$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa File: f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa (raw, json) Hash identifier: vfnFwMh1HIUUdlxP3DXJXEKeQwH1238iCnH77WbHFgU= Subject key identifier: 6A:D3:D9:8A:27:E8:A8:A2:84:AA:DF:D8:6D:FE:80:E1:51:BA:7D:B8 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584E5A49F2152CB692AC47857808 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 22742 IP address blocks: 129.133.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:f2:15:2c:b6:92:ac:47:85:78:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=f6add093-0c6c-4128-85cf-0cfb65eab9b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:80:a4:4e:6c:40:1a:5f:68:40:a8:d4:48: e4:6c:0c:56:02:2e:52:8b:89:eb:dc:20:72:f6:bd: 1f:b7:fb:c7:48:a1:cb:f6:95:50:28:38:67:c7:96: f2:13:c8:29:80:de:af:bf:33:15:8f:22:59:16:ab: 1c:62:81:fb:aa:4c:9d:d1:eb:75:03:8d:d9:0c:d6: 0f:60:5f:7c:ab:f6:c7:cd:0c:5a:4c:97:11:cd:f6: 16:50:5c:f0:1f:a2:ef:d8:11:fd:07:75:0a:2b:84: f3:dc:f6:e4:c1:d2:c0:68:52:f3:86:66:30:dd:9b: 85:01:f4:70:76:25:ec:92:7d:51:59:aa:f0:98:45: 0b:5b:56:3a:98:f7:f7:22:6d:a3:e2:5a:53:20:ef: c1:b2:df:95:ba:7f:2a:c1:ee:21:7b:a8:05:19:3a: fa:34:ec:81:bb:89:4a:c4:b5:96:4a:46:f5:7e:c2: e5:ff:ac:c0:a1:2b:40:f8:68:61:0b:40:cc:6e:48: 6f:c4:17:36:4c:88:03:b3:45:60:02:f1:cb:ac:a6: fd:a0:46:0e:97:78:bf:71:17:51:c6:65:70:8b:5d: a8:e1:72:62:fc:14:6a:29:12:56:c6:f4:1d:53:a4: a6:bb:fe:a1:9f:11:68:e9:20:8d:65:b0:2c:21:b1: fd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D3:D9:8A:27:E8:A8:A2:84:AA:DF:D8:6D:FE:80:E1:51:BA:7D:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 129.133.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:f2:d7:55:8c:df:48:7b:01:05:dc:6c:10:bb:88:27:94:60: 4e:b1:de:3d:34:b3:31:48:8d:b1:bf:22:d8:89:a6:d9:86:5d: 1e:74:13:78:8e:74:0a:d9:be:3d:80:7b:22:ac:44:48:dd:f7: 59:d5:89:1e:a9:15:21:d5:7f:1e:d4:19:6c:a4:b9:51:dc:8b: e0:8d:a3:5b:57:8b:42:74:33:1b:94:e7:ee:70:32:1f:51:ae: 45:ee:5f:d9:da:64:c9:f6:d2:c4:a5:61:81:97:9f:bc:2c:44: a0:f5:41:a4:5e:0e:e1:7e:87:67:e2:0c:da:bf:9e:6f:48:a0: d4:f8:84:c5:d4:cb:ab:b4:e8:54:38:95:ea:b5:d6:f1:43:c6: 19:40:96:00:0d:79:b2:7d:1b:3f:8d:2e:54:44:b4:e3:0d:5e: b1:a6:4c:57:cf:e4:e3:84:91:4a:63:ad:06:ab:26:b1:29:ce: a6:30:8e:d3:73:ae:1c:29:8e:4f:88:f0:28:7a:ac:7d:a2:82: e0:0d:7d:6b:11:c5:a6:64:4a:fd:f3:ae:a4:e0:73:30:15:c1: 36:09:da:3d:ae:59:59:4e:76:e6:92:f8:31:04:52:74:c9:80: e7:16:f7:6a:b4:99:a2:23:ea:39:65:ad:a2:50:f0:14:8e:51: c9:c4:26:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSfIVLLaSrEeFeAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk ZjZhZGQwOTMtMGM2Yy00MTI4LTg1Y2YtMGNmYjY1ZWFiOWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJmApE5sQBpfaECo1EjkbAxWAi5Si4nr3CBy 9r0ft/vHSKHL9pVQKDhnx5byE8gpgN6vvzMVjyJZFqscYoH7qkyd0et1A43ZDNYP YF98q/bHzQxaTJcRzfYWUFzwH6Lv2BH9B3UKK4Tz3PbkwdLAaFLzhmYw3ZuFAfRw diXskn1RWarwmEULW1Y6mPf3Im2j4lpTIO/Bst+Vun8qwe4he6gFGTr6NOyBu4lK xLWWSkb1fsLl/6zAoStA+GhhC0DMbkhvxBc2TIgDs0VgAvHLrKb9oEYOl3i/cRdR xmVwi12o4XJi/BRqKRJWxvQdU6Smu/6hnxFo6SCNZbAsIbH9cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrT2Yon6KiihKrf2G3+gOFRun24MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvZjAwOWFhYTctZDVjNy0z ZDBmLWE0NjktNTk0MjFmMjdjOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgYXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXy11WM30h7AQXcbBC7iCeUYE6x3j00szFIjbG/ItiJptmGXR50E3iO dArZvj2AeyKsREjd91nViR6pFSHVfx7UGWykuVHci+CNo1tXi0J0MxuU5+5wMh9R rkXuX9naZMn20sSlYYGXn7wsRKD1QaReDuF+h2fiDNq/nm9IoNT4hMXUy6u06FQ4 leq11vFDxhlAlgANebJ9Gz+NLlREtOMNXrGmTFfP5OOEkUpjrQarJrEpzqYwjtNz rhwpjk+I8Ch6rH2iguANfWsRxaZkSv3zrqTgczAVwTYJ2j2uWVlOduaS+DEEUnTJ gOcW92q0maIj6jllraJQ8BSOUcnEJgc= -----END CERTIFICATE-----Generated at Fri Jul 24 05:53:57 2026 by rpki-client