$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/88c96948-a5a4-3002-ab65-1978d3810e9a.roa File: 88c96948-a5a4-3002-ab65-1978d3810e9a.roa (raw, json) Hash identifier: 9fG5buTgT2pFMlUznkIAfxn+afaQxjh8Ui49XxIYeOk= Subject key identifier: 75:CC:AE:2E:7C:2D:15:30:F1:24:A9:99:7F:4A:13:42:74:F1:46:D9 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7F9A839DED387A30BB120400 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/88c96948-a5a4-3002-ab65-1978d3810e9a.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 2914 IP address blocks: 129.250.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:83:9d:ed:38:7a:30:bb:12:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=d512c4fb-5682-41b1-95a6-3f496bb70e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:98:8a:ae:b9:3e:a3:cb:94:a9:27:1d:9e:f1: eb:e0:9e:11:55:e4:33:13:06:80:f7:dc:19:86:a2: e0:16:8a:9c:46:a7:41:73:a5:de:f1:97:f7:a8:47: ee:c3:d2:8a:4f:58:0e:c8:33:dc:b0:ce:d1:fa:d9: 9b:ff:59:72:79:d1:d2:0b:49:ce:b2:80:a1:b5:c1: 8c:bc:c5:99:53:0b:60:12:ea:a7:89:1f:dc:79:5a: c5:cf:93:e0:52:45:ea:26:c4:40:ff:05:a7:f9:b3: ae:1d:8f:24:56:a7:59:b1:43:1c:53:ea:70:e6:35: 78:ea:66:b6:bd:33:9b:62:24:4a:36:fb:19:cc:ec: e7:70:2c:ea:66:43:96:96:b2:59:fa:00:a0:2a:ae: e4:0e:71:5f:1d:c8:57:82:3e:07:3a:66:0f:4e:53: a7:31:3b:5d:e6:ff:98:26:ee:85:d7:ed:b4:61:e3: d4:fe:bf:11:57:62:8d:69:f6:c6:7f:d3:6b:f3:65: b0:df:c0:90:b4:26:8e:81:bd:b4:93:90:60:fa:f4: 52:c4:bb:8e:49:a7:9e:bb:7e:ef:06:a2:3c:03:c5: ef:7a:73:e3:f2:b6:38:64:73:21:4b:77:b3:7b:9b: 76:58:de:5c:9e:ca:ed:b2:1b:b1:fb:ce:ff:9c:1d: 0e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CC:AE:2E:7C:2D:15:30:F1:24:A9:99:7F:4A:13:42:74:F1:46:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/88c96948-a5a4-3002-ab65-1978d3810e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:1e:8d:68:34:54:20:80:de:fa:73:62:1d:92:8a:ba:2b:ec: e6:71:87:0e:30:b4:d5:f8:3c:b1:48:eb:8b:95:12:95:f5:e2: ad:24:90:4f:6b:e3:8e:fd:2f:23:25:92:a0:96:38:a2:3f:5f: 6e:d9:0d:50:45:c7:3b:4b:f0:94:1d:e4:67:64:c4:19:31:47: 81:be:27:57:98:e1:c5:25:fc:cb:43:1f:5c:08:86:13:cf:2f: a8:41:ac:bd:36:f6:4f:49:33:51:8b:17:ce:5c:f3:66:ac:d7: 2c:85:b6:f5:07:19:41:13:6a:b3:e0:3f:da:de:f6:2a:84:41: 26:53:0d:cd:69:4e:11:55:8f:5e:85:25:8d:ba:1c:7c:08:76: a8:ed:d1:2c:d5:82:bb:d2:7d:68:41:65:93:c0:14:2c:b2:26: 44:0e:0c:1f:23:ff:29:dc:4c:db:e9:b7:5a:31:8b:34:01:cd: c0:6f:d1:eb:1e:23:9a:a9:a7:dd:e5:f6:09:67:48:4c:3b:a5: 20:6a:b5:91:92:9a:50:66:a5:8c:cb:b3:08:51:c9:4c:67:b0: 5a:23:a1:ad:ca:45:0c:b9:a5:c6:a0:a6:3f:c3:8f:b4:ae:85: 5d:ff:6e:bf:46:4f:3e:e9:3b:81:1d:45:f4:98:02:f7:7a:0d: 0d:ec:15:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/moOd7Th6MLsSBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZDUxMmM0ZmItNTY4Mi00MWIxLTk1YTYtM2Y0OTZiYjcwZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZiKrrk+o8uUqScdnvHr4J4RVeQzEwaA99wZ hqLgFoqcRqdBc6Xe8Zf3qEfuw9KKT1gOyDPcsM7R+tmb/1lyedHSC0nOsoChtcGM vMWZUwtgEuqniR/ceVrFz5PgUkXqJsRA/wWn+bOuHY8kVqdZsUMcU+pw5jV46ma2 vTObYiRKNvsZzOzncCzqZkOWlrJZ+gCgKq7kDnFfHchXgj4HOmYPTlOnMTtd5v+Y Ju6F1+20YePU/r8RV2KNafbGf9Nr82Ww38CQtCaOgb20k5Bg+vRSxLuOSaeeu37v BqI8A8XvenPj8rY4ZHMhS3eze5t2WN5cnsrtshux+87/nB0OBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXMri58LRUw8SSpmX9KE0J08UbZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODhjOTY5NDgtYTVhNC0z MDAyLWFiNjUtMTk3OGQzODEwZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgfogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAejWg0VCCA3vpzYh2Siror7OZxhw4wtNX4PLFI64uVEpX14q0kkE9r 4479LyMlkqCWOKI/X27ZDVBFxztL8JQd5GdkxBkxR4G+J1eY4cUl/MtDH1wIhhPP L6hBrL029k9JM1GLF85c82as1yyFtvUHGUETarPgP9re9iqEQSZTDc1pThFVj16F JY26HHwIdqjt0SzVgrvSfWhBZZPAFCyyJkQODB8j/yncTNvpt1oxizQBzcBv0ese I5qpp93l9glnSEw7pSBqtZGSmlBmpYzLswhRyUxnsFojoa3KRQy5pcagpj/Dj7Su hV3/br9GTz7pO4EdRfSYAvd6DQ3sFck= -----END CERTIFICATE-----Generated at Fri Apr 17 15:59:03 2026 by rpki-client