$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9feab245-a594-3dee-9158-896a2d26f46d.roa File: 9feab245-a594-3dee-9158-896a2d26f46d.roa (raw, json) Hash identifier: ucizM85+P2V4kMvt7gUUkLfdaML7EGJbajU/s3GENSQ= Subject key identifier: 62:70:BB:8F:20:0C:D5:36:98:CC:86:86:07:33:4A:65:2A:C3:E0:72 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E1E44550606EB99D8613C5C80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9feab245-a594-3dee-9158-896a2d26f46d.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 19893 IP address blocks: 128.121.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Jun 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:55:06:06:eb:99:d8:61:3c:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=32efb69c-2007-4d87-9e0d-0ad11e798af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:81:4f:14:11:ce:99:1d:a2:6b:d9:a7:36: 21:d8:3e:c5:dc:2e:72:16:a9:bb:6e:92:19:ba:11: 8b:60:20:fd:5b:60:cf:64:de:1e:4b:e1:e5:d9:1a: e4:1e:e6:4b:dd:b9:07:fe:e9:f6:c6:23:d2:89:e0: 7e:e1:2f:fb:e4:f6:33:6f:d5:52:1e:19:2c:05:90: 95:ee:cd:13:73:41:db:a5:02:36:7b:5c:81:22:58: d8:93:0d:38:0f:9b:92:ab:6d:41:12:cb:d8:ec:8c: f2:cb:c5:9a:0a:10:0d:ae:eb:cf:e5:92:04:b3:fc: 96:9d:75:de:17:6a:67:f9:35:b9:82:37:1d:f2:f7: 69:72:d4:64:c7:d6:83:31:00:66:0a:e9:7e:06:3c: 34:3b:75:84:35:09:21:03:0d:93:29:7a:b8:8a:6d: ea:a0:25:f9:08:80:fc:20:cf:8a:72:63:cc:8a:d3: 98:2b:ab:a4:8b:7b:18:a1:a7:2c:a3:93:48:fe:f9: ab:bf:44:93:3a:f2:2c:ab:29:c3:2b:91:ac:f1:eb: f5:e2:4f:5a:bf:ac:23:57:65:9d:91:1b:6f:d2:7b: 3e:a4:3a:04:3c:1b:c2:ca:49:34:3a:c7:42:03:86: 11:31:74:32:cf:f6:0d:06:bc:7c:ac:01:56:c7:bf: a7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:70:BB:8F:20:0C:D5:36:98:CC:86:86:07:33:4A:65:2A:C3:E0:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9feab245-a594-3dee-9158-896a2d26f46d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:98:d3:c2:ac:c1:8d:cb:2f:99:39:81:a1:c0:e8:8c:89:46: e1:1e:1c:21:7d:6e:43:9d:3e:a9:a1:c6:44:00:76:aa:83:15: 25:63:d7:28:62:a4:dd:06:14:70:0a:91:21:90:8f:d1:33:3e: a1:57:66:bc:53:48:a0:d3:2e:be:17:b8:02:1f:0c:04:49:e0: 05:9f:87:d8:4b:6f:b2:a7:99:9d:72:85:ef:91:37:24:0a:94: ab:7d:44:b3:ea:e2:3f:65:22:dc:4d:a9:ff:9a:ba:8f:40:d4: 05:0f:e8:42:ba:23:34:a9:b8:80:20:94:28:02:b5:04:80:90: 57:06:0e:61:71:cf:93:d4:61:79:52:00:c1:b4:ee:54:42:bd: 50:50:2b:83:10:7f:ff:47:63:46:87:b0:1a:02:e4:80:71:1a: c8:ab:5c:fc:55:33:b5:37:f4:62:00:11:32:c6:b0:44:5b:39: dd:37:6d:9d:4a:21:7e:80:db:68:20:cd:d6:55:32:d4:da:19: 0f:36:a4:57:a9:92:f9:12:a0:6c:a7:c8:e3:31:12:fb:a7:50: 45:dd:7c:e2:93:36:30:9e:b2:11:5c:0b:e4:1b:88:0b:8d:4d: 21:0a:62:82:14:f3:59:52:90:6f:d9:a1:53:41:39:2c:f9:44: 93:54:58:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRFUGBuuZ2GE8XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk MzJlZmI2OWMtMjAwNy00ZDg3LTllMGQtMGFkMTFlNzk4YWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXOBTxQRzpkdomvZpzYh2D7F3C5yFqm7bpIZ uhGLYCD9W2DPZN4eS+Hl2RrkHuZL3bkH/un2xiPSieB+4S/75PYzb9VSHhksBZCV 7s0Tc0HbpQI2e1yBIljYkw04D5uSq21BEsvY7Izyy8WaChANruvP5ZIEs/yWnXXe F2pn+TW5gjcd8vdpctRkx9aDMQBmCul+Bjw0O3WENQkhAw2TKXq4im3qoCX5CID8 IM+KcmPMitOYK6uki3sYoacso5NI/vmrv0STOvIsqynDK5Gs8ev14k9av6wjV2Wd kRtv0ns+pDoEPBvCykk0OsdCA4YRMXQyz/YNBrx8rAFWx7+nFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJwu48gDNU2mMyGhgczSmUqw+ByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOWZlYWIyNDUtYTU5NC0z ZGVlLTkxNTgtODk2YTJkMjZmNDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGY08KswY3LL5k5gaHA6IyJRuEeHCF9bkOdPqmhxkQAdqqDFSVj1yhi pN0GFHAKkSGQj9EzPqFXZrxTSKDTLr4XuAIfDARJ4AWfh9hLb7KnmZ1yhe+RNyQK lKt9RLPq4j9lItxNqf+auo9A1AUP6EK6IzSpuIAglCgCtQSAkFcGDmFxz5PUYXlS AMG07lRCvVBQK4MQf/9HY0aHsBoC5IBxGsirXPxVM7U39GIAETLGsERbOd03bZ1K IX6A22ggzdZVMtTaGQ82pFepkvkSoGynyOMxEvunUEXdfOKTNjCeshFcC+QbiAuN TSEKYoIU81lSkG/ZoVNBOSz5RJNUWEU= -----END CERTIFICATE-----Generated at Wed Jun 10 22:12:45 2026 by rpki-client