$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f3d36a31-45ed-3c43-94e2-06fbe7764b47.roa File: f3d36a31-45ed-3c43-94e2-06fbe7764b47.roa (raw, json) Hash identifier: zaAS8rAns1d6RLF6Xs3GTLVtT0duLWs2UZdvIkBeiBg= Subject key identifier: C4:9F:0C:46:75:74:01:7D:47:D8:3F:1D:23:47:74:D7:53:40:CA:25 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F02422449AADFFAEB9B280B90 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f3d36a31-45ed-3c43-94e2-06fbe7764b47.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 2914 IP address blocks: 129.250.1.252/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:24:49:aa:df:fa:eb:9b:28:0b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=1066bc6a-18b9-4691-a5b9-deabc50696fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cf:fe:14:7f:84:f8:06:d9:c1:64:ec:99:da: d7:fe:45:df:40:71:69:91:5c:5a:03:86:34:e0:ef: a8:9c:af:a4:63:37:6b:81:db:4f:e4:21:a0:93:34: 7c:56:67:83:d0:be:a7:c2:26:1e:08:4d:15:76:ff: b4:11:cd:89:51:3a:02:42:86:a5:6f:07:b5:35:e4: a1:25:dd:a1:78:af:c4:c0:a0:5b:df:4c:a3:a9:0b: 80:29:08:b4:5f:f9:92:a4:47:37:15:9f:ba:98:52: 03:3a:8d:a1:7f:6f:db:a5:82:f0:b3:0b:e2:e5:19: b6:3d:c9:be:df:e3:2d:c0:f2:56:51:99:06:0c:fe: 24:10:39:2b:14:fb:91:53:9a:72:2a:b0:0c:b6:b3: 7b:53:1f:a0:01:2d:e7:21:6b:7b:8c:17:01:b7:c8: 25:9f:38:38:fe:37:c6:34:ab:05:61:c2:12:cc:dd: b7:ff:dc:bc:c5:26:f7:44:a9:b6:61:2d:33:37:78: f4:87:33:9b:1c:c6:de:2e:e4:02:f2:bd:5f:49:a6: 60:ac:a7:dc:21:73:5f:ba:e5:8d:6b:7f:2e:78:c8: aa:d1:8d:9a:4b:5b:f3:21:61:38:04:df:be:04:c5: d5:28:a5:0b:ef:0d:9d:07:d5:bc:56:ca:80:f8:12: 46:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9F:0C:46:75:74:01:7D:47:D8:3F:1D:23:47:74:D7:53:40:CA:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f3d36a31-45ed-3c43-94e2-06fbe7764b47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.1.252/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:16:bd:13:32:e2:7b:84:36:b9:69:22:10:62:25:47:22:86: 8a:84:c6:fa:a2:fc:58:81:61:bd:73:c7:bd:e0:e9:00:fc:4e: 3b:f0:1c:1c:d1:cb:9d:f1:cb:61:f5:20:8d:e5:2b:88:5e:06: b5:08:ae:c8:64:b1:b9:1a:20:2d:59:19:33:c5:10:4a:01:33: 93:86:6f:96:83:08:f7:6e:f9:a1:44:b2:87:42:11:71:a7:aa: e1:21:e4:40:f1:a7:64:89:13:ed:2d:82:1e:cb:31:13:94:b1: e8:18:a2:c9:34:fc:1f:e4:cc:4e:d9:54:2a:7d:f4:e8:ee:a0: 99:15:87:19:6a:23:4a:a5:d1:f4:9e:8f:e6:c1:96:37:f0:f9: 51:8f:bd:3b:89:d8:ca:f3:35:b5:d7:a8:9c:0d:a9:57:b8:58: e6:76:f6:31:21:33:c2:14:c1:c4:10:6a:f7:b5:f1:17:49:b4: c8:c3:72:3f:3a:fc:3f:30:da:a5:2c:b4:5c:81:ae:e7:96:e4: 72:89:51:44:45:66:3f:43:e4:41:8b:bb:3e:f6:42:22:7c:c4: 59:e4:84:82:bd:22:46:41:fb:e5:c4:65:c7:84:17:be:ca:92: 0b:e5:43:f4:44:98:b9:1a:e6:00:b8:ce:97:53:d5:20:75:b9: 0a:16:cb:7f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8CQiRJqt/665soC5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MTA2NmJjNmEtMThiOS00NjkxLWE1YjktZGVhYmM1MDY5NmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs/+FH+E+AbZwWTsmdrX/kXfQHFpkVxaA4Y0 4O+onK+kYzdrgdtP5CGgkzR8VmeD0L6nwiYeCE0Vdv+0Ec2JUToCQoalbwe1NeSh Jd2heK/EwKBb30yjqQuAKQi0X/mSpEc3FZ+6mFIDOo2hf2/bpYLwswvi5Rm2Pcm+ 3+MtwPJWUZkGDP4kEDkrFPuRU5pyKrAMtrN7Ux+gAS3nIWt7jBcBt8glnzg4/jfG NKsFYcISzN23/9y8xSb3RKm2YS0zN3j0hzObHMbeLuQC8r1fSaZgrKfcIXNfuuWN a38ueMiq0Y2aS1vzIWE4BN++BMXVKKUL7w2dB9W8VsqA+BJGaQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMSfDEZ1dAF9R9g/HSNHdNdTQMolMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjNkMzZhMzEtNDVlZC0z YzQzLTk0ZTItMDZmYmU3NzY0YjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAgfoB/DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAaFr0TMuJ7hDa5aSIQYiVHIoaKhMb6ovxYgWG9c8e94OkA/E478Bwc 0cud8cth9SCN5SuIXga1CK7IZLG5GiAtWRkzxRBKATOThm+Wgwj3bvmhRLKHQhFx p6rhIeRA8adkiRPtLYIeyzETlLHoGKLJNPwf5MxO2VQqffTo7qCZFYcZaiNKpdH0 no/mwZY38PlRj707idjK8zW116icDalXuFjmdvYxITPCFMHEEGr3tfEXSbTIw3I/ Ovw/MNqlLLRcga7nluRyiVFERWY/Q+RBi7s+9kIifMRZ5ISCvSJGQfvlxGXHhBe+ ypIL5UP0RJi5GuYAuM6XU9UgdbkKFst/ -----END CERTIFICATE-----Generated at Sun Sep 20 20:47:04 2026 by rpki-client