$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa File: 3cc38345-6550-34c7-91a9-c41099c6e187.roa (raw, json) Hash identifier: l2OokEpEy57AW1F0D63rQmnse2lrOU5R4qz8RC9njrg= Subject key identifier: AF:FB:6E:79:2A:13:B9:63:7C:6E:3F:CA:CF:5E:05:41:B5:D4:45:A8 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFCACCE502E3AA8D69786FB40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 1225 IP address blocks: 129.250.35.96/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:ce:50:2e:3a:a8:d6:97:86:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=cf26d384-e5e5-4f73-af90-d4a9207716ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f4:80:6e:01:40:de:97:6e:5c:75:fe:e2:b9: c8:df:a8:0e:1b:72:82:a0:b2:f2:da:45:09:01:74: 6e:17:99:9e:b1:e6:e7:9f:80:57:9e:5a:21:b5:c7: 53:f8:2a:85:d0:96:be:16:fd:bc:f4:af:dd:43:7f: e4:fd:21:41:d3:e2:d2:fd:5b:8b:8d:65:ad:32:9f: d2:e4:69:cc:6b:74:76:0e:3d:26:e2:e8:7e:19:34: e2:4d:1a:bf:24:b2:f2:05:ab:8b:82:a1:2f:94:e2: 44:2b:d0:2b:f5:ce:f7:4e:52:06:cc:da:1d:0f:05: 2d:aa:10:dd:d5:66:18:af:5f:5e:75:81:b7:5a:f1: 4e:91:f1:11:6b:8b:b7:9f:ba:00:e3:c6:87:ba:4f: 04:4d:b4:55:b9:f1:76:9c:36:45:0c:c9:a4:51:06: f8:98:24:42:87:34:66:9b:e7:7c:82:21:ab:7b:3d: 6b:2f:b2:0e:f4:82:ff:44:a5:a6:98:fe:c2:d0:66: 01:c0:f4:73:ff:5a:3c:f0:33:ac:19:9f:0f:94:3b: df:1a:10:71:42:9a:a3:7c:bb:d0:42:7f:99:4e:d8: 8e:78:21:47:96:78:73:51:94:3b:8d:f0:24:3f:31: 57:d1:f7:32:11:ed:4a:7e:8d:cb:81:00:68:1c:52: 9b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FB:6E:79:2A:13:B9:63:7C:6E:3F:CA:CF:5E:05:41:B5:D4:45:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.96/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:7c:c6:6a:e0:cc:76:cb:08:b1:4b:e1:d4:12:7d:9d:45:54: 06:7c:2d:56:9d:92:83:9b:24:c8:80:ba:9c:ef:18:c8:96:4b: 08:f3:bc:06:4f:65:3c:a3:0f:ae:fa:d5:d3:f9:a6:e4:6e:27: 5a:da:b7:da:ae:7f:46:54:e0:20:3f:50:62:a1:7e:62:11:0b: 59:84:7b:11:e2:bd:f6:e6:14:bc:a6:8c:92:51:5d:fb:78:e9: fb:03:1e:b4:ec:9e:3f:ee:1c:f9:f2:15:4a:57:1b:9e:fd:73: a7:8c:ba:48:3c:9a:be:ae:8f:58:5f:d0:09:f1:8c:74:b7:32: 5f:b2:24:41:ba:48:01:7d:31:f2:e3:59:31:87:f8:92:fc:49: ac:81:e5:cd:55:c9:98:e3:22:93:40:13:06:bc:db:b8:a7:10: 95:57:78:5a:62:19:8d:3b:c6:e8:4f:4b:df:60:ba:d1:97:ce: ec:e8:56:01:59:fa:38:6c:eb:a9:de:a8:a6:ce:12:35:45:34: 21:f5:bf:d5:9e:d1:57:b7:bf:43:06:e3:16:53:e0:53:03:4d: ac:f3:8c:ad:39:3a:4a:d1:14:26:f0:b4:6d:c5:03:9e:26:f9: bc:78:d3:1d:b3:8d:e3:67:cb:6d:2b:05:d3:9f:10:6b:fa:b8: cf:83:d7:e5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE78rM5QLjqo1peG+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk Y2YyNmQzODQtZTVlNS00ZjczLWFmOTAtZDRhOTIwNzcxNmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfSAbgFA3pduXHX+4rnI36gOG3KCoLLy2kUJ AXRuF5mesebnn4BXnlohtcdT+CqF0Ja+Fv289K/dQ3/k/SFB0+LS/VuLjWWtMp/S 5GnMa3R2Dj0m4uh+GTTiTRq/JLLyBauLgqEvlOJEK9Ar9c73TlIGzNodDwUtqhDd 1WYYr19edYG3WvFOkfERa4u3n7oA48aHuk8ETbRVufF2nDZFDMmkUQb4mCRChzRm m+d8giGrez1rL7IO9IL/RKWmmP7C0GYBwPRz/1o88DOsGZ8PlDvfGhBxQpqjfLvQ Qn+ZTtiOeCFHlnhzUZQ7jfAkPzFX0fcyEe1Kfo3LgQBoHFKb5QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK/7bnkqE7ljfG4/ys9eBUG11EWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2NjMzgzNDUtNjU1MC0z NGM3LTkxYTktYzQxMDk5YzZlMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfojYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQByfMZq4Mx2ywixS+HUEn2dRVQGfC1WnZKDmyTIgLqc7xjIlksI87wG T2U8ow+u+tXT+abkbida2rfarn9GVOAgP1BioX5iEQtZhHsR4r325hS8poySUV37 eOn7Ax607J4/7hz58hVKVxue/XOnjLpIPJq+ro9YX9AJ8Yx0tzJfsiRBukgBfTHy 41kxh/iS/EmsgeXNVcmY4yKTQBMGvNu4pxCVV3haYhmNO8boT0vfYLrRl87s6FYB Wfo4bOup3qimzhI1RTQh9b/VntFXt79DBuMWU+BTA02s84ytOTpK0RQm8LRtxQOe Jvm8eNMds43jZ8ttKwXTnxBr+rjPg9fl -----END CERTIFICATE-----Generated at Thu Sep 3 12:59:29 2026 by rpki-client