$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/2cec21d5-9ed2-3fe3-b1ec-62f811941a7e.roa File: 2cec21d5-9ed2-3fe3-b1ec-62f811941a7e.roa (raw, json) Hash identifier: zF9B/DFdIOb7+sHcxCo6Z3oAY7/MLI+jNC6ASmfCxEo= Subject key identifier: 7A:44:35:44:48:F0:B0:BC:AA:55:3D:A4:4A:2A:19:93:96:A9:0A:09 Certificate issuer: /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774 Certificate serial: 010D0C9F4328584F3FAD3C22BF288DCBC7C35280 Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/2cec21d5-9ed2-3fe3-b1ec-62f811941a7e.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 11808 IP address blocks: 129.101.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:3c:22:bf:28:8d:cb:c7:c3:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=63e6158d-af30-4016-b2ca-c426a95a78ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c2:fb:29:79:1d:33:00:c9:0a:f2:a8:b4:14: cf:0d:e8:60:78:36:6c:75:a3:1d:a5:41:d9:f9:c6: c0:e0:a5:3a:0c:e5:a9:fe:d9:fb:41:d2:23:61:2d: 75:06:b1:55:f3:fc:96:8a:32:ec:62:27:24:dc:d7: e8:40:82:bd:2e:fd:08:1f:fe:ef:7c:2c:43:3e:6e: 50:4c:03:ab:14:9e:86:d1:35:9a:16:a4:52:7c:26: 35:a0:4e:48:06:14:06:03:a9:88:4f:04:16:86:a0: f3:d9:dc:75:b0:b3:87:5f:d4:c3:34:a9:d7:47:c5: 5c:d3:ff:55:e6:12:99:bd:b0:77:95:ef:6e:9d:42: da:b1:b6:b9:2f:68:1e:7a:dc:d8:e3:0b:75:50:f0: a9:75:a3:96:f8:98:fd:63:80:84:3a:05:b8:4a:b0: 33:97:61:a0:5f:70:4d:30:71:58:35:b9:fe:eb:15: 4b:68:32:9f:15:06:70:72:5d:66:2a:de:17:83:7b: 90:fd:e9:92:ed:38:0c:75:40:ab:a5:ba:e1:62:46: 1b:7e:27:2e:8b:b4:71:ea:3d:9b:a8:05:45:8d:48: 5b:1e:da:d1:35:4e:0a:8e:4e:82:26:bb:11:0a:35: 72:2d:04:d2:41:5b:dd:9f:79:31:72:d3:ab:34:b6: 43:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:44:35:44:48:F0:B0:BC:AA:55:3D:A4:4A:2A:19:93:96:A9:0A:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/2cec21d5-9ed2-3fe3-b1ec-62f811941a7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl X509v3 Authority Key Identifier: keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer sbgp-ipAddrBlock: critical IPv4: 129.101.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:27:ff:92:aa:72:21:aa:40:05:24:49:8d:20:14:7a:be:d6: 56:be:1f:70:82:2f:d5:b9:d6:21:93:d2:50:81:20:56:10:b2: 53:fe:3b:3b:b5:f7:27:e6:4b:90:09:5e:73:0f:b4:70:e6:d0: 58:a8:20:7c:21:0b:9a:6c:e5:b4:36:77:2c:32:7f:24:42:d8: 0b:e1:4c:c8:4b:19:95:20:e0:3a:4b:d5:55:b1:08:a4:41:84: 53:86:0e:28:65:d6:05:7b:ff:61:da:4f:3a:e1:f0:d0:b0:83: ea:40:99:8d:ff:17:5c:73:c7:88:31:26:d9:bd:df:e0:e3:66: 79:aa:d3:b3:02:b6:c7:07:0f:bd:82:c1:54:68:00:f3:1e:af: 2b:84:df:9e:c1:68:60:81:ba:f1:d9:e3:0c:b0:b8:f4:f9:6d: a2:72:68:a5:01:0c:90:02:87:bf:25:04:0c:46:ab:d8:24:13: 85:5c:bd:64:8c:ea:6a:c3:d5:a9:b2:c7:54:c9:17:8f:51:a9: 91:fa:45:75:1f:ad:a8:e7:d6:dd:b9:b4:92:43:60:0d:fe:f5: a3:6f:3a:d2:bc:11:05:af:06:e5:59:e1:1a:7c:d5:ea:b1:6e: ec:42:4e:cc:bf:63:f0:60:0c:57:b0:ea:7d:01:c8:20:49:05: 1b:71:cf:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTwivyiNy8fDUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYxYTI0YmMtNzE4Yy00NTAwLWFkMGItYTI5ZjhiODVk Nzc0MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NjNlNjE1OGQtYWYzMC00MDE2LWIyY2EtYzQyNmE5NWE3OGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78L7KXkdMwDJCvKotBTPDehgeDZsdaMdpUHZ +cbA4KU6DOWp/tn7QdIjYS11BrFV8/yWijLsYick3NfoQIK9Lv0IH/7vfCxDPm5Q TAOrFJ6G0TWaFqRSfCY1oE5IBhQGA6mITwQWhqDz2dx1sLOHX9TDNKnXR8Vc0/9V 5hKZvbB3le9unULasba5L2geetzY4wt1UPCpdaOW+Jj9Y4CEOgW4SrAzl2GgX3BN MHFYNbn+6xVLaDKfFQZwcl1mKt4Xg3uQ/emS7TgMdUCrpbrhYkYbficui7Rx6j2b qAVFjUhbHtrRNU4Kjk6CJrsRCjVyLQTSQVvdn3kxctOrNLZDowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpENURI8LC8qlU9pEoqGZOWqQoJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFh MjRiYy03MThjLTQ1MDAtYWQwYi1hMjlmOGI4NWQ3NzQvMmNlYzIxZDUtOWVkMi0z ZmUzLWIxZWMtNjJmODExOTQxYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWYxYTI0YmMtNzE4Yy00NTAwLWFk MGItYTI5ZjhiODVkNzc0LzVmMWEyNGJjLTcxOGMtNDUwMC1hZDBiLWEyOWY4Yjg1 ZDc3NC5jcmwwHwYDVR0jBBgwFoAUe7FILm1418tqUdx1x+7Pwyk6s74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFhMjRiYy03MThjLTQ1MDAtYWQwYi1hMjlm OGI4NWQ3NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgWX2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkn/5KqciGqQAUkSY0gFHq+1la+H3CCL9W51iGT0lCBIFYQslP+Ozu1 9yfmS5AJXnMPtHDm0FioIHwhC5ps5bQ2dywyfyRC2AvhTMhLGZUg4DpL1VWxCKRB hFOGDihl1gV7/2HaTzrh8NCwg+pAmY3/F1xzx4gxJtm93+DjZnmq07MCtscHD72C wVRoAPMeryuE357BaGCBuvHZ4wywuPT5baJyaKUBDJACh78lBAxGq9gkE4VcvWSM 6mrD1amyx1TJF49RqZH6RXUfrajn1t25tJJDYA3+9aNvOtK8EQWvBuVZ4Rp81eqx buxCTsy/Y/BgDFew6n0ByCBJBRtxz18= -----END CERTIFICATE-----Generated at Sun Oct 11 22:52:36 2026 by rpki-client