$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/7561f783-99b2-39b4-98a2-673b561e784d.roa File: 7561f783-99b2-39b4-98a2-673b561e784d.roa (raw, json) Hash identifier: g9t8NymlN+0wnpyCsr20rXG0SY+SeeKp+BN9i+hl3qU= Subject key identifier: 6E:5B:73:67:B8:56:11:43:F9:18:55:8E:58:13:82:17:A5:74:25:61 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584EA7871D1FDD0B39BADCCDC460 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/7561f783-99b2-39b4-98a2-673b561e784d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 63293 IP address blocks: 129.134.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:1d:1f:dd:0b:39:ba:dc:cd:c4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f98378af-2137-4bf6-8f81-aad71ecfd427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bb:93:9f:5d:71:07:f8:6e:80:07:65:2e:a1: 61:04:ea:fa:cc:bf:59:3f:f6:32:9c:70:3b:73:65: 56:9a:1e:c2:9b:a9:d5:83:a1:1d:d0:78:c1:d6:e5: 40:f8:cf:a9:de:7a:30:e3:cb:ed:40:38:0a:40:ab: 59:11:3c:e4:46:a3:d4:60:e3:3f:3d:61:16:54:6a: ff:bb:b8:37:d1:ec:ec:86:93:8e:b7:a0:67:a6:3d: 99:71:6e:e2:8b:0c:ce:18:a3:b2:3e:b8:a5:8d:02: 0e:5c:21:46:77:0f:53:c6:82:74:2a:80:fc:21:7b: 9b:68:7a:26:96:37:84:10:0d:9d:c7:c8:67:b4:05: 2d:ad:74:65:57:da:25:96:9a:90:b5:0e:aa:bf:01: c4:dc:9c:25:d0:c3:ab:8b:aa:a3:e5:f3:fb:71:59: eb:48:9a:f7:3d:86:45:ed:f9:ab:77:3e:a1:fb:26: 2f:a3:f9:40:df:bc:fd:e5:36:7e:4c:c9:27:61:c3: e9:72:00:d4:8f:00:4f:00:8d:37:3e:7e:da:20:9f: 66:63:94:61:d7:0b:36:d7:bb:66:59:a9:17:c7:ea: a1:0d:52:f6:29:56:ad:08:ae:d5:7d:a1:57:5d:f0: 3e:d3:c3:1b:14:b7:86:25:32:74:df:8f:b5:d3:cb: 7a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5B:73:67:B8:56:11:43:F9:18:55:8E:58:13:82:17:A5:74:25:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/7561f783-99b2-39b4-98a2-673b561e784d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 129.134.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:34:25:10:9e:e1:5c:1c:03:5e:09:cc:0b:1a:5f:06:a8:21: eb:c7:b0:ea:b3:00:d7:d0:87:1a:63:e9:46:6e:41:6a:bd:0e: cc:12:71:93:8e:70:56:3e:0f:b6:b1:d8:fa:50:e3:5f:d4:ff: 0f:a5:42:d3:fb:6c:1e:04:43:0b:75:26:c9:73:ef:51:98:ce: aa:c1:87:f6:5f:ab:78:ef:60:96:63:e3:74:cc:80:fd:aa:b3: 9f:c2:b9:c2:68:62:0f:42:fa:b5:3e:a7:dc:c4:0a:26:e7:5f: ee:f1:d9:2e:f0:66:6a:5e:56:33:72:14:b3:7e:42:aa:73:dd: 80:54:a5:1e:bb:a3:db:3c:94:0d:7a:9c:9f:03:30:5a:8d:6a: 38:7c:78:57:a0:fc:9f:3b:0b:a4:0c:49:44:7f:a5:0f:62:3d: 6e:cf:9c:e2:60:df:5a:b6:72:33:d0:50:ad:06:5f:dc:d6:31: cf:25:d7:c3:46:7f:2c:12:34:7c:33:d4:f5:3b:d8:63:b0:02: 49:01:3f:fa:99:9e:45:91:c6:9d:e5:12:2b:c4:c6:ff:a9:24: 39:86:97:cc:92:1c:32:d0:07:82:e8:8a:cd:71:69:db:7a:fa: 76:66:d3:27:1c:0d:58:c9:6e:52:dc:04:6b:4a:70:8b:2e:92: 53:1b:d1:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhx0f3Qs5utzNxGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Zjk4Mzc4YWYtMjEzNy00YmY2LThmODEtYWFkNzFlY2ZkNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7uTn11xB/hugAdlLqFhBOr6zL9ZP/YynHA7 c2VWmh7Cm6nVg6Ed0HjB1uVA+M+p3now48vtQDgKQKtZETzkRqPUYOM/PWEWVGr/ u7g30ezshpOOt6Bnpj2ZcW7iiwzOGKOyPriljQIOXCFGdw9TxoJ0KoD8IXubaHom ljeEEA2dx8hntAUtrXRlV9ollpqQtQ6qvwHE3Jwl0MOri6qj5fP7cVnrSJr3PYZF 7fmrdz6h+yYvo/lA37z95TZ+TMknYcPpcgDUjwBPAI03Pn7aIJ9mY5Rh1ws217tm WakXx+qhDVL2KVatCK7VfaFXXfA+08MbFLeGJTJ034+108t6KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5bc2e4VhFD+RhVjlgTgheldCVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvNzU2MWY3ODMtOTliMi0z OWI0LTk4YTItNjczYjU2MWU3ODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgYa9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADs0JRCe4VwcA14JzAsaXwaoIevHsOqzANfQhxpj6UZuQWq9DswScZOO cFY+D7ax2PpQ41/U/w+lQtP7bB4EQwt1Jslz71GYzqrBh/Zfq3jvYJZj43TMgP2q s5/CucJoYg9C+rU+p9zECibnX+7x2S7wZmpeVjNyFLN+Qqpz3YBUpR67o9s8lA16 nJ8DMFqNajh8eFeg/J87C6QMSUR/pQ9iPW7PnOJg31q2cjPQUK0GX9zWMc8l18NG fywSNHwz1PU72GOwAkkBP/qZnkWRxp3lEivExv+pJDmGl8ySHDLQB4Lois1xadt6 +nZm0yccDVjJblLcBGtKcIsuklMb0Q0= -----END CERTIFICATE-----Generated at Wed Jul 29 07:42:37 2026 by rpki-client