$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bca8aba2-0f2d-37cb-82f0-3d074a46ef22.roa File: bca8aba2-0f2d-37cb-82f0-3d074a46ef22.roa (raw, json) Hash identifier: +bxlm7tPMixRJ92ZuluchFKMcuJLbEM3AcHskQBqk3o= Subject key identifier: 3F:27:54:DF:9C:CF:C9:87:0F:53:3B:73:09:D1:7B:F6:38:E5:EE:30 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4232F77B5705AFC62CD6C40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bca8aba2-0f2d-37cb-82f0-3d074a46ef22.roa Signing time: Wed 19 Aug 2026 18:03:43 +0000 ROA not before: Wed 19 Aug 2026 18:03:43 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 129.250.113.40/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:2f:77:b5:70:5a:fc:62:cd:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:43 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=59727204-640c-48ea-85af-375ff1286d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:da:7c:c1:55:13:46:5a:36:b8:2f:bb:e2:fc: 52:3c:24:e5:74:d8:ae:b1:a2:ce:81:58:ad:77:90: 09:60:df:05:b8:14:8e:6c:2a:f9:a5:2d:79:c3:52: c5:26:0f:f2:d4:2d:e3:1a:2e:60:00:82:ae:aa:56: 60:1c:9e:bc:17:32:f2:3b:12:4b:58:15:d2:98:1d: 29:a1:47:ca:31:bb:53:85:ba:77:85:5e:8d:fd:52: 9d:9b:e5:ae:09:ab:d3:d4:45:3b:e6:c8:f0:f6:91: 66:8f:c9:cf:fd:71:48:47:90:d1:ab:f3:2c:88:d2: c3:91:f5:03:d8:b3:5a:d8:82:93:72:96:b3:c1:48: e8:bb:ee:f5:4a:33:0c:86:2b:9b:bf:36:07:4e:33: be:02:7d:91:24:27:f4:dd:08:73:10:06:60:23:34: 83:b4:cc:f9:74:cc:8c:e9:7b:68:1f:e1:d3:ad:c3: ee:2c:66:b3:b6:bf:9c:96:72:20:d5:93:ee:cf:53: 5c:5d:20:65:db:c7:9e:a0:b8:82:a6:4e:42:12:ae: a2:a6:c5:91:bb:d2:d0:04:94:36:3c:80:88:80:25: e9:c2:14:b7:ea:9e:17:fa:e9:b3:6f:3f:df:da:67: ec:0b:d8:dd:bb:39:19:31:bb:eb:8b:3c:b3:9f:0a: ec:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:27:54:DF:9C:CF:C9:87:0F:53:3B:73:09:D1:7B:F6:38:E5:EE:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bca8aba2-0f2d-37cb-82f0-3d074a46ef22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.113.40/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:51:a2:30:14:70:63:70:2d:ed:37:f4:06:04:d6:dd:bb:b9: 6d:63:16:e2:5b:c6:28:1b:c4:07:38:3f:02:31:ad:08:e8:46: fe:83:df:c9:01:09:86:cd:d4:50:97:bb:be:c3:04:ef:64:a5: 51:45:8d:4e:2c:fc:22:0a:9a:f1:ae:64:5f:1f:fd:fd:fa:83: 9d:7f:cb:12:a5:f8:3a:c1:71:e4:6d:be:32:54:21:a7:8a:95: 16:cc:cf:74:0a:c6:10:0e:e7:90:50:4d:94:c5:21:c1:b0:cf: 66:61:4d:70:d8:13:e4:a9:45:d1:a7:03:dd:5f:d8:41:85:e0: 44:41:10:2b:a2:6e:72:3d:57:77:f5:85:f2:cb:28:de:ad:a2: 13:3d:0f:46:8c:d9:2b:cb:99:d8:27:40:40:29:9b:52:f4:54: ed:07:d9:cd:62:1e:4d:c7:8e:ce:bf:cf:08:87:91:0d:15:77: 66:b1:62:2a:ab:15:6a:7c:ce:6b:b7:c3:85:90:4d:dc:07:d4: c9:8d:d1:52:db:e7:3f:30:af:a6:02:74:48:07:dd:16:8c:f7: 5b:6a:c1:58:a4:e0:8c:c1:06:9e:8b:6d:5e:35:12:95:fb:d3: d1:34:6d:65:8e:cf:5d:51:70:cf:0f:75:a2:71:dd:4c:7f:93: 1b:45:4b:9c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7kIy93tXBa/GLNbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0M1oXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk NTk3MjcyMDQtNjQwYy00OGVhLTg1YWYtMzc1ZmYxMjg2ZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNp8wVUTRlo2uC+74vxSPCTldNiusaLOgVit d5AJYN8FuBSObCr5pS15w1LFJg/y1C3jGi5gAIKuqlZgHJ68FzLyOxJLWBXSmB0p oUfKMbtThbp3hV6N/VKdm+WuCavT1EU75sjw9pFmj8nP/XFIR5DRq/MsiNLDkfUD 2LNa2IKTcpazwUjou+71SjMMhiubvzYHTjO+An2RJCf03QhzEAZgIzSDtMz5dMyM 6XtoH+HTrcPuLGaztr+clnIg1ZPuz1NcXSBl28eeoLiCpk5CEq6ipsWRu9LQBJQ2 PICIgCXpwhS36p4X+umzbz/f2mfsC9jduzkZMbvrizyznwrsAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD8nVN+cz8mHD1M7cwnRe/Y45e4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmNhOGFiYTItMGYyZC0z N2NiLTgyZjAtM2QwNzRhNDZlZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDgfpxKDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC1UaIwFHBjcC3tN/QGBNbdu7ltYxbiW8YoG8QHOD8CMa0I6Eb+g9/J AQmGzdRQl7u+wwTvZKVRRY1OLPwiCprxrmRfH/39+oOdf8sSpfg6wXHkbb4yVCGn ipUWzM90CsYQDueQUE2UxSHBsM9mYU1w2BPkqUXRpwPdX9hBheBEQRArom5yPVd3 9YXyyyjeraITPQ9GjNkry5nYJ0BAKZtS9FTtB9nNYh5Nx47Ov88Ih5ENFXdmsWIq qxVqfM5rt8OFkE3cB9TJjdFS2+c/MK+mAnRIB90WjPdbasFYpOCMwQaei21eNRKV +9PRNG1ljs9dUXDPD3Wicd1Mf5MbRUuc -----END CERTIFICATE-----Generated at Thu Sep 17 19:19:10 2026 by rpki-client