$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fdbf5dec-8f42-307e-8858-c6991bcb6706.roa File: fdbf5dec-8f42-307e-8858-c6991bcb6706.roa (raw, json) Hash identifier: 6yBLBZLYBJag6dRau6KF7jRVuCqbjaDmmv55ySt+HFU= Subject key identifier: A2:2E:C1:01:54:C1:54:C2:FA:2B:73:A2:0A:CB:3B:F3:A4:A3:BA:78 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EA79B48867503746163E95780 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fdbf5dec-8f42-307e-8858-c6991bcb6706.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 50028 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:48:86:75:03:74:61:63:e9:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1095aa87-8bb2-44bc-8496-39bff22a5e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5b:7c:78:a1:f4:cd:96:10:ec:3b:5f:55:9b: 17:25:65:41:19:fa:c0:7c:7f:b6:d2:8c:61:67:91: 0d:f5:b9:6d:45:27:a8:a8:cb:78:97:4e:3e:70:e2: 2a:82:92:a3:46:6f:1f:b9:a4:64:6b:7c:ce:89:a3: b3:13:39:b3:42:ba:5e:22:84:6e:73:ee:d1:bc:b0: a9:59:ae:ae:e1:33:68:bf:3c:36:b9:f4:2e:fc:57: 46:0a:da:97:a3:1a:8f:0f:74:0c:ae:66:7c:39:a4: 7c:99:3d:ff:d2:a8:6c:76:6f:c6:3e:4a:a0:21:1d: 09:d0:54:86:fc:50:a7:bd:ca:e7:b6:c8:e8:23:b2: af:c6:32:6c:52:10:43:cb:21:b0:d1:27:2c:85:c2: e3:64:75:62:2a:16:c2:87:37:48:7b:cc:a2:ae:c1: 87:b1:0b:b8:95:cc:3a:cc:a6:35:b1:73:87:a4:e7: 4c:2c:75:f2:6a:ec:31:a0:c3:68:a7:d2:7e:ec:30: d9:42:bf:bd:e7:6a:53:56:61:5b:3e:8a:62:32:41: 27:c4:68:cc:8b:75:f2:3f:dc:c1:3d:ed:86:80:54: 0c:fe:73:2a:3f:f7:e1:9b:ce:5b:b9:0f:2e:a3:de: 4a:20:76:c1:2b:53:f0:e2:37:85:e3:d1:25:4d:cd: a7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2E:C1:01:54:C1:54:C2:FA:2B:73:A2:0A:CB:3B:F3:A4:A3:BA:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fdbf5dec-8f42-307e-8858-c6991bcb6706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:71:43:2a:79:1a:78:40:2a:44:53:1e:1b:37:5e:5e:ae:9d: 8e:2e:06:b9:cc:d1:cb:7f:c4:d2:85:69:a3:95:43:cf:f8:8c: 38:ad:f6:2d:72:62:0c:bc:13:f5:1f:35:17:28:eb:c7:ac:7e: 07:fa:e1:1e:78:af:ad:b5:2c:8c:5b:1a:02:75:da:e4:75:d9: 9d:a8:8c:5c:19:f1:e6:06:42:1e:3f:32:48:76:5b:a3:7a:b6: 34:f8:84:4e:23:6b:56:1c:ad:9d:22:db:7e:40:1f:c9:ef:47: b6:e8:d8:70:cf:23:c8:b6:9d:fe:c0:a0:c1:73:66:be:e8:10: 1e:98:8d:96:2d:49:82:eb:27:9d:18:73:c4:5f:24:5a:77:0c: 70:52:7f:04:f6:cf:9d:96:84:ba:a4:f2:7b:e3:9f:1d:d0:ba: 95:23:59:2f:b5:8f:05:dc:ee:e5:dd:9e:67:d4:d7:ab:c3:1a: 8c:4f:cf:d8:f6:19:55:20:29:de:2a:73:44:55:c6:2a:14:a8: ae:15:17:34:c0:3e:48:3f:eb:7e:a3:cf:93:12:2d:83:b8:b9: 73:e6:ba:99:63:35:bd:81:ba:24:e0:20:00:81:e7:73:45:e8: f7:e8:58:16:ea:b8:d7:b0:67:ca:16:a4:1a:02:5b:7c:d1:ff: b9:50:6a:b1 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWE6nm0iGdQN0YWPpV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTA5NWFhODctOGJiMi00NGJjLTg0OTYtMzliZmYyMmE1ZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1t8eKH0zZYQ7DtfVZsXJWVBGfrAfH+20oxh Z5EN9bltRSeoqMt4l04+cOIqgpKjRm8fuaRka3zOiaOzEzmzQrpeIoRuc+7RvLCp Wa6u4TNovzw2ufQu/FdGCtqXoxqPD3QMrmZ8OaR8mT3/0qhsdm/GPkqgIR0J0FSG /FCnvcrntsjoI7KvxjJsUhBDyyGw0ScshcLjZHViKhbChzdIe8yirsGHsQu4lcw6 zKY1sXOHpOdMLHXyauwxoMNop9J+7DDZQr+952pTVmFbPopiMkEnxGjMi3XyP9zB Pe2GgFQM/nMqP/fhm85buQ8uo95KIHbBK1Pw4jeF49ElTc2npQIDAQABo4IDkTCC A40wHQYDVR0OBBYEFKIuwQFUwVTC+itzogrLO/Oko7p4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmRiZjVkZWMtOGY0Mi0z MDdlLTg4NTgtYzY5OTFiY2I2NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBALpxQyp5GnhAKkRTHhs3Xl6unY4uBrnM0ct/xNKF aaOVQ8/4jDit9i1yYgy8E/UfNRco68esfgf64R54r621LIxbGgJ12uR12Z2ojFwZ 8eYGQh4/Mkh2W6N6tjT4hE4ja1YcrZ0i235AH8nvR7bo2HDPI8i2nf7AoMFzZr7o EB6YjZYtSYLrJ50Yc8RfJFp3DHBSfwT2z52WhLqk8nvjnx3QupUjWS+1jwXc7uXd nmfU16vDGoxPz9j2GVUgKd4qc0RVxioUqK4VFzTAPkg/636jz5MSLYO4uXPmuplj Nb2BuiTgIACB53NF6PfoWBbquNewZ8oWpBoCW3zR/7lQarE= -----END CERTIFICATE-----Generated at Wed Jul 29 07:30:00 2026 by rpki-client