$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a8471413-3bde-38c1-8ef5-3cf69cd9ea1b.roa File: a8471413-3bde-38c1-8ef5-3cf69cd9ea1b.roa (raw, json) Hash identifier: xOIhdnRkAaFy8bwuSIQck4lLw/PppXqbVNTqaG89DWg= Subject key identifier: CF:3C:09:5A:32:D8:EF:28:69:0B:A9:A8:D5:34:89:C2:F0:B6:A9:2D Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F4328584E7FFA3A42500D6E23419D6F80 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a8471413-3bde-38c1-8ef5-3cf69cd9ea1b.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 14041 IP address blocks: 129.19.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:3a:42:50:0d:6e:23:41:9d:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=4c091777-ffb4-48fd-81ab-d0fd7391166d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f7:61:ec:a9:a1:29:86:3c:d9:87:60:2c:44: 4e:ac:de:06:d3:9c:b1:be:48:51:65:78:52:70:16: 9e:a7:db:d5:51:82:28:3e:3e:d6:0a:7d:01:e9:34: 08:3a:7d:75:b0:98:02:7b:48:44:9d:1f:7e:89:03: 08:e4:32:4a:5f:8e:4a:29:c8:78:3f:cd:91:42:c5: 87:9a:bf:f1:69:ed:22:27:df:0d:8a:46:d2:94:74: 00:35:ec:f9:25:4b:a2:9e:37:93:2a:9b:0d:f6:40: 11:a3:a4:39:e3:2f:ce:8f:9c:de:7a:bd:61:d2:29: 6d:49:25:18:b1:b6:35:c0:5a:72:b4:71:75:8e:09: 5e:dd:66:de:85:eb:8d:bd:88:d4:5f:cf:af:2f:32: e2:f0:9e:1c:7f:01:6e:27:c8:26:11:d2:fc:6d:8c: b4:e8:0e:73:9a:cd:d5:9b:ae:5b:a3:c3:7a:91:1b: b2:37:ab:1b:69:06:6e:13:44:fc:f2:a1:a3:22:c6: 83:cd:1a:34:f2:d2:c9:f8:45:98:16:be:d4:5d:66: d7:c5:4c:28:bf:31:12:75:65:f0:74:0d:a2:cc:18: 23:72:6c:83:e7:63:72:c3:a9:3b:26:ff:77:d0:6a: 9c:48:00:87:af:8d:6a:fb:f4:35:b6:f2:57:e9:8f: be:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3C:09:5A:32:D8:EF:28:69:0B:A9:A8:D5:34:89:C2:F0:B6:A9:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a8471413-3bde-38c1-8ef5-3cf69cd9ea1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5b:31:47:6b:dd:f9:1d:f6:00:29:1c:f2:8e:d2:44:f7:ed: c1:cc:00:b8:fa:c1:11:98:0e:9a:a4:ca:dd:5f:13:d6:bd:bd: e0:f5:a9:c9:e7:08:fb:88:9a:ff:e0:fd:0e:24:da:01:00:78: 4b:dd:6c:da:69:aa:5a:dd:3c:be:b5:98:a2:f0:38:b3:dc:cc: c5:e4:af:d7:72:fa:c2:06:c7:58:d1:3e:e7:62:df:8c:f8:ea: a4:97:21:c7:8c:7c:07:55:d0:38:87:b4:db:c3:39:7e:55:9b: 78:ea:08:11:74:e7:11:65:c3:29:4b:37:e8:ae:b0:e7:5e:af: 53:5c:cd:41:3a:e4:6c:a0:92:08:cf:87:d9:5d:29:0d:f8:fb: 33:4c:5f:5e:c5:51:ab:c2:cc:86:dc:ce:d8:f8:d2:6b:2b:f9: 8e:34:ba:8f:d2:a9:67:7a:0e:d8:78:51:c1:53:a5:cd:48:74: 94:92:7a:b9:94:86:31:99:4f:8c:bf:26:d0:1f:ba:8e:b2:59: d3:2d:5b:df:d7:ec:ca:e3:46:b6:17:24:25:9e:11:e9:0a:62: f3:c8:83:ad:c3:1d:56:4e:f8:ca:46:fd:e3:22:7c:47:c0:05: 8c:d5:81:6e:1e:34:56:8c:0e:23:c5:ee:b9:4b:c0:2e:ad:dd: d9:8d:89:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+jpCUA1uI0Gdb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk NGMwOTE3NzctZmZiNC00OGZkLTgxYWItZDBmZDczOTExNjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfdh7KmhKYY82YdgLEROrN4G05yxvkhRZXhS cBaep9vVUYIoPj7WCn0B6TQIOn11sJgCe0hEnR9+iQMI5DJKX45KKch4P82RQsWH mr/xae0iJ98NikbSlHQANez5JUuinjeTKpsN9kARo6Q54y/Oj5zeer1h0iltSSUY sbY1wFpytHF1jgle3WbeheuNvYjUX8+vLzLi8J4cfwFuJ8gmEdL8bYy06A5zms3V m65bo8N6kRuyN6sbaQZuE0T88qGjIsaDzRo08tLJ+EWYFr7UXWbXxUwovzESdWXw dA2izBgjcmyD52Nyw6k7Jv930GqcSACHr41q+/Q1tvJX6Y++nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM88CVoy2O8oaQupqNU0icLwtqktMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvYTg0NzE0MTMtM2JkZS0z OGMxLThlZjUtM2NmNjljZDllYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgROUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFbMUdr3fkd9gApHPKO0kT37cHMALj6wRGYDpqkyt1fE9a9veD1qcnn CPuImv/g/Q4k2gEAeEvdbNppqlrdPL61mKLwOLPczMXkr9dy+sIGx1jRPudi34z4 6qSXIceMfAdV0DiHtNvDOX5Vm3jqCBF05xFlwylLN+iusOder1NczUE65GygkgjP h9ldKQ34+zNMX17FUavCzIbcztj40msr+Y40uo/SqWd6Dth4UcFTpc1IdJSSermU hjGZT4y/JtAfuo6yWdMtW9/X7MrjRrYXJCWeEekKYvPIg63DHVZO+MpG/eMifEfA BYzVgW4eNFaMDiPF7rlLwC6t3dmNiU0= -----END CERTIFICATE-----Generated at Fri Jul 24 16:56:20 2026 by rpki-client