$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7186b83b-ddc0-3354-8895-32af8a1dba79.roa File: 7186b83b-ddc0-3354-8895-32af8a1dba79.roa (raw, json) Hash identifier: sFItvFd3BpXIgznRCukiSXyedwszYYhb7PEmU6cgJVg= Subject key identifier: C1:37:7A:DB:22:F0:A3:4C:95:AC:DA:5B:74:8B:B4:6D:9E:66:88:E4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7A052E7EE433FCF3D1273280 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7186b83b-ddc0-3354-8895-32af8a1dba79.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 2914 IP address blocks: 129.250.161.0/24 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:2e:7e:e4:33:fc:f3:d1:27:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=5d2f6144-deb5-4bd0-b327-b22f3acf904e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:e9:0f:87:5c:64:e2:31:2a:c3:3d:6c:10: 87:2b:86:a3:85:3c:44:2a:ae:7c:e3:15:e4:8f:03: 74:e7:b9:01:bb:ad:d4:95:94:17:fa:5b:01:19:dc: b6:ba:dc:f6:7c:f9:55:f4:62:56:3f:fb:ce:dd:9f: 1e:62:b5:d2:fa:08:cf:47:2f:72:44:5c:12:2c:6f: cb:54:6a:1d:dc:8b:e8:ad:85:7a:20:40:34:8a:d9: 3c:78:c2:0a:e4:a9:01:90:d5:b9:bd:0b:46:8c:a3: 32:bf:68:ba:63:e5:32:17:92:67:d3:3d:f6:e6:d2: af:b7:dd:b8:02:bc:0d:90:ad:b9:c4:66:d7:36:57: cd:2f:86:fc:df:53:ae:d2:24:ab:86:3b:17:23:b1: 08:78:a2:9e:f5:23:15:74:3e:22:a4:4b:c6:13:de: f5:55:a3:1a:ac:8e:87:d8:19:50:d5:95:f9:1b:c7: 7a:0c:6f:fc:6b:19:a1:90:43:aa:51:fb:92:b0:45: c1:0b:34:96:7e:32:c2:92:c3:7f:52:d9:ce:5c:ad: 56:3b:61:65:f4:d6:78:c0:e4:7b:9e:ef:f1:77:6f: 0a:42:05:f2:56:6c:95:03:dd:1b:22:ca:a4:66:d8: 5a:99:bd:ba:05:e6:54:fd:e8:b3:13:a4:ea:b0:98: bf:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:37:7A:DB:22:F0:A3:4C:95:AC:DA:5B:74:8B:B4:6D:9E:66:88:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7186b83b-ddc0-3354-8895-32af8a1dba79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:06:f1:fa:bb:88:de:2b:cf:13:9b:c5:d1:71:71:2d:ec:6b: ff:da:64:60:16:e6:49:c5:03:2b:91:24:ef:7b:3a:69:d2:26: e4:8c:12:3a:3e:be:b7:71:ec:40:b8:7e:62:fb:ff:9c:b1:e4: 4d:4e:fe:7b:dc:b7:fe:00:fa:e1:96:6b:ff:1c:55:3d:91:a4: 81:fb:85:27:f3:c1:9b:03:d0:a2:64:3b:7e:a5:d7:38:df:14: 27:56:92:b9:dd:e4:32:19:9a:90:e3:28:38:de:5f:00:f5:14: 4b:4c:60:b4:03:d1:88:88:f9:3f:18:70:af:03:1d:b0:f8:ef: 51:59:c8:df:fb:2c:30:11:45:c0:fe:05:12:7a:bf:c4:eb:c0: 4d:a6:4a:5e:a1:e9:61:2a:70:d2:be:f0:8d:2f:73:e1:20:ed: 0d:f0:90:0d:76:17:03:39:56:2f:03:8c:c4:d8:12:df:0d:de: a1:b4:86:59:f3:d3:e0:24:eb:cd:8c:85:ff:7e:fd:67:8e:5d: d9:b8:e5:32:3c:be:df:be:ce:d8:c2:67:53:37:f7:d2:ea:86: 35:ab:da:21:da:0e:48:b1:8e:d3:cc:4d:28:56:ab:aa:0c:9e: 9b:df:28:97:e0:0d:5d:b6:b1:b0:82:87:36:6d:98:c4:78:e4: a7:2c:d0:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BS5+5DP889EnMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NWQyZjYxNDQtZGViNS00YmQwLWIzMjctYjIyZjNhY2Y5MDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruPpD4dcZOIxKsM9bBCHK4ajhTxEKq584xXk jwN057kBu63UlZQX+lsBGdy2utz2fPlV9GJWP/vO3Z8eYrXS+gjPRy9yRFwSLG/L VGod3IvorYV6IEA0itk8eMIK5KkBkNW5vQtGjKMyv2i6Y+UyF5Jn0z325tKvt924 ArwNkK25xGbXNlfNL4b831Ou0iSrhjsXI7EIeKKe9SMVdD4ipEvGE971VaMarI6H 2BlQ1ZX5G8d6DG/8axmhkEOqUfuSsEXBCzSWfjLCksN/UtnOXK1WO2Fl9NZ4wOR7 nu/xd28KQgXyVmyVA90bIsqkZthamb26BeZU/eizE6TqsJi/AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFME3etsi8KNMlazaW3SLtG2eZojkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNzE4NmI4M2ItZGRjMC0z MzU0LTg4OTUtMzJhZjhhMWRiYTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgfqhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMG8fq7iN4rzxObxdFxcS3sa//aZGAW5knFAyuRJO97OmnSJuSMEjo+ vrdx7EC4fmL7/5yx5E1O/nvct/4A+uGWa/8cVT2RpIH7hSfzwZsD0KJkO36l1zjf FCdWkrnd5DIZmpDjKDjeXwD1FEtMYLQD0YiI+T8YcK8DHbD471FZyN/7LDARRcD+ BRJ6v8TrwE2mSl6h6WEqcNK+8I0vc+Eg7Q3wkA12FwM5Vi8DjMTYEt8N3qG0hlnz 0+Ak682Mhf9+/WeOXdm45TI8vt++ztjCZ1M399LqhjWr2iHaDkixjtPMTShWq6oM npvfKJfgDV22sbCChzZtmMR45Kcs0CM= -----END CERTIFICATE-----Generated at Fri Apr 17 15:36:21 2026 by rpki-client