$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa File: f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa (raw, json) Hash identifier: qnEnquDi5KYeHMKrkqr/avx2EePjPjkVA8OcIBVInSE= Subject key identifier: 58:E4:E9:50:99:4A:85:C2:A5:66:E7:48:53:3B:18:90:47:D4:98:28 Certificate issuer: /CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021 Certificate serial: 010D0C9F4328584E921FACF038228A3CE3BBB500 Authority key identifier: B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 2496 IP address blocks: 129.237.2.92/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:ac:f0:38:22:8a:3c:e3:bb:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021 Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=7214adf2-b244-46f1-93b9-b077624c799c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:07:ab:38:bb:b4:3b:09:ff:91:b9:63:d3:0e: b0:14:79:59:11:65:ad:64:2d:81:a7:f7:5c:a9:13: 8a:96:aa:54:6b:64:54:09:68:b6:ec:d3:87:ac:f8: 9f:46:09:bc:0b:d9:55:a4:f3:79:5d:cc:b0:21:7a: 7a:d8:dd:fa:4a:f0:68:07:5e:62:a3:89:1b:b8:d1: 63:ae:23:3c:28:0b:bf:ac:33:90:47:08:26:b8:66: 90:ec:6d:e8:85:97:61:c2:e6:e3:79:2f:0b:f6:35: c8:ee:0f:48:00:56:4e:50:28:ec:ae:c4:bc:fc:e6: 74:a7:22:4f:ae:9a:7f:30:2e:3d:9d:c9:d7:59:ae: 93:6d:29:3d:49:4a:d5:cf:17:20:c8:bb:03:56:81: eb:3b:3b:59:56:88:41:79:5e:7c:97:17:0e:bf:fc: 03:ce:53:41:6a:ac:48:0b:54:b2:a2:d5:90:2e:23: 6f:0a:13:8b:25:c8:3a:6b:62:8b:05:cc:02:dd:8b: 27:86:a4:1a:7c:18:51:2c:94:83:fd:76:1b:2f:ea: 6a:2b:c8:78:94:3e:b3:f6:07:55:4d:62:b6:7e:bc: 40:6e:f3:d2:ad:c4:a6:0c:0b:b8:62:ff:0a:fe:c9: 4e:b9:fd:01:5c:18:a8:78:79:03:b8:71:40:68:b4: 94:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E4:E9:50:99:4A:85:C2:A5:66:E7:48:53:3B:18:90:47:D4:98:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/f10a4311-3f31-3e7a-867e-10a5a5199fa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl X509v3 Authority Key Identifier: keyid:B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer sbgp-ipAddrBlock: critical IPv4: 129.237.2.92/30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:71:17:c2:a0:22:27:a1:2e:62:8e:1a:4c:a3:7f:37:18:b7: 7b:a9:3f:5c:5d:0d:7a:62:f9:d7:07:a6:16:87:ed:b8:46:e8: 13:a6:87:3c:bb:c9:14:08:2b:af:1d:96:d8:b5:70:d8:d5:a9: 43:94:23:1b:8d:93:fd:13:52:ac:fb:62:60:f0:c0:e8:7e:c8: 7c:c1:84:4c:71:6e:1c:67:e2:91:fb:bb:ae:8c:e7:e1:25:d5: 30:48:b5:88:63:0a:fb:76:31:47:b9:7e:bd:ad:9f:3c:17:99: ca:20:b7:5d:12:19:16:d1:17:90:1d:ee:07:e5:db:ae:fe:29: 50:3e:ec:34:75:d4:4b:38:7b:52:65:7d:4a:7e:cf:43:24:56: d4:e4:83:02:8f:1f:6c:20:17:b5:b7:7d:9f:53:51:f6:e3:98: 4b:58:e3:c0:0d:92:b7:44:c9:b0:70:de:60:e2:36:2b:b3:aa: 28:1f:fa:6d:7f:44:cc:66:f6:09:a5:bc:89:2d:64:d9:c4:aa: b4:1d:fd:ab:60:f3:9c:5c:38:09:08:06:62:b5:55:eb:a9:a4: 8d:64:88:a1:ca:82:81:a5:53:90:1d:ce:95:8c:fa:94:c7:1b: 16:30:e3:72:fe:af:c8:73:6b:dd:4f:d3:ec:36:5f:59:ed:b3: 1c:c0:6e:14 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6SH6zwOCKKPOO7tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThiZTNjNWUtNjk3OC00OWJmLThmNjYtMDVhYTZiMWMy MDIxMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk NzIxNGFkZjItYjI0NC00NmYxLTkzYjktYjA3NzYyNGM3OTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAerOLu0Own/kblj0w6wFHlZEWWtZC2Bp/dc qROKlqpUa2RUCWi27NOHrPifRgm8C9lVpPN5XcywIXp62N36SvBoB15io4kbuNFj riM8KAu/rDOQRwgmuGaQ7G3ohZdhwubjeS8L9jXI7g9IAFZOUCjsrsS8/OZ0pyJP rpp/MC49ncnXWa6TbSk9SUrVzxcgyLsDVoHrOztZVohBeV58lxcOv/wDzlNBaqxI C1SyotWQLiNvChOLJcg6a2KLBcwC3YsnhqQafBhRLJSD/XYbL+pqK8h4lD6z9gdV TWK2frxAbvPSrcSmDAu4Yv8K/slOuf0BXBioeHkDuHFAaLSUkQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFjk6VCZSoXCpWbnSFM7GJBH1JgoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOGJl M2M1ZS02OTc4LTQ5YmYtOGY2Ni0wNWFhNmIxYzIwMjEvZjEwYTQzMTEtM2YzMS0z ZTdhLTg2N2UtMTBhNWE1MTk5ZmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYThiZTNjNWUtNjk3OC00OWJmLThm NjYtMDVhYTZiMWMyMDIxL2E4YmUzYzVlLTY5NzgtNDliZi04ZjY2LTA1YWE2YjFj MjAyMS5jcmwwHwYDVR0jBBgwFoAUtLV6vDnImsdK8ZqNipMaX1x2UUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hOGJlM2M1ZS02OTc4LTQ5YmYtOGY2Ni0wNWFh NmIxYzIwMjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUCge0CXDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBKcRfCoCInoS5ijhpMo383GLd7qT9cXQ16YvnXB6YWh+24RugTpoc8 u8kUCCuvHZbYtXDY1alDlCMbjZP9E1Ks+2Jg8MDofsh8wYRMcW4cZ+KR+7uujOfh JdUwSLWIYwr7djFHuX69rZ88F5nKILddEhkW0ReQHe4H5duu/ilQPuw0ddRLOHtS ZX1Kfs9DJFbU5IMCjx9sIBe1t32fU1H245hLWOPADZK3RMmwcN5g4jYrs6ooH/pt f0TMZvYJpbyJLWTZxKq0Hf2rYPOcXDgJCAZitVXrqaSNZIihyoKBpVOQHc6VjPqU xxsWMONy/q/Ic2vdT9PsNl9Z7bMcwG4U -----END CERTIFICATE-----Generated at Fri Jul 24 12:46:29 2026 by rpki-client