$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/25576007-f9bd-3d6e-a7e0-7366659c5843.roa File: 25576007-f9bd-3d6e-a7e0-7366659c5843.roa (raw, json) Hash identifier: RgXCZ0JMe8J4vjeyMhzPUhIAmkVv/Vwu+yy1CFeCZ2w= Subject key identifier: 1F:C2:86:F0:1E:65:87:BA:65:0E:1E:0D:56:A9:E0:98:1C:BE:C5:58 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584D7CCFDF25393403773333ED00 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/25576007-f9bd-3d6e-a7e0-7366659c5843.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 14061 IP address blocks: 129.212.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:df:25:39:34:03:77:33:33:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=805a06ba-cd3d-4916-8bd9-c593f8add975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:73:c2:4a:18:b4:58:10:3f:08:77:66:c9: 57:e3:21:3d:4b:bd:12:bb:e7:6d:d9:6d:ad:62:48: 02:20:30:09:ab:f8:e7:a6:02:ce:39:eb:00:69:00: d4:ef:2b:7e:e8:af:60:f7:f4:7a:82:fd:4b:e8:eb: ba:6b:cd:6d:35:8c:20:a0:21:fa:c3:ec:28:0d:19: 7a:bd:53:93:cf:98:48:47:72:dd:19:52:cc:88:c0: 0a:40:e3:02:87:e3:7a:ee:d8:53:86:3b:b6:f9:ff: 34:56:85:e0:47:32:17:01:2c:c0:fb:07:95:88:1a: 72:5a:3a:41:1b:ec:4c:25:bb:c1:ef:80:30:0b:d8: 39:70:80:7e:61:51:a7:6b:f4:89:58:c3:33:31:97: 1b:b8:c5:59:01:1e:ec:ce:f0:20:e5:57:49:ab:8c: c5:61:4a:2b:f2:c4:70:25:55:d2:69:fb:6a:06:66: b1:e7:0b:3c:11:37:41:c4:90:98:32:b4:b2:1b:15: 10:09:bf:27:c6:d1:99:68:6f:c4:1c:2a:e2:dd:25: 77:bd:27:1a:37:d8:00:ec:83:27:a7:74:84:8d:a0: 0a:44:c2:87:9c:c3:d9:36:39:b1:a8:83:53:bb:78: 87:e4:1e:db:0d:40:b4:a0:d4:c6:e1:79:73:fe:b0: 78:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C2:86:F0:1E:65:87:BA:65:0E:1E:0D:56:A9:E0:98:1C:BE:C5:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/25576007-f9bd-3d6e-a7e0-7366659c5843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 129.212.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1b:73:d1:09:6c:56:81:3d:77:57:9d:42:13:bd:6d:4a:e9: 60:0c:7e:df:83:dd:38:77:97:5c:c4:2c:91:de:4b:a6:ca:18: 36:3a:27:04:58:5b:1c:23:02:ea:f6:83:6e:d9:b7:0f:a2:15: f2:0a:7a:bf:63:39:60:9d:df:b5:b9:ac:95:eb:cd:5b:ea:65: 32:d2:8d:dd:56:4c:9c:5e:a2:0b:c0:9e:b9:6c:97:32:26:6b: b6:19:8b:4f:45:e9:5f:1c:95:08:2d:f2:50:ee:6d:06:95:e7: 9c:85:d6:7e:41:d1:f1:6b:f8:18:6d:dc:a2:cd:d1:43:87:39: 87:5e:30:1b:16:e6:35:bf:03:a9:41:e3:af:77:f7:d3:d2:57: 43:f5:d1:91:8c:21:67:4e:9e:38:30:40:68:ef:d4:fa:24:82: 24:32:6c:72:9e:dd:bf:b0:96:f7:23:72:cf:0f:d0:fb:c2:17: 61:90:15:51:3b:d2:19:46:a5:43:21:51:57:80:67:66:aa:1f: 91:1c:5e:a5:21:fc:a5:e1:12:08:23:65:60:16:8a:84:47:5f: 28:2f:65:44:fa:c3:5d:40:6b:fd:5d:62:58:08:b5:84:71:ae: 13:d9:5a:42:a0:00:59:9a:d7:70:d5:f8:71:18:67:6e:f8:e0: 67:36:2a:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z98lOTQDdzMz7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk ODA1YTA2YmEtY2QzZC00OTE2LThiZDktYzU5M2Y4YWRkOTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJdzwkoYtFgQPwh3ZslX4yE9S70Su+dt2W2t YkgCIDAJq/jnpgLOOesAaQDU7yt+6K9g9/R6gv1L6Ou6a81tNYwgoCH6w+woDRl6 vVOTz5hIR3LdGVLMiMAKQOMCh+N67thThju2+f80VoXgRzIXASzA+weViBpyWjpB G+xMJbvB74AwC9g5cIB+YVGna/SJWMMzMZcbuMVZAR7szvAg5VdJq4zFYUor8sRw JVXSaftqBmax5ws8ETdBxJCYMrSyGxUQCb8nxtGZaG/EHCri3SV3vScaN9gA7IMn p3SEjaAKRMKHnMPZNjmxqINTu3iH5B7bDUC0oNTG4Xlz/rB4OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/ChvAeZYe6ZQ4eDVap4JgcvsVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMjU1NzYwMDctZjliZC0z ZDZlLWE3ZTAtNzM2NjY1OWM1ODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgdSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsbc9EJbFaBPXdXnUITvW1K6WAMft+D3Th3l1zELJHeS6bKGDY6JwRY WxwjAur2g27Ztw+iFfIKer9jOWCd37W5rJXrzVvqZTLSjd1WTJxeogvAnrlslzIm a7YZi09F6V8clQgt8lDubQaV55yF1n5B0fFr+Bht3KLN0UOHOYdeMBsW5jW/A6lB 469399PSV0P10ZGMIWdOnjgwQGjv1PokgiQybHKe3b+wlvcjcs8P0PvCF2GQFVE7 0hlGpUMhUVeAZ2aqH5EcXqUh/KXhEggjZWAWioRHXygvZUT6w11Aa/1dYlgItYRx rhPZWkKgAFma13DV+HEYZ2744Gc2Koc= -----END CERTIFICATE-----Generated at Fri Apr 17 19:39:27 2026 by rpki-client