$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa File: f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa (raw, json) Hash identifier: vRMMaDWkBeOuz8y+/jr9B6p0T0OScnHo+wEraIiJZaA= Subject key identifier: C0:A8:B9:30:DA:F1:51:F9:05:12:A1:9C:8F:12:6C:13:41:95:B2:68 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584EFCACBCB37F5593F519277981 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 22742 IP address blocks: 129.133.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:bc:b3:7f:55:93:f5:19:27:79:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=3066e2b6-8c90-4758-b73c-e0ccbcfd6463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fd:43:2d:c6:1c:9c:22:89:6f:0c:11:83:a1: 46:2d:f4:43:e9:57:22:8c:f0:c3:36:27:d0:d9:dd: 81:4d:3d:27:21:de:1b:fb:ad:65:28:07:c4:84:ab: 9f:32:cb:54:5c:30:b1:14:5b:84:1a:69:f9:5f:4a: 4c:7a:a1:33:3c:39:22:a6:bb:9b:dc:bf:c2:dd:f6: 60:cf:bf:da:c3:1f:3a:46:02:72:68:31:34:53:12: 10:15:23:69:e3:b3:f8:3d:27:43:53:c3:50:e2:3b: 1b:1e:53:85:e6:b4:fb:6b:d3:2f:73:74:8f:a0:bf: 19:be:d7:23:49:ed:2c:8b:5a:ce:f4:8a:82:01:92: 74:60:e4:a3:26:82:3e:fe:80:3b:fc:8f:98:4d:06: ed:a8:f0:79:c8:5a:3d:19:f0:98:96:3d:d9:ec:30: d6:1d:cd:54:00:df:93:aa:42:47:fe:13:b4:02:c2: f0:14:61:88:bd:d3:f2:3f:d2:4e:07:32:45:f9:d0: 52:26:18:59:fb:d2:b4:71:4a:b1:4b:66:a4:59:c0: c8:54:7b:fe:69:09:3a:01:f0:c1:99:f3:9e:c8:a5: f9:92:bf:20:13:80:0c:f3:c7:10:f2:7f:96:7a:3a: 20:aa:65:2d:b9:42:4e:ba:bb:f1:0b:53:52:61:6b: 6e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A8:B9:30:DA:F1:51:F9:05:12:A1:9C:8F:12:6C:13:41:95:B2:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 129.133.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d9:18:83:2a:a7:cd:f2:41:9a:38:58:17:b2:e6:f7:c0:d6: 00:c0:67:9b:06:69:99:06:80:a6:25:dc:c2:18:ac:52:b9:7e: 45:ee:af:3e:e8:44:6f:12:43:56:59:ba:89:48:00:59:1e:c8: af:a0:b6:77:b0:3f:1d:75:6d:40:04:61:c4:ef:21:4d:45:f3: 37:cb:68:f5:ea:c3:5f:cc:b8:bf:03:04:39:1f:a2:08:56:7e: d7:e8:a5:de:cc:1a:5c:52:3e:22:f4:08:9c:c0:63:77:20:b4: 15:bb:5b:a5:49:a4:21:30:eb:18:76:1e:ba:f5:2f:cc:5c:1e: bd:52:ce:de:64:d3:fb:19:52:33:03:9a:be:aa:45:6d:b0:98: ab:d8:2b:3c:bc:5d:c8:ba:67:b6:f0:51:4a:4e:21:22:79:1f: c4:79:f5:c0:fa:11:d4:9f:21:14:ab:19:a5:66:6a:50:1a:31: 10:7c:4d:ee:a7:a3:8c:63:85:8e:2f:be:c7:a2:6a:e4:15:f7: b3:de:38:c0:7e:5e:f3:82:48:33:15:21:75:dc:00:e7:9b:2d: 63:63:2d:2d:c4:d3:04:24:b9:27:0b:64:e6:ef:04:84:4c:7a: 44:d2:9f:db:6a:67:4a:7f:1c:10:49:96:6d:34:4b:a2:15:99: ec:47:23:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rLyzf1WT9RkneYEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk MzA2NmUyYjYtOGM5MC00NzU4LWI3M2MtZTBjY2JjZmQ2NDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf1DLcYcnCKJbwwRg6FGLfRD6VcijPDDNifQ 2d2BTT0nId4b+61lKAfEhKufMstUXDCxFFuEGmn5X0pMeqEzPDkiprub3L/C3fZg z7/awx86RgJyaDE0UxIQFSNp47P4PSdDU8NQ4jsbHlOF5rT7a9Mvc3SPoL8Zvtcj Se0si1rO9IqCAZJ0YOSjJoI+/oA7/I+YTQbtqPB5yFo9GfCYlj3Z7DDWHc1UAN+T qkJH/hO0AsLwFGGIvdPyP9JOBzJF+dBSJhhZ+9K0cUqxS2akWcDIVHv+aQk6AfDB mfOeyKX5kr8gE4AM88cQ8n+WejogqmUtuUJOurvxC1NSYWtudQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCouTDa8VH5BRKhnI8SbBNBlbJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvZjAwOWFhYTctZDVjNy0z ZDBmLWE0NjktNTk0MjFmMjdjOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgYXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHZGIMqp83yQZo4WBey5vfA1gDAZ5sGaZkGgKYl3MIYrFK5fkXurz7o RG8SQ1ZZuolIAFkeyK+gtnewPx11bUAEYcTvIU1F8zfLaPXqw1/MuL8DBDkfoghW ftfopd7MGlxSPiL0CJzAY3cgtBW7W6VJpCEw6xh2Hrr1L8xcHr1Szt5k0/sZUjMD mr6qRW2wmKvYKzy8Xci6Z7bwUUpOISJ5H8R59cD6EdSfIRSrGaVmalAaMRB8Te6n o4xjhY4vvseiauQV97PeOMB+XvOCSDMVIXXcAOebLWNjLS3E0wQkuScLZObvBIRM ekTSn9tqZ0p/HBBJlm00S6IVmexHI84= -----END CERTIFICATE-----Generated at Tue Sep 22 03:31:13 2026 by rpki-client