$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d223136a-9c6e-3ca4-89f8-5fd9384ba56f.roa File: d223136a-9c6e-3ca4-89f8-5fd9384ba56f.roa (raw, json) Hash identifier: m4dwyzBLQYQ71Syt7CLWrc82W3THPWu2EItB2RL/V6U= Subject key identifier: 64:43:C4:D4:54:50:27:81:5D:B3:FF:FF:BA:E0:9A:EF:6C:80:FB:05 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EA7917B3B8121C24D6D73BA80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d223136a-9c6e-3ca4-89f8-5fd9384ba56f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 128.121.64.0/18 maxlen: 24 128.241.128.0/18 maxlen: 24 131.103.192.0/18 maxlen: 24 157.238.0.0/18 maxlen: 24 168.143.0.0/18 maxlen: 24 192.204.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:7b:3b:81:21:c2:4d:6d:73:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5985892e-a3e7-411d-8d70-1712da259c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:09:61:d7:92:5e:fe:ea:eb:7e:56:88:2e:7d: 5b:01:d0:b7:6b:f9:f9:f0:8c:d8:81:0c:d4:33:9d: 28:ae:cf:f7:4e:91:4d:14:e0:88:53:30:ea:a9:71: 95:d3:64:b4:92:f8:60:97:23:2f:73:da:e7:30:87: 7f:27:fc:b0:90:a5:16:3c:66:af:4b:b7:47:b6:23: df:d4:d7:e1:79:be:21:56:2d:92:c6:f3:f0:79:37: df:0d:4f:dd:42:eb:31:d5:65:b0:69:fb:46:82:b4: 6e:3d:6f:e0:df:89:fe:89:f7:00:ea:81:80:a8:4e: 8b:33:88:9e:a9:4e:c5:66:ec:61:b4:c7:9f:e8:de: db:60:8d:85:25:51:96:96:23:99:b9:9f:e2:a2:60: 4c:9c:9d:8a:a4:11:14:27:1f:16:b0:7a:79:15:ff: 1e:ff:44:51:49:0c:3d:5b:85:e0:9c:da:e2:33:1c: 6f:f7:af:94:53:63:0f:d7:ac:d3:30:e5:87:a6:f3: b7:b6:e0:d8:a6:da:49:e8:d0:ae:19:e0:a7:a8:9b: 52:c7:0c:46:e4:56:07:68:c3:d1:9f:9e:07:85:60: 92:16:87:19:78:e0:8a:7d:d6:5c:49:9a:09:7d:86: 71:de:48:ba:b4:7b:76:51:6f:11:e4:cd:a9:df:1a: 9f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:43:C4:D4:54:50:27:81:5D:B3:FF:FF:BA:E0:9A:EF:6C:80:FB:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d223136a-9c6e-3ca4-89f8-5fd9384ba56f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.64.0/18 128.241.128.0/18 131.103.192.0/18 157.238.0.0/18 168.143.0.0/18 192.204.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:2a:11:17:63:e4:69:aa:bb:99:20:1b:ae:53:89:ff:34:20: e3:da:d1:9b:f4:0b:9c:95:f1:43:ca:77:56:59:21:a7:72:42: cf:7d:48:c9:92:8c:1e:13:05:80:25:29:10:33:bb:79:04:64: 90:fa:68:8e:c6:fb:3c:6f:2f:31:3a:00:92:6d:fe:90:0a:2b: f2:c0:80:20:42:af:ab:c7:3f:92:67:14:65:7a:43:54:06:a0: e3:0a:6b:8e:ca:54:86:39:00:2b:e9:01:5b:44:fb:e7:82:ea: ca:1e:d5:6a:e6:06:ef:33:97:ba:86:18:c5:52:24:ba:f5:d5: 66:d9:40:e5:1b:4f:20:1e:7b:10:70:1a:88:5b:39:38:48:ed: f0:8d:9a:44:56:4d:2b:70:25:37:c0:ea:90:93:a4:39:10:e7: 92:ea:eb:dc:db:a1:7f:0c:15:a2:9b:ca:40:b7:d1:68:cc:63: e6:81:ce:e1:12:90:0c:a1:f7:04:48:fa:69:23:48:ee:ad:54: e6:1c:bd:51:e7:54:56:62:60:50:a0:ea:0e:9b:80:a1:8a:4c: b2:d3:53:14:09:7d:80:aa:8c:63:12:1b:16:57:86:a5:7a:de: e9:42:08:8e:87:74:57:6b:28:5f:ec:36:6a:53:b9:b0:d0:c3: 99:32:1f:99 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWE6nkXs7gSHCTW1zuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTk4NTg5MmUtYTNlNy00MTFkLThkNzAtMTcxMmRhMjU5YzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQlh15Je/urrflaILn1bAdC3a/n58IzYgQzU M50ors/3TpFNFOCIUzDqqXGV02S0kvhglyMvc9rnMId/J/ywkKUWPGavS7dHtiPf 1Nfheb4hVi2SxvPweTffDU/dQusx1WWwaftGgrRuPW/g34n+ifcA6oGAqE6LM4ie qU7FZuxhtMef6N7bYI2FJVGWliOZuZ/iomBMnJ2KpBEUJx8WsHp5Ff8e/0RRSQw9 W4XgnNriMxxv96+UU2MP16zTMOWHpvO3tuDYptpJ6NCuGeCnqJtSxwxG5FYHaMPR n54HhWCSFocZeOCKfdZcSZoJfYZx3ki6tHt2UW8R5M2p3xqfCwIDAQABo4IDczCC A28wHQYDVR0OBBYEFGRDxNRUUCeBXbP//7rgmu9sgPsFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDIyMzEzNmEtOWM2ZS0z Y2E0LTg5ZjgtNWZkOTM4NGJhNTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQGgHlAAwQG gPGAAwQGg2fAAwQGne4AAwQGqI8AAwQGwMzAMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGUqERdj5Gmqu5kg G65Tif80IOPa0Zv0C5yV8UPKd1ZZIadyQs99SMmSjB4TBYAlKRAzu3kEZJD6aI7G +zxvLzE6AJJt/pAKK/LAgCBCr6vHP5JnFGV6Q1QGoOMKa47KVIY5ACvpAVtE++eC 6soe1WrmBu8zl7qGGMVSJLr11WbZQOUbTyAeexBwGohbOThI7fCNmkRWTStwJTfA 6pCTpDkQ55Lq69zboX8MFaKbykC30WjMY+aBzuESkAyh9wRI+mkjSO6tVOYcvVHn VFZiYFCg6g6bgKGKTLLTUxQJfYCqjGMSGxZXhqV63ulCCI6HdFdrKF/sNmpTubDQ w5kyH5k= -----END CERTIFICATE-----Generated at Tue Sep 1 03:04:10 2026 by rpki-client