$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2d6c3e-ed41-3d11-975b-494ee976312d.roa File: 3d2d6c3e-ed41-3d11-975b-494ee976312d.roa (raw, json) Hash identifier: 5+koG7DTxH/0sGPDOAXNeW6VWtoYkE+oo1PN/ifMdcE= Subject key identifier: 97:83:65:06:67:9C:50:1F:72:DB:3A:EE:95:CB:06:94:97:36:30:B4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F119D03AA45C5F7ADF6103C80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2d6c3e-ed41-3d11-975b-494ee976312d.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 2914 IP address blocks: 129.250.161.160/27 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:03:aa:45:c5:f7:ad:f6:10:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=7bce8121-cf6f-49d3-9017-7c443abf1cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:96:51:ea:fe:f8:fd:be:88:67:fe:41:d5:6e: 8a:e5:63:ef:7d:a2:80:3f:40:12:4f:a2:96:53:a6: 4f:3b:2f:57:f3:03:5a:15:79:62:fd:ff:3f:e3:9b: be:0f:e0:fc:a4:04:66:b0:2a:c2:3e:dd:40:b2:43: 01:79:89:9d:ee:71:2e:aa:3d:28:76:06:9b:16:c6: d1:e1:16:a3:ee:ce:1e:78:82:b3:00:f1:ef:7e:b0: f8:76:d9:49:0a:ca:dd:9b:16:11:22:71:cb:d6:b3: 50:87:68:a8:a7:02:28:c3:6b:07:d5:72:d7:e5:6e: ef:0c:71:a5:75:b2:73:2e:d9:bd:8c:d5:ea:5d:60: cf:02:11:33:93:7d:4a:24:06:6a:8d:f7:56:c3:d8: c3:b7:3c:22:df:47:0a:80:56:0b:b1:48:51:87:62: b4:56:d1:db:11:fb:ec:b3:0f:82:5b:79:ab:d1:8b: 73:95:d1:95:31:83:bc:48:5e:8e:70:ca:8f:c0:d6: 08:3d:5c:b5:f6:59:80:97:d0:cc:8a:82:aa:18:4a: e9:71:b1:a6:96:ad:02:b6:8b:a2:52:bb:9a:9e:5b: bb:54:34:a4:46:9b:4d:40:30:84:7b:be:40:a5:95: 01:06:b7:af:c2:80:fe:ff:b1:da:de:1a:64:f2:38: 71:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:83:65:06:67:9C:50:1F:72:DB:3A:EE:95:CB:06:94:97:36:30:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3d2d6c3e-ed41-3d11-975b-494ee976312d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.161.160/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:af:38:68:d5:32:ea:95:94:91:e2:95:57:a5:98:e2:94:d3: 17:78:6e:0b:42:35:dd:12:90:89:1e:24:ce:ed:bf:e5:4a:86: 4b:9b:7e:37:3e:69:97:d4:e2:95:cc:1d:b1:67:03:0b:ee:5d: c3:25:4e:d1:96:0e:43:9e:9b:0f:b6:13:d0:c3:7f:0f:18:8f: 1a:0b:83:de:89:67:0d:1b:80:00:64:71:66:03:cf:b7:e8:e2: 77:08:27:34:4f:19:17:18:70:4a:32:8a:59:f7:e1:8f:67:d1: 78:22:bb:5c:25:a3:72:3d:46:53:c9:51:d2:1e:19:e2:71:c2: 8c:36:17:3e:e2:a3:fa:dc:54:dd:56:22:7a:4d:93:cd:c0:36: 67:bb:1a:9d:61:55:b1:e2:80:82:e2:d1:42:4d:a4:a6:98:fb: f0:9f:da:53:54:e2:06:12:13:2d:64:bd:75:7d:3c:23:3c:99: e3:27:46:1b:a1:91:a6:d2:98:14:0b:3c:b5:15:ce:3b:32:ee: 1d:03:ce:fb:0f:7c:26:9d:25:a9:0e:78:e4:ec:98:53:c5:27: 4d:12:4b:2d:94:37:5e:63:66:7a:fe:72:f8:0a:a5:bd:88:3f: 79:49:af:c1:28:74:80:c6:28:e5:2d:7e:48:8a:bb:12:b4:1b: 9b:b6:09:34 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8RnQOqRcX3rfYQPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk N2JjZTgxMjEtY2Y2Zi00OWQzLTkwMTctN2M0NDNhYmYxY2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZZR6v74/b6IZ/5B1W6K5WPvfaKAP0AST6KW U6ZPOy9X8wNaFXli/f8/45u+D+D8pARmsCrCPt1AskMBeYmd7nEuqj0odgabFsbR 4Raj7s4eeIKzAPHvfrD4dtlJCsrdmxYRInHL1rNQh2iopwIow2sH1XLX5W7vDHGl dbJzLtm9jNXqXWDPAhEzk31KJAZqjfdWw9jDtzwi30cKgFYLsUhRh2K0VtHbEfvs sw+CW3mr0YtzldGVMYO8SF6OcMqPwNYIPVy19lmAl9DMioKqGErpcbGmlq0Ctoui Uruanlu7VDSkRptNQDCEe75ApZUBBrevwoD+/7Ha3hpk8jhxiQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJeDZQZnnFAfcts67pXLBpSXNjC0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2QyZDZjM2UtZWQ0MS0z ZDExLTk3NWItNDk0ZWU5NzYzMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFgfqhoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB5rzho1TLqlZSR4pVXpZjilNMXeG4LQjXdEpCJHiTO7b/lSoZLm343 PmmX1OKVzB2xZwML7l3DJU7Rlg5DnpsPthPQw38PGI8aC4PeiWcNG4AAZHFmA8+3 6OJ3CCc0TxkXGHBKMopZ9+GPZ9F4IrtcJaNyPUZTyVHSHhniccKMNhc+4qP63FTd ViJ6TZPNwDZnuxqdYVWx4oCC4tFCTaSmmPvwn9pTVOIGEhMtZL11fTwjPJnjJ0Yb oZGm0pgUCzy1Fc47Mu4dA877D3wmnSWpDnjk7JhTxSdNEkstlDdeY2Z6/nL4CqW9 iD95Sa/BKHSAxijlLX5IirsStBubtgk0 -----END CERTIFICATE-----Generated at Thu Sep 17 16:50:38 2026 by rpki-client