$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/ce5e2698-134c-31f5-8760-357ab4cea306.roa File: ce5e2698-134c-31f5-8760-357ab4cea306.roa (raw, json) Hash identifier: CVDDVzifyHJZkuUbwIKv24t8c3ySIQaEXvL8m4VSpZ8= Subject key identifier: B9:8A:6D:27:EC:F1:06:5C:41:21:A8:4E:0E:F9:1C:EB:EE:69:83:21 Certificate issuer: /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774 Certificate serial: 010D0C9F4328584E9D4AB7E8F0DE4E46D1030600 Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/ce5e2698-134c-31f5-8760-357ab4cea306.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 11808 IP address blocks: 129.101.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:b7:e8:f0:de:4e:46:d1:03:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=f13cb01a-307d-4149-b475-89ea8ff5d7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c9:79:b9:c4:64:72:ba:d6:b3:77:8b:2f:6a: d5:61:ad:4e:04:0c:c5:df:0a:f2:5d:c2:36:d7:95: bd:0c:2f:2b:39:3e:43:48:cc:26:e3:bc:f7:89:30: f6:58:47:61:e7:f5:81:21:36:26:8b:62:71:9a:45: 4c:55:51:f3:d1:1b:1a:39:9c:1e:00:ea:b3:bb:e3: df:da:15:5a:7d:32:ed:fa:87:fa:e8:d3:d4:2d:c7: ce:21:94:20:47:c5:16:08:a3:19:ae:4c:6c:e8:e8: ea:f2:70:1a:95:d9:8c:87:b4:ba:02:93:d1:86:23: 20:9b:67:1c:ec:88:85:44:0a:63:0e:ad:7e:4d:52: 65:6e:2a:fa:76:ec:20:b2:72:26:11:db:d1:e0:d7: c9:85:4b:5b:f4:82:f9:8c:cd:e3:cb:cd:05:c7:1e: 2c:6d:8b:c4:10:7a:5d:35:18:fc:ef:8d:87:bb:1b: 61:c5:5f:7d:06:ab:38:2d:d1:6a:4e:4a:4c:13:89: 9a:a0:2e:13:be:6b:cf:ee:ba:13:c9:f5:6e:c1:0f: c9:2e:d4:a7:2b:7e:05:92:28:dc:cd:a3:15:65:a3: b3:74:5d:2f:9d:bd:be:af:e8:dd:9a:ee:43:e9:38: 7a:01:14:81:56:66:94:fd:7e:a8:ab:ce:70:57:41: 60:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8A:6D:27:EC:F1:06:5C:41:21:A8:4E:0E:F9:1C:EB:EE:69:83:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/ce5e2698-134c-31f5-8760-357ab4cea306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl X509v3 Authority Key Identifier: keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer sbgp-ipAddrBlock: critical IPv4: 129.101.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:6d:f9:23:38:3d:95:14:87:52:33:11:b5:1d:59:73:41:a3: 12:c0:ed:a5:14:0a:8d:19:51:e1:f8:61:63:4b:eb:66:4c:32: a4:08:94:01:f9:c3:d6:fd:4f:6c:64:03:e2:3a:b2:5b:e9:0a: 2f:c7:ba:32:60:8f:9b:c2:f6:56:d5:af:14:4b:83:7c:c8:0d: 42:9b:af:42:ac:d4:01:79:b1:99:5d:fd:ca:a2:f4:39:01:b6: e6:16:95:a4:b8:63:94:b3:dc:5a:5e:51:f4:e5:a9:d4:44:26: 02:c3:ec:e2:88:20:6e:50:5c:48:a8:f0:00:3a:a0:ec:04:55: 6e:11:53:9d:73:2c:53:a1:99:03:04:d5:33:97:b9:b1:58:fb: 99:01:7a:1e:d1:ae:f6:36:59:ec:50:e8:1d:6f:e1:73:03:e3: 20:7f:f1:cd:b3:35:c4:e1:c3:9b:79:ac:a0:b1:94:3c:a6:72: f9:84:21:a7:74:0d:da:23:a1:44:f7:e0:b4:08:f9:2e:ec:e8: 04:a5:82:15:72:c6:70:fd:30:e0:73:9d:f0:3b:60:46:0c:16: 80:cc:a9:97:9a:75:d6:45:e8:26:44:22:60:17:84:8d:67:61: 28:f0:c9:d0:23:9a:28:f3:ff:41:a7:2e:0c:44:01:11:c3:d0: 36:83:21:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSrfo8N5ORtEDBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYxYTI0YmMtNzE4Yy00NTAwLWFkMGItYTI5ZjhiODVk Nzc0MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk ZjEzY2IwMWEtMzA3ZC00MTQ5LWI0NzUtODllYThmZjVkN2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcl5ucRkcrrWs3eLL2rVYa1OBAzF3wryXcI2 15W9DC8rOT5DSMwm47z3iTD2WEdh5/WBITYmi2JxmkVMVVHz0RsaOZweAOqzu+Pf 2hVafTLt+of66NPULcfOIZQgR8UWCKMZrkxs6Ojq8nAaldmMh7S6ApPRhiMgm2cc 7IiFRApjDq1+TVJlbir6duwgsnImEdvR4NfJhUtb9IL5jM3jy80Fxx4sbYvEEHpd NRj8742HuxthxV99Bqs4LdFqTkpME4maoC4TvmvP7roTyfVuwQ/JLtSnK34Fkijc zaMVZaOzdF0vnb2+r+jdmu5D6Th6ARSBVmaU/X6oq85wV0FgpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmKbSfs8QZcQSGoTg75HOvuaYMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFh MjRiYy03MThjLTQ1MDAtYWQwYi1hMjlmOGI4NWQ3NzQvY2U1ZTI2OTgtMTM0Yy0z MWY1LTg3NjAtMzU3YWI0Y2VhMzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWYxYTI0YmMtNzE4Yy00NTAwLWFk MGItYTI5ZjhiODVkNzc0LzVmMWEyNGJjLTcxOGMtNDUwMC1hZDBiLWEyOWY4Yjg1 ZDc3NC5jcmwwHwYDVR0jBBgwFoAUe7FILm1418tqUdx1x+7Pwyk6s74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFhMjRiYy03MThjLTQ1MDAtYWQwYi1hMjlm OGI4NWQ3NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgWXvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFt+SM4PZUUh1IzEbUdWXNBoxLA7aUUCo0ZUeH4YWNL62ZMMqQIlAH5 w9b9T2xkA+I6slvpCi/HujJgj5vC9lbVrxRLg3zIDUKbr0Ks1AF5sZld/cqi9DkB tuYWlaS4Y5Sz3FpeUfTlqdREJgLD7OKIIG5QXEio8AA6oOwEVW4RU51zLFOhmQME 1TOXubFY+5kBeh7RrvY2WexQ6B1v4XMD4yB/8c2zNcThw5t5rKCxlDymcvmEIad0 DdojoUT34LQI+S7s6ASlghVyxnD9MOBznfA7YEYMFoDMqZeaddZF6CZEImAXhI1n YSjwydAjmijz/0GnLgxEARHD0DaDISQ= -----END CERTIFICATE-----Generated at Wed Aug 26 20:29:20 2026 by rpki-client