$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0ba9dad0-01be-3700-ab1f-214f03dc7ec2.roa File: 0ba9dad0-01be-3700-ab1f-214f03dc7ec2.roa (raw, json) Hash identifier: ctiKNmLSfBqmtP7MCn5hnqH0+zT2IZmZ/gK1wV91Hcg= Subject key identifier: 2A:E7:F2:C2:73:E2:AF:B0:C5:FF:F9:66:EA:B4:76:16:B7:7B:B9:42 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFCACCE829D8DE937FA04DE00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0ba9dad0-01be-3700-ab1f-214f03dc7ec2.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 1225 IP address blocks: 129.250.53.64/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:ce:82:9d:8d:e9:37:fa:04:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=b7672566-9899-4a1e-95b4-21769aff437f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0a:78:c4:ad:97:18:64:aa:d9:3b:42:d0:37: a3:30:59:89:bf:13:62:9d:bf:a4:72:f9:ea:8f:e5: 76:bf:7c:7a:d9:31:e9:c9:8d:57:9c:02:a8:14:a9: 13:cb:20:1e:e7:d2:3e:3a:c7:75:6e:01:21:00:8f: e4:1a:fc:9a:6c:27:ee:7e:53:18:fc:13:f5:07:8e: e7:ed:52:1c:93:79:2e:1e:73:0e:80:e4:93:23:ea: 29:a0:06:96:c0:39:16:d7:0b:c8:b1:b1:b8:3c:ba: 4d:77:60:fa:f4:f6:02:8a:ce:c7:b6:b6:5e:6c:d8: 01:b3:65:c1:60:b1:48:13:c5:d8:30:3f:15:2c:19: ce:7b:b1:b3:99:bf:e5:38:4a:15:f4:43:a2:6a:f8: 60:86:ab:1a:b5:c1:32:45:6d:90:77:5b:73:0d:03: 8a:33:ed:da:22:2e:ce:df:b3:ab:86:25:89:fe:63: 15:1f:cf:be:22:2c:d8:f3:4f:6b:2e:1f:2e:46:fe: c5:02:27:fc:0c:3e:20:58:fc:a4:4d:5a:26:d9:a7: 36:76:3d:47:c5:5a:1f:77:4c:7c:3e:86:e3:7d:59: a1:5f:72:b6:52:a2:b4:4d:94:89:f3:f4:f6:66:61: ba:e5:78:dd:04:b9:18:76:8b:d8:43:e4:fe:49:2e: 6b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E7:F2:C2:73:E2:AF:B0:C5:FF:F9:66:EA:B4:76:16:B7:7B:B9:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0ba9dad0-01be-3700-ab1f-214f03dc7ec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.53.64/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:59:37:67:de:c2:07:5f:90:37:02:d3:ef:7b:60:9a:db:cd: 02:2b:a8:57:15:09:3d:f9:13:94:95:c9:5a:d6:1a:c8:01:a2: 7c:02:19:aa:a9:f9:04:a5:49:ef:db:99:6b:59:e5:9c:27:fa: 3f:fd:7e:83:58:39:5d:d9:0c:3c:26:e6:d7:53:53:e1:ca:b8: 69:e1:74:d2:25:71:e5:eb:15:6b:b2:1b:a0:f6:ff:6f:8e:c4: 0c:b3:0f:19:50:07:40:01:e2:a5:7a:bc:89:f7:4b:2b:f1:6d: 80:70:3d:cf:b9:8d:57:53:7d:ec:62:36:55:8a:a9:7d:bf:80: 0c:06:52:98:f9:6c:53:28:00:e9:07:e4:58:b8:d4:ec:bb:1a: fc:12:f3:e2:f1:21:db:2f:22:c6:2c:7f:e5:d4:0f:53:67:60: 0d:59:1d:00:a9:2d:c0:c9:17:3d:ac:d7:66:26:1c:94:38:34: 16:a8:c3:3d:4a:0b:91:1c:f7:0c:45:17:8c:69:53:ae:b5:4e: 52:ab:a5:b4:93:fc:30:3f:85:80:d8:82:bf:66:01:98:a4:56: 04:14:7f:e0:60:32:25:89:2c:0e:29:49:a5:e0:85:88:42:18: 1b:b7:6f:b4:6c:24:fc:0d:39:73:b3:5a:60:ed:38:1e:a7:d9: db:d3:c0:ed -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE78rM6CnY3pN/oE3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk Yjc2NzI1NjYtOTg5OS00YTFlLTk1YjQtMjE3NjlhZmY0MzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgp4xK2XGGSq2TtC0DejMFmJvxNinb+kcvnq j+V2v3x62THpyY1XnAKoFKkTyyAe59I+Osd1bgEhAI/kGvyabCfuflMY/BP1B47n 7VIck3kuHnMOgOSTI+opoAaWwDkW1wvIsbG4PLpNd2D69PYCis7HtrZebNgBs2XB YLFIE8XYMD8VLBnOe7Gzmb/lOEoV9EOiavhghqsatcEyRW2Qd1tzDQOKM+3aIi7O 37OrhiWJ/mMVH8++IizY809rLh8uRv7FAif8DD4gWPykTVom2ac2dj1HxVofd0x8 PobjfVmhX3K2UqK0TZSJ8/T2ZmG65XjdBLkYdovYQ+T+SS5rxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCrn8sJz4q+wxf/5Zuq0dha3e7lCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGJhOWRhZDAtMDFiZS0z NzAwLWFiMWYtMjE0ZjAzZGM3ZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfo1QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCZWTdn3sIHX5A3AtPve2Ca280CK6hXFQk9+ROUlcla1hrIAaJ8Ahmq qfkEpUnv25lrWeWcJ/o//X6DWDld2Qw8JubXU1Phyrhp4XTSJXHl6xVrshug9v9v jsQMsw8ZUAdAAeKleryJ90sr8W2AcD3PuY1XU33sYjZViql9v4AMBlKY+WxTKADp B+RYuNTsuxr8EvPi8SHbLyLGLH/l1A9TZ2ANWR0AqS3AyRc9rNdmJhyUODQWqMM9 SguRHPcMRReMaVOutU5Sq6W0k/wwP4WA2IK/ZgGYpFYEFH/gYDIliSwOKUml4IWI Qhgbt2+0bCT8DTlzs1pg7Tgep9nb08Dt -----END CERTIFICATE-----Generated at Thu Sep 17 18:26:01 2026 by rpki-client