$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4078f5b3-c30f-3d52-b15e-a5b3815f270d.roa File: 4078f5b3-c30f-3d52-b15e-a5b3815f270d.roa (raw, json) Hash identifier: aSPMeTppCYUCpmTWvFc3nhuOobz+RROCycPllBA4EPM= Subject key identifier: 10:FE:C0:1C:55:01:B9:A2:DB:95:7F:4D:2F:38:AF:75:B8:D2:CB:83 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F06723724108C44D01EF4C328 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4078f5b3-c30f-3d52-b15e-a5b3815f270d.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 3938 IP address blocks: 129.250.35.32/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:37:24:10:8c:44:d0:1e:f4:c3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=316bfaaf-242f-4859-94fb-a418d9e5acbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:dd:46:0b:ab:7c:66:3e:98:5b:db:93:3c:c9: f3:57:20:71:ea:e0:bd:c1:9e:54:e2:35:18:0e:92: a2:6f:04:c7:58:80:da:a9:a1:f0:14:4a:7e:a2:cd: 1d:22:68:6d:b5:15:c2:c2:fa:7f:8c:90:cf:45:e5: c9:5b:c5:62:a0:df:cb:a0:00:48:de:57:bc:45:9f: c2:a2:1e:80:43:60:24:57:2a:ab:49:28:bd:95:81: 33:92:b2:01:b9:d9:a2:0e:6c:d7:67:2c:d9:2a:f3: a4:cf:98:09:c4:c2:55:f0:f3:65:61:c5:04:36:33: d9:9b:cf:2d:5f:aa:59:ab:06:4b:39:66:18:8c:01: 54:71:8f:35:08:2c:2a:93:5d:6c:b5:51:85:fc:8d: f4:d0:2b:43:2a:97:05:d8:f4:39:88:4d:42:1c:6c: 18:7b:dd:b9:a7:ae:a9:d2:85:26:08:c5:d2:3e:49: 21:a2:10:e7:7f:c5:dc:62:a9:05:a0:7a:d3:4b:24: 77:b8:0d:d4:e0:84:b8:ea:98:51:57:c3:56:ec:8b: d4:fc:87:e2:05:09:d5:d7:89:e5:21:85:ef:92:5f: af:40:2f:f1:95:4d:a2:04:7e:c5:b0:e1:7f:94:8d: 38:c5:a1:87:3b:06:80:42:ab:72:85:b5:40:10:97: 86:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FE:C0:1C:55:01:B9:A2:DB:95:7F:4D:2F:38:AF:75:B8:D2:CB:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4078f5b3-c30f-3d52-b15e-a5b3815f270d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.32/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:45:9e:f1:27:cb:df:8e:53:c3:01:1d:08:91:fc:20:7b:70: e3:a7:a4:76:20:cc:fb:cc:01:65:2e:3c:7d:8b:65:c6:f3:50: 76:8c:b5:e2:c2:e1:33:db:b4:18:17:e5:35:2f:56:f6:5f:6d: a2:44:e0:de:e5:c1:b9:36:2b:30:e0:2d:67:ff:39:a2:69:da: 9d:67:d3:b9:e2:ae:37:ff:18:da:57:08:d3:d2:7a:da:80:02: df:ef:03:3c:26:13:87:e1:a1:c6:68:80:45:bf:eb:35:47:3f: ad:c7:4a:23:cb:d4:b7:f3:9e:db:20:0f:2a:e8:15:35:24:e3: da:c4:0c:cf:1a:9d:1b:48:e0:9e:57:27:29:a5:7c:4a:14:a3: c0:e4:ad:df:8d:08:35:3f:c4:cd:a1:1d:34:c5:ca:cd:4f:35: 41:4d:da:25:7c:f8:93:5e:d4:b7:fe:0c:8f:b1:bc:0e:dc:13: b4:13:f2:f4:c6:b5:3a:a4:d1:4e:7f:e8:44:94:95:70:28:57: 49:f1:95:13:09:f6:b5:39:c1:49:1b:3f:79:78:1f:9b:ff:44: 4a:ff:47:24:8e:c7:be:e9:74:fc:7d:3a:4c:16:45:fd:c0:12: 44:7d:96:22:4e:cb:98:fc:ef:cb:cf:cc:9d:d5:f4:76:bb:97: af:a2:a4:87 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8GcjckEIxE0B70wygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MzE2YmZhYWYtMjQyZi00ODU5LTk0ZmItYTQxOGQ5ZTVhY2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN1GC6t8Zj6YW9uTPMnzVyBx6uC9wZ5U4jUY DpKibwTHWIDaqaHwFEp+os0dImhttRXCwvp/jJDPReXJW8VioN/LoABI3le8RZ/C oh6AQ2AkVyqrSSi9lYEzkrIBudmiDmzXZyzZKvOkz5gJxMJV8PNlYcUENjPZm88t X6pZqwZLOWYYjAFUcY81CCwqk11stVGF/I300CtDKpcF2PQ5iE1CHGwYe925p66p 0oUmCMXSPkkhohDnf8XcYqkFoHrTSyR3uA3U4IS46phRV8NW7IvU/IfiBQnV14nl IYXvkl+vQC/xlU2iBH7FsOF/lI04xaGHOwaAQqtyhbVAEJeGJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBD+wBxVAbmi25V/TS84r3W40suDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDA3OGY1YjMtYzMwZi0z ZDUyLWIxNWUtYTViMzgxNWYyNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfojIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDLRZ7xJ8vfjlPDAR0Ikfwge3Djp6R2IMz7zAFlLjx9i2XG81B2jLXi wuEz27QYF+U1L1b2X22iRODe5cG5Nisw4C1n/zmiadqdZ9O54q43/xjaVwjT0nra gALf7wM8JhOH4aHGaIBFv+s1Rz+tx0ojy9S3857bIA8q6BU1JOPaxAzPGp0bSOCe VycppXxKFKPA5K3fjQg1P8TNoR00xcrNTzVBTdolfPiTXtS3/gyPsbwO3BO0E/L0 xrU6pNFOf+hElJVwKFdJ8ZUTCfa1OcFJGz95eB+b/0RK/0ckjse+6XT8fTpMFkX9 wBJEfZYiTsuY/O/Lz8yd1fR2u5evoqSH -----END CERTIFICATE-----Generated at Thu Sep 10 14:12:20 2026 by rpki-client