$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/4c7f49f5-4f40-31b8-9881-c82da8bec79e.roa File: 4c7f49f5-4f40-31b8-9881-c82da8bec79e.roa (raw, json) Hash identifier: X5RtMXsM6wLMNfTuIAf5q/r2EYbIohdoueIHk3lZOiA= Subject key identifier: E0:80:9F:6B:65:0F:E6:21:B7:AC:56:30:CD:9C:D0:55:9E:1D:D4:7C Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F4328584D0A77A04317D7D29C26F50980 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/4c7f49f5-4f40-31b8-9881-c82da8bec79e.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 54393 IP address blocks: 129.19.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a0:43:17:d7:d2:9c:26:f5:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=35a66877-1f8e-4213-ae3b-2f304fadee0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:72:35:ca:fc:3e:24:91:06:e2:b0:6f:b4:d2: 94:df:38:5c:af:3a:89:77:85:93:41:92:9c:26:2d: 1a:d4:cd:6a:77:09:77:9a:b2:34:24:f4:02:be:e2: 01:bf:51:98:30:78:4c:32:19:de:0b:35:05:c6:98: f7:57:87:f6:07:4f:55:6e:2c:98:49:6a:36:41:92: b4:58:32:76:6f:7b:88:e3:f7:09:87:2f:29:aa:35: f0:21:1c:c9:55:e6:58:16:51:e6:7c:81:20:8a:7f: 5c:07:23:f7:ba:05:61:01:3f:96:46:9b:a9:e3:0c: 7e:9c:87:20:1a:92:70:bf:ee:58:77:c2:eb:ed:a3: 55:5f:d8:6e:5f:8d:ba:bb:a2:cc:3b:80:8c:eb:c4: 94:3e:51:95:60:37:e4:0b:ef:d6:76:fb:52:8f:2d: 86:3e:9b:ad:c9:4b:ad:c7:cc:ed:48:2b:2b:b5:52: 19:1d:7d:97:29:bc:80:db:95:16:15:d1:fe:ce:97: fb:6f:d6:e5:4f:5e:1e:0a:25:c1:8e:78:5a:ad:6e: 7e:ad:77:ce:36:b8:7f:42:ec:89:f3:85:43:a7:50: df:a4:b6:2e:a8:41:b9:60:07:0f:6c:90:29:c2:bc: 42:50:e1:1e:1a:5e:ee:e8:bc:f0:eb:33:aa:54:73: 3e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:80:9F:6B:65:0F:E6:21:B7:AC:56:30:CD:9C:D0:55:9E:1D:D4:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/4c7f49f5-4f40-31b8-9881-c82da8bec79e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:a7:fc:b0:34:9e:15:22:6e:33:40:a9:6a:f5:ea:2b:e4:4f: a8:c8:ae:71:0a:bb:c6:d2:61:b5:42:04:cc:7e:a3:68:85:c8: d7:a2:c8:62:2a:ab:89:59:b5:84:62:fb:9c:78:59:8e:8b:3f: 32:ce:23:b7:91:43:15:c5:8a:8b:26:76:5c:38:18:f2:e0:78: e8:e8:31:cd:a2:73:00:2a:ef:df:37:14:c3:de:a3:90:0e:83: b8:e0:25:12:68:11:45:ae:98:c4:9c:21:c7:ac:49:12:d1:3d: 42:e9:ab:b4:d2:2a:35:bb:6b:90:62:d7:07:95:39:f9:8d:04: 8c:0b:a6:68:26:68:27:e4:17:9d:91:5f:9b:00:8c:91:11:25: af:42:81:13:38:a3:cf:b5:bb:6e:f2:9b:e9:2a:d5:3a:47:5a: 89:79:6a:ec:b3:c0:74:10:be:c0:78:8d:e8:b8:bb:16:03:43: 68:37:ac:fd:3b:db:79:26:e1:29:8f:05:36:74:3c:56:5d:fc: f8:76:59:52:99:0b:9f:9e:a0:22:33:d2:bf:bf:c2:ad:3d:1f: e9:46:c1:28:8a:ca:67:37:13:ed:97:ae:28:e3:36:c0:6e:41: 04:2b:f0:0f:28:72:7f:3e:eb:28:15:5c:ef:6c:2f:69:82:76: ac:9d:9e:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6BDF9fSnCb1CYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk MzVhNjY4NzctMWY4ZS00MjEzLWFlM2ItMmYzMDRmYWRlZTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3I1yvw+JJEG4rBvtNKU3zhcrzqJd4WTQZKc Ji0a1M1qdwl3mrI0JPQCvuIBv1GYMHhMMhneCzUFxpj3V4f2B09VbiyYSWo2QZK0 WDJ2b3uI4/cJhy8pqjXwIRzJVeZYFlHmfIEgin9cByP3ugVhAT+WRpup4wx+nIcg GpJwv+5Yd8Lr7aNVX9huX426u6LMO4CM68SUPlGVYDfkC+/WdvtSjy2GPputyUut x8ztSCsrtVIZHX2XKbyA25UWFdH+zpf7b9blT14eCiXBjnharW5+rXfONrh/QuyJ 84VDp1DfpLYuqEG5YAcPbJApwrxCUOEeGl7u6Lzw6zOqVHM+NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCAn2tlD+Yht6xWMM2c0FWeHdR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvNGM3ZjQ5ZjUtNGY0MC0z MWI4LTk4ODEtYzgyZGE4YmVjNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgROAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2n/LA0nhUibjNAqWr16ivkT6jIrnEKu8bSYbVCBMx+o2iFyNeiyGIq q4lZtYRi+5x4WY6LPzLOI7eRQxXFiosmdlw4GPLgeOjoMc2icwAq7983FMPeo5AO g7jgJRJoEUWumMScIcesSRLRPULpq7TSKjW7a5Bi1weVOfmNBIwLpmgmaCfkF52R X5sAjJERJa9CgRM4o8+1u27ym+kq1TpHWol5auyzwHQQvsB4jei4uxYDQ2g3rP07 23km4SmPBTZ0PFZd/Ph2WVKZC5+eoCIz0r+/wq09H+lGwSiKymc3E+2XrijjNsBu QQQr8A8ocn8+6ygVXO9sL2mCdqydnow= -----END CERTIFICATE-----Generated at Wed Mar 4 05:00:35 2026 by rpki-client