$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/30c50215-e1e5-3136-ba41-0d9367a5b7f0.roa File: 30c50215-e1e5-3136-ba41-0d9367a5b7f0.roa (raw, json) Hash identifier: vPgOC7iEmpGNnNEUDnzYdccsVp6sxQrmXM3y54VqLjI= Subject key identifier: D5:29:5C:0F:31:1B:B6:66:95:78:40:4F:5A:62:9D:C2:9D:1C:9A:DF Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F4328584FC46680299041399667A21AC0 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/30c50215-e1e5-3136-ba41-0d9367a5b7f0.roa Signing time: Sun 08 Nov 2026 02:00:13 +0000 ROA not before: Sun 08 Nov 2026 02:00:13 +0000 ROA not after: Sat 06 Feb 2027 02:00:13 +0000 asID: 14041 IP address blocks: 129.19.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c4:66:80:29:90:41:39:96:67:a2:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Nov 8 02:00:13 2026 GMT Not After : Feb 6 02:00:13 2027 GMT Subject: CN=01a432ca-357b-4fef-96cc-3afc7120918f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c5:df:44:fb:9a:5e:61:66:ad:18:4c:82:ac: 68:30:07:34:33:d0:b3:df:00:18:6c:04:65:99:76: 7c:5c:95:99:13:8f:b5:82:2f:e9:d7:f2:27:78:71: d2:51:d4:74:eb:07:17:c9:0a:7d:00:8a:9d:c4:88: 3a:85:b9:8c:b4:64:d0:77:f9:70:36:1c:bf:89:75: b6:56:40:6a:80:8b:b3:eb:aa:ea:a1:ba:9e:fe:09: 5e:04:c5:af:fc:8a:05:bb:43:9e:68:fa:2c:40:5e: 8d:21:90:31:f2:04:31:d0:09:8a:6c:60:4c:c4:8d: 14:79:91:ff:a2:99:c0:39:11:d0:82:4c:0a:1e:e6: 7a:91:29:0a:b9:76:9b:e5:43:3d:f7:2c:3c:7e:94: 62:48:83:a5:84:88:09:e4:2b:48:78:f5:93:72:1a: 13:41:9d:db:df:2b:a4:46:c4:4f:a3:dc:d8:40:9c: 9a:99:20:8f:6b:2c:94:75:ff:c2:dc:22:95:78:88: d9:ce:3c:03:ce:fa:20:9f:ff:7f:8f:51:9d:e7:d3: d8:cb:6b:7f:89:83:dd:83:29:a3:30:bd:47:59:b0: a4:6f:fd:66:f2:de:03:22:dd:49:e5:57:ec:6d:5b: 80:f3:e5:29:c9:d6:38:57:20:24:e8:c8:14:3c:40: 18:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:29:5C:0F:31:1B:B6:66:95:78:40:4F:5A:62:9D:C2:9D:1C:9A:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/30c50215-e1e5-3136-ba41-0d9367a5b7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:f1:78:ca:89:fc:57:6a:8a:fc:65:22:90:70:da:2c:b5:d7: 9a:83:ee:30:93:18:a0:f1:5a:65:8a:46:66:16:3c:03:65:21: 57:0a:58:73:30:de:83:33:4d:72:30:35:71:59:e1:0f:8a:fa: 12:b0:fe:d2:57:07:80:c9:bf:17:cc:7d:08:50:e3:c5:53:88: e7:e0:ad:c6:d3:a7:10:3c:65:1e:d8:a0:e6:01:bd:99:7d:29: f1:81:b8:62:75:95:78:27:5e:19:21:2a:dd:e8:18:d2:33:68: e4:ef:66:af:3b:92:a2:ef:f3:eb:08:15:aa:26:6c:f0:b1:94: 95:4f:3d:ad:dc:8b:ff:39:8a:c5:bc:bf:a9:4a:55:65:ff:be: 4d:b9:1b:27:3a:73:1f:ea:fb:69:51:d8:62:88:c8:62:16:e4: 8c:6e:00:16:19:05:76:06:af:52:86:68:5a:51:ad:53:d2:99: 4a:82:7c:63:5c:d8:f5:97:72:db:66:62:75:71:bc:72:fb:12: 41:53:c6:9b:8e:64:3a:cc:c7:8b:a1:8e:04:d3:2d:0f:38:9e: 7a:92:2d:d7:ce:33:ad:03:b4:08:d9:ff:c7:eb:f7:b1:af:94: f0:6e:d3:c7:0b:c6:5b:2d:fe:f9:fc:60:c2:c9:e9:2f:40:c7: 4b:40:85:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/EZoApkEE5lmeiGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI2MTEwODAyMDAxM1oXDTI3MDIwNjAyMDAxM1owLzEtMCsGA1UEAxMk MDFhNDMyY2EtMzU3Yi00ZmVmLTk2Y2MtM2FmYzcxMjA5MThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsXfRPuaXmFmrRhMgqxoMAc0M9Cz3wAYbARl mXZ8XJWZE4+1gi/p1/IneHHSUdR06wcXyQp9AIqdxIg6hbmMtGTQd/lwNhy/iXW2 VkBqgIuz66rqobqe/gleBMWv/IoFu0OeaPosQF6NIZAx8gQx0AmKbGBMxI0UeZH/ opnAORHQgkwKHuZ6kSkKuXab5UM99yw8fpRiSIOlhIgJ5CtIePWTchoTQZ3b3yuk RsRPo9zYQJyamSCPayyUdf/C3CKVeIjZzjwDzvogn/9/j1Gd59PYy2t/iYPdgymj ML1HWbCkb/1m8t4DIt1J5VfsbVuA8+UpydY4VyAk6MgUPEAYtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUpXA8xG7ZmlXhAT1pincKdHJrfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvMzBjNTAyMTUtZTFlNS0z MTM2LWJhNDEtMGQ5MzY3YTViN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgROlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnxeMqJ/FdqivxlIpBw2iy115qD7jCTGKDxWmWKRmYWPANlIVcKWHMw 3oMzTXIwNXFZ4Q+K+hKw/tJXB4DJvxfMfQhQ48VTiOfgrcbTpxA8ZR7YoOYBvZl9 KfGBuGJ1lXgnXhkhKt3oGNIzaOTvZq87kqLv8+sIFaombPCxlJVPPa3ci/85isW8 v6lKVWX/vk25Gyc6cx/q+2lR2GKIyGIW5IxuABYZBXYGr1KGaFpRrVPSmUqCfGNc 2PWXcttmYnVxvHL7EkFTxpuOZDrMx4uhjgTTLQ84nnqSLdfOM60DtAjZ/8fr97Gv lPBu08cLxlst/vn8YMLJ6S9Ax0tAhRg= -----END CERTIFICATE-----Generated at Sun Nov 15 20:31:43 2026 by rpki-client