$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa File: 3cc38345-6550-34c7-91a9-c41099c6e187.roa (raw, json) Hash identifier: cm5lUi58yY8mFMkNJWmqTq7221r7dpYM/jvbrqeeO3Y= Subject key identifier: EC:CC:95:0A:FB:B5:A3:13:92:14:44:54:8E:50:F7:79:C5:AB:35:90 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F9E988158BB5931E4C334E280 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 1225 IP address blocks: 129.250.35.96/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:81:58:bb:59:31:e4:c3:34:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=6679ab2b-715b-4b55-8cce-44d878135524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1c:26:42:eb:36:9b:f3:f2:92:df:c9:6e:0d: 10:c9:65:60:3c:cc:fe:16:6b:9e:e6:d6:da:b6:54: 26:e7:cc:c0:46:0e:ab:de:0b:96:0f:91:65:a1:de: 2c:c7:cd:05:dc:85:14:fc:19:e8:f6:ed:a3:e7:c5: fe:84:67:fc:20:ca:15:85:24:e6:ef:71:3f:9b:f4: c1:80:80:fe:10:85:5a:69:bb:b0:b8:0e:c8:12:82: 84:fe:a2:89:2f:d0:2d:b0:29:07:a2:b9:7b:b6:d4: 06:aa:84:44:a5:02:02:5d:a1:ae:8d:69:1e:2b:99: 82:74:ee:4a:6c:6d:cc:65:c9:26:c6:af:ad:80:63: 25:d7:91:97:cd:24:a3:9c:42:2c:12:15:dd:d9:86: e4:a2:14:3e:c4:eb:01:bb:47:96:37:7e:7c:51:16: 88:28:ed:63:85:ef:fa:6d:7f:eb:7b:d2:42:2a:bb: 6e:7a:e5:c0:2c:70:cf:14:af:e1:d5:e2:5d:d3:8a: df:b6:c0:3e:9e:36:a2:7c:88:2a:90:26:a3:7e:98: 91:54:58:17:1f:65:0c:6d:1e:b4:7c:89:c6:80:68: 29:c9:f0:3a:45:5d:09:45:1a:7a:b7:13:7d:e2:7a: fa:db:5d:b0:40:97:38:93:93:a9:91:ff:16:bb:b2: d6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CC:95:0A:FB:B5:A3:13:92:14:44:54:8E:50:F7:79:C5:AB:35:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.96/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f1:27:b0:a2:a0:69:9e:56:92:3e:b5:9d:3a:2e:14:30:23: c0:52:a2:6d:29:d7:5b:c0:83:76:91:b0:42:96:27:79:62:fe: d2:ca:60:f9:1f:63:b0:2e:77:83:ab:ab:f0:ac:1a:4e:c3:51: 4c:aa:de:c8:1f:71:32:af:8a:d3:7c:59:e1:c8:8d:94:e7:e0: 5b:2f:60:67:0b:6e:44:b3:e8:71:33:c8:aa:cb:de:3f:98:5e: 1b:70:33:80:0c:a1:c1:10:f5:82:4a:70:68:6d:7c:e3:53:e4: cf:f7:53:c9:11:66:d3:b1:9b:0d:45:e9:13:fb:9c:87:0f:b1: fc:4c:ec:f3:62:a3:cf:18:e2:a0:9a:6f:2d:c1:fd:96:69:97: eb:a7:8f:ed:1c:e1:63:e4:86:b5:a2:3a:6b:06:cf:3e:ab:db: 74:59:b5:f3:54:bb:51:91:68:c0:12:8b:d1:48:b1:c5:9c:7d: 9c:3c:39:55:91:ab:b8:51:51:e8:fe:14:e9:a3:cb:9b:23:5f: be:4e:13:67:d1:a2:93:4c:0e:75:b8:a5:3f:1c:28:76:5b:e0: 5a:01:88:11:92:95:de:3c:b9:9a:65:c6:be:9c:a8:dc:53:b4: c0:11:2f:25:73:dd:82:fb:fa:c0:27:c9:e8:d4:f1:81:ac:17: 06:b6:44:f3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+emIFYu1kx5MM04oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk NjY3OWFiMmItNzE1Yi00YjU1LThjY2UtNDRkODc4MTM1NTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxwmQus2m/Pykt/Jbg0QyWVgPMz+Fmue5tba tlQm58zARg6r3guWD5Flod4sx80F3IUU/Bno9u2j58X+hGf8IMoVhSTm73E/m/TB gID+EIVaabuwuA7IEoKE/qKJL9AtsCkHorl7ttQGqoREpQICXaGujWkeK5mCdO5K bG3MZckmxq+tgGMl15GXzSSjnEIsEhXd2YbkohQ+xOsBu0eWN358URaIKO1jhe/6 bX/re9JCKrtueuXALHDPFK/h1eJd04rftsA+njaifIgqkCajfpiRVFgXH2UMbR60 fInGgGgpyfA6RV0JRRp6txN94nr6212wQJc4k5Opkf8Wu7LWawIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOzMlQr7taMTkhREVI5Q93nFqzWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2NjMzgzNDUtNjU1MC0z NGM3LTkxYTktYzQxMDk5YzZlMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfojYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAL8SewoqBpnlaSPrWdOi4UMCPAUqJtKddbwIN2kbBClid5Yv7SymD5 H2OwLneDq6vwrBpOw1FMqt7IH3Eyr4rTfFnhyI2U5+BbL2BnC25Es+hxM8iqy94/ mF4bcDOADKHBEPWCSnBobXzjU+TP91PJEWbTsZsNRekT+5yHD7H8TOzzYqPPGOKg mm8twf2WaZfrp4/tHOFj5Ia1ojprBs8+q9t0WbXzVLtRkWjAEovRSLHFnH2cPDlV kau4UVHo/hTpo8ubI1++ThNn0aKTTA51uKU/HCh2W+BaAYgRkpXePLmaZca+nKjc U7TAES8lc92C+/rAJ8no1PGBrBcGtkTz -----END CERTIFICATE-----Generated at Tue Oct 27 15:19:01 2026 by rpki-client