$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/98debb85-2197-3492-b7bb-b5bfcf794138.roa File: 98debb85-2197-3492-b7bb-b5bfcf794138.roa (raw, json) Hash identifier: xZR4AacWNl1oHTIo1itT3oKOEz+2m5URi1laoaxyWU4= Subject key identifier: 28:D5:76:AF:D8:69:D7:CA:C7:E0:DC:3B:04:BA:C9:F7:72:93:3C:91 Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F4328584F49732F45F7329E327189F7C0 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/98debb85-2197-3492-b7bb-b5bfcf794138.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 393657 IP address blocks: 129.19.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:2f:45:f7:32:9e:32:71:89:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5bd2dd57-e3ec-4378-83b0-fef09e29ce67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:c8:b0:7d:58:c1:d1:fc:eb:9e:84:8c:80: c2:f8:61:d5:b7:51:88:d9:e7:10:3a:ba:11:02:7c: 13:0c:ec:78:4d:3c:be:01:1e:04:57:b0:76:e9:30: 6f:96:8d:1c:36:3d:6a:37:e6:af:9f:75:5a:11:b5: b3:dc:5b:61:d9:fc:14:1a:46:0f:e0:c8:b1:5f:63: 4d:d6:e3:51:c0:71:b6:dc:23:f6:f1:18:3d:65:e7: ae:fb:a1:19:65:7f:6e:3d:cb:15:42:55:ee:11:bd: d6:92:5f:0c:6e:2e:ef:a4:58:ed:13:fa:1a:bf:4e: 47:c5:1e:66:da:c9:7f:90:11:67:81:e2:23:b8:c2: 8c:bc:55:63:92:02:d4:9f:33:b6:a7:c7:0e:f2:50: b4:89:b3:4f:0a:5d:43:3e:87:01:9d:66:d8:fc:65: 23:05:17:fa:ac:31:c2:82:49:9d:2c:7c:5f:5c:d8: f6:9f:1b:bc:9d:c5:67:fc:73:a6:9b:08:a0:e0:5a: b2:76:5a:09:49:81:3e:91:d7:69:30:e4:b0:46:7e: a3:90:c1:75:1d:0e:ca:2c:5c:3a:fa:03:b2:30:19: 22:fa:96:20:3d:cf:79:52:be:db:6f:77:65:74:08: 1c:67:89:c9:a9:ef:61:fa:d7:d4:7d:ad:f9:7b:25: 70:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D5:76:AF:D8:69:D7:CA:C7:E0:DC:3B:04:BA:C9:F7:72:93:3C:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/98debb85-2197-3492-b7bb-b5bfcf794138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:79:45:72:7c:9e:a3:b9:1c:78:5f:57:93:5b:24:ce:e2:7c: f8:83:c8:9f:58:bc:97:d1:d4:bf:de:f1:87:23:dc:2d:3e:25: ec:e0:6b:28:98:fd:e6:d2:2f:ff:bc:98:d3:a8:53:c9:45:8e: a4:58:e6:0f:8c:c7:54:90:9e:c3:4f:2e:3d:23:33:70:ed:9e: 84:c2:ca:a8:be:e7:51:48:12:dc:48:00:b2:8c:33:aa:9c:b6: 83:66:be:d8:ac:b7:bc:82:af:4f:b0:5e:8b:8e:b8:0b:8f:3e: e8:1d:f0:f7:76:26:7d:b1:ad:94:b1:84:98:4b:7b:ab:2a:66: 61:8e:c1:26:be:13:d5:05:21:b8:2d:5e:04:23:bb:6c:b3:ee: c3:d2:c1:94:44:6e:e2:d8:93:e9:93:52:46:58:25:4f:fd:68: 93:ea:0b:82:dc:3a:c6:02:5b:28:94:27:d8:65:48:c1:30:e6: cf:8a:f8:2b:7d:c9:17:c5:2e:60:86:c9:7f:b9:2e:d6:3f:82: 71:c7:73:e5:fd:e9:41:19:26:bf:d7:a0:69:7d:db:d0:a6:b4: aa:f2:24:4d:47:09:ed:01:75:ce:82:df:6c:a4:9a:45:0c:37: 05:e2:0f:db:63:aa:3f:e6:73:13:00:df:a8:5b:f7:3a:41:b0: 27:97:06:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcy9F9zKeMnGJ98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWJkMmRkNTctZTNlYy00Mzc4LTgzYjAtZmVmMDllMjljZTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvHIsH1YwdH8656EjIDC+GHVt1GI2ecQOroR AnwTDOx4TTy+AR4EV7B26TBvlo0cNj1qN+avn3VaEbWz3Fth2fwUGkYP4MixX2NN 1uNRwHG23CP28Rg9Zeeu+6EZZX9uPcsVQlXuEb3Wkl8Mbi7vpFjtE/oav05HxR5m 2sl/kBFngeIjuMKMvFVjkgLUnzO2p8cO8lC0ibNPCl1DPocBnWbY/GUjBRf6rDHC gkmdLHxfXNj2nxu8ncVn/HOmmwig4FqydloJSYE+kddpMOSwRn6jkMF1HQ7KLFw6 +gOyMBki+pYgPc95Ur7bb3dldAgcZ4nJqe9h+tfUfa35eyVwTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjVdq/YadfKx+DcOwS6yfdykzyRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvOThkZWJiODUtMjE5Ny0z NDkyLWI3YmItYjViZmNmNzk0MTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgROQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIt5RXJ8nqO5HHhfV5NbJM7ifPiDyJ9YvJfR1L/e8Ycj3C0+JezgayiY /ebSL/+8mNOoU8lFjqRY5g+Mx1SQnsNPLj0jM3DtnoTCyqi+51FIEtxIALKMM6qc toNmvtist7yCr0+wXouOuAuPPugd8Pd2Jn2xrZSxhJhLe6sqZmGOwSa+E9UFIbgt XgQju2yz7sPSwZREbuLYk+mTUkZYJU/9aJPqC4LcOsYCWyiUJ9hlSMEw5s+K+Ct9 yRfFLmCGyX+5LtY/gnHHc+X96UEZJr/XoGl929CmtKryJE1HCe0Bdc6C32ykmkUM NwXiD9tjqj/mcxMA36hb9zpBsCeXBqE= -----END CERTIFICATE-----Generated at Thu Oct 1 19:48:48 2026 by rpki-client