$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/3490ee29-1025-3e4c-96fe-329013b68481.roa File: 3490ee29-1025-3e4c-96fe-329013b68481.roa (raw, json) Hash identifier: EzXwdyLqo1F+pbx8uYk5l5v79wtCq1ell+5sC+Ey9rw= Subject key identifier: 3E:CB:DB:18:5F:39:F8:39:88:F2:99:F5:97:CD:3C:BF:8F:6C:7E:76 Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F4328584EE921ED223506C58EF1C6E240 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/3490ee29-1025-3e4c-96fe-329013b68481.roa Signing time: Fri 21 Aug 2026 13:00:11 +0000 ROA not before: Fri 21 Aug 2026 13:00:11 +0000 ROA not after: Thu 19 Nov 2026 14:00:11 +0000 asID: 194 IP address blocks: 129.19.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:21:ed:22:35:06:c5:8e:f1:c6:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Aug 21 13:00:11 2026 GMT Not After : Nov 19 14:00:11 2026 GMT Subject: CN=ce06209a-d6d3-4788-a21c-ef6453bd99de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a2:36:3f:0e:56:20:bf:12:8e:ec:3b:24:fe: 74:ef:0e:90:50:54:06:5f:6d:d2:3c:09:40:09:49: 3d:27:e3:e9:0e:a7:3d:56:3f:aa:03:e4:70:47:c6: f5:eb:7b:2c:30:b6:79:a8:ac:81:1d:3a:1f:c9:22: cd:10:06:44:4b:d4:55:62:66:16:5b:2d:b4:be:8a: fa:25:06:a6:cb:98:1a:82:44:5e:c1:68:57:e5:e9: 8d:f3:a1:1e:69:dc:d3:59:ae:4a:29:e2:aa:92:48: 33:f8:9d:70:9a:0e:97:3b:61:06:8f:3c:62:9f:65: e9:44:8c:5d:ef:4a:f6:9c:08:2a:d6:65:9d:fd:0e: de:58:be:5c:d8:6a:2e:1c:41:11:81:10:84:34:42: 08:4e:ff:64:af:63:62:4f:97:d4:06:ea:7e:8a:3d: 54:0a:ce:72:4c:a1:d8:17:06:2b:e6:01:c7:9f:76: ae:48:c7:2b:7d:bb:ef:27:7a:4a:01:2b:a6:f9:95: 80:e0:5b:f3:20:ea:05:77:8a:76:16:ab:1e:22:ce: 26:74:1d:84:75:34:63:91:d1:aa:f7:e4:28:a5:c1: 2c:32:82:21:b5:69:f6:ba:66:30:08:35:a1:40:6f: 47:3f:3f:a9:a0:ee:7c:17:cd:c9:aa:5e:90:52:b4: be:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CB:DB:18:5F:39:F8:39:88:F2:99:F5:97:CD:3C:BF:8F:6C:7E:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/3490ee29-1025-3e4c-96fe-329013b68481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:e7:76:85:5f:42:49:a5:73:a4:c2:c0:58:e4:84:f1:e0:96: 13:cf:86:60:db:a2:a3:0e:fc:f4:b4:e1:b2:37:b9:39:9c:ad: 96:89:f6:76:47:bc:e8:77:f5:e3:a8:69:75:8a:aa:89:f9:e9: 73:29:32:14:20:2a:8a:40:8f:53:b6:e4:1f:7d:2f:b7:70:c8: 05:93:44:5b:99:62:fc:4d:2b:65:79:77:59:e9:d6:cb:ab:73: ea:50:46:d2:4d:9b:27:6c:17:a8:c2:3f:06:92:eb:44:fc:c3: 33:96:30:72:d7:09:97:06:97:ea:3f:b9:db:43:c6:59:db:81: f9:3d:c6:30:77:17:cf:b0:5d:3b:e3:fd:51:79:09:c0:f8:79: 26:e7:da:06:7f:64:f8:d2:84:5d:c1:3c:4d:34:0a:c8:78:d8: 22:5b:9d:b7:d0:e9:f8:a9:ce:c2:54:89:1f:a5:2d:57:35:80: c1:03:4d:60:ac:1c:a1:65:07:2f:70:4f:a9:61:56:b1:d1:ae: de:63:46:f7:b2:4e:01:65:4c:53:18:2e:00:8a:d4:3e:79:8d: e9:fb:a4:1b:6d:40:de:cc:c4:12:fa:2c:f6:7c:7d:be:44:57: 6e:db:6c:3b:a1:5a:9b:1e:83:0f:a6:fa:10:7c:e5:10:5b:81: 09:33:d2:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7pIe0iNQbFjvHG4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk Y2UwNjIwOWEtZDZkMy00Nzg4LWEyMWMtZWY2NDUzYmQ5OWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6I2Pw5WIL8Sjuw7JP507w6QUFQGX23SPAlA CUk9J+PpDqc9Vj+qA+RwR8b163ssMLZ5qKyBHTofySLNEAZES9RVYmYWWy20vor6 JQamy5gagkRewWhX5emN86EeadzTWa5KKeKqkkgz+J1wmg6XO2EGjzxin2XpRIxd 70r2nAgq1mWd/Q7eWL5c2GouHEERgRCENEIITv9kr2NiT5fUBup+ij1UCs5yTKHY FwYr5gHHn3auSMcrfbvvJ3pKASum+ZWA4FvzIOoFd4p2FqseIs4mdB2EdTRjkdGq 9+QopcEsMoIhtWn2umYwCDWhQG9HPz+poO58F83Jql6QUrS+qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7L2xhfOfg5iPKZ9ZfNPL+PbH52MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvMzQ5MGVlMjktMTAyNS0z ZTRjLTk2ZmUtMzI5MDEzYjY4NDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgROcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfndoVfQkmlc6TCwFjkhPHglhPPhmDboqMO/PS04bI3uTmcrZaJ9nZH vOh39eOoaXWKqon56XMpMhQgKopAj1O25B99L7dwyAWTRFuZYvxNK2V5d1np1sur c+pQRtJNmydsF6jCPwaS60T8wzOWMHLXCZcGl+o/udtDxlnbgfk9xjB3F8+wXTvj /VF5CcD4eSbn2gZ/ZPjShF3BPE00Csh42CJbnbfQ6fipzsJUiR+lLVc1gMEDTWCs HKFlBy9wT6lhVrHRrt5jRveyTgFlTFMYLgCK1D55jen7pBttQN7MxBL6LPZ8fb5E V27bbDuhWpsegw+m+hB85RBbgQkz0oc= -----END CERTIFICATE-----Generated at Mon Sep 21 13:53:02 2026 by rpki-client