$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a942301d-5541-36c8-9342-911968d44a92.roa File: a942301d-5541-36c8-9342-911968d44a92.roa (raw, json) Hash identifier: bewWmJDPP8AuYdgziEP37fmWYpr2fePyaJX5sbQD9gg= Subject key identifier: 76:96:17:A4:AC:1C:2E:01:EF:29:E7:18:58:EB:85:EC:7B:EA:A0:13 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584F4976C5159AA5670B42883600 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a942301d-5541-36c8-9342-911968d44a92.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22742 IP address blocks: 129.133.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:c5:15:9a:a5:67:0b:42:88:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=23e749b4-b241-49cd-bd45-8c75bd0ec604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:bd:9d:7b:05:bf:74:58:41:8d:1a:19:2c: 8a:68:22:fc:f8:d9:2b:6c:26:bb:ff:0b:6d:d2:81: 78:a7:c3:9a:eb:4b:d3:70:b8:59:65:24:9b:6f:5f: 93:4d:a4:b2:74:ad:57:73:d2:b4:e0:f8:23:dd:67: 44:72:3d:70:ab:42:c7:a3:c9:7a:7d:c2:91:21:87: ba:96:93:bc:8d:ce:bf:d7:35:5e:49:75:bd:bb:fc: 19:cb:d6:c5:1b:40:be:eb:39:e9:eb:fe:88:e3:09: 93:b3:e2:54:db:24:66:8a:87:8b:46:ef:ea:cd:96: 4f:3d:a5:72:0e:62:28:f1:f6:84:c9:fd:f5:02:7e: ff:3c:e9:f6:e4:04:fa:a7:1d:30:38:23:7d:73:a6: 8d:d9:4a:a9:7e:55:f3:02:6c:ff:b5:07:d2:27:88: 76:c4:88:5e:61:3b:1f:28:8a:00:62:1d:61:1e:cb: 8d:5a:82:51:a7:f9:9f:71:72:cc:1f:9d:88:2b:8f: 41:2d:42:0a:99:b8:ef:5e:27:0d:35:24:28:14:56: bb:49:04:2c:2a:fa:f2:1c:6d:3d:de:03:8e:ed:2a: cf:7d:42:a0:16:66:0a:aa:cf:d0:d3:14:6e:49:b1: 5a:ed:02:e4:b2:8d:ff:e5:09:a6:3b:3f:3d:6b:49: d3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:96:17:A4:AC:1C:2E:01:EF:29:E7:18:58:EB:85:EC:7B:EA:A0:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a942301d-5541-36c8-9342-911968d44a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 129.133.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:36:8b:fe:08:10:12:3b:70:81:cc:d7:1d:e6:c8:15:d0:44: 59:88:b2:09:89:fc:57:38:8a:13:7b:08:fd:cf:55:28:52:16: fc:5e:80:17:a2:a7:0d:b1:ae:74:c5:4b:83:c8:1f:c0:00:ee: 53:1b:38:c8:54:38:0d:37:6a:b5:05:cc:3a:f0:59:54:30:3f: 9e:ba:a1:13:3d:7c:8e:6c:44:df:7b:35:69:09:0d:ee:ce:77: bd:c5:f9:b7:9a:a2:ca:ac:73:55:6f:10:9b:e1:75:21:3d:47: 05:92:5f:3f:0b:ff:e2:c1:92:d6:aa:64:19:dc:be:ed:9a:1b: 0b:d6:90:b2:67:30:8e:24:c9:fd:36:e7:aa:77:68:66:a5:4d: 04:b3:70:77:a3:9e:7c:90:5a:de:0f:6c:cb:4d:47:31:51:6a: d6:ba:e0:57:fd:5f:76:99:65:80:15:6e:a7:8a:d6:f3:20:3c: a0:93:77:06:35:c5:ea:c9:26:c2:23:0a:f7:6d:60:c6:a5:10: ca:cb:ac:0b:57:68:c9:ae:c2:40:92:72:a7:7d:32:bd:6e:a9: bd:ba:f0:6b:13:b7:44:6a:72:08:a0:62:14:88:6a:70:ea:c0: fd:2f:50:7a:2a:24:39:16:59:a5:e5:25:b7:c7:20:e5:c9:4c: d8:63:74:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdsUVmqVnC0KINgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjNlNzQ5YjQtYjI0MS00OWNkLWJkNDUtOGM3NWJkMGVjNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8e9nXsFv3RYQY0aGSyKaCL8+NkrbCa7/wtt 0oF4p8Oa60vTcLhZZSSbb1+TTaSydK1Xc9K04Pgj3WdEcj1wq0LHo8l6fcKRIYe6 lpO8jc6/1zVeSXW9u/wZy9bFG0C+6znp6/6I4wmTs+JU2yRmioeLRu/qzZZPPaVy DmIo8faEyf31An7/POn25AT6px0wOCN9c6aN2UqpflXzAmz/tQfSJ4h2xIheYTsf KIoAYh1hHsuNWoJRp/mfcXLMH52IK49BLUIKmbjvXicNNSQoFFa7SQQsKvryHG09 3gOO7SrPfUKgFmYKqs/Q0xRuSbFa7QLkso3/5QmmOz89a0nThwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaWF6SsHC4B7ynnGFjrhex76qATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvYTk0MjMwMWQtNTU0MS0z NmM4LTkzNDItOTExOTY4ZDQ0YTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgYXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFA2i/4IEBI7cIHM1x3myBXQRFmIsgmJ/Fc4ihN7CP3PVShSFvxegBei pw2xrnTFS4PIH8AA7lMbOMhUOA03arUFzDrwWVQwP566oRM9fI5sRN97NWkJDe7O d73F+beaosqsc1VvEJvhdSE9RwWSXz8L/+LBktaqZBncvu2aGwvWkLJnMI4kyf02 56p3aGalTQSzcHejnnyQWt4PbMtNRzFRata64Ff9X3aZZYAVbqeK1vMgPKCTdwY1 xerJJsIjCvdtYMalEMrLrAtXaMmuwkCScqd9Mr1uqb268GsTt0RqcgigYhSIanDq wP0vUHoqJDkWWaXlJbfHIOXJTNhjdBA= -----END CERTIFICATE-----Generated at Sat Sep 26 18:51:05 2026 by rpki-client