$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa File: 0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa (raw, json) Hash identifier: yKoeyhnLi9XFKfls2MGOUweVbQ8aNpA1dKtCmywYPh0= Subject key identifier: DC:B6:1D:96:7A:CF:22:C8:B0:2F:08:B2:DA:F1:55:58:31:0B:A9:E0 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584F4984969F4B2B96FE658A3980 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63293 IP address blocks: 129.134.128.0/24 maxlen: 24 129.134.130.0/24 maxlen: 24 129.134.131.0/24 maxlen: 24 129.134.132.0/24 maxlen: 24 129.134.135.0/24 maxlen: 24 129.134.136.0/24 maxlen: 24 129.134.137.0/24 maxlen: 24 129.134.138.0/24 maxlen: 24 129.134.139.0/24 maxlen: 24 129.134.140.0/24 maxlen: 24 129.134.143.0/24 maxlen: 24 129.134.144.0/24 maxlen: 24 129.134.147.0/24 maxlen: 24 129.134.148.0/24 maxlen: 24 129.134.149.0/24 maxlen: 24 129.134.150.0/24 maxlen: 24 129.134.154.0/24 maxlen: 24 129.134.155.0/24 maxlen: 24 129.134.156.0/24 maxlen: 24 129.134.157.0/24 maxlen: 24 129.134.158.0/24 maxlen: 24 129.134.159.0/24 maxlen: 24 129.134.160.0/26 maxlen: 26 129.134.161.0/24 maxlen: 24 129.134.163.0/24 maxlen: 24 129.134.164.0/24 maxlen: 24 129.134.165.0/24 maxlen: 24 129.134.168.0/24 maxlen: 24 129.134.169.0/24 maxlen: 24 129.134.170.0/24 maxlen: 24 129.134.171.0/24 maxlen: 24 129.134.172.0/24 maxlen: 24 129.134.173.0/24 maxlen: 24 129.134.174.0/24 maxlen: 24 129.134.175.0/24 maxlen: 24 129.134.176.0/24 maxlen: 24 129.134.177.0/24 maxlen: 24 129.134.178.0/24 maxlen: 24 129.134.179.0/24 maxlen: 24 129.134.181.0/24 maxlen: 24 129.134.182.0/24 maxlen: 24 129.134.183.0/24 maxlen: 24 129.134.184.0/24 maxlen: 24 129.134.185.0/24 maxlen: 24 129.134.186.0/24 maxlen: 24 129.134.187.0/24 maxlen: 24 157.240.128.0/24 maxlen: 24 157.240.157.0/24 maxlen: 24 157.240.158.0/24 maxlen: 24 157.240.169.0/24 maxlen: 24 157.240.170.0/24 maxlen: 24 157.240.175.0/24 maxlen: 24 157.240.176.0/24 maxlen: 24 157.240.177.0/24 maxlen: 24 157.240.179.0/24 maxlen: 24 157.240.181.0/24 maxlen: 24 157.240.182.0/24 maxlen: 24 157.240.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:96:9f:4b:2b:96:fe:65:8a:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=56c80ba1-e32e-4d4d-bd90-42a36ede2e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3a:51:f0:1e:11:f6:08:69:71:26:8d:7f:62: 05:61:35:96:65:9e:86:42:b2:7c:20:1a:fa:0c:ec: a8:a8:32:16:43:fa:42:4e:f7:78:49:58:81:e0:ec: 7e:c5:45:25:bb:52:1b:25:55:d7:4c:f2:4a:bd:b4: c0:67:34:70:ba:c0:37:b6:2c:9e:2a:b6:88:56:3f: 3f:17:40:b8:5e:20:6e:a1:4a:14:c6:2d:cf:f5:8d: 2a:1a:f3:b7:97:64:8a:ff:25:7e:dc:9c:02:1b:51: 0a:6f:ab:fa:4f:7d:4b:69:bd:41:5e:21:20:a5:89: 71:01:5b:07:2f:e5:ec:d8:41:6b:f5:49:c9:08:0c: fc:26:09:f7:82:d0:29:d0:5f:dd:2d:a8:7b:01:52: af:2f:f7:a6:5d:5c:59:b5:47:2a:a6:cb:fb:53:a5: 1c:a6:13:ab:ac:16:7f:8d:64:3f:87:fd:a6:e9:fd: a4:af:17:9a:01:8b:14:78:6d:34:55:15:2c:76:5e: d2:f1:b8:80:b6:a6:1b:98:a3:f8:d8:93:ff:e5:d4: 3b:71:ca:5a:ea:e5:e7:cb:70:25:0c:3b:3a:81:55: cd:89:1e:8f:56:31:f8:1f:bd:7d:a7:80:b6:a7:c1: 84:18:24:72:1d:c7:f6:a6:58:aa:c1:44:84:8c:37: 38:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B6:1D:96:7A:CF:22:C8:B0:2F:08:B2:DA:F1:55:58:31:0B:A9:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 129.134.128.0/24 129.134.130.0-129.134.132.255 129.134.135.0-129.134.140.255 129.134.143.0-129.134.144.255 129.134.147.0-129.134.150.255 129.134.154.0-129.134.160.63 129.134.161.0/24 129.134.163.0-129.134.165.255 129.134.168.0-129.134.179.255 129.134.181.0-129.134.187.255 157.240.128.0/24 157.240.157.0-157.240.158.255 157.240.169.0-157.240.170.255 157.240.175.0-157.240.177.255 157.240.179.0/24 157.240.181.0-157.240.183.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:fc:2b:11:a5:c4:29:00:2b:a2:67:63:cd:a7:3e:54:23:6c: e4:76:9d:a7:92:50:8a:a6:0f:df:ce:34:e2:0e:09:ce:a7:76: 67:53:4b:08:a3:3d:ba:ae:58:01:7b:e8:5a:8e:c9:0a:ac:cc: bb:29:88:4a:b8:2b:b3:c6:ed:5d:91:b9:94:a2:11:f5:ab:fe: 00:a5:78:3c:35:99:11:3b:ce:60:11:cf:e7:19:2b:49:8d:35: 93:82:b1:c8:b2:bb:a1:71:63:e6:79:65:a4:02:17:35:6f:ba: e3:e2:35:6c:f4:b0:1c:4b:4c:2b:09:7a:d2:38:77:c0:e7:04: b0:25:81:eb:5c:08:43:6d:c0:a0:16:f6:14:15:16:ee:8c:32: b3:b5:38:2c:ef:e2:bb:96:46:89:24:3b:b6:9a:ad:85:89:61: a0:7c:fc:64:ed:df:59:bb:d1:52:8e:d7:08:f4:82:63:a0:f9: 3b:bf:1a:18:bd:23:fd:b2:29:9a:45:45:ff:0d:8a:99:92:55: cf:06:91:34:49:38:40:07:bd:01:3a:c8:6e:b8:61:43:32:27: 71:5f:42:01:75:53:87:95:50:eb:b9:13:33:d9:6e:9f:d5:c1: 72:64:de:f7:3e:29:c8:ed:7c:db:8e:da:de:24:15:88:52:98: 73:1a:00:ed -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWE9JhJafSyuW/mWKOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTZjODBiYTEtZTMyZS00ZDRkLWJkOTAtNDJhMzZlZGUyZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjpR8B4R9ghpcSaNf2IFYTWWZZ6GQrJ8IBr6 DOyoqDIWQ/pCTvd4SViB4Ox+xUUlu1IbJVXXTPJKvbTAZzRwusA3tiyeKraIVj8/ F0C4XiBuoUoUxi3P9Y0qGvO3l2SK/yV+3JwCG1EKb6v6T31Lab1BXiEgpYlxAVsH L+Xs2EFr9UnJCAz8Jgn3gtAp0F/dLah7AVKvL/emXVxZtUcqpsv7U6UcphOrrBZ/ jWQ/h/2m6f2krxeaAYsUeG00VRUsdl7S8biAtqYbmKP42JP/5dQ7ccpa6uXny3Al DDs6gVXNiR6PVjH4H719p4C2p8GEGCRyHcf2pliqwUSEjDc4hwIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFNy2HZZ6zyLIsC8IstrxVVgxC6ngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMGY2OTgxZmEtMWU3Mi0z MjRhLWJjMDgtMGUzNTNjNmZiYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMIHeBggrBgEFBQcBBwEB/wSBzjCByzCByAQCAAEwgcEDBACB hoAwDAMEAYGGggMEAIGGhDAMAwQAgYaHAwQAgYaMMAwDBACBho8DBACBhpAwDAME AIGGkwMEAIGGljANAwQBgYaaAwUGgYagAAMEAIGGoTAMAwQAgYajAwQBgYakMAwD BAOBhqgDBAKBhrAwDAMEAIGGtQMEAoGGuAMEAJ3wgDAMAwQAnfCdAwQAnfCeMAwD BACd8KkDBACd8KowDAMEAJ3wrwMEAZ3wsAMEAJ3wszAMAwQAnfC1AwQDnfCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/8KxGlxCkAK6JnY82nPlQjbOR2naeSUIqmD9/ONOIOCc6ndmdTSwij PbquWAF76FqOyQqszLspiEq4K7PG7V2RuZSiEfWr/gCleDw1mRE7zmARz+cZK0mN NZOCsciyu6FxY+Z5ZaQCFzVvuuPiNWz0sBxLTCsJetI4d8DnBLAlgetcCENtwKAW 9hQVFu6MMrO1OCzv4ruWRokkO7aarYWJYaB8/GTt31m70VKO1wj0gmOg+Tu/Ghi9 I/2yKZpFRf8NipmSVc8GkTRJOEAHvQE6yG64YUMyJ3FfQgF1U4eVUOu5EzPZbp/V wXJk3vc+KcjtfNuO2t4kFYhSmHMaAO0= -----END CERTIFICATE-----Generated at Mon Sep 28 12:31:35 2026 by rpki-client