$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a4020aaa-6f48-3408-ac01-ae243ddc918c.roa File: a4020aaa-6f48-3408-ac01-ae243ddc918c.roa (raw, json) Hash identifier: qBBkJJq/x5F11gER+yn3DPBeaWFCtN7L5XwuOyUcGLk= Subject key identifier: 2C:A0:23:75:EE:87:18:A2:A2:5C:D4:74:C7:F1:0F:FC:6E:A7:54:EF Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE423300277FFC8CCF9A42B80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a4020aaa-6f48-3408-ac01-ae243ddc918c.roa Signing time: Wed 19 Aug 2026 18:03:43 +0000 ROA not before: Wed 19 Aug 2026 18:03:43 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 129.250.113.112/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:30:02:77:ff:c8:cc:f9:a4:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:43 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=d442bdca-597e-403b-883d-5474386e692d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4a:68:1b:ad:49:ab:37:92:df:56:f3:e9:fb: c6:ad:3b:49:b2:35:99:1f:a5:97:ac:de:cf:53:96: 2f:c5:b7:68:da:86:42:4e:18:d1:6a:58:54:e9:5a: eb:cf:e4:a0:05:4f:33:7f:66:dc:d6:3e:09:11:1b: c8:a3:2e:9a:c0:72:2f:32:b2:20:4d:4b:3b:72:08: c8:bc:9a:a8:a7:5a:cf:8f:1c:09:f7:5f:c2:e2:d8: eb:cb:0d:b3:b3:3d:b0:47:d4:cc:53:bc:60:4f:59: 8a:23:52:78:e7:28:05:f3:df:78:7e:32:f3:1d:1c: 0a:a7:5f:28:81:f5:04:36:6d:26:cc:55:11:51:7d: 62:ce:2a:da:c1:a0:b4:11:26:9a:26:d2:31:26:71: fe:76:a2:f1:db:52:da:f3:c1:12:bb:e6:b8:83:da: 67:76:eb:29:39:b9:7f:a2:58:08:9d:dd:ca:d5:da: de:29:bb:92:80:14:0b:42:b2:45:ef:5e:57:f1:2f: 16:f4:26:e0:73:93:3b:d9:26:e9:90:db:74:f8:6d: b6:8f:f7:77:7b:f4:51:e8:83:ef:72:0b:c9:67:fe: d2:70:d3:9d:09:c7:c8:76:3d:df:82:c0:f6:23:ab: d1:35:e6:86:71:2e:e0:23:af:5e:c5:ef:b7:c6:e5: 64:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A0:23:75:EE:87:18:A2:A2:5C:D4:74:C7:F1:0F:FC:6E:A7:54:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a4020aaa-6f48-3408-ac01-ae243ddc918c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.113.112/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a7:c9:17:74:d2:37:ea:f3:fc:92:ef:f1:96:ff:59:3b:8d: e0:09:f1:bb:b1:59:17:ae:07:a3:2e:4a:c9:2d:3a:0e:d6:2a: 6e:f8:85:90:fd:36:bd:13:b5:97:3d:e9:44:b8:02:d2:4e:e7: 77:d0:ae:62:53:3d:37:81:d4:ef:86:ca:2b:df:5c:60:d6:c6: 25:94:38:35:92:99:05:b7:1a:bf:0b:2f:13:f8:07:10:ce:70: 22:09:9b:04:e8:d3:be:a7:d8:33:1f:b9:bb:1c:32:7d:1e:04: 8b:44:02:86:d3:9a:65:53:4a:f6:bc:b9:cf:cf:bc:a6:f5:31: 57:e6:08:bc:b8:03:32:cd:59:66:74:b5:f7:03:8c:13:f1:f3: f8:8b:c0:94:75:9e:1e:37:80:07:c2:d9:1d:a2:e1:9e:81:8f: 89:e5:9d:a3:e6:11:7e:6a:9d:3b:6a:66:e1:64:f6:68:e1:27: 43:3f:56:de:16:6a:ab:7c:1a:13:d7:47:93:bb:f7:14:57:8d: ab:0e:21:a7:68:ee:85:09:6d:62:d7:21:8c:3a:c8:3e:a8:28: a2:bb:8d:2c:93:15:6c:68:57:86:6f:3f:21:c2:b5:69:a8:c0: 64:b5:4a:60:d0:31:c8:7a:b5:36:8e:a0:9c:18:b1:2a:ce:af: 88:bb:b5:66 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7kIzACd//IzPmkK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0M1oXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk ZDQ0MmJkY2EtNTk3ZS00MDNiLTg4M2QtNTQ3NDM4NmU2OTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUpoG61JqzeS31bz6fvGrTtJsjWZH6WXrN7P U5Yvxbdo2oZCThjRalhU6Vrrz+SgBU8zf2bc1j4JERvIoy6awHIvMrIgTUs7cgjI vJqop1rPjxwJ91/C4tjryw2zsz2wR9TMU7xgT1mKI1J45ygF8994fjLzHRwKp18o gfUENm0mzFURUX1izirawaC0ESaaJtIxJnH+dqLx21La88ESu+a4g9pnduspObl/ olgInd3K1dreKbuSgBQLQrJF715X8S8W9Cbgc5M72SbpkNt0+G22j/d3e/RR6IPv cgvJZ/7ScNOdCcfIdj3fgsD2I6vRNeaGcS7gI69exe+3xuVkuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCygI3XuhxiiolzUdMfxD/xup1TvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTQwMjBhYWEtNmY0OC0z NDA4LWFjMDEtYWUyNDNkZGM5MThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDgfpxcDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCIp8kXdNI36vP8ku/xlv9ZO43gCfG7sVkXrgejLkrJLToO1ipu+IWQ /Ta9E7WXPelEuALSTud30K5iUz03gdTvhsor31xg1sYllDg1kpkFtxq/Cy8T+AcQ znAiCZsE6NO+p9gzH7m7HDJ9HgSLRAKG05plU0r2vLnPz7ym9TFX5gi8uAMyzVlm dLX3A4wT8fP4i8CUdZ4eN4AHwtkdouGegY+J5Z2j5hF+ap07ambhZPZo4SdDP1be FmqrfBoT10eTu/cUV42rDiGnaO6FCW1i1yGMOsg+qCiiu40skxVsaFeGbz8hwrVp qMBktUpg0DHIerU2jqCcGLEqzq+Iu7Vm -----END CERTIFICATE-----Generated at Thu Sep 17 16:51:28 2026 by rpki-client