$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/28bffa70-65b6-3f00-a0ab-5b244e89ad8d.roa File: 28bffa70-65b6-3f00-a0ab-5b244e89ad8d.roa (raw, json) Hash identifier: bnGLeGGpJmIlfxxeKfu3d61++gyhW0lRk+7+zelUxuM= Subject key identifier: AD:5C:97:CE:74:AB:50:0B:86:D5:7A:F4:EA:7D:43:C4:6F:DD:28:34 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EA795330DCCAA2E3BECB31440 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/28bffa70-65b6-3f00-a0ab-5b244e89ad8d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 1225 IP address blocks: 129.250.35.128/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:33:0d:cc:aa:2e:3b:ec:b3:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0b5b5049-8456-4a58-9d2a-614c550da24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:4b:90:a5:e6:8b:14:ec:38:3e:01:cc:fc: e8:a4:b2:90:65:94:eb:65:db:bc:9c:ea:ad:e1:d6: e8:39:df:35:0b:9a:ea:ea:61:ef:81:90:f5:1a:0a: f0:b1:76:4f:d9:b0:38:1f:ba:c5:05:d0:d8:e7:b1: 20:38:ad:85:ee:7b:bd:09:ab:da:24:b5:2d:38:56: c4:0e:4f:8e:23:b7:6a:31:44:fb:fd:72:16:44:1c: 11:1a:a8:3b:08:d1:01:6a:de:d3:87:c9:ce:7d:ad: 42:38:f6:91:e2:68:e4:80:e6:e0:67:56:a6:11:c8: 63:b5:ef:6f:d1:bc:4c:90:b6:d9:8f:fd:72:96:6d: b0:62:59:b0:55:3b:1b:93:67:b9:e1:ba:88:60:ba: 37:ac:1e:c4:00:57:76:9d:91:80:24:81:7f:35:7b: 66:a9:2f:90:d1:51:03:27:9d:fd:0d:22:cd:8a:19: da:12:a1:c8:db:6b:4f:53:56:71:54:d0:bd:d1:83: f6:01:4e:0d:f2:31:81:ae:f8:6d:55:94:ca:80:02: f7:d5:23:97:3b:1e:a9:e8:c0:c1:42:2c:eb:06:ab: ee:25:65:8e:44:b0:34:85:80:e6:ea:3f:e9:97:40: 63:d8:29:18:65:47:7c:22:8f:3b:7f:6e:f8:65:19: 62:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5C:97:CE:74:AB:50:0B:86:D5:7A:F4:EA:7D:43:C4:6F:DD:28:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/28bffa70-65b6-3f00-a0ab-5b244e89ad8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.128/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:ae:5d:92:5d:5e:b4:65:3d:09:f3:cc:1e:90:04:e6:59:26: c0:c5:73:d3:ee:49:dd:0c:ad:31:ce:e4:05:c1:b2:07:48:0b: 39:1d:7a:7b:fe:0b:7b:87:e9:87:87:f5:d6:b3:91:3a:8a:87: e9:3e:26:1f:2d:75:75:c2:3c:2e:70:94:f1:e8:40:f0:db:0c: 69:c7:09:33:ed:91:9f:a6:6a:df:a2:a5:7c:b3:62:9e:ab:da: 7c:b6:fb:ca:c3:fa:14:79:1b:8a:12:9a:41:cc:82:6c:9d:5b: 5c:da:fb:69:e9:f6:1b:f3:8c:10:f6:a7:ad:84:41:10:9b:c4: e9:bd:8d:c9:ff:2a:90:6a:35:d3:bb:07:7e:da:ae:c6:23:9c: 9e:a2:ab:76:7a:47:04:ed:e5:78:3e:1a:98:43:37:01:82:c8: 01:a8:0c:aa:bb:f4:f4:41:05:9f:22:d9:e5:89:50:bd:f0:46: 11:45:1c:3b:ae:9c:24:35:2b:44:36:8a:26:49:d5:47:8c:b9: 22:1a:e0:49:f9:be:8b:a8:88:03:09:ff:9b:1f:2c:30:85:f9: aa:91:d4:8f:49:41:bb:a3:46:97:88:fb:a4:c2:66:8f:e0:a7: 73:f0:ce:41:e4:c4:f9:12:a3:32:8c:4c:eb:0e:2d:cc:23:d9: 69:95:37:ae -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nlTMNzKouO+yzFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGI1YjUwNDktODQ1Ni00YTU4LTlkMmEtNjE0YzU1MGRhMjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO5LkKXmixTsOD4BzPzopLKQZZTrZdu8nOqt 4dboOd81C5rq6mHvgZD1GgrwsXZP2bA4H7rFBdDY57EgOK2F7nu9CavaJLUtOFbE Dk+OI7dqMUT7/XIWRBwRGqg7CNEBat7Th8nOfa1COPaR4mjkgObgZ1amEchjte9v 0bxMkLbZj/1ylm2wYlmwVTsbk2e54bqIYLo3rB7EAFd2nZGAJIF/NXtmqS+Q0VED J539DSLNihnaEqHI22tPU1ZxVNC90YP2AU4N8jGBrvhtVZTKgAL31SOXOx6p6MDB QizrBqvuJWWORLA0hYDm6j/pl0Bj2CkYZUd8Io87f274ZRliRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK1cl850q1ALhtV69Op9Q8Rv3Sg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMjhiZmZhNzAtNjViNi0z ZjAwLWEwYWItNWIyNDRlODlhZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFgfojgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCsrl2SXV60ZT0J88wekATmWSbAxXPT7kndDK0xzuQFwbIHSAs5HXp7 /gt7h+mHh/XWs5E6iofpPiYfLXV1wjwucJTx6EDw2wxpxwkz7ZGfpmrfoqV8s2Ke q9p8tvvKw/oUeRuKEppBzIJsnVtc2vtp6fYb84wQ9qethEEQm8TpvY3J/yqQajXT uwd+2q7GI5yeoqt2ekcE7eV4PhqYQzcBgsgBqAyqu/T0QQWfItnliVC98EYRRRw7 rpwkNStENoomSdVHjLkiGuBJ+b6LqIgDCf+bHywwhfmqkdSPSUG7o0aXiPukwmaP 4Kdz8M5B5MT5EqMyjEzrDi3MI9lplTeu -----END CERTIFICATE-----Generated at Wed Jul 29 03:54:51 2026 by rpki-client