$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa File: d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa (raw, json) Hash identifier: yu6DqTiajxNiN1d4I1K+eJH695eQay7ARrrrHBGtUYI= Subject key identifier: 16:BD:2C:57:1D:7F:A2:80:B9:45:A6:DC:EC:55:02:F5:5B:A0:D7:7E Certificate issuer: /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Certificate serial: 010D0C9F4328584F1467AA02B0C0AAD4A2ED7B68 Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 15267 IP address blocks: 138.129.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:aa:02:b0:c0:aa:d4:a2:ed:7b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=ac756876-471a-4358-8cdc-71ceb9455537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ee:30:7c:8c:81:f9:4f:be:57:0f:82:7e:8d: 74:94:76:80:18:79:f2:34:20:5e:27:e4:9c:0d:8d: 97:b7:03:5b:17:24:9e:10:63:19:bc:70:ae:d2:39: 08:c6:bd:12:62:59:1d:e5:1d:d0:eb:b9:16:1b:75: 3b:16:b9:d1:59:05:a1:47:63:43:d0:6c:4d:23:c7: a2:4b:80:37:5a:d9:ae:c9:e7:d5:07:ab:b4:cf:9c: 53:ef:6a:34:f0:fc:cc:2c:81:a3:a2:34:3c:4f:91: 91:3d:5e:d3:88:65:5f:54:bd:96:a5:77:1f:b7:c0: 2a:d8:77:58:ec:81:de:a3:b6:fa:b5:29:55:93:f1: 74:9e:ff:1e:ba:1d:dd:85:a1:16:6c:30:77:97:25: c7:1d:69:d4:00:e4:95:50:4d:25:93:00:bf:df:7b: 9b:b9:eb:4e:76:c0:f3:3c:f9:62:c0:27:24:6f:f3: 03:04:a3:b8:e8:c3:cd:54:66:55:6d:85:90:df:f8: cb:3d:73:08:c2:02:9b:1c:f6:37:be:c3:93:cf:79: f3:b2:0f:8f:fd:5d:33:6f:55:87:9b:21:57:a8:01: dd:fa:de:69:d3:95:3c:4b:d8:f4:e1:47:b0:9e:ca: 50:83:2c:fa:10:8c:64:24:d6:10:1a:7d:35:d0:f4: 8a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BD:2C:57:1D:7F:A2:80:B9:45:A6:DC:EC:55:02:F5:5B:A0:D7:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl X509v3 Authority Key Identifier: keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer sbgp-ipAddrBlock: critical IPv4: 138.129.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:42:13:b1:dc:a9:04:13:86:a4:cb:77:e4:e5:f0:7e:79:a1: 26:05:0e:5e:ce:f9:94:3b:ae:55:2f:5e:b7:c3:de:a9:f5:11: 53:61:22:3b:fb:55:94:ba:ae:37:5c:b7:97:44:f3:49:2c:48: c6:5e:ed:34:75:c5:b7:33:47:9c:ca:fc:0a:55:8c:8a:7b:04: eb:13:8f:51:00:2b:70:97:82:53:47:58:a8:5f:7d:50:24:f1: 10:cf:29:67:11:a2:90:a1:cc:29:c7:15:ac:b6:cc:92:2c:bf: 80:60:03:35:a6:55:0a:ae:19:3d:cf:c5:9e:76:0c:5f:9d:c1: 7b:60:72:51:c9:a4:03:42:fc:31:57:ee:26:30:04:df:7a:65: 5b:fa:29:f9:25:cb:d6:84:a9:ec:7f:5c:48:17:a0:b3:ea:f0: 35:52:23:8c:5b:bd:83:c9:8b:78:9a:32:50:26:64:ff:78:88: 4d:54:48:a8:95:b0:8e:14:97:33:5b:f9:23:ad:96:83:6c:64: ff:f8:31:65:43:d3:b1:79:ce:65:b6:ed:dc:8d:40:77:1a:e6: 8b:6b:58:54:f6:2e:15:5b:8c:83:cb:21:ad:db:da:05:68:ff: 4f:b4:b9:32:09:b5:09:ca:a5:94:cf:b9:aa:26:75:13:c3:b3: ec:ca:1f:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6oCsMCq1KLte2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyYWVlZjgtYjM1Yi00Y2E2LWI3YTMtOTNiZTFhMTgx MzM4MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YWM3NTY4NzYtNDcxYS00MzU4LThjZGMtNzFjZWI5NDU1NTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO4wfIyB+U++Vw+Cfo10lHaAGHnyNCBeJ+Sc DY2XtwNbFySeEGMZvHCu0jkIxr0SYlkd5R3Q67kWG3U7FrnRWQWhR2ND0GxNI8ei S4A3WtmuyefVB6u0z5xT72o08PzMLIGjojQ8T5GRPV7TiGVfVL2WpXcft8Aq2HdY 7IHeo7b6tSlVk/F0nv8euh3dhaEWbDB3lyXHHWnUAOSVUE0lkwC/33ubuetOdsDz PPliwCckb/MDBKO46MPNVGZVbYWQ3/jLPXMIwgKbHPY3vsOTz3nzsg+P/V0zb1WH myFXqAHd+t5p05U8S9j04UewnspQgyz6EIxkJNYQGn010PSKWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBa9LFcdf6KAuUWm3OxVAvVboNd+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjJh ZWVmOC1iMzViLTRjYTYtYjdhMy05M2JlMWExODEzMzgvZDFjMjk4MGEtMWRhZC0z ZmUwLThhNDgtMzg3MjljZDViYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTYyYWVlZjgtYjM1Yi00Y2E2LWI3 YTMtOTNiZTFhMTgxMzM4L2E2MmFlZWY4LWIzNWItNGNhNi1iN2EzLTkzYmUxYTE4 MTMzOC5jcmwwHwYDVR0jBBgwFoAUJc5b1tIqbFP5lyX2l2HW+cay6IcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjJhZWVmOC1iMzViLTRjYTYtYjdhMy05M2Jl MWExODEzMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDioEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFCE7HcqQQThqTLd+Tl8H55oSYFDl7O+ZQ7rlUvXrfD3qn1EVNhIjv7 VZS6rjdct5dE80ksSMZe7TR1xbczR5zK/ApVjIp7BOsTj1EAK3CXglNHWKhffVAk 8RDPKWcRopChzCnHFay2zJIsv4BgAzWmVQquGT3PxZ52DF+dwXtgclHJpANC/DFX 7iYwBN96ZVv6Kfkly9aEqex/XEgXoLPq8DVSI4xbvYPJi3iaMlAmZP94iE1USKiV sI4UlzNb+SOtloNsZP/4MWVD07F5zmW27dyNQHca5otrWFT2LhVbjIPLIa3b2gVo /0+0uTIJtQnKpZTPuaomdRPDs+zKHz0= -----END CERTIFICATE-----Generated at Sun Sep 27 14:25:13 2026 by rpki-client