$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a8471413-3bde-38c1-8ef5-3cf69cd9ea1b.roa File: a8471413-3bde-38c1-8ef5-3cf69cd9ea1b.roa (raw, json) Hash identifier: ZUSbxXofrGp5DqHc8MbBFHk2e2VIWbsL/79BetGhm/c= Subject key identifier: 70:7E:38:0B:BB:53:9C:3C:86:59:75:10:D0:01:C8:6B:3B:6A:A3:A4 Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F4328584F225D08754D6EF164E72FEE60 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a8471413-3bde-38c1-8ef5-3cf69cd9ea1b.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 14041 IP address blocks: 129.19.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:08:75:4d:6e:f1:64:e7:2f:ee:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=32817e3c-6027-4658-94e6-0adefa6a0dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e2:50:c2:77:a0:92:0c:a9:62:89:b4:4e:d6: cf:84:7a:4c:5c:6b:2a:f5:0a:33:d4:39:b1:7a:7f: f7:a4:44:5c:50:aa:01:98:1f:6d:f3:ca:86:93:35: d5:a8:5c:7b:f0:f3:41:a3:cb:7f:c3:e2:e1:42:66: 60:ca:98:2c:e2:6a:13:29:47:d5:e8:87:c8:aa:57: 51:77:be:02:95:aa:67:1c:88:b1:dd:8a:d9:b7:c6: 17:16:e3:dc:f2:91:fe:0c:a4:52:98:72:b9:a7:81: 41:14:cf:3b:a9:b0:30:78:cc:b1:7f:79:f8:8b:30: 22:b5:c9:48:94:68:ef:4d:4d:33:03:be:2c:aa:6d: 21:b0:f4:6d:2a:4b:f2:de:0c:2a:d2:27:dc:57:2a: 78:d4:e0:64:07:ca:a0:ad:77:91:6f:b7:44:62:97: 21:ad:7f:c5:d9:b6:23:c0:de:88:8d:26:f5:5d:da: 3e:fa:32:04:44:58:fb:38:a7:d3:27:2c:dc:97:b7: 8c:44:14:db:7f:a8:9a:97:39:20:6d:83:de:64:7a: e2:e2:6c:64:1f:a2:53:9e:68:52:92:fc:7e:c2:d5: fc:93:66:e2:36:7c:08:7c:26:32:9f:db:a8:90:20: 6d:ef:8a:64:ae:ee:db:86:92:e4:f8:43:1e:74:bb: 2c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7E:38:0B:BB:53:9C:3C:86:59:75:10:D0:01:C8:6B:3B:6A:A3:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a8471413-3bde-38c1-8ef5-3cf69cd9ea1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d1:9e:a8:62:ae:da:6c:0f:b4:11:e8:cd:8e:97:97:0e:29: 27:39:0b:93:0f:e3:5e:9f:a6:e5:27:c5:21:a0:fc:c5:57:7c: 44:f7:8d:50:0e:c0:2a:d6:65:61:45:4c:14:eb:1d:23:4d:9c: 57:9a:5c:d4:e3:70:93:04:5d:bf:ce:40:87:eb:7e:22:c1:fe: 8d:f8:74:e8:e7:a0:49:7e:ff:17:59:ed:e9:5e:61:a5:1d:9e: 81:53:2f:12:a2:b8:17:2d:b9:9f:9b:79:25:be:7b:c1:bb:5b: 62:bc:93:cb:a3:1e:77:63:e4:6c:ee:82:f8:aa:de:44:3a:3a: b5:4e:b9:cf:12:5b:86:cf:dc:c2:d7:f0:e1:c4:b7:e1:15:c7: 0b:2b:a3:51:95:f7:ad:65:62:77:55:a4:3b:ec:0c:7f:8c:62: bf:3e:a9:09:2f:f5:e8:86:d1:b0:d5:0e:7c:a1:5a:01:6a:39: 8d:ad:7e:93:3f:32:99:bb:83:81:cd:8a:93:80:b0:77:12:97: 2e:bc:ab:db:7c:e3:ef:a8:ed:1a:25:87:4c:be:c8:5e:4b:f8: d4:33:0c:e6:86:35:a2:28:1b:91:dc:eb:ac:c5:86:c5:25:9f: 42:e0:dd:af:22:dc:76:b1:dd:66:f4:ad:b0:55:db:41:37:30: 5d:a8:2b:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQh1TW7xZOcv7mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk MzI4MTdlM2MtNjAyNy00NjU4LTk0ZTYtMGFkZWZhNmEwZGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleJQwnegkgypYom0TtbPhHpMXGsq9Qoz1Dmx en/3pERcUKoBmB9t88qGkzXVqFx78PNBo8t/w+LhQmZgypgs4moTKUfV6IfIqldR d74ClapnHIix3YrZt8YXFuPc8pH+DKRSmHK5p4FBFM87qbAweMyxf3n4izAitclI lGjvTU0zA74sqm0hsPRtKkvy3gwq0ifcVyp41OBkB8qgrXeRb7dEYpchrX/F2bYj wN6IjSb1Xdo++jIERFj7OKfTJyzcl7eMRBTbf6ialzkgbYPeZHri4mxkH6JTnmhS kvx+wtX8k2biNnwIfCYyn9uokCBt74pkru7bhpLk+EMedLsshwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHB+OAu7U5w8hll1ENAByGs7aqOkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvYTg0NzE0MTMtM2JkZS0z OGMxLThlZjUtM2NmNjljZDllYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgROUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7RnqhirtpsD7QR6M2Ol5cOKSc5C5MP416fpuUnxSGg/MVXfET3jVAO wCrWZWFFTBTrHSNNnFeaXNTjcJMEXb/OQIfrfiLB/o34dOjnoEl+/xdZ7eleYaUd noFTLxKiuBctuZ+beSW+e8G7W2K8k8ujHndj5Gzugviq3kQ6OrVOuc8SW4bP3MLX 8OHEt+EVxwsro1GV961lYndVpDvsDH+MYr8+qQkv9eiG0bDVDnyhWgFqOY2tfpM/ Mpm7g4HNipOAsHcSly68q9t84++o7Rolh0y+yF5L+NQzDOaGNaIoG5Hc66zFhsUl n0Lg3a8i3Hax3Wb0rbBV20E3MF2oK+0= -----END CERTIFICATE-----Generated at Wed Sep 23 04:30:28 2026 by rpki-client