$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e/fa5b3234-3b8c-33f0-988b-ce636104ec3e.roa File: fa5b3234-3b8c-33f0-988b-ce636104ec3e.roa (raw, json) Hash identifier: 4KpjlpSD+A0vO1me05FRetH6r7NK2ps8YwC0ShZsZ+U= Subject key identifier: E6:C1:86:FB:D4:38:05:F4:2F:17:C6:CE:0B:D0:B5:AC:44:54:50:1F Certificate issuer: /CN=9b297cc7-4f76-4bfe-bf80-19a353b6648e Certificate serial: 010D0C9F4328584ED2CC7EC0240A28271D087840 Authority key identifier: A3:FC:89:A7:9E:55:75:B0:61:39:44:9D:AE:B1:52:0F:C9:F7:53:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e/fa5b3234-3b8c-33f0-988b-ce636104ec3e.roa Signing time: Thu 13 Aug 2026 13:00:12 +0000 ROA not before: Thu 13 Aug 2026 13:00:12 +0000 ROA not after: Wed 11 Nov 2026 14:00:12 +0000 asID: 13335 IP address blocks: 129.192.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e/9b297cc7-4f76-4bfe-bf80-19a353b6648e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e/9b297cc7-4f76-4bfe-bf80-19a353b6648e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d2:cc:7e:c0:24:0a:28:27:1d:08:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b297cc7-4f76-4bfe-bf80-19a353b6648e Validity Not Before: Aug 13 13:00:12 2026 GMT Not After : Nov 11 14:00:12 2026 GMT Subject: CN=25d4dfba-ffca-43e3-bbd6-be52c2b0e741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:52:92:90:cf:26:ca:6c:ba:88:2b:1d:41:39: 93:31:5e:c9:ac:b4:40:ce:28:ab:70:7a:35:9b:f3: 0b:65:b0:95:07:eb:fe:ef:ea:09:74:d7:3d:d6:e7: de:58:3b:4e:b6:51:b9:7b:c5:6c:d1:4d:ad:78:9f: 7a:40:46:0a:01:1d:a6:32:38:4a:11:a5:19:86:36: 5a:de:8f:7c:0b:bb:e2:b8:a9:a6:ad:71:1f:f1:aa: f0:18:f6:5c:b7:55:d9:81:4b:a8:b6:7e:14:a6:c2: 1b:2e:6b:36:33:a0:56:3b:0a:c3:c7:3b:58:32:db: 2f:85:12:9f:05:ee:d4:e5:b0:c9:fe:4b:46:31:12: fa:e2:51:67:b2:58:5b:2a:17:de:bb:67:5f:71:77: 42:88:f3:47:5f:57:60:17:2a:dc:d7:a9:29:57:3e: 51:f8:84:10:ca:16:89:2b:0e:4c:d5:fd:92:53:c5: 2e:c4:cc:db:1e:b4:ee:3b:c2:2e:be:54:21:7c:42: f7:59:60:9d:9c:c5:78:1a:a0:26:c1:0d:f8:14:c0: b2:6b:28:1b:d3:80:f3:c4:b8:03:c7:c3:db:88:52: b7:dc:a0:ae:5a:c3:fe:c2:b0:bb:a3:5b:ae:ea:b3: 11:f0:23:c2:4e:e1:e6:8a:a3:a8:9f:34:de:e9:6c: 41:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C1:86:FB:D4:38:05:F4:2F:17:C6:CE:0B:D0:B5:AC:44:54:50:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e/fa5b3234-3b8c-33f0-988b-ce636104ec3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e/9b297cc7-4f76-4bfe-bf80-19a353b6648e.crl X509v3 Authority Key Identifier: keyid:A3:FC:89:A7:9E:55:75:B0:61:39:44:9D:AE:B1:52:0F:C9:F7:53:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e.cer sbgp-ipAddrBlock: critical IPv4: 129.192.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a6:e8:a5:86:01:0a:23:36:13:7e:54:40:c2:8b:c9:83:ba: 48:31:6d:e6:cc:78:f4:5e:dc:c6:ea:cb:e3:3e:fb:df:c9:64: e3:ba:a0:b7:5a:6d:02:ab:3c:ed:32:02:2e:b9:01:55:7c:3f: 6b:95:2c:bf:7a:e4:f2:32:c1:91:92:5b:be:b8:e6:62:b1:62: be:64:7a:f1:d5:f4:b2:cc:30:b6:52:03:d9:3d:18:c7:c1:15: 0f:5e:52:65:e5:44:7e:e0:4d:5c:b5:d9:75:d6:68:77:4b:60: 56:bf:79:04:fc:fe:3c:bd:01:44:85:5c:e0:5f:df:4a:bc:2e: f7:bf:0f:1f:2a:2a:91:7f:99:8d:1c:43:7f:22:d1:c6:b7:d2: cf:5f:d9:11:25:f6:53:99:90:e3:1b:fe:b0:7d:a7:5b:44:ce: ea:f4:ee:4b:0d:d3:87:4b:32:35:6d:ae:ea:a5:72:25:07:29: 64:b1:62:d4:c0:0d:01:9e:3f:78:a0:39:c1:0f:78:e7:bc:45: 01:82:87:36:24:78:13:68:13:5b:59:d7:5a:02:54:ff:83:2a: 18:5d:dc:2b:15:60:5f:f2:ff:9e:2e:47:4f:91:2a:1c:b8:3e: 30:e5:93:40:bc:d7:a9:2b:60:ab:a5:80:fc:90:27:71:f7:26: a5:cd:0d:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7SzH7AJAooJx0IeEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIyOTdjYzctNGY3Ni00YmZlLWJmODAtMTlhMzUzYjY2 NDhlMB4XDTI2MDgxMzEzMDAxMloXDTI2MTExMTE0MDAxMlowLzEtMCsGA1UEAxMk MjVkNGRmYmEtZmZjYS00M2UzLWJiZDYtYmU1MmMyYjBlNzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlKSkM8mymy6iCsdQTmTMV7JrLRAziircHo1 m/MLZbCVB+v+7+oJdNc91ufeWDtOtlG5e8Vs0U2teJ96QEYKAR2mMjhKEaUZhjZa 3o98C7viuKmmrXEf8arwGPZct1XZgUuotn4UpsIbLms2M6BWOwrDxztYMtsvhRKf Be7U5bDJ/ktGMRL64lFnslhbKhfeu2dfcXdCiPNHX1dgFyrc16kpVz5R+IQQyhaJ Kw5M1f2SU8UuxMzbHrTuO8IuvlQhfEL3WWCdnMV4GqAmwQ34FMCyaygb04DzxLgD x8PbiFK33KCuWsP+wrC7o1uu6rMR8CPCTuHmiqOonzTe6WxBRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObBhvvUOAX0LxfGzgvQtaxEVFAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85YjI5 N2NjNy00Zjc2LTRiZmUtYmY4MC0xOWEzNTNiNjY0OGUvZmE1YjMyMzQtM2I4Yy0z M2YwLTk4OGItY2U2MzYxMDRlYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOWIyOTdjYzctNGY3Ni00YmZlLWJm ODAtMTlhMzUzYjY2NDhlLzliMjk3Y2M3LTRmNzYtNGJmZS1iZjgwLTE5YTM1M2I2 NjQ4ZS5jcmwwHwYDVR0jBBgwFoAUo/yJp55VdbBhOUSdrrFSD8n3UykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85YjI5N2NjNy00Zjc2LTRiZmUtYmY4MC0xOWEz NTNiNjY0OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgcACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOm6KWGAQojNhN+VEDCi8mDukgxbebMePRe3Mbqy+M++9/JZOO6oLda bQKrPO0yAi65AVV8P2uVLL965PIywZGSW7645mKxYr5kevHV9LLMMLZSA9k9GMfB FQ9eUmXlRH7gTVy12XXWaHdLYFa/eQT8/jy9AUSFXOBf30q8Lve/Dx8qKpF/mY0c Q38i0ca30s9f2REl9lOZkOMb/rB9p1tEzur07ksN04dLMjVtruqlciUHKWSxYtTA DQGeP3igOcEPeOe8RQGChzYkeBNoE1tZ11oCVP+DKhhd3CsVYF/y/54uR0+RKhy4 PjDlk0C816krYKulgPyQJ3H3JqXNDfU= -----END CERTIFICATE-----Generated at Tue Sep 1 03:05:05 2026 by rpki-client