$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/606b7f9a-8f76-30f2-9853-afcb97489ddc.roa File: 606b7f9a-8f76-30f2-9853-afcb97489ddc.roa (raw, json) Hash identifier: w8PXsmoYvw0pgKYR0jJGukuGz1UfgmW8SSiLDckFYbg= Subject key identifier: 41:87:52:8C:B1:03:C0:FD:11:24:A7:BA:F1:B7:EC:C0:64:BD:9F:30 Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F4328584FC46680442120538A69D11480 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/606b7f9a-8f76-30f2-9853-afcb97489ddc.roa Signing time: Sun 08 Nov 2026 02:00:13 +0000 ROA not before: Sun 08 Nov 2026 02:00:13 +0000 ROA not after: Sat 06 Feb 2027 02:00:13 +0000 asID: 393869 IP address blocks: 129.19.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c4:66:80:44:21:20:53:8a:69:d1:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Nov 8 02:00:13 2026 GMT Not After : Feb 6 02:00:13 2027 GMT Subject: CN=c7d16c42-8800-4a85-9ff6-d3100207b391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:62:46:09:e7:d2:b2:63:c3:75:2c:64:73:f2: e3:bc:de:e4:20:46:97:96:9f:de:a0:a2:3d:80:df: 6e:a7:7d:bc:64:af:f4:a0:ce:1b:f8:f5:2d:f2:56: a2:df:d6:ba:3d:d9:cb:57:68:ae:8a:32:3b:b1:1c: 47:64:54:74:56:19:3e:45:90:fc:48:79:a5:bc:3d: 8b:2e:0e:03:7a:0e:14:9e:e6:ad:c9:22:6e:71:29: 64:f1:4b:74:ba:bd:14:cb:ad:d1:c9:02:47:b5:16: c7:0c:9c:d4:0e:1e:2c:51:15:8e:94:7c:88:4c:a6: 14:15:c8:0b:d4:19:4c:76:f4:2e:52:ca:51:c2:bc: 01:a0:57:71:0f:b2:1e:1f:82:44:eb:02:17:b8:d0: 4f:8c:ae:61:c4:72:2c:8e:d8:ce:05:c5:c2:01:10: 44:dc:48:8c:fc:d6:07:5f:34:c1:0a:24:87:e7:f4: 47:f5:34:50:e4:0c:a5:50:91:b2:e6:a3:1a:a7:82: 1a:bb:5e:c8:e3:3f:27:28:cd:5d:a4:d7:19:22:a8: c0:ba:77:77:1c:8f:dd:91:8a:a3:a3:b9:bf:5d:f3: 9f:1c:85:e1:b0:24:3e:4c:5f:fe:d0:b3:c8:0c:fd: 94:cf:76:10:5a:5b:d8:66:5e:5b:95:b2:02:af:11: 02:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:87:52:8C:B1:03:C0:FD:11:24:A7:BA:F1:B7:EC:C0:64:BD:9F:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/606b7f9a-8f76-30f2-9853-afcb97489ddc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:18:2e:3d:69:1f:e6:eb:d0:fb:02:0d:e6:71:84:83:68:ea: 6b:30:f2:2d:a3:2d:2d:b8:b3:42:cb:88:0b:ba:e4:52:c2:06: 07:7b:64:70:6a:92:ae:2a:12:1d:ae:dc:0e:0e:c4:0a:0e:9b: 08:58:f5:2b:a6:32:7e:0f:ce:c0:bc:cb:eb:4d:0e:4b:1a:ab: 66:b4:15:66:7b:69:f7:f5:28:d7:9f:9e:41:ca:84:7c:01:9d: 28:e5:25:94:18:cc:b0:e9:99:b9:23:97:2c:73:9b:e1:42:91: 3b:7e:86:55:97:4a:cd:94:59:34:d7:0c:4f:44:2e:a6:76:06: 9b:7c:ae:15:86:7d:13:61:63:da:dc:c3:5a:0f:83:5d:4d:ea: df:9a:ac:ab:d2:3c:6d:2a:10:5b:57:91:d1:4a:17:eb:ce:c9: 2d:60:09:3e:a8:f0:94:48:be:f0:d2:f4:f6:90:63:2d:9c:32: 54:a0:72:a5:6b:14:63:27:d8:7c:11:68:40:22:2a:95:7d:e4: 55:f0:5c:d4:3b:18:3d:7d:6f:a2:f1:3d:b8:a5:52:ba:33:46: aa:39:18:69:ca:73:a2:ff:5f:c8:0b:2f:06:d9:1d:7d:73:3a: 5a:a2:15:00:2f:ec:de:50:a5:f2:af:96:d8:16:ea:b2:6a:ab: 8d:72:15:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/EZoBEISBTimnRFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI2MTEwODAyMDAxM1oXDTI3MDIwNjAyMDAxM1owLzEtMCsGA1UEAxMk YzdkMTZjNDItODgwMC00YTg1LTlmZjYtZDMxMDAyMDdiMzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWJGCefSsmPDdSxkc/LjvN7kIEaXlp/eoKI9 gN9up328ZK/0oM4b+PUt8lai39a6PdnLV2iuijI7sRxHZFR0Vhk+RZD8SHmlvD2L Lg4Deg4UnuatySJucSlk8Ut0ur0Uy63RyQJHtRbHDJzUDh4sURWOlHyITKYUFcgL 1BlMdvQuUspRwrwBoFdxD7IeH4JE6wIXuNBPjK5hxHIsjtjOBcXCARBE3EiM/NYH XzTBCiSH5/RH9TRQ5AylUJGy5qMap4Iau17I4z8nKM1dpNcZIqjAund3HI/dkYqj o7m/XfOfHIXhsCQ+TF/+0LPIDP2Uz3YQWlvYZl5blbICrxECFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGHUoyxA8D9ESSnuvG37MBkvZ8wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvNjA2YjdmOWEtOGY3Ni0z MGYyLTk4NTMtYWZjYjk3NDg5ZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgROwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIYLj1pH+br0PsCDeZxhINo6msw8i2jLS24s0LLiAu65FLCBgd7ZHBq kq4qEh2u3A4OxAoOmwhY9SumMn4PzsC8y+tNDksaq2a0FWZ7aff1KNefnkHKhHwB nSjlJZQYzLDpmbkjlyxzm+FCkTt+hlWXSs2UWTTXDE9ELqZ2Bpt8rhWGfRNhY9rc w1oPg11N6t+arKvSPG0qEFtXkdFKF+vOyS1gCT6o8JRIvvDS9PaQYy2cMlSgcqVr FGMn2HwRaEAiKpV95FXwXNQ7GD19b6LxPbilUrozRqo5GGnKc6L/X8gLLwbZHX1z OlqiFQAv7N5QpfKvltgW6rJqq41yFWQ= -----END CERTIFICATE-----Generated at Sun Nov 15 20:53:33 2026 by rpki-client