$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa File: 6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa (raw, json) Hash identifier: WTrd8fprTSRLVxpZN6M5G3OG0T9Oell/TIuV2AZ35hQ= Subject key identifier: C1:BD:35:7A:B6:26:C1:9E:07:B7:77:F6:73:7B:7D:93:AA:C5:A7:94 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584D52438E708040D1E6AF124F00 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 63293 IP address blocks: 129.134.162.0/24 maxlen: 24 157.240.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:8e:70:80:40:d1:e6:af:12:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=5778ab8a-c3ca-4693-89d5-3446e1c954c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:78:09:62:92:b7:33:3a:d6:f7:ef:48:f1:55: 73:77:d3:33:7e:89:bf:99:4c:3e:fc:ae:c4:6f:2e: 20:82:e8:e0:4d:6f:03:fd:09:6c:63:eb:fb:49:41: f9:5b:25:d5:7e:c1:48:85:b3:e4:45:5b:aa:0d:57: cd:87:ec:f4:83:7f:82:d8:bf:b8:82:c2:28:1e:5b: 9e:df:f2:e1:81:2c:3b:7c:9b:59:d4:73:57:61:c8: fe:06:65:88:55:03:1d:d7:c0:40:90:6b:5e:4e:a7: ca:6c:fb:82:41:89:a0:34:38:d8:e7:ae:49:55:77: 74:02:e6:b5:eb:2c:cc:0a:a1:bd:9f:b0:d4:d9:22: d2:37:d6:27:e0:bf:b0:f7:68:70:3a:2d:ee:73:fd: b9:2a:36:ec:69:80:f2:5f:49:c1:a6:49:62:31:db: de:e0:2a:51:0d:d9:14:6d:51:b7:f3:c8:3f:36:ad: 2f:5f:32:d9:1e:9d:93:a4:b6:d1:31:80:b5:3a:e7: fc:ae:e2:28:cd:34:ee:11:2d:36:76:5f:37:2b:ca: ea:1b:bb:57:c4:05:93:03:af:3c:45:71:92:78:00: a5:20:a8:23:fb:59:e3:c8:51:32:86:dd:ad:01:8c: bc:68:d1:fd:42:07:4c:da:2b:61:13:22:48:3e:82: 59:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BD:35:7A:B6:26:C1:9E:07:B7:77:F6:73:7B:7D:93:AA:C5:A7:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 129.134.162.0/24 157.240.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ed:b8:32:b3:90:3d:de:b6:2d:91:8b:19:66:27:6d:b7:1b: 72:b7:29:58:19:e5:05:70:8d:e0:15:09:1a:65:2d:57:e7:a6: c3:19:84:a7:a8:29:e4:f4:cc:2a:89:d6:c8:fd:48:16:af:31: 7a:60:76:0c:07:cf:14:87:8e:0a:44:06:db:12:6b:7e:80:f1: 82:c8:09:7c:57:cd:39:a2:9d:ee:5c:ff:f9:23:d1:6f:d9:2b: 24:23:a2:1a:58:ef:c0:04:1b:fe:0f:f4:0d:4a:86:fd:55:89: bc:02:e9:b3:e0:21:e3:b2:b3:f2:1a:32:d4:f7:36:8b:26:3e: 46:6e:29:6b:82:54:7d:b3:01:17:f2:d5:fb:f3:89:f2:4c:96: 42:9f:de:11:7b:dc:36:5d:ab:4a:94:9d:0f:1e:c5:7b:4b:6b: 2c:86:84:95:7b:e3:71:b4:2e:e1:40:47:69:7d:45:b1:f7:cf: 21:cf:d5:92:45:95:df:85:30:1e:70:77:51:82:78:5c:bf:7e: bb:15:b5:c6:43:d6:aa:8b:d1:eb:8a:bb:61:68:da:fa:bf:5f: bf:31:c8:d2:b3:ae:a2:82:34:e4:46:02:b5:80:39:36:35:60: 06:43:e2:49:0b:37:4d:21:60:43:4b:ed:33:b5:0e:60:a3:40: 99:0e:d9:6e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1SQ45wgEDR5q8STwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NTc3OGFiOGEtYzNjYS00NjkzLTg5ZDUtMzQ0NmUxYzk1NGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHgJYpK3MzrW9+9I8VVzd9Mzfom/mUw+/K7E by4ggujgTW8D/QlsY+v7SUH5WyXVfsFIhbPkRVuqDVfNh+z0g3+C2L+4gsIoHlue 3/LhgSw7fJtZ1HNXYcj+BmWIVQMd18BAkGteTqfKbPuCQYmgNDjY565JVXd0Aua1 6yzMCqG9n7DU2SLSN9Yn4L+w92hwOi3uc/25KjbsaYDyX0nBpkliMdve4CpRDdkU bVG388g/Nq0vXzLZHp2TpLbRMYC1Ouf8ruIozTTuES02dl83K8rqG7tXxAWTA688 RXGSeAClIKgj+1njyFEyht2tAYy8aNH9QgdM2ithEyJIPoJZWwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMG9NXq2JsGeB7d39nN7fZOqxaeUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvNmViNGM3MGYtZGVjMS0z YmJjLWIzYzUtZTMyZDgyMmIyYTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgYaiAwQA nfCBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI7tuDKzkD3eti2RixlmJ223G3K3KVgZ5QVwjeAVCRplLVfn psMZhKeoKeT0zCqJ1sj9SBavMXpgdgwHzxSHjgpEBtsSa36A8YLICXxXzTmine5c //kj0W/ZKyQjohpY78AEG/4P9A1Khv1VibwC6bPgIeOys/IaMtT3NosmPkZuKWuC VH2zARfy1fvzifJMlkKf3hF73DZdq0qUnQ8exXtLayyGhJV743G0LuFAR2l9RbH3 zyHP1ZJFld+FMB5wd1GCeFy/frsVtcZD1qqL0euKu2Fo2vq/X78xyNKzrqKCNORG ArWAOTY1YAZD4kkLN00hYENL7TO1DmCjQJkO2W4= -----END CERTIFICATE-----Generated at Fri Apr 17 21:24:05 2026 by rpki-client