$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/d33b3de2-72bb-34ff-899f-3b9227de0cb2.roa File: d33b3de2-72bb-34ff-899f-3b9227de0cb2.roa (raw, json) Hash identifier: B5AtoNoT1FEiBWldZxiFvPvgv8bxnDvG9KcUUrDC+G8= Subject key identifier: 10:D3:76:E4:FE:0A:98:33:6A:AD:A4:06:D0:C1:D8:D2:7C:8F:5D:9C Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584E8DEFB25E1B7594CCCB21C900 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/d33b3de2-72bb-34ff-899f-3b9227de0cb2.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 32934 IP address blocks: 129.134.24.0/23 maxlen: 23 129.134.26.0/23 maxlen: 23 129.134.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:b2:5e:1b:75:94:cc:cb:21:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=f9d7ca53-f52a-4441-bc31-2990966c1709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:84:45:d7:17:33:01:96:45:f8:94:d1:ce:c1: 88:8b:d3:2a:8f:1b:3d:2d:94:89:6d:9a:f1:c2:fa: e6:c7:01:1d:b9:dc:d9:8f:1e:0a:16:95:19:6b:c5: 1f:e2:ba:95:73:84:9d:67:f6:69:25:df:05:7f:42: f9:95:18:36:23:93:ea:af:e1:3f:44:80:ef:20:97: 77:b2:27:e3:60:29:38:36:af:8b:e0:e6:78:f0:26: 47:19:c8:41:10:05:da:40:17:11:e9:5a:da:4e:82: 03:10:50:3a:1d:26:92:2c:f1:a8:1e:d0:14:ae:05: 6d:e7:4b:10:ee:9c:f2:19:eb:37:bd:fb:db:18:0c: ef:3a:60:90:e4:7f:e6:0a:8b:6c:48:9f:4b:86:2c: b2:4f:e1:b0:1c:1d:2e:67:e5:e2:96:47:98:b3:e4: 3f:5b:3c:87:39:40:17:52:ee:35:49:66:26:f8:c2: ef:5b:55:be:f8:ba:de:74:df:a2:ae:cb:12:89:ab: ad:79:5f:7f:40:83:ae:4f:b6:c8:ea:1b:b9:cd:2a: 80:54:25:91:6e:77:e6:ce:a6:f8:36:5f:2c:ef:d7: 83:27:f9:81:a8:eb:69:30:dc:db:5e:38:55:d2:bd: a2:e8:50:c7:0b:8e:5c:1e:c3:63:29:f0:b3:90:5c: ab:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D3:76:E4:FE:0A:98:33:6A:AD:A4:06:D0:C1:D8:D2:7C:8F:5D:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/d33b3de2-72bb-34ff-899f-3b9227de0cb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 129.134.24.0-129.134.29.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c1:5d:b0:7e:64:2b:d1:6d:6d:60:d4:51:3c:24:79:82:08: 1c:81:0a:43:ec:81:70:a7:a4:8e:5c:1f:6a:04:1d:e3:5e:9b: 22:dc:ec:28:a2:73:35:54:dd:00:c8:fd:48:3c:10:92:91:6c: bf:32:56:7f:a7:d0:b4:21:d7:a3:1d:ba:5d:d2:60:6e:5b:e0: 34:13:1b:99:2f:43:5f:29:6d:c0:13:d5:61:17:06:d9:b3:37: 08:53:27:64:2e:5f:a8:21:e0:62:00:ce:ba:91:0c:9f:15:b1: b0:21:ee:67:ad:61:76:c1:20:83:b8:95:3c:02:ee:63:b0:7d: 81:ad:4b:07:95:7b:a7:3c:4d:db:6c:a6:d3:62:45:b1:ed:16: f7:f7:7c:56:ad:84:e2:79:fd:86:86:b3:5d:ea:53:ab:d9:7c: 04:2a:c2:1c:82:78:00:7b:76:73:e3:3d:3d:62:f4:ac:39:54: f8:fe:d8:60:0a:48:90:11:6c:71:f3:e1:45:34:6d:28:80:ee: 47:f7:61:e3:d5:a7:37:53:e8:3c:12:56:1b:71:c9:5e:4d:6c: 78:09:4a:2f:e1:9e:14:85:fd:d2:da:2c:51:5d:6e:05:9a:19: 2d:b9:46:20:bf:1e:09:4a:df:b6:27:88:d3:d9:a9:d8:04:6a: 9e:27:da:6d -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE6N77JeG3WUzMshyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk ZjlkN2NhNTMtZjUyYS00NDQxLWJjMzEtMjk5MDk2NmMxNzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIRF1xczAZZF+JTRzsGIi9Mqjxs9LZSJbZrx wvrmxwEdudzZjx4KFpUZa8Uf4rqVc4SdZ/ZpJd8Ff0L5lRg2I5Pqr+E/RIDvIJd3 sifjYCk4Nq+L4OZ48CZHGchBEAXaQBcR6VraToIDEFA6HSaSLPGoHtAUrgVt50sQ 7pzyGes3vfvbGAzvOmCQ5H/mCotsSJ9LhiyyT+GwHB0uZ+XilkeYs+Q/WzyHOUAX Uu41SWYm+MLvW1W++LredN+irssSiauteV9/QIOuT7bI6hu5zSqAVCWRbnfmzqb4 Nl8s79eDJ/mBqOtpMNzbXjhV0r2i6FDHC45cHsNjKfCzkFyrLQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFBDTduT+Cpgzaq2kBtDB2NJ8j12cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvZDMzYjNkZTItNzJiYi0z NGZmLTg5OWYtM2I5MjI3ZGUwY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAOBhhgD BAGBhhwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAZsFdsH5kK9FtbWDUUTwkeYIIHIEKQ+yBcKekjlwfagQd 416bItzsKKJzNVTdAMj9SDwQkpFsvzJWf6fQtCHXox26XdJgblvgNBMbmS9DXylt wBPVYRcG2bM3CFMnZC5fqCHgYgDOupEMnxWxsCHuZ61hdsEgg7iVPALuY7B9ga1L B5V7pzxN22ym02JFse0W9/d8Vq2E4nn9hoazXepTq9l8BCrCHIJ4AHt2c+M9PWL0 rDlU+P7YYApIkBFscfPhRTRtKIDuR/dh49WnN1PoPBJWG3HJXk1seAlKL+GeFIX9 0tosUV1uBZoZLblGIL8eCUrftieI09mp2ARqnifabQ== -----END CERTIFICATE-----Generated at Fri Jul 24 13:59:17 2026 by rpki-client