$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/25576007-f9bd-3d6e-a7e0-7366659c5843.roa File: 25576007-f9bd-3d6e-a7e0-7366659c5843.roa (raw, json) Hash identifier: G8wJipgzW0Nea6angh3R1kg5QRf5oS6vM+YdpgT5dOs= Subject key identifier: 6B:3E:89:B4:59:83:CC:0F:95:62:17:BD:F5:62:36:3E:88:44:69:8F Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584E5D14B460DB2736B4529BC3C0 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/25576007-f9bd-3d6e-a7e0-7366659c5843.roa Signing time: Thu 02 Jul 2026 09:00:12 +0000 ROA not before: Thu 02 Jul 2026 09:00:12 +0000 ROA not after: Wed 30 Sep 2026 09:00:12 +0000 asID: 14061 IP address blocks: 129.212.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:14:b4:60:db:27:36:b4:52:9b:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Jul 2 09:00:12 2026 GMT Not After : Sep 30 09:00:12 2026 GMT Subject: CN=15ca1d16-e398-4649-b3e9-15fd76a69e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:05:aa:9d:d4:04:c7:e2:50:b5:16:a3:07:1b: b9:ed:d4:5d:c1:ff:e6:de:72:70:a3:c3:d7:d2:87: ac:e6:3b:72:ab:f1:ae:8f:f7:9a:c1:ad:c6:38:49: 64:35:d7:7f:56:2e:9e:59:2a:ae:70:1d:c3:b4:a0: 09:fc:17:39:1d:23:cb:ea:9c:c8:92:2f:f0:64:6f: db:34:c7:19:8e:31:50:ba:fc:d4:3f:de:1e:a6:a3: 25:15:e4:21:88:fc:21:2f:0d:5b:c4:eb:57:5b:79: 15:5d:36:47:cf:6b:bc:b6:f0:af:80:79:c8:a3:99: 57:1a:b5:40:5b:fa:c7:a8:cb:21:49:a4:8b:db:72: 18:ba:3a:e6:ca:e0:e3:26:b7:b4:f7:a4:25:f0:88: 3d:83:56:4b:91:03:62:9a:fd:32:6d:ca:0e:ea:73: 99:87:b1:6d:6c:b5:a5:11:8a:55:79:57:84:7a:4e: ce:e1:8f:b6:b8:8f:42:e5:e3:c9:f5:a6:58:62:94: b2:27:17:40:91:b4:c4:21:f8:c8:d8:0e:10:9e:f7: b3:1d:fd:7a:38:ef:6a:5b:0d:58:a8:d5:f9:59:13: 2e:c8:1a:b5:23:97:fb:52:36:b4:b3:73:f2:5b:a2: 3f:5a:76:8f:d0:d0:1c:a3:be:25:d0:6b:73:c1:4f: e9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3E:89:B4:59:83:CC:0F:95:62:17:BD:F5:62:36:3E:88:44:69:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/25576007-f9bd-3d6e-a7e0-7366659c5843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 129.212.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:73:76:b0:09:08:f3:02:8d:cc:65:a5:7f:4b:65:10:61:19: da:58:7f:bb:5d:ac:fa:65:8e:7f:2d:67:4f:53:83:04:87:a3: 04:bf:1c:b0:a3:82:1e:96:75:01:2c:73:67:ba:97:df:59:82: 0a:2f:1e:53:c5:35:56:23:a2:18:27:ac:e2:f9:0a:53:80:1a: 25:03:5d:93:92:fd:63:59:f0:0c:26:b8:ce:e5:78:b7:be:04: f3:ea:da:df:97:93:85:12:14:cd:b5:47:a3:b4:a2:1c:39:e7: 27:50:69:4f:b4:98:0a:03:cf:d5:9b:0c:00:ba:ed:53:80:d9: ce:9f:15:32:9a:4d:3a:b6:2d:ba:89:04:82:cc:e2:28:f5:16: 78:60:4c:55:20:7b:17:b8:a6:21:c3:b5:b6:a3:64:21:c1:37: cd:50:a9:86:44:bd:d1:57:6a:2a:db:ff:d9:77:7d:2b:80:a9: c7:0f:17:4e:74:a9:d1:09:8a:f4:60:93:9a:44:74:2b:69:35: 9f:76:51:ea:b0:60:9b:35:02:9f:8f:e8:ec:c8:5a:67:35:c1: 59:5a:32:c1:ec:2d:04:7a:af:37:06:93:ef:ca:fd:94:0e:d5: 71:40:93:6c:f8:9f:42:02:d1:10:af:47:49:7f:d9:e1:dd:7e: 98:15:36:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5dFLRg2yc2tFKbw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk MTVjYTFkMTYtZTM5OC00NjQ5LWIzZTktMTVmZDc2YTY5ZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAWqndQEx+JQtRajBxu57dRdwf/m3nJwo8PX 0oes5jtyq/Guj/eawa3GOElkNdd/Vi6eWSqucB3DtKAJ/Bc5HSPL6pzIki/wZG/b NMcZjjFQuvzUP94epqMlFeQhiPwhLw1bxOtXW3kVXTZHz2u8tvCvgHnIo5lXGrVA W/rHqMshSaSL23IYujrmyuDjJre096Ql8Ig9g1ZLkQNimv0ybcoO6nOZh7FtbLWl EYpVeVeEek7O4Y+2uI9C5ePJ9aZYYpSyJxdAkbTEIfjI2A4QnvezHf16OO9qWw1Y qNX5WRMuyBq1I5f7Uja0s3PyW6I/WnaP0NAco74l0GtzwU/prwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGs+ibRZg8wPlWIXvfViNj6IRGmPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMjU1NzYwMDctZjliZC0z ZDZlLWE3ZTAtNzM2NjY1OWM1ODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgdSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5zdrAJCPMCjcxlpX9LZRBhGdpYf7tdrPpljn8tZ09TgwSHowS/HLCj gh6WdQEsc2e6l99ZggovHlPFNVYjohgnrOL5ClOAGiUDXZOS/WNZ8AwmuM7leLe+ BPPq2t+Xk4USFM21R6O0ohw55ydQaU+0mAoDz9WbDAC67VOA2c6fFTKaTTq2LbqJ BILM4ij1FnhgTFUgexe4piHDtbajZCHBN81QqYZEvdFXairb/9l3fSuAqccPF050 qdEJivRgk5pEdCtpNZ92UeqwYJs1Ap+P6OzIWmc1wVlaMsHsLQR6rzcGk+/K/ZQO 1XFAk2z4n0IC0RCvR0l/2eHdfpgVNgw= -----END CERTIFICATE-----Generated at Thu Jul 2 23:16:10 2026 by rpki-client