$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/359d03d3-28a8-3f41-b79d-fc8a2087fd2f.roa File: 359d03d3-28a8-3f41-b79d-fc8a2087fd2f.roa (raw, json) Hash identifier: rykVyA+hJKziD+yAWBeUlhBtF/U6IqjnU6QY5gT9U9w= Subject key identifier: 5C:E9:21:FD:59:64:31:E1:A2:33:35:57:46:67:FC:BC:D1:84:9F:EE Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584E6B0A146E5A608B69EEA49560 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/359d03d3-28a8-3f41-b79d-fc8a2087fd2f.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 21859 IP address blocks: 128.1.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:14:6e:5a:60:8b:69:ee:a4:95:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=63a09943-6a41-4d74-9a9a-257bd6e16f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:7a:43:65:e5:a1:26:0f:5a:b0:10:02:1c: e2:a9:2b:1e:fd:6e:a6:1a:51:b8:5c:55:ee:30:c1: 00:7d:47:47:8d:33:e9:3a:5e:ac:c7:40:95:6b:d4: 5e:8c:11:9d:57:0a:fc:f8:bf:ed:02:13:21:31:8e: 20:3d:86:21:d4:22:46:12:4f:40:fb:fd:ec:fc:bf: ef:37:d0:00:be:7e:2d:a4:1d:4e:a2:3d:fb:79:41: 61:88:1b:a8:e0:42:b6:2d:2b:53:6f:fa:00:33:6b: 67:7a:ef:17:5b:85:c7:8a:91:59:07:67:50:d7:23: fb:36:cf:f5:e1:9b:a8:bb:80:aa:53:b7:85:5b:5e: 1e:05:0b:5b:db:9c:27:aa:1b:f0:b8:d7:b5:58:a3: c8:ac:57:82:42:88:89:0d:98:53:f4:44:41:17:77: ef:8f:0b:f5:94:4e:fa:90:15:68:77:0c:aa:01:b0: a7:d2:85:98:dd:6d:28:87:12:a2:ad:2e:7d:af:71: fb:cd:37:f3:df:b6:22:bb:27:35:a1:a7:d9:d9:f4: 0d:9f:4f:38:05:e7:86:2c:45:62:13:fc:a3:08:9a: fd:d8:d9:23:be:f4:4a:52:e9:6f:37:c9:0c:34:d9: 59:c9:52:58:13:63:eb:c9:a3:91:58:bf:de:dd:7b: f8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E9:21:FD:59:64:31:E1:A2:33:35:57:46:67:FC:BC:D1:84:9F:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/359d03d3-28a8-3f41-b79d-fc8a2087fd2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e4:1a:1f:47:7b:ea:bc:e8:a7:fb:ff:b0:25:cc:99:d1:51: 11:49:e5:9b:81:a8:0c:5c:40:b7:82:fa:77:f4:d2:6a:24:a9: 20:3c:b6:01:94:b8:7f:2e:bb:ba:44:82:c4:dc:46:d6:8c:1d: 1e:be:95:5b:82:08:ed:c5:67:c9:3a:d0:54:65:b2:f2:5c:ca: 4d:84:79:73:ec:0b:63:a5:ba:8a:80:46:e0:55:16:36:a4:e5: 59:7f:a3:23:16:83:c5:0c:46:2a:bb:25:31:ab:52:d8:1a:49: 3f:63:11:3f:c4:1b:d2:f9:ee:5a:f3:27:6d:76:f0:23:3f:c2: bd:30:2d:b0:a7:9c:92:f0:8e:f8:57:91:dc:25:03:52:43:5f: fd:bb:76:47:39:8c:8d:13:09:0b:4a:fc:3e:b9:ee:57:2a:f6: 04:63:2d:8e:33:0f:64:fc:78:6b:99:b4:97:f3:85:a8:3e:e9: ac:12:4d:43:3d:0e:68:78:0c:0d:52:73:43:38:11:50:b3:01: 69:23:8e:1e:cf:50:b4:40:18:91:d7:71:2c:40:bf:eb:ac:13: ed:a8:0f:c5:4d:58:17:ec:ba:02:2b:dc:ea:06:12:8d:42:45: 3f:ee:d0:9f:9b:b1:f8:20:10:4a:33:61:93:01:29:c7:c2:fd: 0a:db:c4:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rChRuWmCLae6klWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk NjNhMDk5NDMtNmE0MS00ZDc0LTlhOWEtMjU3YmQ2ZTE2ZjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAZ6Q2XloSYPWrAQAhziqSse/W6mGlG4XFXu MMEAfUdHjTPpOl6sx0CVa9RejBGdVwr8+L/tAhMhMY4gPYYh1CJGEk9A+/3s/L/v N9AAvn4tpB1Ooj37eUFhiBuo4EK2LStTb/oAM2tneu8XW4XHipFZB2dQ1yP7Ns/1 4Zuou4CqU7eFW14eBQtb25wnqhvwuNe1WKPIrFeCQoiJDZhT9ERBF3fvjwv1lE76 kBVodwyqAbCn0oWY3W0ohxKirS59r3H7zTfz37Yiuyc1oafZ2fQNn084BeeGLEVi E/yjCJr92NkjvvRKUulvN8kMNNlZyVJYE2PryaORWL/e3Xv4gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzpIf1ZZDHhojM1V0Zn/LzRhJ/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMzU5ZDAzZDMtMjhhOC0z ZjQxLWI3OWQtZmM4YTIwODdmZDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAEdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHkGh9He+q86Kf7/7AlzJnRURFJ5ZuBqAxcQLeC+nf00mokqSA8tgGU uH8uu7pEgsTcRtaMHR6+lVuCCO3FZ8k60FRlsvJcyk2EeXPsC2OluoqARuBVFjak 5Vl/oyMWg8UMRiq7JTGrUtgaST9jET/EG9L57lrzJ2128CM/wr0wLbCnnJLwjvhX kdwlA1JDX/27dkc5jI0TCQtK/D657lcq9gRjLY4zD2T8eGuZtJfzhag+6awSTUM9 Dmh4DA1Sc0M4EVCzAWkjjh7PULRAGJHXcSxAv+usE+2oD8VNWBfsugIr3OoGEo1C RT/u0J+bsfggEEozYZMBKcfC/QrbxKg= -----END CERTIFICATE-----Generated at Tue Jul 21 14:59:28 2026 by rpki-client