$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cac2b2d7-5fdc-3dee-a03b-e4662a0e1629.roa File: cac2b2d7-5fdc-3dee-a03b-e4662a0e1629.roa (raw, json) Hash identifier: s9WiuoFm2Zc5C6jRpR9kjmGxp2iFqbW3tM+SbKm5O14= Subject key identifier: 66:74:23:4D:36:C3:F6:87:8D:88:B5:4F:FA:AF:60:C0:F2:4F:2B:6A Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233042FAFB70A119646660 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cac2b2d7-5fdc-3dee-a03b-e4662a0e1629.roa Signing time: Wed 19 Aug 2026 18:03:43 +0000 ROA not before: Wed 19 Aug 2026 18:03:43 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 129.250.113.32/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:30:42:fa:fb:70:a1:19:64:66:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:43 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=e2bf417c-a776-4250-aec2-89173439a82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c7:91:0b:75:14:a7:fd:3f:42:c7:49:ce:f9: 03:eb:75:22:60:e6:cc:31:0f:c5:7c:45:5a:55:3e: f8:f1:6c:50:56:41:02:a7:02:fe:ca:81:8c:27:d0: 27:29:a1:63:10:ec:75:e5:b9:f9:54:7c:30:f0:9b: d2:c3:ec:35:a8:f1:ac:62:9b:32:69:9a:72:26:31: 06:0d:ee:88:32:a2:ec:94:ff:2a:4d:8f:7c:8e:3a: c5:6d:69:fa:ec:ef:de:41:ee:cd:f5:26:0f:d2:47: 85:b6:91:45:c6:14:e2:16:5e:f7:86:fd:4f:43:33: 4e:b1:b0:dc:8b:ed:f7:10:0b:19:4b:63:35:4a:30: af:cc:00:8b:7c:25:28:d8:a1:4c:c8:e2:97:23:66: ed:ee:80:39:56:c0:c0:b8:b0:36:7b:2c:3b:73:0a: b3:8c:ee:dd:d0:be:a0:7f:60:03:c9:0c:bd:47:e3: 45:81:70:b8:5f:01:89:e5:d7:c7:91:df:5e:57:10: fc:fb:2f:b1:79:f0:70:67:02:6b:db:a3:35:fb:4e: 49:4a:75:75:16:2f:ab:b5:22:cf:57:37:f9:36:fc: 3a:4f:e5:15:6f:7b:bf:e3:1b:7e:a5:85:55:62:4a: cf:8e:54:86:e6:82:bc:6a:a2:1a:6f:d6:fa:10:ab: 10:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:74:23:4D:36:C3:F6:87:8D:88:B5:4F:FA:AF:60:C0:F2:4F:2B:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cac2b2d7-5fdc-3dee-a03b-e4662a0e1629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.113.32/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ec:d1:90:a6:3c:8b:b6:de:3d:10:f9:07:a0:c5:25:3c:27: ee:6e:07:85:4c:76:7e:ab:41:7c:b1:c6:75:bb:85:e6:e0:ee: 61:75:27:3e:c0:85:c8:81:b0:38:0e:54:d1:75:39:0c:1e:90: 04:68:79:6b:8e:86:a8:52:c4:41:83:d7:f8:76:9f:fc:b9:b1: 62:fc:23:db:95:d2:53:f7:58:ab:9e:8a:46:3b:8c:cc:1b:70: bd:f2:1e:fa:db:41:a4:6d:ba:b4:69:57:c7:f4:97:83:b8:d1: 6e:2a:18:82:c0:24:74:31:f7:42:a2:06:24:3b:48:4d:7d:93: ba:1d:6c:f7:b1:38:81:44:b0:d6:79:c9:e2:40:8d:d6:cf:f6: 64:09:1c:64:1e:3b:61:78:62:b7:02:cb:bd:f7:f4:db:4e:62: 96:43:d9:95:65:bf:4c:82:56:43:60:c2:0d:fe:1d:6c:7e:d7: 51:d9:25:57:74:e3:f5:aa:77:c8:66:21:e2:34:11:52:ed:f2: cf:28:25:36:c5:0b:6e:dd:6f:11:ce:4c:1d:5a:62:38:0f:11: c2:3c:1b:00:04:f6:59:16:fc:e6:9c:f5:d7:b0:60:c0:d3:0f: d6:e8:86:57:2d:2f:8a:ed:7b:8c:ac:89:b1:00:e4:b9:2d:5d: 98:28:b0:2a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7kIzBC+vtwoRlkZmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0M1oXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk ZTJiZjQxN2MtYTc3Ni00MjUwLWFlYzItODkxNzM0MzlhODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8eRC3UUp/0/QsdJzvkD63UiYObMMQ/FfEVa VT748WxQVkECpwL+yoGMJ9AnKaFjEOx15bn5VHww8JvSw+w1qPGsYpsyaZpyJjEG De6IMqLslP8qTY98jjrFbWn67O/eQe7N9SYP0keFtpFFxhTiFl73hv1PQzNOsbDc i+33EAsZS2M1SjCvzACLfCUo2KFMyOKXI2bt7oA5VsDAuLA2eyw7cwqzjO7d0L6g f2ADyQy9R+NFgXC4XwGJ5dfHkd9eVxD8+y+xefBwZwJr26M1+05JSnV1Fi+rtSLP Vzf5Nvw6T+UVb3u/4xt+pYVVYkrPjlSG5oK8aqIab9b6EKsQ9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGZ0I002w/aHjYi1T/qvYMDyTytqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2FjMmIyZDctNWZkYy0z ZGVlLWEwM2ItZTQ2NjJhMGUxNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDgfpxIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA37NGQpjyLtt49EPkHoMUlPCfubgeFTHZ+q0F8scZ1u4Xm4O5hdSc+ wIXIgbA4DlTRdTkMHpAEaHlrjoaoUsRBg9f4dp/8ubFi/CPbldJT91irnopGO4zM G3C98h7620Gkbbq0aVfH9JeDuNFuKhiCwCR0MfdCogYkO0hNfZO6HWz3sTiBRLDW ecniQI3Wz/ZkCRxkHjtheGK3Asu99/TbTmKWQ9mVZb9MglZDYMIN/h1sftdR2SVX dOP1qnfIZiHiNBFS7fLPKCU2xQtu3W8RzkwdWmI4DxHCPBsABPZZFvzmnPXXsGDA 0w/W6IZXLS+K7XuMrImxAOS5LV2YKLAq -----END CERTIFICATE-----Generated at Thu Sep 17 12:11:15 2026 by rpki-client