$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a0e4968-54b5-3c69-8820-88e9f6c6aca4.roa File: 5a0e4968-54b5-3c69-8820-88e9f6c6aca4.roa (raw, json) Hash identifier: guE+KL2Pd6sbPHsZlq39wpHylxyzXnHfvkbPmYyC76I= Subject key identifier: D1:2F:3E:43:D2:AD:E8:58:E6:43:B9:E2:A5:D8:9C:12:2C:1F:48:33 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4232EC2AAD556B06F5C5680 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a0e4968-54b5-3c69-8820-88e9f6c6aca4.roa Signing time: Wed 19 Aug 2026 18:03:42 +0000 ROA not before: Wed 19 Aug 2026 18:03:42 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 129.250.114.32/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:2e:c2:aa:d5:56:b0:6f:5c:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:42 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=78a3a85a-22fb-4dd2-84e5-8e65a1cdb791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cf:ff:87:b8:eb:7d:2b:b2:82:9f:ad:5d:a8: d1:a0:bf:e9:1e:db:6f:f0:a9:54:28:8a:5c:57:f6: 46:cd:f8:67:78:35:55:f3:93:9f:e1:61:eb:86:67: 03:8e:13:3c:73:00:58:2e:5f:ef:ae:43:94:44:6c: 2c:1a:c9:21:96:56:cb:aa:77:e3:cb:c3:c1:99:23: 01:75:1b:93:59:0e:b8:46:66:25:56:32:d7:1c:a9: cb:c8:b8:88:33:0a:fd:a5:4b:c8:db:64:c9:f8:69: 7d:9e:54:9d:1a:cb:c8:03:c8:8f:4c:6d:ef:df:39: 63:4a:6b:ce:3f:87:80:80:df:d5:d6:8b:2d:79:ff: 07:09:d4:13:92:af:95:a5:8a:e2:1d:2e:8c:74:50: be:82:38:3f:4f:3c:07:b2:f9:16:c9:e5:b7:7d:4b: 6e:46:bd:25:07:49:a0:3b:a6:4e:9b:d3:bc:f2:4b: 89:45:b0:c5:65:2a:cf:cf:de:2b:22:4c:1e:77:9c: 6b:06:01:28:de:0d:68:87:1d:fd:5f:65:e7:54:8f: 78:ef:72:0a:c0:5e:10:d8:23:14:a2:98:f4:31:10: 4b:d1:6b:da:a6:03:84:80:88:c7:d1:99:f1:25:ee: c3:e8:e7:6a:22:f6:2c:7f:44:dd:68:19:5f:ec:c0: 03:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2F:3E:43:D2:AD:E8:58:E6:43:B9:E2:A5:D8:9C:12:2C:1F:48:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a0e4968-54b5-3c69-8820-88e9f6c6aca4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.114.32/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d9:cd:95:8c:2b:86:26:0c:58:68:03:5f:8a:1b:a8:a2:62: ed:c4:25:0f:a4:a5:f3:34:cf:a2:e5:e3:e6:75:b8:cd:e1:1f: 9c:1d:dd:50:c7:05:54:cd:a1:d0:0d:62:b3:5c:21:92:02:84: ae:4d:1c:de:59:a0:35:06:d8:44:84:8f:b4:98:d4:2d:87:38: 20:bf:f5:af:09:95:50:94:ea:89:e6:82:f6:38:8d:6a:1c:80: 92:9e:0d:bb:b2:18:74:62:db:da:5e:88:2f:d5:d4:73:8f:48: 7a:a6:50:14:c3:4d:bc:ba:ae:9e:d5:d2:1d:c5:68:8b:ca:cf: bc:e0:a0:25:dd:e3:92:48:0b:54:3a:96:11:55:a1:80:5b:97: f5:ce:b4:4f:22:66:c2:33:26:47:17:b0:f8:36:b0:57:63:27: 5d:b4:d1:ca:5a:4b:5c:08:c2:c7:8f:b5:96:33:aa:f2:46:00: 71:2b:25:51:e4:51:72:60:c2:bd:15:aa:ae:36:73:97:78:fd: 45:78:44:6c:54:81:7c:af:5a:7a:f4:7e:ff:12:f6:6a:a0:f9: 02:4c:c5:85:1c:64:04:a3:3d:0f:ee:54:1f:4b:20:3e:fb:02: 08:28:36:11:62:33:3a:5e:2f:1a:68:55:d8:2d:00:ce:66:86: c3:38:29:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7kIy7CqtVWsG9cVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0MloXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk NzhhM2E4NWEtMjJmYi00ZGQyLTg0ZTUtOGU2NWExY2RiNzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc//h7jrfSuygp+tXajRoL/pHttv8KlUKIpc V/ZGzfhneDVV85Of4WHrhmcDjhM8cwBYLl/vrkOURGwsGskhllbLqnfjy8PBmSMB dRuTWQ64RmYlVjLXHKnLyLiIMwr9pUvI22TJ+Gl9nlSdGsvIA8iPTG3v3zljSmvO P4eAgN/V1ostef8HCdQTkq+VpYriHS6MdFC+gjg/TzwHsvkWyeW3fUtuRr0lB0mg O6ZOm9O88kuJRbDFZSrPz94rIkwed5xrBgEo3g1ohx39X2XnVI9473IKwF4Q2CMU opj0MRBL0WvapgOEgIjH0ZnxJe7D6OdqIvYsf0TdaBlf7MADlQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNEvPkPSrehY5kO54qXYnBIsH0gzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNWEwZTQ5NjgtNTRiNS0z YzY5LTg4MjAtODhlOWY2YzZhY2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDgfpyIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCX2c2VjCuGJgxYaANfihuoomLtxCUPpKXzNM+i5ePmdbjN4R+cHd1Q xwVUzaHQDWKzXCGSAoSuTRzeWaA1BthEhI+0mNQthzggv/WvCZVQlOqJ5oL2OI1q HICSng27shh0YtvaXogv1dRzj0h6plAUw028uq6e1dIdxWiLys+84KAl3eOSSAtU OpYRVaGAW5f1zrRPImbCMyZHF7D4NrBXYyddtNHKWktcCMLHj7WWM6ryRgBxKyVR 5FFyYMK9FaquNnOXeP1FeERsVIF8r1p69H7/EvZqoPkCTMWFHGQEoz0P7lQfSyA+ +wIIKDYRYjM6Xi8aaFXYLQDOZobDOCnr -----END CERTIFICATE-----Generated at Fri Aug 21 23:27:00 2026 by rpki-client