$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a942301d-5541-36c8-9342-911968d44a92.roa File: a942301d-5541-36c8-9342-911968d44a92.roa (raw, json) Hash identifier: 7rRSQ+woE7rnZ3gjCgMJQ5lFC97a8dTbfusmGdCsW5M= Subject key identifier: EE:6F:D4:F3:37:A3:4E:CC:62:6D:C0:4A:46:CF:43:A2:90:07:98:3E Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584EA786ED23509EBCA5F1258180 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a942301d-5541-36c8-9342-911968d44a92.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 22742 IP address blocks: 129.133.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:ed:23:50:9e:bc:a5:f1:25:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0cf69540-c1e6-4079-a2a9-3ca65a82a543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2c:56:31:49:f3:6f:ca:2a:f4:09:e5:c8:b1: c8:f9:c5:21:ef:88:d7:e8:fd:56:4e:39:cc:bf:ba: be:48:bf:4d:65:c5:9d:43:8b:eb:3d:6d:2d:76:39: 16:d0:32:76:52:ad:84:b4:33:71:75:ae:41:5a:23: 8a:c9:c4:26:66:fe:09:25:f8:2a:36:a4:21:c1:06: a7:bc:e1:c0:00:be:d3:c1:da:b2:21:f5:5e:70:8f: 8b:38:a8:9d:16:5f:70:87:82:53:cf:25:ca:4f:14: 33:43:2e:8c:6d:c9:68:a1:4a:74:28:6b:46:c6:56: cc:16:9e:ce:b1:cd:d4:b6:b6:58:fb:6c:20:be:6f: 42:8c:d6:0f:6a:81:fa:c7:b5:8d:58:69:df:ff:8c: a0:15:40:5d:56:02:3b:bc:19:bb:4b:b8:26:9f:9e: 02:7d:f6:21:29:d3:a5:eb:99:35:29:0d:14:04:17: 6e:73:9d:20:52:ea:da:ef:37:4a:04:eb:d0:8c:09: 5c:44:4a:e3:48:da:7d:47:36:72:3b:00:ed:96:b1: 49:79:25:02:2a:c1:2a:26:b0:29:0a:53:09:c8:3f: fb:86:1b:87:c7:b5:4f:99:24:d1:d8:93:ed:9a:28: f9:e5:61:84:4b:1b:95:c4:d9:25:34:ed:15:15:0a: 31:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6F:D4:F3:37:A3:4E:CC:62:6D:C0:4A:46:CF:43:A2:90:07:98:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a942301d-5541-36c8-9342-911968d44a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 129.133.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:42:97:57:d5:e7:57:37:75:a2:e4:fe:79:10:7c:ff:d3:fb: 23:08:28:69:17:a7:f2:cd:a4:79:66:97:0e:c7:e8:16:97:29: 7d:2d:60:63:2d:69:94:f0:c1:6b:71:87:77:05:ec:7a:a9:ba: d8:53:9a:38:2c:f8:29:21:2a:b2:a1:de:65:09:c8:47:e1:ef: c7:0a:e4:c6:59:ed:e1:f1:db:22:e0:4e:0a:ec:44:8a:dd:4e: 88:7e:d9:ea:35:63:5a:4c:7a:95:8e:58:47:6c:cd:36:d5:5f: 53:6d:d2:a4:ec:63:4f:68:f2:42:20:b0:29:f3:2d:50:6b:3f: b4:bd:e3:66:50:d7:69:03:4f:1f:b4:23:d4:e2:21:3d:e2:a2: e5:3f:af:87:fe:58:fb:ba:35:3e:8e:8b:cd:cc:64:bc:e4:e6: f7:2e:e5:9a:58:b1:ff:39:ef:eb:7a:7f:cd:0e:66:cc:6f:ab: 85:4a:d1:29:1c:18:af:fa:14:dd:9e:9e:21:05:7f:5f:7a:0e: f6:1a:f1:ed:5a:43:3f:5b:5a:e6:d1:d9:48:d8:d0:68:be:e7: e1:e1:9b:2b:5d:9f:20:5e:06:0d:d4:4e:30:2d:f0:98:73:22: 41:3f:47:50:64:7e:50:63:2c:b6:2d:93:8b:5d:1e:fd:26:b4: 60:68:54:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhu0jUJ68pfElgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGNmNjk1NDAtYzFlNi00MDc5LWEyYTktM2NhNjVhODJhNTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmixWMUnzb8oq9AnlyLHI+cUh74jX6P1WTjnM v7q+SL9NZcWdQ4vrPW0tdjkW0DJ2Uq2EtDNxda5BWiOKycQmZv4JJfgqNqQhwQan vOHAAL7TwdqyIfVecI+LOKidFl9wh4JTzyXKTxQzQy6MbclooUp0KGtGxlbMFp7O sc3UtrZY+2wgvm9CjNYPaoH6x7WNWGnf/4ygFUBdVgI7vBm7S7gmn54CffYhKdOl 65k1KQ0UBBduc50gUura7zdKBOvQjAlcRErjSNp9RzZyOwDtlrFJeSUCKsEqJrAp ClMJyD/7hhuHx7VPmSTR2JPtmij55WGESxuVxNklNO0VFQoxPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5v1PM3o07MYm3ASkbPQ6KQB5g+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvYTk0MjMwMWQtNTU0MS0z NmM4LTkzNDItOTExOTY4ZDQ0YTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgYXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpCl1fV51c3daLk/nkQfP/T+yMIKGkXp/LNpHlmlw7H6BaXKX0tYGMt aZTwwWtxh3cF7HqputhTmjgs+CkhKrKh3mUJyEfh78cK5MZZ7eHx2yLgTgrsRIrd Toh+2eo1Y1pMepWOWEdszTbVX1Nt0qTsY09o8kIgsCnzLVBrP7S942ZQ12kDTx+0 I9TiIT3iouU/r4f+WPu6NT6Oi83MZLzk5vcu5ZpYsf857+t6f80OZsxvq4VK0Skc GK/6FN2eniEFf196DvYa8e1aQz9bWubR2UjY0Gi+5+HhmytdnyBeBg3UTjAt8Jhz IkE/R1BkflBjLLYtk4tdHv0mtGBoVOk= -----END CERTIFICATE-----Generated at Wed Jul 29 05:50:06 2026 by rpki-client