$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/5426ec14-8366-35af-a3e1-dcd830fa0108.roa File: 5426ec14-8366-35af-a3e1-dcd830fa0108.roa (raw, json) Hash identifier: 7j1lSRt6lCVTUlMVeeJweMGWOOd6q3WqE2+TNNagiL4= Subject key identifier: A1:EC:F0:A2:33:53:65:90:F9:7C:52:88:7B:55:AC:71:1E:C0:17:47 Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F4328584F49758F623542B052A24F6540 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/5426ec14-8366-35af-a3e1-dcd830fa0108.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12145 IP address blocks: 129.19.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:8f:62:35:42:b0:52:a2:4f:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=afdfe850-da83-4ab8-9c9f-800b5670a03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:53:3c:b4:bd:01:a8:5e:2f:e3:d9:95:a7:15: ec:e7:b5:c3:ec:f0:4c:6f:80:8b:f4:81:e4:4e:ca: a6:96:8d:23:e9:b4:a0:10:be:92:a1:08:4a:3c:a9: 6b:c1:75:4c:53:e9:79:da:67:db:83:5c:5c:e1:c9: 1f:3e:4c:3b:ff:25:ec:f1:64:c1:b0:c3:c2:de:31: 1c:05:be:5f:31:d7:62:ea:63:55:dc:8e:ba:cc:18: 1d:fd:06:75:e1:4e:23:d0:79:92:7d:00:69:66:5f: c0:2c:b0:54:20:79:b7:14:6d:98:72:7a:e8:86:a9: 05:62:ad:3c:60:51:3c:0d:a8:02:17:3b:81:93:6e: 9c:fd:ad:57:46:a2:90:20:b9:45:c9:d7:e8:ac:fb: 00:c5:18:7d:ca:99:8e:6f:61:3c:df:cc:c9:fe:e8: 53:0a:58:02:4a:a2:12:f6:bf:0e:47:31:7a:a1:f9: b5:de:ae:5b:2e:21:06:dd:a7:70:a5:35:0f:98:2a: 9b:11:08:a8:e1:f4:48:d7:f8:cc:d4:34:2a:1b:58: a0:5b:48:11:15:c5:88:91:11:e3:f8:fd:bf:34:56: ee:1e:c8:2f:35:28:09:8d:49:1d:13:cb:c7:62:9f: eb:6e:4f:cd:a9:04:a1:7a:8c:9e:65:7b:c0:2e:d1: ac:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EC:F0:A2:33:53:65:90:F9:7C:52:88:7B:55:AC:71:1E:C0:17:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/5426ec14-8366-35af-a3e1-dcd830fa0108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:58:c6:ed:bc:70:fa:53:f6:65:2c:7f:89:9e:21:63:38:d4: db:8f:85:ff:cc:39:f9:9a:96:55:ef:bb:11:52:1f:da:b9:ea: a2:c7:45:75:27:29:84:e5:4c:e1:4d:8e:68:43:4f:5a:64:a4: 86:e9:cc:cb:76:90:49:a5:1f:bb:8b:db:cd:0f:fd:fc:91:49: 3e:dd:39:50:a5:7a:ba:c3:49:02:1e:82:17:87:b6:c9:32:7c: ae:cc:a9:5a:c7:4e:ec:42:4b:07:c9:eb:a0:39:77:ae:9a:8a: ac:ec:20:99:84:cc:22:5a:ab:08:29:89:8f:f6:75:2b:44:25: 7e:55:29:ad:9b:d1:dd:66:38:9a:5f:ab:de:6c:03:89:64:a7: 15:83:b1:8c:ad:50:57:32:4a:b6:4a:8b:85:3f:0d:3c:d8:02: 9a:7f:df:39:6e:1f:94:91:a0:38:bc:94:7f:d6:de:1b:87:c5: 40:04:11:bd:ca:22:e8:86:3e:84:91:d3:d0:e9:a1:98:40:52: 37:7f:10:23:fd:47:1b:60:6a:e3:99:6b:c9:72:66:ac:ce:75: 97:4f:27:82:f9:85:3d:83:f0:b8:8f:ed:b7:bf:1a:36:10:67: 10:72:e1:4f:0d:e6:82:8e:22:c2:f7:bc:a5:ee:60:e1:b6:73: 74:f8:ff:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdY9iNUKwUqJPZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWZkZmU4NTAtZGE4My00YWI4LTljOWYtODAwYjU2NzBhMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1M8tL0BqF4v49mVpxXs57XD7PBMb4CL9IHk Tsqmlo0j6bSgEL6SoQhKPKlrwXVMU+l52mfbg1xc4ckfPkw7/yXs8WTBsMPC3jEc Bb5fMddi6mNV3I66zBgd/QZ14U4j0HmSfQBpZl/ALLBUIHm3FG2YcnrohqkFYq08 YFE8DagCFzuBk26c/a1XRqKQILlFydforPsAxRh9ypmOb2E838zJ/uhTClgCSqIS 9r8ORzF6ofm13q5bLiEG3adwpTUPmCqbEQio4fRI1/jM1DQqG1igW0gRFcWIkRHj +P2/NFbuHsgvNSgJjUkdE8vHYp/rbk/NqQSheoyeZXvALtGs8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHs8KIzU2WQ+XxSiHtVrHEewBdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvNTQyNmVjMTQtODM2Ni0z NWFmLWEzZTEtZGNkODMwZmEwMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgRMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVYxu28cPpT9mUsf4meIWM41NuPhf/MOfmallXvuxFSH9q56qLHRXUn KYTlTOFNjmhDT1pkpIbpzMt2kEmlH7uL280P/fyRST7dOVClerrDSQIegheHtsky fK7MqVrHTuxCSwfJ66A5d66aiqzsIJmEzCJaqwgpiY/2dStEJX5VKa2b0d1mOJpf q95sA4lkpxWDsYytUFcySrZKi4U/DTzYApp/3zluH5SRoDi8lH/W3huHxUAEEb3K IuiGPoSR09DpoZhAUjd/ECP9RxtgauOZa8lyZqzOdZdPJ4L5hT2D8LiP7be/GjYQ ZxBy4U8N5oKOIsL3vKXuYOG2c3T4/9c= -----END CERTIFICATE-----Generated at Wed Sep 30 22:41:37 2026 by rpki-client