$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/65dfbaef-e275-3e05-8610-ed2886a1d9e6.roa File: 65dfbaef-e275-3e05-8610-ed2886a1d9e6.roa (raw, json) Hash identifier: fbKijGqS/eq9EBLBWNx96bbP3F2I0wF1Yx/fGV0lZys= Subject key identifier: 37:D4:84:C1:E0:F0:5D:DF:CE:49:65:22:86:51:AC:D9:D2:09:2C:2C Certificate issuer: /CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021 Certificate serial: 010D0C9F4328584E921FAD65540D831683221080 Authority key identifier: B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/65dfbaef-e275-3e05-8610-ed2886a1d9e6.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 2496 IP address blocks: 129.237.54.208/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:ad:65:54:0d:83:16:83:22:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021 Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=a50f66d4-ae37-4f8b-b4a3-9a7fc1f2204a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4e:54:84:94:b8:dd:5d:44:fc:9c:da:f0:a0: 34:b6:d9:8e:38:4f:6e:4f:86:87:cd:ce:67:8d:6f: 2a:97:4b:51:9d:50:55:16:58:09:f8:da:25:cb:2f: 5d:04:7c:68:02:2c:be:df:09:00:c5:1d:53:b2:65: 93:be:29:4a:0e:6e:bc:d8:12:60:d9:07:a1:29:24: e1:ff:ba:19:4f:8e:25:ca:10:cb:d3:61:01:e1:65: 7e:3c:04:eb:99:92:40:77:6f:bc:5e:61:dd:aa:5f: 76:71:c5:dc:d7:8b:54:1d:07:83:92:cc:cf:cb:cc: 1c:e1:6b:a5:df:18:ec:aa:5a:f2:e7:3e:2c:20:03: 3a:1a:fa:b9:f7:58:eb:ae:51:f7:02:46:ce:d6:86: ca:23:45:86:f2:f3:50:80:17:34:ed:2f:b2:c1:25: 4a:8d:85:2c:c7:7a:c2:30:7b:47:64:ba:47:30:2e: 1b:dd:69:de:57:71:7e:71:dc:7d:b9:f5:a1:99:8c: b3:25:1e:16:14:95:e9:e9:b2:f4:9e:52:31:9c:47: a5:52:c6:dd:1c:80:f0:ec:a2:6a:35:0c:d7:3c:48: ef:75:c4:8c:3b:a8:98:a3:c1:b4:3b:78:c6:ae:cc: 68:f5:be:2b:19:19:b4:84:ac:32:ed:0f:9d:6d:b7: 2c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D4:84:C1:E0:F0:5D:DF:CE:49:65:22:86:51:AC:D9:D2:09:2C:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/65dfbaef-e275-3e05-8610-ed2886a1d9e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl X509v3 Authority Key Identifier: keyid:B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer sbgp-ipAddrBlock: critical IPv4: 129.237.54.208/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:15:25:1e:a8:9e:1d:52:aa:1d:49:07:c3:a4:8c:50:23:8d: c8:c0:33:19:89:33:66:7b:8d:80:14:0f:85:a3:1c:01:89:ef: fd:fd:f8:92:74:53:cc:cc:d2:28:f0:4f:44:6d:93:7f:24:e1: 2b:cb:54:5a:5b:0f:14:9e:34:c9:dd:d9:4a:10:2d:45:aa:44: 11:10:c2:60:3e:47:5a:91:f9:1e:fe:60:f1:70:74:e6:59:cd: 71:6d:e0:f2:84:11:ad:77:d4:dd:66:cc:3c:0b:30:62:89:d2: 2d:47:c7:a0:d6:f7:ee:6a:cb:e7:7f:0a:a2:66:0b:97:6e:7e: 6a:f6:a3:d0:2f:6b:cf:e4:a9:57:1b:5c:24:4b:25:47:c3:87: a7:c6:12:ca:e2:a0:90:cf:34:56:fa:b5:c1:ad:cd:8f:af:bd: 50:fc:4c:ce:6a:3f:c5:46:0d:53:b7:bd:49:95:cc:56:f5:63: fc:87:50:1d:4e:ef:ea:cd:13:9f:81:e3:eb:35:bb:e0:54:c7: 1d:9c:de:ae:d6:a9:01:63:8e:80:57:30:a8:f5:cc:ce:05:ac: fe:6c:78:65:01:af:06:0d:99:07:0f:c7:34:4e:01:6e:f5:c8: c2:fd:01:2a:9d:10:65:e2:1e:45:eb:be:50:c0:bd:22:fe:3f: 64:42:bc:27 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6SH61lVA2DFoMiEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThiZTNjNWUtNjk3OC00OWJmLThmNjYtMDVhYTZiMWMy MDIxMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk YTUwZjY2ZDQtYWUzNy00ZjhiLWI0YTMtOWE3ZmMxZjIyMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E5UhJS43V1E/Jza8KA0ttmOOE9uT4aHzc5n jW8ql0tRnVBVFlgJ+Nolyy9dBHxoAiy+3wkAxR1TsmWTvilKDm682BJg2QehKSTh /7oZT44lyhDL02EB4WV+PATrmZJAd2+8XmHdql92ccXc14tUHQeDkszPy8wc4Wul 3xjsqlry5z4sIAM6Gvq591jrrlH3AkbO1obKI0WG8vNQgBc07S+ywSVKjYUsx3rC MHtHZLpHMC4b3WneV3F+cdx9ufWhmYyzJR4WFJXp6bL0nlIxnEelUsbdHIDw7KJq NQzXPEjvdcSMO6iYo8G0O3jGrsxo9b4rGRm0hKwy7Q+dbbcsFQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDfUhMHg8F3fzkllIoZRrNnSCSwsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOGJl M2M1ZS02OTc4LTQ5YmYtOGY2Ni0wNWFhNmIxYzIwMjEvNjVkZmJhZWYtZTI3NS0z ZTA1LTg2MTAtZWQyODg2YTFkOWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYThiZTNjNWUtNjk3OC00OWJmLThm NjYtMDVhYTZiMWMyMDIxL2E4YmUzYzVlLTY5NzgtNDliZi04ZjY2LTA1YWE2YjFj MjAyMS5jcmwwHwYDVR0jBBgwFoAUtLV6vDnImsdK8ZqNipMaX1x2UUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hOGJlM2M1ZS02OTc4LTQ5YmYtOGY2Ni0wNWFh NmIxYzIwMjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDge020DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAbFSUeqJ4dUqodSQfDpIxQI43IwDMZiTNme42AFA+FoxwBie/9/fiS dFPMzNIo8E9EbZN/JOEry1RaWw8UnjTJ3dlKEC1FqkQREMJgPkdakfke/mDxcHTm Wc1xbeDyhBGtd9TdZsw8CzBiidItR8eg1vfuasvnfwqiZguXbn5q9qPQL2vP5KlX G1wkSyVHw4enxhLK4qCQzzRW+rXBrc2Pr71Q/EzOaj/FRg1Tt71JlcxW9WP8h1Ad Tu/qzROfgePrNbvgVMcdnN6u1qkBY46AVzCo9czOBaz+bHhlAa8GDZkHD8c0TgFu 9cjC/QEqnRBl4h5F675QwL0i/j9kQrwn -----END CERTIFICATE-----Generated at Fri Jul 24 10:05:17 2026 by rpki-client