$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d7717f60-de75-372f-b4a7-3706f6fa274b.roa File: d7717f60-de75-372f-b4a7-3706f6fa274b.roa (raw, json) Hash identifier: Ah8lgH3CAXY84af6V6FmCYzsf69LJLhrsJyqso6W2vY= Subject key identifier: 50:A8:79:82:FB:15:F9:BF:78:22:23:FF:B8:B7:C1:12:2E:F5:41:2E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EA79BA92820188C2FFAB11280 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d7717f60-de75-372f-b4a7-3706f6fa274b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 34425 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:a9:28:20:18:8c:2f:fa:b1:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=51f23ba2-d191-4bad-b0af-aa714461b1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:aa:8b:f6:a4:8c:07:03:05:7b:bb:ba:07:b7: 20:30:4a:08:b3:33:9f:e0:4c:e7:67:43:78:72:5c: d8:23:19:51:56:8b:f9:d9:ef:93:fb:ea:61:e7:b5: 3f:65:a3:26:98:a2:97:e2:a6:c3:d0:62:a2:60:75: 0a:a3:b4:35:a6:1a:d2:90:3d:d6:85:1b:5d:8e:8c: fc:9a:5c:7e:6c:4d:c4:f5:5c:13:2b:ae:20:92:e3: 5f:25:1f:d5:6d:68:1a:4c:9f:fc:b5:39:d4:8e:f1: 53:9f:34:a9:56:c4:95:56:7a:d9:b7:15:c3:b9:05: e8:1c:94:98:c5:b8:c3:97:84:49:83:16:71:d7:87: 94:de:92:24:b9:4a:4a:0b:3b:9f:8b:1a:95:53:c3: 9e:0a:09:94:23:82:11:6c:b9:ad:da:d7:37:fa:bd: 23:68:c2:43:41:6b:11:37:88:0c:42:c9:f2:59:ce: 29:94:3b:a0:9d:eb:42:94:16:bc:b9:68:1a:21:0d: 4b:db:57:15:04:a1:c6:15:a2:b5:55:55:ce:9a:7f: f6:aa:27:eb:10:d7:c7:76:74:4c:6d:06:e0:f0:7e: 93:91:34:7c:0e:ee:fa:db:c9:0f:ce:01:95:04:d2: 0e:42:0e:9d:81:15:31:f8:ff:aa:f9:1a:ab:c1:bf: 2c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A8:79:82:FB:15:F9:BF:78:22:23:FF:B8:B7:C1:12:2E:F5:41:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d7717f60-de75-372f-b4a7-3706f6fa274b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:20:09:16:00:1c:0f:08:07:51:92:a5:ae:e9:72:3e:93:d0: fb:4a:e1:30:1c:9f:9f:7d:71:5e:2b:a0:7b:c4:ef:fc:3b:64: 0d:5b:5b:9a:39:81:40:4a:2d:ec:71:f8:bf:39:74:53:6e:78: 3f:57:a9:33:3d:6d:2b:58:cf:d1:24:30:56:d7:6e:a9:d3:73: 37:00:4e:3f:1c:50:c3:35:9b:c8:52:55:32:61:88:fe:5f:c2: 70:ea:6d:97:c2:09:a5:e6:26:1d:f1:fe:5a:23:50:16:f4:ae: 43:52:49:0d:bd:55:d7:55:80:40:d4:99:bf:6d:19:d4:73:d0: 5f:51:90:82:e5:cc:6a:96:1f:a3:bb:fd:d9:27:a2:2c:0b:ca: e8:22:e8:c3:79:35:47:b0:d7:d6:3b:ce:0c:f7:b8:e9:e6:f3: 22:9e:b9:85:a3:b1:0b:1b:0d:7d:bf:52:e5:00:c9:62:5f:07: 87:d0:f1:47:90:3c:48:bb:9b:85:ea:79:bb:2c:23:93:7d:75: 92:30:92:be:a1:41:9e:79:4b:c8:8d:61:f3:e2:44:d3:a2:fb: 53:3e:e4:95:e7:10:35:b1:cd:51:2a:6c:50:39:9e:2d:30:d1: b2:43:31:c1:0d:f0:f2:17:d4:2e:a5:b5:58:5b:a7:46:8c:e8: c7:37:62:30 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWE6nm6koIBiML/qxEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTFmMjNiYTItZDE5MS00YmFkLWIwYWYtYWE3MTQ0NjFiMWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaqL9qSMBwMFe7u6B7cgMEoIszOf4EznZ0N4 clzYIxlRVov52e+T++ph57U/ZaMmmKKX4qbD0GKiYHUKo7Q1phrSkD3WhRtdjoz8 mlx+bE3E9VwTK64gkuNfJR/VbWgaTJ/8tTnUjvFTnzSpVsSVVnrZtxXDuQXoHJSY xbjDl4RJgxZx14eU3pIkuUpKCzufixqVU8OeCgmUI4IRbLmt2tc3+r0jaMJDQWsR N4gMQsnyWc4plDugnetClBa8uWgaIQ1L21cVBKHGFaK1VVXOmn/2qifrENfHdnRM bQbg8H6TkTR8Du7628kPzgGVBNIOQg6dgRUx+P+q+Rqrwb8sRQIDAQABo4IDkTCC A40wHQYDVR0OBBYEFFCoeYL7Ffm/eCIj/7i3wRIu9UEuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDc3MTdmNjAtZGU3NS0z NzJmLWI0YTctMzcwNmY2ZmEyNzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHogCRYAHA8IB1GSpa7pcj6T0PtK4TAcn599cV4r oHvE7/w7ZA1bW5o5gUBKLexx+L85dFNueD9XqTM9bStYz9EkMFbXbqnTczcATj8c UMM1m8hSVTJhiP5fwnDqbZfCCaXmJh3x/lojUBb0rkNSSQ29VddVgEDUmb9tGdRz 0F9RkILlzGqWH6O7/dknoiwLyugi6MN5NUew19Y7zgz3uOnm8yKeuYWjsQsbDX2/ UuUAyWJfB4fQ8UeQPEi7m4XqebssI5N9dZIwkr6hQZ55S8iNYfPiRNOi+1M+5JXn EDWxzVEqbFA5ni0w0bJDMcEN8PIX1C6ltVhbp0aM6Mc3YjA= -----END CERTIFICATE-----Generated at Wed Jul 29 03:53:15 2026 by rpki-client