$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0ba9dad0-01be-3700-ab1f-214f03dc7ec2.roa File: 0ba9dad0-01be-3700-ab1f-214f03dc7ec2.roa (raw, json) Hash identifier: GEUcj6aJ+G8RLeqOZU8xkHNOi9NFbc5ChwPvWkzrF4I= Subject key identifier: 55:E3:F0:62:43:F1:97:98:70:FD:36:25:9A:4A:4E:A2:85:FB:5A:66 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7A05308A8A23DD94EEC901A0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0ba9dad0-01be-3700-ab1f-214f03dc7ec2.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 1225 IP address blocks: 129.250.53.64/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:30:8a:8a:23:dd:94:ee:c9:01:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=b56b6e9e-32d0-4b42-8179-75c9d26b8a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:c5:16:0c:dd:7d:02:d0:c9:46:c9:48:25: 1a:0f:0b:d4:20:40:e8:84:e8:87:1f:c5:3a:ea:f3: fd:71:56:28:1e:35:e8:35:3f:3b:fd:d0:f0:4e:13: 52:9a:d9:4f:6a:f1:5c:76:fb:3d:6c:1f:eb:7c:2e: b6:53:09:e0:4b:29:ea:9b:73:de:e2:07:97:13:f7: 3b:db:27:6d:25:77:86:42:be:4d:53:23:15:a0:09: 2a:d5:fa:14:bb:93:d2:8b:3a:8a:53:95:a3:31:a1: 8b:7e:ff:df:16:6b:df:03:11:26:d1:3c:bf:c7:72: 7b:1c:23:84:3d:48:cc:04:d0:1d:69:17:93:a3:ae: 15:f6:96:96:af:48:fa:6c:9e:d5:ae:aa:63:78:11: 18:fb:5b:25:34:5c:3e:cd:a3:a7:f8:c9:d0:3c:11: a0:18:42:50:01:4c:89:08:af:e6:5f:ee:26:f8:47: ed:73:a4:7a:67:28:39:66:b0:31:4f:79:54:cf:99: 34:ac:99:fd:e4:39:24:8a:d1:66:68:62:37:b5:26: 09:fa:fb:cc:62:d8:a7:1b:27:4c:18:b6:38:68:35: 57:31:a9:fd:5f:e2:bf:ee:d2:bf:8e:61:1c:70:dc: c6:6e:69:84:91:47:30:be:ba:25:b3:45:63:8c:ff: 20:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E3:F0:62:43:F1:97:98:70:FD:36:25:9A:4A:4E:A2:85:FB:5A:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0ba9dad0-01be-3700-ab1f-214f03dc7ec2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.53.64/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d3:e7:f5:8b:fc:55:87:8a:ea:cf:a6:71:9b:39:d0:21:6a: 93:20:41:d9:3d:2c:3f:4e:af:3a:14:3f:0b:0a:1e:23:95:5a: 92:9f:8b:59:10:f5:70:62:09:b4:89:6f:ff:9b:de:91:d2:16: 8c:14:ff:7a:e2:68:00:b0:0b:e7:d1:2e:07:e8:15:19:0c:92: 97:c3:ce:0f:5e:8e:87:44:22:f6:d2:67:00:e7:6f:ed:57:8b: b4:a6:73:2d:f5:fa:f9:93:d5:88:a9:76:ba:f1:54:cb:77:d9: fe:bd:23:0b:5e:6e:70:40:68:23:ae:7f:77:e8:a5:e4:60:2b: 11:26:e0:10:f4:23:35:5c:51:61:41:93:f4:e9:38:58:9a:45: 96:33:c6:60:dd:60:23:a8:6f:4b:e2:c6:f7:a9:64:d2:69:c4: 2e:60:dc:90:01:ce:1f:7c:42:07:cc:53:06:9c:08:91:e4:4f: 6c:ce:2e:31:5d:46:eb:e9:7a:6f:e4:67:aa:a6:69:7b:95:92: 24:9c:c1:ec:f5:ff:19:75:00:28:91:50:92:57:08:32:19:fa: fa:54:d3:95:f7:ff:08:94:f3:34:8f:8c:94:e4:38:10:d8:af: 80:f5:05:13:e8:74:e1:7a:b0:9e:04:d3:51:45:94:c1:bb:51: 98:4e:64:80 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE16BTCKiiPdlO7JAaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YjU2YjZlOWUtMzJkMC00YjQyLTgxNzktNzVjOWQyNmI4YTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtejFFgzdfQLQyUbJSCUaDwvUIEDohOiHH8U6 6vP9cVYoHjXoNT87/dDwThNSmtlPavFcdvs9bB/rfC62UwngSynqm3Pe4geXE/c7 2ydtJXeGQr5NUyMVoAkq1foUu5PSizqKU5WjMaGLfv/fFmvfAxEm0Ty/x3J7HCOE PUjMBNAdaReTo64V9paWr0j6bJ7VrqpjeBEY+1slNFw+zaOn+MnQPBGgGEJQAUyJ CK/mX+4m+Eftc6R6Zyg5ZrAxT3lUz5k0rJn95DkkitFmaGI3tSYJ+vvMYtinGydM GLY4aDVXMan9X+K/7tK/jmEccNzGbmmEkUcwvrols0VjjP8gSQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFXj8GJD8ZeYcP02JZpKTqKF+1pmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGJhOWRhZDAtMDFiZS0z NzAwLWFiMWYtMjE0ZjAzZGM3ZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfo1QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBI0+f1i/xVh4rqz6ZxmznQIWqTIEHZPSw/Tq86FD8LCh4jlVqSn4tZ EPVwYgm0iW//m96R0haMFP964mgAsAvn0S4H6BUZDJKXw84PXo6HRCL20mcA52/t V4u0pnMt9fr5k9WIqXa68VTLd9n+vSMLXm5wQGgjrn936KXkYCsRJuAQ9CM1XFFh QZP06ThYmkWWM8Zg3WAjqG9L4sb3qWTSacQuYNyQAc4ffEIHzFMGnAiR5E9szi4x XUbr6Xpv5Geqpml7lZIknMHs9f8ZdQAokVCSVwgyGfr6VNOV9/8IlPM0j4yU5DgQ 2K+A9QUT6HTherCeBNNRRZTBu1GYTmSA -----END CERTIFICATE-----Generated at Fri Apr 17 13:21:18 2026 by rpki-client