$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa File: 0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa (raw, json) Hash identifier: 2+YsCNN5nd9hLGD/3JuC2KBijCbLasa1QXG1PvdC7R8= Subject key identifier: 9B:C9:89:63:0C:01:BE:A8:6A:60:47:6C:25:0B:F2:5B:40:F5:05:DC Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFCACCE688F0FDC9483252A00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 1225 IP address blocks: 129.250.35.248/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:ce:68:8f:0f:dc:94:83:25:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=b4e66dff-195e-4336-91ff-31639434df35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7a:30:8e:ed:21:fa:66:82:16:56:1d:51:a8: 95:ae:96:67:2b:61:20:91:cb:54:6e:a3:c7:af:e2: 52:0f:68:cf:2f:c1:c3:0c:54:36:75:2d:9a:17:43: dd:11:64:f1:3e:f8:47:0c:bc:52:f9:0d:74:0e:37: f4:e5:86:8b:94:36:57:a6:6a:c5:51:1d:e5:0a:62: 5d:c3:53:e8:d2:2e:b8:48:ad:f4:25:02:ae:60:8c: 69:ed:80:f8:7d:a0:d9:4e:1f:89:1f:67:9e:86:3c: e5:7d:6a:4a:d4:d0:22:78:dd:88:a8:d3:ee:44:34: 1b:a0:9c:9c:59:4d:2e:a3:a9:52:e9:c3:c0:ac:99: 77:96:7a:c3:20:53:b5:98:94:64:8d:20:41:14:c7: 89:f1:39:d1:6c:4d:f7:df:56:2f:d7:4a:db:06:bd: 6a:6e:96:81:f2:5d:9a:22:2c:aa:92:a4:99:de:62: b3:34:6c:a6:c9:c0:d1:54:26:e5:d5:b4:c4:74:7e: 1b:fb:42:b9:62:67:ed:80:b1:f4:4b:bf:2e:53:00: ca:01:96:3f:fb:98:84:6e:68:f4:b8:f7:48:62:34: e7:f4:f1:77:c1:1e:58:5a:41:19:7b:4b:6a:cf:38: f7:3c:80:3a:49:b5:ef:f0:7e:e2:fa:36:8f:04:2b: 64:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C9:89:63:0C:01:BE:A8:6A:60:47:6C:25:0B:F2:5B:40:F5:05:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.248/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:50:8c:11:51:4a:c2:a0:52:dc:b2:03:4d:ce:1f:c2:17:8c: 98:3f:b7:ef:43:36:49:cd:b9:0a:ee:75:d3:2e:9e:35:dd:98: 68:6e:86:aa:86:d8:67:b6:00:30:4d:38:71:10:e2:3b:14:94: 80:83:79:52:b0:dc:f2:af:d5:56:7c:57:b4:2b:27:7a:11:7c: 84:9d:31:7a:ef:b4:04:07:fe:9a:c6:c3:8b:a1:ae:1e:b5:75: 2f:97:47:de:90:12:10:dd:10:49:94:32:49:3c:00:d0:49:26: 60:15:ce:82:0d:e7:22:82:50:56:58:4d:14:9e:16:8e:69:eb: f5:f3:5e:71:23:89:97:a8:69:17:39:18:b1:14:18:49:d8:82: cf:07:b8:f7:b0:bb:2e:b7:6b:b7:15:fd:2f:08:03:7d:4a:d8: e3:f1:a7:a9:42:56:e3:66:85:7b:9e:21:01:24:05:1f:af:4d: 81:f7:ad:1f:8f:b3:7f:cb:19:1c:48:56:f4:47:25:e5:b3:86: 9e:b0:b9:9f:49:24:d6:4b:ce:60:5a:ed:9b:c9:2a:55:4f:5d: 0d:d0:98:9e:85:b7:ec:1c:7b:f6:f3:96:f1:21:ac:d8:aa:98: 65:a6:58:ad:db:5c:7a:28:e0:97:84:04:b8:c2:2b:be:a7:7a: 6c:db:63:3a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE78rM5ojw/clIMlKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk YjRlNjZkZmYtMTk1ZS00MzM2LTkxZmYtMzE2Mzk0MzRkZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnowju0h+maCFlYdUaiVrpZnK2EgkctUbqPH r+JSD2jPL8HDDFQ2dS2aF0PdEWTxPvhHDLxS+Q10Djf05YaLlDZXpmrFUR3lCmJd w1Po0i64SK30JQKuYIxp7YD4faDZTh+JH2eehjzlfWpK1NAieN2IqNPuRDQboJyc WU0uo6lS6cPArJl3lnrDIFO1mJRkjSBBFMeJ8TnRbE3331Yv10rbBr1qbpaB8l2a IiyqkqSZ3mKzNGymycDRVCbl1bTEdH4b+0K5YmftgLH0S78uUwDKAZY/+5iEbmj0 uPdIYjTn9PF3wR5YWkEZe0tqzzj3PIA6SbXv8H7i+jaPBCtkfQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJvJiWMMAb6oamBHbCUL8ltA9QXcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGNiZjcwYWEtN2JiOS0z ZDczLWIxMmUtZjAyYTczZjA4MTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDgfoj+DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJUIwRUUrCoFLcsgNNzh/CF4yYP7fvQzZJzbkK7nXTLp413Zhoboaq hthntgAwTThxEOI7FJSAg3lSsNzyr9VWfFe0Kyd6EXyEnTF677QEB/6axsOLoa4e tXUvl0fekBIQ3RBJlDJJPADQSSZgFc6CDeciglBWWE0UnhaOaev1815xI4mXqGkX ORixFBhJ2ILPB7j3sLsut2u3Ff0vCAN9Stjj8aepQlbjZoV7niEBJAUfr02B960f j7N/yxkcSFb0RyXls4aesLmfSSTWS85gWu2bySpVT10N0JiehbfsHHv285bxIazY qphlplit21x6KOCXhAS4wiu+p3ps22M6 -----END CERTIFICATE-----Generated at Thu Sep 3 07:14:13 2026 by rpki-client