$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cb92ecf7-b628-3de1-8e20-cd46e8145783.roa File: cb92ecf7-b628-3de1-8e20-cd46e8145783.roa (raw, json) Hash identifier: hUY3mwQhMmAsfm4DjWa526C17enw1qa2xkx/Z9h++nM= Subject key identifier: 57:A7:E8:6C:56:BA:2D:B4:FC:84:81:7D:4F:F2:58:5E:0E:64:0A:A4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584CA32CF4AE63C01F3CE6F6C880 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cb92ecf7-b628-3de1-8e20-cd46e8145783.roa Signing time: Sun 25 Jan 2026 02:00:31 +0000 ROA not before: Sun 25 Jan 2026 02:00:31 +0000 ROA not after: Sat 25 Apr 2026 01:00:31 +0000 asID: 275 IP address blocks: 129.250.35.16/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a3:2c:f4:ae:63:c0:1f:3c:e6:f6:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jan 25 02:00:31 2026 GMT Not After : Apr 25 01:00:31 2026 GMT Subject: CN=4bda5a57-3559-4eb5-9ac6-8e6cfce343a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:1b:17:d0:15:8b:7c:92:60:c2:13:de:61: aa:fd:3d:ac:5f:a6:21:e4:d1:c2:12:42:1e:ae:81: b6:2f:9b:07:ef:ce:f1:21:6a:25:10:4e:1a:db:dc: 51:23:8a:f0:fc:df:26:83:2e:c9:84:86:4e:4a:fe: 7b:7e:13:57:09:f8:e7:3f:aa:3e:a5:a7:40:69:99: a1:eb:0e:c7:22:de:2e:d3:9f:2c:ee:81:f1:87:b9: 3d:56:2f:e9:6e:c9:0a:2a:39:7a:ab:00:7a:5b:64: 53:59:0e:15:43:e6:64:13:88:6a:ad:8f:07:dc:83: bb:fb:a4:9d:bd:86:20:f8:6b:df:f1:a5:c2:da:39: 42:d2:69:25:68:51:ab:71:7d:51:f7:4e:d1:46:5e: e7:f7:d7:c3:c5:ce:00:81:bc:af:c6:f9:53:0e:0c: b9:16:5c:73:19:ea:7a:91:ac:7c:29:ee:40:dd:19: c0:a0:f9:02:3d:80:fd:72:62:53:94:21:48:50:55: 8e:9a:93:74:74:c2:b6:7f:b3:28:fd:66:9d:18:e1: a0:a0:8d:c7:56:9d:44:3b:dd:bd:ce:0c:46:fd:80: 32:e3:b9:f4:ae:af:0b:07:7a:f8:aa:db:cf:5e:58: dc:a0:88:f0:d9:bb:da:c1:96:06:4a:1b:9f:1b:10: 64:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A7:E8:6C:56:BA:2D:B4:FC:84:81:7D:4F:F2:58:5E:0E:64:0A:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cb92ecf7-b628-3de1-8e20-cd46e8145783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.16/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:6a:5b:54:a9:ed:d0:56:93:70:38:fc:a6:08:37:44:dc:90: c0:88:63:2d:3f:75:de:72:31:b1:49:29:ad:f4:9e:c3:01:fc: 0e:46:1f:09:62:92:a9:a5:72:51:68:73:75:14:2d:d5:fb:d3: 3d:a3:72:0a:f6:b4:1e:95:8e:8a:f2:e3:65:e4:6a:df:91:04: 1d:45:08:fe:98:06:57:7c:3b:57:e0:91:9e:22:cc:c3:64:2a: ac:05:94:ba:f2:b2:11:af:16:41:99:e2:27:2e:48:b9:7b:f2: 8f:1c:8e:c1:f8:85:9e:0b:b7:c0:7a:32:31:a6:6c:64:15:c4: db:e0:3e:a1:77:04:25:42:9d:88:6a:7a:1d:00:64:7a:4b:ac: d2:30:d6:d1:4d:1c:cd:a9:09:09:0c:e1:e7:16:da:55:35:e3: c2:e7:6a:4d:cc:80:59:c7:1d:7e:7d:a1:45:fa:6e:e7:d4:28: 52:99:09:8b:1e:32:f4:32:f0:1e:c0:b0:5e:94:ed:0a:8b:11: c3:13:24:13:55:f3:59:4a:75:0c:b0:06:4a:91:3c:35:16:3e: 05:56:c0:59:14:77:cc:6a:c9:89:96:16:9c:02:1d:d2:3a:85: 11:7a:3e:15:42:95:75:a3:d5:ce:11:b3:c7:bf:55:19:16:ff: 9d:38:12:9e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyjLPSuY8AfPOb2yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDEyNTAyMDAzMVoXDTI2MDQyNTAxMDAzMVowLzEtMCsGA1UEAxMk NGJkYTVhNTctMzU1OS00ZWI1LTlhYzYtOGU2Y2ZjZTM0M2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfMbF9AVi3ySYMIT3mGq/T2sX6Yh5NHCEkIe roG2L5sH787xIWolEE4a29xRI4rw/N8mgy7JhIZOSv57fhNXCfjnP6o+padAaZmh 6w7HIt4u058s7oHxh7k9Vi/pbskKKjl6qwB6W2RTWQ4VQ+ZkE4hqrY8H3IO7+6Sd vYYg+Gvf8aXC2jlC0mklaFGrcX1R907RRl7n99fDxc4AgbyvxvlTDgy5FlxzGep6 kax8Ke5A3RnAoPkCPYD9cmJTlCFIUFWOmpN0dMK2f7Mo/WadGOGgoI3HVp1EO929 zgxG/YAy47n0rq8LB3r4qtvPXljcoIjw2bvawZYGShufGxBkYQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFen6GxWui20/ISBfU/yWF4OZAqkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2I5MmVjZjctYjYyOC0z ZGUxLThlMjAtY2Q0NmU4MTQ1NzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfojEDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCialtUqe3QVpNwOPymCDdE3JDAiGMtP3XecjGxSSmt9J7DAfwORh8J YpKppXJRaHN1FC3V+9M9o3IK9rQelY6K8uNl5GrfkQQdRQj+mAZXfDtX4JGeIszD ZCqsBZS68rIRrxZBmeInLki5e/KPHI7B+IWeC7fAejIxpmxkFcTb4D6hdwQlQp2I anodAGR6S6zSMNbRTRzNqQkJDOHnFtpVNePC52pNzIBZxx1+faFF+m7n1ChSmQmL HjL0MvAewLBelO0KixHDEyQTVfNZSnUMsAZKkTw1Fj4FVsBZFHfMasmJlhacAh3S OoURej4VQpV1o9XOEbPHv1UZFv+dOBKe -----END CERTIFICATE-----Generated at Mon Feb 23 11:53:15 2026 by rpki-client