$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/132e7b72-2d06-316b-afaa-74c07ae106c5.roa File: 132e7b72-2d06-316b-afaa-74c07ae106c5.roa (raw, json) Hash identifier: hdFH8JQCKMG7m/w2nRyfGO2/uO9Ucwx2u+onMZTk6us= Subject key identifier: 79:00:7A:2D:56:59:1F:D6:CD:C4:4E:03:FA:B2:2C:7B:D4:E1:24:C4 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584EDC9243D76BE7B7F2F5394100 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/132e7b72-2d06-316b-afaa-74c07ae106c5.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 63293 IP address blocks: 129.134.191.0/24 maxlen: 24 157.240.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:43:d7:6b:e7:b7:f2:f5:39:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=76666e33-f483-4cab-944a-3c42ddc9a361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:aa:52:58:8e:d0:16:95:36:bd:5b:18:30:ad: 27:44:a5:f2:d5:ce:b6:f6:16:4e:a8:9d:df:ec:91: ef:c5:cb:6a:e7:bf:36:99:ae:13:7d:2f:62:bf:dc: 9b:94:64:27:b7:a6:ab:a4:aa:49:5e:6d:d2:c2:e1: d3:84:44:77:94:37:2d:df:df:ba:1e:67:0e:89:97: 60:49:e2:60:53:8d:8c:38:76:ed:32:02:c2:4b:e8: ef:ec:a6:80:02:18:05:7e:de:98:9a:55:e8:d5:f5: a8:49:b5:ef:25:ca:bf:6b:6e:70:4f:fc:dd:d1:23: 9e:c0:56:a4:c0:e8:23:a3:01:9a:7c:b7:a5:c7:d1: a3:fb:61:5e:3c:2d:19:7a:df:56:2e:b0:86:14:47: 1f:05:17:da:4a:58:e4:c4:9b:6b:46:b0:f5:a0:fe: 6b:ef:d0:7d:51:b2:a2:42:d0:be:83:36:f8:7c:b1: 89:31:2d:eb:eb:93:2f:3d:ef:43:5a:8a:8c:13:93: 16:f0:aa:1b:44:6f:fd:c3:ae:f5:82:bd:a7:7b:6a: 17:c0:36:65:6d:32:52:07:53:bb:23:17:67:18:de: 17:7a:40:2a:c2:99:7f:e9:bf:6b:8b:62:1b:b4:16: dc:5e:81:cd:e4:1f:00:ff:d1:d5:7e:8e:89:46:c8: a1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:00:7A:2D:56:59:1F:D6:CD:C4:4E:03:FA:B2:2C:7B:D4:E1:24:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/132e7b72-2d06-316b-afaa-74c07ae106c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 129.134.191.0/24 157.240.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:66:2f:00:5b:fa:6c:f3:06:22:98:0a:fe:da:0f:92:25:d1: 37:20:d4:bb:7c:0e:be:8b:07:97:18:dd:55:02:16:b3:32:f2: b1:fa:cf:c4:93:f0:67:42:81:77:36:37:c2:76:d8:b6:bd:f1: fd:05:af:70:64:88:91:70:94:01:ea:2c:91:5f:f1:b5:b6:58: 80:e8:a1:b1:3e:36:62:b8:e6:71:fa:5d:9c:44:7c:2c:17:1e: 75:93:49:7e:dc:67:ca:be:85:11:ff:48:3e:79:cd:f1:46:fa: 5d:5b:e2:7c:e7:5c:ee:45:21:0c:a0:eb:98:dd:ef:79:6a:81: 40:ae:34:50:d8:43:ca:a3:6b:dc:dd:76:4e:da:62:56:f7:8c: a4:29:6f:3b:25:83:80:f4:a4:ca:70:9b:4e:eb:d7:e8:97:a0: 61:6d:41:10:1e:9c:71:9a:fe:25:ec:4e:f1:4d:83:38:fa:8b: 35:ea:e4:1e:cf:e3:a1:42:4e:7f:ed:2d:c6:43:94:42:a9:b0: 44:99:47:a7:0b:d4:18:07:af:a5:5b:08:a4:ef:11:88:fe:b5: b3:8a:d1:7d:91:1a:c9:bc:3d:2e:6e:2a:18:57:51:28:5a:06: c5:01:a2:6b:9e:6f:ac:f6:bb:05:56:55:89:9e:8c:21:13:39: 4f:49:d4:fd -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7ckkPXa+e38vU5QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk NzY2NjZlMzMtZjQ4My00Y2FiLTk0NGEtM2M0MmRkYzlhMzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKpSWI7QFpU2vVsYMK0nRKXy1c629hZOqJ3f 7JHvxctq5782ma4TfS9iv9yblGQnt6arpKpJXm3SwuHThER3lDct39+6HmcOiZdg SeJgU42MOHbtMgLCS+jv7KaAAhgFft6YmlXo1fWoSbXvJcq/a25wT/zd0SOewFak wOgjowGafLelx9Gj+2FePC0Zet9WLrCGFEcfBRfaSljkxJtrRrD1oP5r79B9UbKi QtC+gzb4fLGJMS3r65MvPe9DWoqME5MW8KobRG/9w671gr2ne2oXwDZlbTJSB1O7 IxdnGN4XekAqwpl/6b9ri2IbtBbcXoHN5B8A/9HVfo6JRsihYQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHkAei1WWR/WzcROA/qyLHvU4STEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMTMyZTdiNzItMmQwNi0z MTZiLWFmYWEtNzRjMDdhZTEwNmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgYa/AwQA nfC+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEdmLwBb+mzzBiKYCv7aD5Il0Tcg1Lt8Dr6LB5cY3VUCFrMy 8rH6z8ST8GdCgXc2N8J22La98f0Fr3BkiJFwlAHqLJFf8bW2WIDoobE+NmK45nH6 XZxEfCwXHnWTSX7cZ8q+hRH/SD55zfFG+l1b4nznXO5FIQyg65jd73lqgUCuNFDY Q8qja9zddk7aYlb3jKQpbzslg4D0pMpwm07r1+iXoGFtQRAenHGa/iXsTvFNgzj6 izXq5B7P46FCTn/tLcZDlEKpsESZR6cL1BgHr6VbCKTvEYj+tbOK0X2RGsm8PS5u KhhXUShaBsUBomueb6z2uwVWVYmejCETOU9J1P0= -----END CERTIFICATE-----Generated at Sat Sep 19 12:09:11 2026 by rpki-client