$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/71de2854-37e3-36c9-9332-4d278066c5f7.roa File: 71de2854-37e3-36c9-9332-4d278066c5f7.roa (raw, json) Hash identifier: QISEG/lIadaStcx4Qc8VNwbxti9SOm+JZfsfurZ+cSE= Subject key identifier: AD:4E:82:5C:72:A5:E7:AD:24:B0:4B:A1:38:82:59:25:3D:09:52:30 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584D4D5A332390437CC07DE88D40 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/71de2854-37e3-36c9-9332-4d278066c5f7.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 63293 IP address blocks: 129.134.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:33:23:90:43:7c:c0:7d:e8:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=82dcdec8-345c-49b2-b529-fd04c7ea74c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:78:a3:dd:47:07:7c:28:36:be:57:97:9f:f3: 29:65:91:24:81:c4:6f:b0:84:74:c7:34:20:09:43: 8b:91:e9:db:20:7e:b6:8a:aa:27:15:6d:3c:2a:c9: b1:eb:5e:3b:d2:8e:70:e6:1a:17:eb:53:95:62:99: 55:a8:fb:11:9f:cf:98:cd:eb:7f:23:ef:fa:34:24: 5d:aa:98:d2:3f:20:1a:ee:49:13:0b:d7:d6:4a:22: d8:87:91:b9:36:0f:ef:bd:ce:93:03:1f:cf:30:20: 8a:9d:0f:8c:97:37:a2:43:44:28:71:3f:aa:cd:bd: 29:a9:aa:0e:43:4e:8b:d7:4d:14:f7:be:eb:c4:de: 3d:38:d8:d5:6b:b4:ee:91:4d:2a:cf:38:c6:ce:18: 36:36:9c:92:ea:4e:61:76:81:69:3e:f7:51:c1:16: 47:39:8e:32:d6:80:6d:28:23:d1:b4:8d:3d:d7:3d: 87:7e:b1:11:64:ae:3d:d6:a8:df:04:23:1c:de:4b: ae:89:6e:fe:93:47:0c:c5:7c:d9:29:86:d4:1e:ef: 19:6c:e6:70:e8:ba:64:af:37:7d:bc:ab:4e:30:68: fd:e7:93:11:58:fe:97:85:c0:d1:c6:91:69:2c:0c: 66:b3:04:d2:43:00:d4:14:ac:b2:65:bb:1f:25:7e: cf:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4E:82:5C:72:A5:E7:AD:24:B0:4B:A1:38:82:59:25:3D:09:52:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/71de2854-37e3-36c9-9332-4d278066c5f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 129.134.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e8:e3:0a:a9:ac:46:85:ab:f7:2d:3d:82:0b:b2:5d:72:42: 95:51:ff:37:e4:94:42:98:c2:1b:05:83:14:e0:49:6f:0a:70: 42:89:41:0e:fa:18:3f:97:6a:7b:29:aa:43:df:c3:99:d3:ac: 44:18:76:64:c8:27:9f:77:5f:45:8d:3d:2f:d2:0a:73:2a:13: 3a:56:b8:4b:2a:0a:94:55:9a:fb:38:26:92:2b:d8:e2:7d:af: dc:59:60:f9:4a:aa:e7:fa:b8:45:91:e1:e3:85:ea:0f:85:69: 68:d1:70:d3:7f:ff:0b:eb:30:2f:cf:2e:a3:18:3a:19:42:5e: 4d:12:c9:7b:77:7b:49:85:2a:eb:61:b7:ed:ea:fd:bf:a6:bd: 72:af:80:11:0f:3d:2f:92:99:b1:1b:10:66:58:b1:82:0d:72: 54:cf:6a:53:8d:3c:f1:55:e0:a7:47:3e:1d:2d:c0:6e:4d:7f: 16:2d:ca:af:a6:09:6b:97:30:92:fc:15:80:90:55:c2:92:1a: cb:54:65:ae:fa:6c:2a:c5:c2:4b:1e:8b:dd:92:50:e5:73:ef: 14:65:4c:a7:e0:be:99:e6:75:5a:36:81:ee:93:93:c9:5e:83: 50:02:03:b2:7d:7e:38:89:96:d2:75:90:ba:59:9d:02:cf:f8: 6e:34:19:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWjMjkEN8wH3ojUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ODJkY2RlYzgtMzQ1Yy00OWIyLWI1MjktZmQwNGM3ZWE3NGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3ij3UcHfCg2vleXn/MpZZEkgcRvsIR0xzQg CUOLkenbIH62iqonFW08Ksmx61470o5w5hoX61OVYplVqPsRn8+Yzet/I+/6NCRd qpjSPyAa7kkTC9fWSiLYh5G5Ng/vvc6TAx/PMCCKnQ+MlzeiQ0QocT+qzb0pqaoO Q06L100U977rxN49ONjVa7TukU0qzzjGzhg2NpyS6k5hdoFpPvdRwRZHOY4y1oBt KCPRtI091z2HfrERZK491qjfBCMc3kuuiW7+k0cMxXzZKYbUHu8ZbOZw6Lpkrzd9 vKtOMGj955MRWP6XhcDRxpFpLAxmswTSQwDUFKyyZbsfJX7PxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1OglxypeetJLBLoTiCWSU9CVIwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvNzFkZTI4NTQtMzdlMy0z NmM5LTkzMzItNGQyNzgwNjZjNWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgYbFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfo4wqprEaFq/ctPYILsl1yQpVR/zfklEKYwhsFgxTgSW8KcEKJQQ76 GD+XanspqkPfw5nTrEQYdmTIJ593X0WNPS/SCnMqEzpWuEsqCpRVmvs4JpIr2OJ9 r9xZYPlKquf6uEWR4eOF6g+FaWjRcNN//wvrMC/PLqMYOhlCXk0SyXt3e0mFKuth t+3q/b+mvXKvgBEPPS+SmbEbEGZYsYINclTPalONPPFV4KdHPh0twG5NfxYtyq+m CWuXMJL8FYCQVcKSGstUZa76bCrFwksei92SUOVz7xRlTKfgvpnmdVo2ge6Tk8le g1ACA7J9fjiJltJ1kLpZnQLP+G40GW8= -----END CERTIFICATE-----Generated at Sat Apr 18 01:10:15 2026 by rpki-client