$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/28bffa70-65b6-3f00-a0ab-5b244e89ad8d.roa File: 28bffa70-65b6-3f00-a0ab-5b244e89ad8d.roa (raw, json) Hash identifier: gRafEukdrydpm5C3t2jOCE8XCIYfBrx735+T0urJkw4= Subject key identifier: 65:B1:36:E8:63:CC:01:4D:D7:8A:DA:58:58:19:EF:6F:9C:70:2A:CA Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D11BC3D53936DF046985ECA80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/28bffa70-65b6-3f00-a0ab-5b244e89ad8d.roa Signing time: Thu 05 Mar 2026 16:29:36 +0000 ROA not before: Thu 05 Mar 2026 16:29:36 +0000 ROA not after: Wed 03 Jun 2026 15:29:36 +0000 asID: 1225 IP address blocks: 129.250.35.128/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:bc:3d:53:93:6d:f0:46:98:5e:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 5 16:29:36 2026 GMT Not After : Jun 3 15:29:36 2026 GMT Subject: CN=7caf12b3-d2b3-46b5-a315-f084392cdeb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9f:f4:67:ec:7f:db:f4:a0:15:0c:6e:43:8c: c2:19:8e:ec:87:63:ee:11:c8:6f:56:ec:da:05:11: a5:d1:a8:97:e6:4c:47:a7:a2:40:29:a5:2e:0c:42: 77:cc:e8:ef:56:9c:e1:85:e8:d1:61:07:b8:50:3f: 2f:fd:03:96:74:82:b0:dc:e4:a2:2d:4e:b8:8b:82: a1:d8:b8:b4:10:9f:50:64:91:ac:e0:ce:f2:88:82: 55:8f:0d:6c:8d:db:ef:8f:2a:e0:63:ef:92:c3:88: a0:c0:f9:2f:99:c1:7f:fa:45:fe:39:27:c4:37:c7: 83:5e:f9:87:52:9c:40:22:13:95:d6:24:1f:05:79: c1:84:0b:1d:80:d5:f1:6c:07:f6:95:72:bb:12:be: a4:93:9b:fe:99:b6:f9:99:ab:76:24:8a:ba:e2:c7: 5e:3b:f8:1a:7c:d0:88:75:2f:43:ae:51:7d:a8:bb: a0:86:26:e7:90:0e:09:c2:05:99:7e:2f:f6:85:4a: 3a:f8:8b:e2:c2:14:a2:ca:2d:fb:2a:7d:82:db:83: c9:97:22:c5:cc:ab:96:b3:cd:69:a9:d1:30:61:e9: 47:4b:95:4f:51:bd:06:34:c4:0d:8d:1b:c6:d4:8d: a5:36:61:d9:10:7b:d2:4c:00:e7:cc:46:32:6a:d0: cb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B1:36:E8:63:CC:01:4D:D7:8A:DA:58:58:19:EF:6F:9C:70:2A:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/28bffa70-65b6-3f00-a0ab-5b244e89ad8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.128/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:83:30:5c:6c:10:f7:55:e5:89:e2:32:b2:6f:36:c2:52:5a: f4:32:5c:94:55:95:15:17:43:fb:3e:65:4b:c7:22:67:1c:3e: 5e:4f:73:de:43:9f:e9:7a:73:ed:3e:a2:f2:38:29:d9:00:b8: 8b:1f:30:b9:52:57:d9:60:85:5e:12:1d:11:7b:f3:83:8b:b8: 5a:1d:16:ec:df:71:81:52:89:5d:ec:1a:f8:9b:87:12:5b:4c: 41:2f:2c:49:c4:22:57:6a:a4:3d:80:7f:cb:5e:8d:e9:06:46: 59:0c:18:b2:9a:91:f6:fc:e5:b8:79:05:ae:78:ae:fb:09:36: fa:6d:85:ac:1f:8c:1e:99:e0:37:e1:3b:a1:ae:13:9c:18:2d: 6d:86:b7:7a:dc:3f:2b:73:9a:be:7d:bc:c7:ef:59:6a:66:a5: b5:8f:70:e5:b9:f6:57:64:ce:7f:f7:70:5c:a9:a5:5a:09:0b: 2c:00:04:17:15:58:f3:03:07:23:40:34:99:4d:18:f3:15:69: c4:7a:fd:15:bb:c9:88:cd:d4:44:0f:8c:3c:d2:b0:e0:ef:bd: 79:e3:82:b5:b1:8e:86:41:7e:bd:77:f7:40:f6:8e:e2:15:d1: e3:8f:16:8d:6d:89:89:f8:e4:bf:bb:16:99:a1:0b:2f:7d:1c: 4b:5f:62:ad -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0RvD1Tk23wRpheyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMwNTE2MjkzNloXDTI2MDYwMzE1MjkzNlowLzEtMCsGA1UEAxMk N2NhZjEyYjMtZDJiMy00NmI1LWEzMTUtZjA4NDM5MmNkZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp/0Z+x/2/SgFQxuQ4zCGY7sh2PuEchvVuza BRGl0aiX5kxHp6JAKaUuDEJ3zOjvVpzhhejRYQe4UD8v/QOWdIKw3OSiLU64i4Kh 2Li0EJ9QZJGs4M7yiIJVjw1sjdvvjyrgY++Sw4igwPkvmcF/+kX+OSfEN8eDXvmH UpxAIhOV1iQfBXnBhAsdgNXxbAf2lXK7Er6kk5v+mbb5mat2JIq64sdeO/gafNCI dS9DrlF9qLughibnkA4JwgWZfi/2hUo6+IviwhSiyi37Kn2C24PJlyLFzKuWs81p qdEwYelHS5VPUb0GNMQNjRvG1I2lNmHZEHvSTADnzEYyatDLJQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGWxNuhjzAFN14raWFgZ72+ccCrKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMjhiZmZhNzAtNjViNi0z ZjAwLWEwYWItNWIyNDRlODlhZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFgfojgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAygzBcbBD3VeWJ4jKybzbCUlr0MlyUVZUVF0P7PmVLxyJnHD5eT3Pe Q5/penPtPqLyOCnZALiLHzC5UlfZYIVeEh0Re/ODi7haHRbs33GBUold7Br4m4cS W0xBLyxJxCJXaqQ9gH/LXo3pBkZZDBiympH2/OW4eQWueK77CTb6bYWsH4wemeA3 4TuhrhOcGC1thrd63D8rc5q+fbzH71lqZqW1j3DlufZXZM5/93BcqaVaCQssAAQX FVjzAwcjQDSZTRjzFWnEev0Vu8mIzdRED4w80rDg771544K1sY6GQX69d/dA9o7i FdHjjxaNbYmJ+OS/uxaZoQsvfRxLX2Kt -----END CERTIFICATE-----Generated at Mon Mar 9 11:21:27 2026 by rpki-client