9:ef:e1:6c:c8:b9:35:8d:c3:d2:b0:02:86: a2:1a:98:c7:6d:cc:83:09:1c:d7:f4:e1:1f:25:bd: 0d:21:e2:a0:37:eb:a8:0a:dd:e5:8d:a4:74:74:98: 1a:be:41:ff:8a:ad:55:b3:e0:8a:43:ad:c1:87:67: b5:d5:a9:17:cd:ff:d8:28:c5:b6:94:f2:56:64:79: 6e:3f:96:af:da:6a:3c:02:88:cb:ac:bf:0f:25:3d: 6a:06:05:0d:46:ff:60:e7:8e:25:5f:f0:3e:17:45: 6e:99:69:1b:7a:dd:bf:9d:94:9f:0c:bb:bd:99:02: a7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4A:63:F9:BB:6D:72:5A:64:3D:93:3C:73:39:00:7F:96:92:25:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f94ec96a-c759-3d90-8e48-f3234e9a4b2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.241.0.168/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:18:5e:bf:5d:50:56:e3:a7:b2:e1:c6:54:20:89:c6:94:e9: 6c:91:f0:9b:78:33:ce:b0:47:72:f0:e7:54:78:a3:94:af:9e: 06:e4:7f:41:ce:89:99:2a:40:a2:37:54:10:0d:49:59:c2:4f: 6e:17:5e:4b:aa:fa:04:77:ab:e0:1e:24:42:c3:de:b2:bc:27: ce:df:2d:f1:4a:96:92:3e:d5:f1:2e:82:d0:e2:03:bc:09:f0: 7d:25:1b:3f:b3:2a:71:0a:0f:40:0b:02:25:b6:21:3f:7c:03: 1e:92:81:23:18:b7:a0:5d:d5:f9:88:bd:02:3a:27:b9:80:be: 99:28:26:87:4e:3d:16:68:81:b1:3e:14:31:fe:4c:30:e5:49: 79:3e:73:40:eb:a6:47:82:41:7f:c4:b9:dc:a7:b3:9f:f1:aa: 02:57:73:90:59:0e:7e:4d:32:56:13:46:db:6d:81:9d:f4:88: 00:b8:ca:7a:3e:19:78:9a:11:60:39:c4:76:d4:27:e1:6f:4c: 89:19:a4:ec:34:e7:4f:eb:96:33:d8:93:cf:54:43:05:cd:bd: 9a:46:9a:8c:d7:c7:10:63:6e:96:12:0d:64:5a:f7:88:4e:0a: a4:63:55:08:ca:8c:01:f9:26:40:42:4e:ff:ca:18:be:38:7a: 9b:a0:5a:e1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8FDMalZsBYotsG+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgzMTEzMDAxMloXDTI2MTEyOTE0MDAxMlowLzEtMCsGA1UEAxMk MzUxZTg0ZWItNzg2NS00MTkyLWIyMzgtZDZlZWRhMGU4ZTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriJqXxccIFl/AvFcTm5m8onAxIQljUAROZoH fmkavAR74y6WD9WO3H62LXr7m1hiADebZz0odKrwSd0exe+AiiFmPaCYKciW+aPR 8K22LhMl5m7QHGu01HsIKm9c6ABR/7f4tODccSF4hs+Y9k7IHpL4aPQJwWZsq5rK pYvVPIEi6SwLiKjj9unv4WzIuTWNw9KwAoaiGpjHbcyDCRzX9OEfJb0NIeKgN+uo Ct3ljaR0dJgavkH/iq1Vs+CKQ63Bh2e11akXzf/YKMW2lPJWZHluP5av2mo8AojL rL8PJT1qBgUNRv9g544lX/A+F0VumWkbet2/nZSfDLu9mQKn2wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAhKY/m7bXJaZD2TPHM5AH+WkiXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjk0ZWM5NmEtYzc1OS0z ZDkwLThlNDgtZjMyMzRlOWE0YjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDgPEAqDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCAGF6/XVBW46ey4cZUIInGlOlskfCbeDPOsEdy8OdUeKOUr54G5H9B zomZKkCiN1QQDUlZwk9uF15LqvoEd6vgHiRCw96yvCfO3y3xSpaSPtXxLoLQ4gO8 CfB9JRs/sypxCg9ACwIltiE/fAMekoEjGLegXdX5iL0COie5gL6ZKCaHTj0WaIGx PhQx/kww5Ul5PnNA66ZHgkF/xLncp7Of8aoCV3OQWQ5+TTJWE0bbbYGd9IgAuMp6 Phl4mhFgOcR21Cfhb0yJGaTsNOdP65Yz2JPPVEMFzb2aRpqM18cQY26WEg1kWveI TgqkY1UIyowB+SZAQk7/yhi+OHqboFrh -----END CERTIFICATE-----Generated at Tue Sep 29 14:53:54 2026 by rpki-client