$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/28bffa70-65b6-3f00-a0ab-5b244e89ad8d.roa File: 28bffa70-65b6-3f00-a0ab-5b244e89ad8d.roa (raw, json) Hash identifier: CSltkH30ioEPGC4QOw1lSSrLyLXfvrve8a52EOLO82M= Subject key identifier: C9:7B:90:08:62:86:E8:90:DB:E9:C0:F2:07:57:12:90:13:19:4B:6F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F4974DDA4F8C25F4339E35F00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/28bffa70-65b6-3f00-a0ab-5b244e89ad8d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 1225 IP address blocks: 129.250.35.128/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:dd:a4:f8:c2:5f:43:39:e3:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a3745182-7f8f-4363-8c61-df324556c389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5e:13:8f:35:c1:d4:66:25:ad:eb:0b:a5:db: 78:37:ad:42:bd:36:eb:1c:5b:6a:e7:06:18:ee:27: ac:d6:ef:9a:55:93:97:27:b9:56:58:8b:73:1a:44: 22:56:56:c3:99:8f:6a:df:fe:5e:d0:ce:d6:7a:f9: 3a:c3:17:2f:cd:e4:86:19:a0:ab:7b:1c:43:c2:ad: 13:65:9f:c5:fc:bb:00:a6:2b:f8:12:43:87:c0:04: 23:a2:dc:63:81:60:c7:29:47:48:0e:29:40:b1:40: 31:dd:52:50:80:a5:23:48:23:42:16:14:0c:43:50: 55:bc:3c:0a:42:03:d8:b5:6c:63:8a:4a:72:7b:be: e1:a8:61:2f:22:e8:1a:cc:20:6f:69:23:3d:52:42: c7:e8:19:6e:a2:ad:9f:e2:bb:d7:ec:e1:f4:b8:02: c7:f5:f6:f7:d2:48:d6:46:55:e3:c9:b1:1f:fa:0a: f7:fb:64:b3:6c:f5:2b:4c:66:b7:0b:9e:d7:45:0b: 74:87:b1:37:d0:8b:64:07:ea:4f:ff:00:56:e1:cd: 52:04:e8:11:b8:37:65:ee:4d:ab:d0:20:2a:cd:4a: 2b:0b:74:c8:39:c0:b2:0f:aa:50:b8:69:92:52:24: 77:97:c6:07:b5:71:63:50:fd:67:ce:80:8d:6c:ca: 09:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7B:90:08:62:86:E8:90:DB:E9:C0:F2:07:57:12:90:13:19:4B:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/28bffa70-65b6-3f00-a0ab-5b244e89ad8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.128/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:bb:6c:8b:a4:54:43:f6:89:37:a5:6f:bb:fc:e8:a9:8c:3b: 02:f9:ae:5e:59:9c:0b:c1:1d:c9:56:e6:00:32:24:a4:2c:0c: dc:4c:7d:73:d4:f9:9a:b5:a0:5c:50:6f:69:80:38:c7:ad:4e: 60:06:af:4a:4a:13:dd:60:a0:db:4f:2f:60:94:ca:29:7f:74: 6c:3b:36:cf:47:75:c9:c1:cc:49:6d:6f:6a:fa:39:cc:f6:cf: eb:2d:40:af:d6:f6:b5:e6:6c:b8:cf:22:af:48:43:fb:73:97: 2d:64:5c:ca:e5:56:4d:18:28:35:ed:3b:0e:24:cc:ef:bd:a5: 39:1d:b1:bf:d6:3e:8b:2c:36:c0:fa:dd:39:f3:aa:a7:e3:9d: c7:46:fe:49:2d:b7:69:a6:53:e3:53:d2:3f:c6:ca:ce:f7:9e: d5:39:41:c8:c0:24:94:01:1b:99:2b:4d:b9:68:b9:c2:e1:bd: f4:dd:01:49:28:99:1a:76:ba:fa:96:7b:0d:2c:f1:bd:ef:11: 5d:7f:87:ec:d1:63:83:fd:d1:c2:c6:4b:d2:1a:bc:8b:67:34: 41:16:21:2d:c4:ec:34:71:b5:ba:19:b7:b7:d5:38:be:37:39: bf:91:e7:34:c4:97:a0:78:b0:76:2a:d4:e8:4c:cf:bb:a1:60: 25:d6:2d:f6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdN2k+MJfQznjXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTM3NDUxODItN2Y4Zi00MzYzLThjNjEtZGYzMjQ1NTZjMzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi14TjzXB1GYlresLpdt4N61CvTbrHFtq5wYY 7ies1u+aVZOXJ7lWWItzGkQiVlbDmY9q3/5e0M7Wevk6wxcvzeSGGaCrexxDwq0T ZZ/F/LsApiv4EkOHwAQjotxjgWDHKUdIDilAsUAx3VJQgKUjSCNCFhQMQ1BVvDwK QgPYtWxjikpye77hqGEvIugazCBvaSM9UkLH6Bluoq2f4rvX7OH0uALH9fb30kjW RlXjybEf+gr3+2SzbPUrTGa3C57XRQt0h7E30ItkB+pP/wBW4c1SBOgRuDdl7k2r 0CAqzUorC3TIOcCyD6pQuGmSUiR3l8YHtXFjUP1nzoCNbMoJ8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMl7kAhihuiQ2+nA8gdXEpATGUtvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMjhiZmZhNzAtNjViNi0z ZjAwLWEwYWItNWIyNDRlODlhZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFgfojgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA1u2yLpFRD9ok3pW+7/OipjDsC+a5eWZwLwR3JVuYAMiSkLAzcTH1z 1PmataBcUG9pgDjHrU5gBq9KShPdYKDbTy9glMopf3RsOzbPR3XJwcxJbW9q+jnM 9s/rLUCv1va15my4zyKvSEP7c5ctZFzK5VZNGCg17TsOJMzvvaU5HbG/1j6LLDbA +t0586qn453HRv5JLbdpplPjU9I/xsrO957VOUHIwCSUARuZK025aLnC4b303QFJ KJkadrr6lnsNLPG97xFdf4fs0WOD/dHCxkvSGryLZzRBFiEtxOw0cbW6Gbe31Ti+ Nzm/kec0xJegeLB2KtToTM+7oWAl1i32 -----END CERTIFICATE-----Generated at Sat Sep 26 04:27:18 2026 by rpki-client