$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/494e73dd-7440-3e35-96e4-fe4c12732c15.roa File: 494e73dd-7440-3e35-96e4-fe4c12732c15.roa (raw, json) Hash identifier: qktWXXq8r0Lqr1aesZTS/ZOjhYkeXmcfLmo3wkUluOI= Subject key identifier: 4C:20:BD:43:30:B8:87:1E:88:67:8D:73:DA:1C:1A:B9:2C:D0:86:FD Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584DA11ADE0F2275AF539600CE80 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/494e73dd-7440-3e35-96e4-fe4c12732c15.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 63293 IP address blocks: 129.134.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:de:0f:22:75:af:53:96:00:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=fc116270-2195-4d1f-b855-509f603ed776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:91:ab:0b:f5:4a:5e:d3:91:14:5d:7d:40:fb: 75:dc:f5:a9:63:09:35:bd:22:28:31:11:42:be:2f: b0:d5:ec:5d:63:19:ab:f3:44:2f:b1:c3:48:fa:1a: 32:51:c5:a4:ed:d3:5a:8f:b6:80:75:d1:8c:54:dc: 72:12:8a:9f:69:0e:85:61:cf:cf:69:1c:f8:1a:42: 45:b4:c2:28:ae:77:d5:ab:26:a8:26:14:e2:8c:c7: d8:43:28:3c:12:a8:18:63:fd:52:96:5e:9d:4c:96: 25:a6:a4:fb:c2:cd:08:4f:ac:db:13:fe:21:f1:ca: 07:aa:92:97:15:2a:c1:cb:b1:78:d5:c5:a0:b0:2b: d1:7a:2d:65:7b:73:96:a8:76:97:06:75:45:52:18: e6:ce:ef:e2:b9:b8:91:0f:14:66:da:61:5a:dd:eb: 21:a4:bb:35:61:78:31:8e:cd:6f:d8:39:77:a5:5b: 99:d6:5d:88:53:f9:1e:8b:34:04:48:50:ea:75:7a: 1b:32:41:f2:f8:ae:f8:b4:96:26:68:a4:c4:77:fb: 99:a0:80:6a:1e:de:28:99:81:16:7d:5a:16:a2:ea: 41:5d:e7:9f:59:fa:73:01:1b:09:52:3e:0e:fb:ad: 57:0b:44:45:68:65:b5:1a:80:06:75:3e:a9:46:34: a4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:20:BD:43:30:B8:87:1E:88:67:8D:73:DA:1C:1A:B9:2C:D0:86:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/494e73dd-7440-3e35-96e4-fe4c12732c15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 129.134.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5b:c7:6d:32:53:ee:f7:65:1b:14:a7:bc:51:f4:80:00:d8: ad:c2:16:ad:de:ad:36:1c:cf:f3:a1:54:fb:c3:81:79:61:2c: cf:9b:d6:7e:3f:1f:c6:25:7b:df:b0:5e:e9:21:cd:e3:71:f5: f5:12:32:75:c1:03:1c:f8:08:dc:a8:69:4a:dc:ae:eb:bf:35: bc:63:1e:8e:2c:6b:5e:2e:78:f8:3d:27:7a:fd:f7:49:4d:7c: 45:a5:27:86:5f:e2:e5:64:f6:81:9d:07:56:7e:8b:48:2c:ae: c6:54:7d:6a:b1:81:d7:fa:40:a7:09:7b:99:79:c8:5d:93:ee: 6a:ab:b0:03:b4:c3:81:50:07:db:a9:8c:50:f6:6b:e3:16:eb: 34:26:8d:c7:77:0f:d6:eb:26:cc:d8:ce:c2:8c:30:4e:87:2c: 0d:f0:1d:be:42:c3:06:46:e8:90:5f:de:ae:a0:81:3d:1e:74: ce:7f:89:0c:5c:b4:ba:58:c0:f4:c9:6b:58:2d:b3:d1:e0:d0: 63:21:64:c1:d3:ec:2f:cb:0b:60:d3:51:cf:3c:64:1f:c7:d8: 3d:8c:96:27:f6:c5:f7:31:b4:13:db:ef:5e:1d:eb:e8:c4:c2: b6:56:45:af:2e:cc:92:f1:24:05:a6:11:ff:67:ad:9a:38:ba: ed:07:02:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGt4PInWvU5YAzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk ZmMxMTYyNzAtMjE5NS00ZDFmLWI4NTUtNTA5ZjYwM2VkNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJGrC/VKXtORFF19QPt13PWpYwk1vSIoMRFC vi+w1exdYxmr80QvscNI+hoyUcWk7dNaj7aAddGMVNxyEoqfaQ6FYc/PaRz4GkJF tMIornfVqyaoJhTijMfYQyg8EqgYY/1Sll6dTJYlpqT7ws0IT6zbE/4h8coHqpKX FSrBy7F41cWgsCvRei1le3OWqHaXBnVFUhjmzu/iubiRDxRm2mFa3eshpLs1YXgx js1v2Dl3pVuZ1l2IU/keizQESFDqdXobMkHy+K74tJYmaKTEd/uZoIBqHt4omYEW fVoWoupBXeefWfpzARsJUj4O+61XC0RFaGW1GoAGdT6pRjSkywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwgvUMwuIceiGeNc9ocGrks0Ib9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvNDk0ZTczZGQtNzQ0MC0z ZTM1LTk2ZTQtZmU0YzEyNzMyYzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgYa8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtbx20yU+73ZRsUp7xR9IAA2K3CFq3erTYcz/OhVPvDgXlhLM+b1n4/ H8Yle9+wXukhzeNx9fUSMnXBAxz4CNyoaUrcruu/NbxjHo4sa14uePg9J3r990lN fEWlJ4Zf4uVk9oGdB1Z+i0gsrsZUfWqxgdf6QKcJe5l5yF2T7mqrsAO0w4FQB9up jFD2a+MW6zQmjcd3D9brJszYzsKMME6HLA3wHb5CwwZG6JBf3q6ggT0edM5/iQxc tLpYwPTJa1gts9Hg0GMhZMHT7C/LC2DTUc88ZB/H2D2Mlif2xfcxtBPb714d6+jE wrZWRa8uzJLxJAWmEf9nrZo4uu0HAt8= -----END CERTIFICATE-----Generated at Wed May 6 01:16:26 2026 by rpki-client