$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5f1fe15e-d9c1-3615-9c0e-2cbab64c2849.roa File: 5f1fe15e-d9c1-3615-9c0e-2cbab64c2849.roa (raw, json) Hash identifier: jkHJoFlNoGK8LS+gkxFvA4xVP6fGDqz6ss6cCZauXjA= Subject key identifier: 0C:08:D9:DD:82:15:13:33:E0:9B:14:E6:71:2F:51:05:77:46:45:59 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7A05309A442FBBE020479F80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5f1fe15e-d9c1-3615-9c0e-2cbab64c2849.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 1225 IP address blocks: 129.250.53.96/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:30:9a:44:2f:bb:e0:20:47:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=948fcbe1-5612-4b16-bac0-507298e4b357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ee:65:6d:ed:e1:9b:1f:86:43:dc:82:09:e8: 76:a2:20:0c:0d:11:35:ea:0c:99:8e:c1:07:ef:ea: 78:b3:e6:8a:c2:d2:f0:54:7c:f3:54:ad:c1:8f:de: 40:ae:8c:d1:00:5a:4d:9d:1d:94:91:6a:96:9a:c6: eb:68:a8:d8:f1:d5:2c:a3:99:5e:a4:4f:46:a8:02: 59:fa:14:77:b8:7b:17:22:ae:d9:40:64:ac:54:e0: c7:77:3f:79:d6:bc:51:fc:a2:51:62:4b:08:61:97: 61:8b:e9:18:8c:94:3e:c3:4b:57:9a:fc:88:9c:9a: f4:2c:67:4c:b8:2f:c6:e2:06:37:b6:e0:e3:fa:39: aa:ff:5b:ac:6c:4b:22:48:81:41:ad:35:21:a5:c3: 1b:ef:ce:81:93:95:28:20:8f:0d:95:c0:70:cf:b2: c9:03:14:2b:66:1d:9c:d8:be:9b:74:1b:f0:bc:73: 81:1e:01:98:98:76:cb:9d:0a:f0:42:b8:09:d0:ad: 33:5d:78:14:cb:58:8a:0d:c4:48:d3:9a:d0:82:90: 52:de:06:0b:83:a5:22:12:98:a7:1a:20:3f:af:fe: e3:51:45:83:18:69:95:49:a4:8a:82:b1:ed:34:cd: 6d:e1:5d:f7:48:58:37:6b:bb:ee:44:68:18:ed:37: 7b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:08:D9:DD:82:15:13:33:E0:9B:14:E6:71:2F:51:05:77:46:45:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5f1fe15e-d9c1-3615-9c0e-2cbab64c2849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.53.96/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:26:40:0c:05:08:ce:19:e9:7a:41:9e:8a:f0:3b:d5:d8:cb: 01:9c:b3:0a:ac:79:63:df:11:06:c4:4f:a4:84:1f:91:a1:65: a1:f8:1d:bd:1b:5c:e0:07:d8:c6:5d:1b:be:8e:52:fd:a1:62: b4:29:63:16:62:5a:0c:53:1f:af:28:f8:6a:4d:1f:a7:0c:51: b4:c9:42:f3:c9:1c:81:bc:38:75:9f:ed:62:72:2a:c8:c2:8c: c2:06:0c:cb:e0:3a:9f:4f:99:a5:20:86:49:c8:fb:98:2f:1e: 13:0b:b9:66:ea:78:99:9c:a4:03:3f:e3:d7:e5:41:3b:af:a8: f3:85:9d:53:fc:f6:8f:7b:e2:33:46:95:64:ac:99:cc:29:8e: ea:5e:58:f3:59:ae:50:9f:1d:8e:fe:c6:0e:ac:0d:ba:2e:e0: 09:3d:24:d4:f4:1c:c0:6d:08:45:b1:e1:16:f3:f0:aa:bd:39: d2:e0:a8:d6:60:31:93:b6:41:32:c6:7a:c2:b3:a8:eb:fc:78: 5d:9f:ed:0b:74:93:27:f2:ba:f4:37:ed:59:f9:0a:f7:4c:06: 8b:00:65:b9:a5:9e:d8:f5:35:59:cb:42:86:2b:88:bd:a6:ff: 51:93:3c:80:b0:7f:b2:8c:6e:a4:0f:80:41:a8:8b:db:57:b4: a7:94:17:b6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE16BTCaRC+74CBHn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk OTQ4ZmNiZTEtNTYxMi00YjE2LWJhYzAtNTA3Mjk4ZTRiMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+5lbe3hmx+GQ9yCCeh2oiAMDRE16gyZjsEH 7+p4s+aKwtLwVHzzVK3Bj95ArozRAFpNnR2UkWqWmsbraKjY8dUso5lepE9GqAJZ +hR3uHsXIq7ZQGSsVODHdz951rxR/KJRYksIYZdhi+kYjJQ+w0tXmvyInJr0LGdM uC/G4gY3tuDj+jmq/1usbEsiSIFBrTUhpcMb786Bk5UoII8NlcBwz7LJAxQrZh2c 2L6bdBvwvHOBHgGYmHbLnQrwQrgJ0K0zXXgUy1iKDcRI05rQgpBS3gYLg6UiEpin GiA/r/7jUUWDGGmVSaSKgrHtNM1t4V33SFg3a7vuRGgY7Td7cwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAwI2d2CFRMz4JsU5nEvUQV3RkVZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNWYxZmUxNWUtZDljMS0z NjE1LTljMGUtMmNiYWI2NGMyODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfo1YDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCYJkAMBQjOGel6QZ6K8DvV2MsBnLMKrHlj3xEGxE+khB+RoWWh+B29 G1zgB9jGXRu+jlL9oWK0KWMWYloMUx+vKPhqTR+nDFG0yULzyRyBvDh1n+1icirI wozCBgzL4DqfT5mlIIZJyPuYLx4TC7lm6niZnKQDP+PX5UE7r6jzhZ1T/PaPe+Iz RpVkrJnMKY7qXljzWa5Qnx2O/sYOrA26LuAJPSTU9BzAbQhFseEW8/CqvTnS4KjW YDGTtkEyxnrCs6jr/Hhdn+0LdJMn8rr0N+1Z+Qr3TAaLAGW5pZ7Y9TVZy0KGK4i9 pv9RkzyAsH+yjG6kD4BBqIvbV7SnlBe2 -----END CERTIFICATE-----Generated at Fri Apr 17 11:49:23 2026 by rpki-client