$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4078f5b3-c30f-3d52-b15e-a5b3815f270d.roa File: 4078f5b3-c30f-3d52-b15e-a5b3815f270d.roa (raw, json) Hash identifier: sVk3pY2A7vItVa9OvgTxa/jGvRChgOBQHylgPlt6xAA= Subject key identifier: 02:7E:2C:63:8A:AE:F4:B8:03:06:3D:9B:FF:12:A9:61:67:18:3E:B5 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584FA85DE88F05A1B4840BCF9300 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4078f5b3-c30f-3d52-b15e-a5b3815f270d.roa Signing time: Thu 29 Oct 2026 01:00:12 +0000 ROA not before: Thu 29 Oct 2026 01:00:12 +0000 ROA not after: Wed 27 Jan 2027 02:00:12 +0000 asID: 3938 IP address blocks: 129.250.35.32/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:5d:e8:8f:05:a1:b4:84:0b:cf:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 29 01:00:12 2026 GMT Not After : Jan 27 02:00:12 2027 GMT Subject: CN=30034fc6-013e-4f9f-aecf-dbcbe9b3fa16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:39:bc:58:64:61:30:0c:58:39:76:d6:83:47: 01:22:9a:ea:1e:9b:a4:c7:0f:df:45:ea:ec:1d:f6: d0:27:5a:37:f2:1f:21:6d:80:86:3b:fe:36:b2:f4: b5:2e:ec:fc:d6:29:65:0c:71:ff:28:3a:91:ca:48: da:c0:bc:81:30:6e:70:c7:86:16:6e:e4:4b:2d:b5: 27:c5:7f:39:dd:05:e4:99:e3:c1:62:42:d2:68:a7: 35:2f:33:c8:24:b0:74:16:89:6a:fa:4b:98:7d:ed: 80:ac:a1:cd:f4:4b:8b:9b:5c:5b:e1:a1:07:4b:f8: 01:87:77:22:33:89:25:05:5e:86:28:12:52:8a:53: b4:67:08:58:e0:26:76:60:7b:38:e2:97:a9:0d:16: 99:82:c8:c4:9c:08:4a:66:cd:fc:e7:70:ff:4e:f2: 86:10:91:95:fd:8c:fd:ff:cc:7a:49:61:1f:ff:31: 41:f8:4e:c4:49:80:32:f0:a0:5f:99:d6:f3:ba:ec: e4:9e:03:d1:45:6c:e1:2a:5f:e8:69:1b:33:b7:cb: 3a:3b:a8:59:d8:06:73:72:31:91:e3:bd:1e:08:17: e5:9b:1d:68:36:34:cf:ca:40:1f:fa:04:80:55:e9: 36:66:2d:e7:fe:9a:25:8e:e2:2e:c6:07:81:90:68: 5c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7E:2C:63:8A:AE:F4:B8:03:06:3D:9B:FF:12:A9:61:67:18:3E:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4078f5b3-c30f-3d52-b15e-a5b3815f270d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.32/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:43:5b:a4:38:44:8e:95:09:45:3f:4c:ea:d9:53:fd:bd:e7: 75:c4:67:f7:ba:ed:61:09:32:16:ee:9c:b1:f9:83:ca:9d:17: 1c:1c:60:05:f6:f5:19:82:d0:82:73:50:1d:dc:3c:43:b6:46: 2e:91:6e:9c:c4:36:80:26:41:be:7d:c3:8c:e2:d1:f1:65:a6: 77:be:56:bc:bc:a8:86:be:d7:26:a0:10:bb:41:a9:24:13:7f: 0f:02:03:0d:54:68:85:3c:74:14:7c:da:c6:ac:51:f3:11:4f: 24:d8:5e:4c:29:4f:48:6f:f5:4d:5d:f2:82:e3:94:1b:11:9d: e3:42:2b:53:24:4a:e7:23:37:be:ec:8d:c3:ab:db:c9:74:57: ea:8a:ea:0a:d0:e6:1e:df:a3:fa:76:6e:76:73:9b:89:dc:b9: aa:41:16:6b:89:37:80:b6:f1:71:e4:63:e9:12:9d:66:f0:ff: 6b:15:3d:38:7f:27:bb:e0:2d:e4:ae:97:cd:73:0b:a0:0a:18: 85:98:28:17:0a:3f:46:3e:61:58:04:50:7f:73:c0:bd:b3:52: 8a:e8:7c:58:7b:9b:53:b8:d6:b0:46:36:01:9f:95:3a:57:36: a3:60:0b:50:c6:77:2e:a6:b9:6d:67:3b:6e:52:81:59:62:1e: 04:cd:25:02 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+oXeiPBaG0hAvPkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk MzAwMzRmYzYtMDEzZS00ZjlmLWFlY2YtZGJjYmU5YjNmYTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTm8WGRhMAxYOXbWg0cBIprqHpukxw/fRers HfbQJ1o38h8hbYCGO/42svS1Luz81illDHH/KDqRykjawLyBMG5wx4YWbuRLLbUn xX853QXkmePBYkLSaKc1LzPIJLB0Folq+kuYfe2ArKHN9EuLm1xb4aEHS/gBh3ci M4klBV6GKBJSilO0ZwhY4CZ2YHs44pepDRaZgsjEnAhKZs3853D/TvKGEJGV/Yz9 /8x6SWEf/zFB+E7ESYAy8KBfmdbzuuzkngPRRWzhKl/oaRszt8s6O6hZ2AZzcjGR 470eCBflmx1oNjTPykAf+gSAVek2Zi3n/poljuIuxgeBkGhcDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAJ+LGOKrvS4AwY9m/8SqWFnGD61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDA3OGY1YjMtYzMwZi0z ZDUyLWIxNWUtYTViMzgxNWYyNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfojIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkQ1ukOESOlQlFP0zq2VP9ved1xGf3uu1hCTIW7pyx+YPKnRccHGAF 9vUZgtCCc1Ad3DxDtkYukW6cxDaAJkG+fcOM4tHxZaZ3vla8vKiGvtcmoBC7Qakk E38PAgMNVGiFPHQUfNrGrFHzEU8k2F5MKU9Ib/VNXfKC45QbEZ3jQitTJErnIze+ 7I3Dq9vJdFfqiuoK0OYe36P6dm52c5uJ3LmqQRZriTeAtvFx5GPpEp1m8P9rFT04 fye74C3krpfNcwugChiFmCgXCj9GPmFYBFB/c8C9s1KK6HxYe5tTuNawRjYBn5U6 VzajYAtQxncuprltZztuUoFZYh4EzSUC -----END CERTIFICATE-----Generated at Fri Oct 30 20:25:54 2026 by rpki-client