$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d62f8bac-399b-3f3d-842c-6366b20ec27b.roa File: d62f8bac-399b-3f3d-842c-6366b20ec27b.roa (raw, json) Hash identifier: XldqbTzdxBu9wkOAqpk9x2pqYLU0XouhJk9Xg5w5HQ4= Subject key identifier: 4A:25:C1:13:B9:D1:8A:A3:7D:C4:E8:12:7E:FE:23:73:87:EC:03:70 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EC0A72B3179EB2E4F1E89D0AC Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d62f8bac-399b-3f3d-842c-6366b20ec27b.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 19893 IP address blocks: 128.121.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:2b:31:79:eb:2e:4f:1e:89:d0:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=833ccee2-d4c4-45c1-b6c1-d673bd230f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:67:20:18:bc:dc:d8:bd:d9:13:55:64:c8:1a: 8c:96:74:07:f8:32:c8:68:85:0c:90:d1:2f:ba:96: 12:49:74:9b:f8:b4:3d:ee:53:d1:f3:40:82:60:b5: 49:84:5a:2b:ea:de:b8:81:30:46:5e:02:e7:ab:5d: 91:18:59:b7:11:fe:45:16:bd:b3:13:19:3c:4a:9b: 9b:9f:d1:f1:31:34:49:36:9a:1c:07:8d:dd:25:51: 57:83:52:2a:db:27:5d:ba:d5:04:2d:b4:d8:f5:34: 74:78:8e:7e:03:fe:44:02:f8:17:4e:3f:81:f5:80: 7c:26:0b:0e:b1:14:a9:c4:54:28:90:2b:8d:1b:2e: eb:ad:6a:a8:cf:58:48:9f:99:f6:8d:ee:4c:2f:bc: 68:71:48:4b:95:f4:c4:91:a9:06:ee:2d:48:95:88: 9a:b4:d0:66:0f:59:e5:3f:66:d2:5b:b5:59:db:1a: 5b:82:19:c5:34:39:d5:82:13:db:aa:d1:0d:e6:e1: f3:8f:5d:48:c5:63:c5:16:54:97:17:ab:98:80:02: 16:ce:e5:9e:9d:42:e7:e0:f0:15:40:cb:44:ad:2e: a1:8c:83:db:e6:1f:34:05:bb:fd:84:81:ba:32:61: c8:34:00:24:16:bb:35:4f:7b:44:40:d8:72:bb:5d: ad:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:25:C1:13:B9:D1:8A:A3:7D:C4:E8:12:7E:FE:23:73:87:EC:03:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d62f8bac-399b-3f3d-842c-6366b20ec27b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.121.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:09:d2:c2:26:ba:3b:a6:90:85:4d:46:56:6f:f7:79:de:25: e3:78:aa:6f:f6:af:4b:d0:46:35:43:a0:e9:7e:ab:4b:cd:4e: 88:81:68:b3:98:f2:20:4c:bb:cf:fe:54:2d:8d:80:ed:09:c0: bc:2d:b2:fc:f2:70:c3:7a:ba:77:58:a3:3f:35:ee:73:46:e1: 14:71:66:58:8a:83:00:22:f3:8e:26:27:2c:cc:be:ec:3a:d7: 0e:33:36:f4:5d:2b:76:9f:2b:25:94:67:8e:e8:84:09:ee:ba: 26:0b:34:57:88:45:ea:da:1b:6d:83:6a:06:ca:0d:fc:05:13: 66:82:f2:e0:1d:68:da:1b:1d:1f:61:45:80:0d:21:1f:41:0f: 59:53:a6:0a:e2:0f:81:62:ce:42:1c:43:2a:36:80:b2:c2:ec: 2c:68:f5:40:74:34:82:c9:bc:84:16:8d:46:2f:ac:e6:1b:fa: 27:68:21:32:1d:cb:07:01:1e:bd:f5:73:8b:3d:86:9f:2a:7b: df:b8:bf:21:f1:9a:f8:0e:0c:6c:84:ce:4b:65:06:dd:b7:3f: dd:b2:9e:36:6c:09:93:f2:ac:ef:61:99:d8:34:f8:28:77:6e: 83:5a:1c:c4:d0:f1:8c:58:24:a9:34:f0:39:bf:99:74:f8:0a: e7:72:8b:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ApysxeesuTx6J0KwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk ODMzY2NlZTItZDRjNC00NWMxLWI2YzEtZDY3M2JkMjMwZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGcgGLzc2L3ZE1VkyBqMlnQH+DLIaIUMkNEv upYSSXSb+LQ97lPR80CCYLVJhFor6t64gTBGXgLnq12RGFm3Ef5FFr2zExk8Spub n9HxMTRJNpocB43dJVFXg1Iq2yddutUELbTY9TR0eI5+A/5EAvgXTj+B9YB8JgsO sRSpxFQokCuNGy7rrWqoz1hIn5n2je5ML7xocUhLlfTEkakG7i1IlYiatNBmD1nl P2bSW7VZ2xpbghnFNDnVghPbqtEN5uHzj11IxWPFFlSXF6uYgAIWzuWenULn4PAV QMtErS6hjIPb5h80Bbv9hIG6MmHINAAkFrs1T3tEQNhyu12ttwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEolwRO50YqjfcToEn7+I3OH7ANwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDYyZjhiYWMtMzk5Yi0z ZjNkLTg0MmMtNjM2NmIyMGVjMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgHkPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMJ0sImujumkIVNRlZv93neJeN4qm/2r0vQRjVDoOl+q0vNToiBaLOY 8iBMu8/+VC2NgO0JwLwtsvzycMN6undYoz817nNG4RRxZliKgwAi844mJyzMvuw6 1w4zNvRdK3afKyWUZ47ohAnuuiYLNFeIReraG22DagbKDfwFE2aC8uAdaNobHR9h RYANIR9BD1lTpgriD4FizkIcQyo2gLLC7Cxo9UB0NILJvIQWjUYvrOYb+idoITId ywcBHr31c4s9hp8qe9+4vyHxmvgODGyEzktlBt23P92ynjZsCZPyrO9hmdg0+Ch3 boNaHMTQ8YxYJKk08Dm/mXT4Cudyi7I= -----END CERTIFICATE-----Generated at Thu Sep 17 12:12:36 2026 by rpki-client