$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c0070b49-b28e-3284-9534-d1b8531b257d.roa File: c0070b49-b28e-3284-9534-d1b8531b257d.roa (raw, json) Hash identifier: XfDX+zj0S9I941zV5qzdn7hBU5jEONTwdKc3bqvnEwY= Subject key identifier: D3:62:62:C2:CB:52:87:28:85:C1:8A:E5:5E:BE:42:E8:69:28:BD:2E Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F4328584F0D6CFCD80A5E957254193D48 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c0070b49-b28e-3284-9534-d1b8531b257d.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 30136 IP address blocks: 129.19.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:fc:d8:0a:5e:95:72:54:19:3d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=54afe249-54e1-4b56-a701-ec84caa359b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cf:35:1f:1f:73:79:66:31:ab:5d:24:05:04: 77:89:b7:3b:1c:ee:23:39:52:65:bc:25:a3:61:f9: e4:86:00:4f:1b:34:66:09:79:51:a8:b1:9f:99:11: 0c:7f:69:33:a3:67:66:c0:6a:22:19:09:05:0a:02: 63:7b:37:b9:d4:0d:74:c4:90:6a:cd:01:b1:04:4a: 45:75:ac:b2:bb:f2:76:b1:f7:5d:79:b8:f1:c1:49: c5:3c:64:bd:a2:19:16:05:05:40:46:14:6a:26:8d: e2:af:fb:15:7b:64:6a:3c:5c:ed:84:96:a5:de:5d: ab:27:cf:09:3d:e1:56:5d:51:1c:f1:b9:32:76:7e: ea:78:10:98:5b:59:e2:92:b7:60:d1:06:70:7d:f6: 3e:b0:2a:c7:3c:2e:6e:dd:47:77:ba:63:6e:14:ee: 29:0c:ec:d9:81:52:3e:54:c7:7b:5b:d8:dc:0f:9b: 2b:42:e6:85:b7:3a:54:bd:1e:4d:01:89:b7:de:7d: 85:cf:ce:8b:70:71:f2:96:a4:3f:3c:78:0b:a1:fd: 16:c9:22:ac:93:f3:bd:ba:ff:f3:99:e1:ae:fa:b8: fb:1d:4d:8d:fa:dd:5f:ad:a2:f4:12:23:aa:98:38: f4:6a:81:20:a9:1e:7b:03:b1:14:b9:2b:0b:a2:7b: b6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:62:62:C2:CB:52:87:28:85:C1:8A:E5:5E:BE:42:E8:69:28:BD:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/c0070b49-b28e-3284-9534-d1b8531b257d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:14:7d:9d:91:4d:b9:3c:ff:d9:8d:8c:39:ff:18:d2:a6:87: 6b:92:63:d1:ce:90:79:b4:7c:4d:b6:24:76:23:46:db:11:9c: cf:8b:4d:db:db:b2:dd:8b:e6:4c:52:dd:17:21:12:d0:61:11: fc:47:ba:06:f6:6d:f7:c7:8a:ad:fa:30:44:1a:77:3f:7b:40: 75:b1:36:6d:a2:d0:88:7e:33:9b:e2:2a:4b:95:62:c8:1a:d9: 77:5a:a0:e0:b5:e2:19:f0:e1:49:60:8e:9f:49:62:c5:26:e8: 10:09:46:75:b4:95:31:d1:ce:1e:67:d9:02:be:bc:e5:82:32: 73:f6:ea:dd:eb:71:6d:bb:01:2a:4d:20:a2:0c:74:89:b7:e8: 5b:cc:f2:7f:8c:18:7f:65:98:db:b7:de:81:57:62:5d:54:8f: 48:66:f5:f4:d8:2b:9a:98:7a:a8:94:ef:48:c3:cc:89:d9:4a: 7e:5e:54:b2:33:70:b0:9f:d4:65:1a:e1:96:69:f3:7a:c9:8f: fd:ff:c3:61:98:20:68:81:5c:36:ee:c6:2d:ea:75:06:aa:57: e1:b3:2f:66:a0:bd:b7:83:6e:12:5c:28:77:64:a3:1e:73:2e: 6b:4c:4c:5e:42:17:2d:29:dd:3e:c9:06:fd:d5:51:ac:a5:a3: ab:42:51:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPzYCl6VclQZPUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk NTRhZmUyNDktNTRlMS00YjU2LWE3MDEtZWM4NGNhYTM1OWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc81Hx9zeWYxq10kBQR3ibc7HO4jOVJlvCWj YfnkhgBPGzRmCXlRqLGfmREMf2kzo2dmwGoiGQkFCgJjeze51A10xJBqzQGxBEpF dayyu/J2sfddebjxwUnFPGS9ohkWBQVARhRqJo3ir/sVe2RqPFzthJal3l2rJ88J PeFWXVEc8bkydn7qeBCYW1nikrdg0QZwffY+sCrHPC5u3Ud3umNuFO4pDOzZgVI+ VMd7W9jcD5srQuaFtzpUvR5NAYm33n2Fz86LcHHylqQ/PHgLof0WySKsk/O9uv/z meGu+rj7HU2N+t1fraL0EiOqmDj0aoEgqR57A7EUuSsLonu2YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNiYsLLUocohcGK5V6+QuhpKL0uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvYzAwNzBiNDktYjI4ZS0z Mjg0LTk1MzQtZDFiODUzMWIyNTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgROYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4UfZ2RTbk8/9mNjDn/GNKmh2uSY9HOkHm0fE22JHYjRtsRnM+LTdvb st2L5kxS3RchEtBhEfxHugb2bffHiq36MEQadz97QHWxNm2i0Ih+M5viKkuVYsga 2XdaoOC14hnw4Ulgjp9JYsUm6BAJRnW0lTHRzh5n2QK+vOWCMnP26t3rcW27ASpN IKIMdIm36FvM8n+MGH9lmNu33oFXYl1Uj0hm9fTYK5qYeqiU70jDzInZSn5eVLIz cLCf1GUa4ZZp83rJj/3/w2GYIGiBXDbuxi3qdQaqV+GzL2agvbeDbhJcKHdkox5z LmtMTF5CFy0p3T7JBv3VUaylo6tCUSE= -----END CERTIFICATE-----Generated at Mon Sep 21 13:56:53 2026 by rpki-client