$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1dea2b87-2ac9-378e-9508-bdc020438a1e.roa File: 1dea2b87-2ac9-378e-9508-bdc020438a1e.roa (raw, json) Hash identifier: n7DdBTXnK8OyNzzbD/D7rPScCMJKnjaS1yHjTxVnAOo= Subject key identifier: 0E:3B:86:0A:6E:87:7C:AD:9C:FB:39:09:0A:E7:6B:55:9E:11:3F:72 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584E6B0A14615FCE228F6CCD0A80 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1dea2b87-2ac9-378e-9508-bdc020438a1e.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 62610 IP address blocks: 128.1.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:14:61:5f:ce:22:8f:6c:cd:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=a7953a56-cf79-4812-ae95-742c7ad6b4de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d5:81:d6:0f:d6:91:ba:f9:4d:72:17:ec:aa: bc:da:5d:a7:f1:92:62:d4:d0:92:f6:50:cf:81:10: 8a:c7:da:4a:9c:a7:22:a3:79:e4:05:9e:ce:ec:49: f7:1a:51:f1:ed:87:7e:c0:3a:84:e3:f0:57:ee:19: e5:d5:bd:15:34:9d:97:9d:09:0e:28:2c:c7:fa:e4: f2:10:43:f6:12:78:75:cd:da:d8:36:0c:37:c3:a5: f5:83:db:5e:50:bb:ce:b6:be:6d:17:e6:7d:35:46: fd:36:f1:c4:28:ed:b4:59:b7:b0:a7:76:62:2c:ba: ee:13:1b:52:16:8b:ac:79:31:3f:ea:41:9d:69:51: bc:2a:41:1e:3a:4f:5b:65:75:dc:7c:a6:ca:79:f5: 64:0c:23:49:cb:18:73:03:42:6e:e3:1b:24:ef:7a: 45:b7:33:29:dc:51:35:2d:86:1e:52:37:73:c2:cf: 08:a8:73:88:31:17:6f:c5:18:0c:c3:e9:af:e3:2d: 1d:a3:fe:d4:d6:49:4f:1b:0f:8c:7c:dd:89:cc:ec: be:94:92:77:9e:f7:50:ea:62:3e:44:7c:8b:38:a2: 40:ca:51:4a:6c:60:c9:8d:f4:2c:ac:21:42:0f:8f: a5:3a:03:f5:78:ed:f4:83:d8:c9:25:92:cf:d3:e9: 9e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3B:86:0A:6E:87:7C:AD:9C:FB:39:09:0A:E7:6B:55:9E:11:3F:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1dea2b87-2ac9-378e-9508-bdc020438a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:94:c6:cc:b1:a9:64:87:c4:41:5f:fb:78:57:1e:26:26:f8: f8:16:2a:42:a8:ac:de:6b:97:48:00:81:51:5f:1a:12:e3:12: df:25:75:a3:0f:5a:e0:d7:e1:84:0c:8b:68:88:5f:b6:e3:d4: cd:1a:af:07:11:2c:5a:41:76:69:78:7c:8d:fe:9c:89:ea:e2: 1b:43:54:d7:5e:d8:0e:c9:21:b6:8e:70:ac:d0:5f:19:25:04: 2e:d8:3e:12:e4:56:e7:d3:fc:ff:f4:e7:3a:17:f2:5b:b3:ca: 11:3e:ca:b0:12:13:ba:e9:50:cb:53:68:0a:83:1b:93:40:ee: 44:82:21:dd:30:37:db:f3:33:7d:99:fc:2b:20:ec:11:1c:25: 96:e1:33:74:10:41:a4:63:d5:4a:2b:0c:6e:a4:7e:9a:87:23: 90:5b:5f:ed:25:32:d0:b0:69:28:a5:49:17:97:1f:24:1b:a0: 2b:24:ef:c2:78:f5:85:72:6a:bd:fe:8d:19:14:38:6e:a4:52: 52:7f:f9:a1:fd:51:14:99:0c:43:95:7d:14:46:86:e9:18:b0: 17:7e:19:88:a0:26:70:d9:c0:62:fc:2c:b6:6d:9b:1a:fd:e3: 41:7e:19:01:f0:35:81:68:11:85:c4:51:f3:3a:9a:cc:18:71: 35:50:79:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rChRhX84ij2zNCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk YTc5NTNhNTYtY2Y3OS00ODEyLWFlOTUtNzQyYzdhZDZiNGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNWB1g/Wkbr5TXIX7Kq82l2n8ZJi1NCS9lDP gRCKx9pKnKcio3nkBZ7O7En3GlHx7Yd+wDqE4/BX7hnl1b0VNJ2XnQkOKCzH+uTy EEP2Enh1zdrYNgw3w6X1g9teULvOtr5tF+Z9NUb9NvHEKO20Wbewp3ZiLLruExtS FouseTE/6kGdaVG8KkEeOk9bZXXcfKbKefVkDCNJyxhzA0Ju4xsk73pFtzMp3FE1 LYYeUjdzws8IqHOIMRdvxRgMw+mv4y0do/7U1klPGw+MfN2JzOy+lJJ3nvdQ6mI+ RHyLOKJAylFKbGDJjfQsrCFCD4+lOgP1eO30g9jJJZLP0+mexQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA47hgpuh3ytnPs5CQrna1WeET9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMWRlYTJiODctMmFjOS0z NzhlLTk1MDgtYmRjMDIwNDM4YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAEdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKUxsyxqWSHxEFf+3hXHiYm+PgWKkKorN5rl0gAgVFfGhLjEt8ldaMP WuDX4YQMi2iIX7bj1M0arwcRLFpBdml4fI3+nInq4htDVNde2A7JIbaOcKzQXxkl BC7YPhLkVufT/P/05zoX8luzyhE+yrASE7rpUMtTaAqDG5NA7kSCId0wN9vzM32Z /Csg7BEcJZbhM3QQQaRj1UorDG6kfpqHI5BbX+0lMtCwaSilSReXHyQboCsk78J4 9YVyar3+jRkUOG6kUlJ/+aH9URSZDEOVfRRGhukYsBd+GYigJnDZwGL8LLZtmxr9 40F+GQHwNYFoEYXEUfM6mswYcTVQeXA= -----END CERTIFICATE-----Generated at Tue Jul 21 14:59:33 2026 by rpki-client