$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/7da0bbf2-854f-312a-a5ff-6ab760be9635.roa File: 7da0bbf2-854f-312a-a5ff-6ab760be9635.roa (raw, json) Hash identifier: 9MFpF3d3lLvfi3PDZgUj8tZyT1t5JFm2Y/1HfKxX5EI= Subject key identifier: F2:F9:37:99:C9:E5:4F:CC:06:37:E8:8C:22:58:06:54:82:B2:8D:BD Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584F4973EED8C8E36A920ED03800 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/7da0bbf2-854f-312a-a5ff-6ab760be9635.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 25649 IP address blocks: 129.220.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ee:d8:c8:e3:6a:92:0e:d0:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1dd54aa6-155a-4437-a7f8-85b2ed323779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ac:5b:b7:57:d1:85:61:38:39:f6:29:c0:89: a9:dd:2f:26:7b:2e:d9:63:05:9d:c2:5d:25:6e:d6: ce:82:b5:c8:bc:77:67:23:eb:fe:e5:92:04:b5:42: 8f:88:f4:ab:42:4d:2b:a9:c4:10:af:c3:0d:6e:57: 61:54:a4:75:1a:23:b8:05:fc:19:ce:85:bb:6f:76: a1:a3:c2:4d:02:3d:b4:4d:14:f5:d0:f2:42:37:5e: c6:19:16:a2:b6:2c:77:57:a5:c5:91:56:5d:23:1f: 92:b0:6c:5f:2b:c6:b6:6f:22:44:95:4b:08:89:92: 71:2c:58:f5:96:18:30:2b:5a:94:b2:d0:63:77:62: 97:da:90:75:9a:65:94:93:20:70:17:22:f0:3e:36: 85:f6:db:9b:86:0d:70:a1:51:71:2f:aa:10:e3:88: 84:1d:4a:ac:5f:2a:b3:26:65:24:12:31:6a:e2:02: 5d:09:ed:26:18:ce:e7:9a:8b:55:a1:87:d7:ad:fa: 6c:8c:7b:39:9b:3d:ce:2d:1b:df:c6:05:24:bd:21: 5e:fe:5d:f7:d2:7d:a2:ed:b6:66:fb:d5:21:f9:f5: bb:07:53:26:0e:bd:13:61:5b:70:ef:39:89:96:c1: e5:3a:3f:2d:7a:52:5e:26:cf:9e:1d:1a:ea:17:6a: da:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F9:37:99:C9:E5:4F:CC:06:37:E8:8C:22:58:06:54:82:B2:8D:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/7da0bbf2-854f-312a-a5ff-6ab760be9635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 129.220.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:98:14:13:d3:1c:fd:00:25:16:62:19:55:71:9c:e1:8e:77: 1e:f1:a7:13:d6:d5:6d:0f:3c:9f:ad:29:22:37:91:3d:8c:98: b4:b1:ce:cc:9c:92:16:52:00:41:98:23:77:86:61:a8:f3:81: 9a:73:f6:50:74:ec:f9:6a:14:88:32:29:87:bc:33:0e:bd:14: 67:64:f0:c4:c2:75:0a:7d:e5:dc:59:dc:49:b1:31:22:61:6c: 75:2c:69:20:cf:bc:86:0f:87:df:4a:6e:83:b6:a4:82:6b:b5: fe:df:81:54:1a:69:ba:6e:2e:b9:09:64:17:b5:e9:b6:5f:69: a6:fd:2a:18:a9:a6:d7:2a:ce:eb:69:12:2c:17:d9:57:b8:f2: 10:7a:90:f5:c6:e6:02:7c:c9:99:fe:0c:82:63:5f:b0:fa:b9: 0e:c8:8d:ad:03:c7:9a:ec:79:6f:a2:57:f0:5c:5c:2a:a8:08: 24:1b:f0:4b:3a:12:8e:89:cb:99:3d:75:52:a2:69:2c:ea:ed: 51:e4:65:5c:23:38:b2:ff:83:24:e0:ff:75:0b:67:42:e9:ee: f7:e1:2a:99:5c:a9:6e:69:36:fa:6a:3f:6f:c2:0c:75:8d:b2: 1d:ca:8e:bd:37:ab:71:a1:96:07:ef:f8:27:45:cb:55:c8:a3: 43:fe:73:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc+7YyONqkg7QOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWRkNTRhYTYtMTU1YS00NDM3LWE3ZjgtODViMmVkMzIzNzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaxbt1fRhWE4OfYpwImp3S8mey7ZYwWdwl0l btbOgrXIvHdnI+v+5ZIEtUKPiPSrQk0rqcQQr8MNbldhVKR1GiO4BfwZzoW7b3ah o8JNAj20TRT10PJCN17GGRaitix3V6XFkVZdIx+SsGxfK8a2byJElUsIiZJxLFj1 lhgwK1qUstBjd2KX2pB1mmWUkyBwFyLwPjaF9tubhg1woVFxL6oQ44iEHUqsXyqz JmUkEjFq4gJdCe0mGM7nmotVoYfXrfpsjHs5mz3OLRvfxgUkvSFe/l330n2i7bZm +9Uh+fW7B1MmDr0TYVtw7zmJlsHlOj8telJeJs+eHRrqF2ra7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPL5N5nJ5U/MBjfojCJYBlSCso29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvN2RhMGJiZjItODU0Zi0z MTJhLWE1ZmYtNmFiNzYwYmU5NjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgdzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGYFBPTHP0AJRZiGVVxnOGOdx7xpxPW1W0PPJ+tKSI3kT2MmLSxzsyc khZSAEGYI3eGYajzgZpz9lB07PlqFIgyKYe8Mw69FGdk8MTCdQp95dxZ3EmxMSJh bHUsaSDPvIYPh99KboO2pIJrtf7fgVQaabpuLrkJZBe16bZfaab9Khipptcqzutp EiwX2Ve48hB6kPXG5gJ8yZn+DIJjX7D6uQ7Ija0Dx5rseW+iV/BcXCqoCCQb8Es6 Eo6Jy5k9dVKiaSzq7VHkZVwjOLL/gyTg/3ULZ0Lp7vfhKplcqW5pNvpqP2/CDHWN sh3Kjr03q3Ghlgfv+CdFy1XIo0P+c2U= -----END CERTIFICATE-----Generated at Fri Sep 25 14:19:21 2026 by rpki-client