$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/72c3722c-57ef-39ea-9d4d-df56729ff278.roa File: 72c3722c-57ef-39ea-9d4d-df56729ff278.roa (raw, json) Hash identifier: WF1RNGrNmeS/rvoe2Hf9Ka/OdKsrqOGnem12SeW2uAg= Subject key identifier: D2:A6:1D:6D:4B:81:70:D8:E8:F8:C1:92:04:B2:32:17:43:2E:A9:92 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584D1F4A224E261A3530B0197C80 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/72c3722c-57ef-39ea-9d4d-df56729ff278.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 63293 IP address blocks: 129.134.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:22:4e:26:1a:35:30:b0:19:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=9cbad856-66b3-40e1-b6a4-caac77d3e5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:d8:50:a7:e7:34:5e:3d:bd:9a:91:d9:70: e5:8f:6a:90:1d:5a:aa:c5:d9:fb:cb:a5:0e:84:da: 0c:59:e1:7a:b1:c4:c4:32:cf:8a:c3:9c:31:cd:ad: e9:c0:9a:60:65:ac:ba:85:4a:ee:de:10:e5:69:c1: 48:0e:f1:ae:f6:9e:55:44:3f:37:9f:1e:48:9e:99: da:49:e8:8b:ec:43:e9:fe:4d:fe:6b:99:f5:bf:12: 9b:14:04:63:c9:c7:33:a3:6f:c1:5b:20:2d:8d:a5: e6:10:cf:da:24:44:11:8e:d3:f5:0a:84:36:a2:82: e2:f8:77:8e:47:e3:1f:48:84:0c:ee:b7:e5:73:2e: d6:6f:16:b4:ce:e7:87:e5:8d:e8:a1:39:36:23:9f: 2b:e3:78:c8:ff:38:df:d8:c4:69:b7:56:04:65:31: 6e:0d:9c:0d:b3:01:74:26:57:1a:47:91:35:70:a3: 6f:20:20:25:be:e8:50:db:8b:8f:24:15:4f:05:c5: eb:3b:0f:11:19:c6:be:fb:fe:01:79:da:08:f2:7e: 30:ae:60:55:03:92:ba:30:34:a9:47:b3:dd:0d:b0: 44:c8:a9:c7:9a:0d:74:6c:2d:b3:f5:03:ae:5d:71: 14:90:94:a5:93:10:34:41:69:39:0a:4a:d1:3c:36: 00:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A6:1D:6D:4B:81:70:D8:E8:F8:C1:92:04:B2:32:17:43:2E:A9:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/72c3722c-57ef-39ea-9d4d-df56729ff278.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 129.134.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6d:a4:9b:02:08:32:64:47:45:38:f4:c2:f5:2e:99:20:3d: d2:51:1e:e5:d0:9e:4e:cb:8f:05:f0:10:f8:12:21:db:e8:73: 2b:02:e5:d3:4e:8c:a3:15:e9:4c:b0:03:fa:bd:b7:f3:e9:36: 5c:35:96:3a:04:33:65:ef:b8:be:04:30:bb:0a:30:de:c2:1c: 13:1a:3b:af:a0:e2:5e:d7:26:65:bf:fb:bb:06:02:bd:a0:0b: a9:be:45:bf:41:80:0c:f5:b0:8c:ee:34:d2:5e:8b:94:de:3e: 70:7e:f9:e8:ab:07:38:4c:0a:f3:ee:45:a7:ce:fb:20:53:69: b4:32:55:5b:ae:b9:01:66:f9:cd:e6:3e:42:ee:ab:3d:5f:f7: b0:e7:66:d0:ad:9a:8f:26:50:05:d3:92:fa:72:02:44:e1:7f: 97:b4:c8:36:d0:e3:ac:15:61:3d:ed:e0:97:d3:39:31:23:b9: 75:33:f9:a9:0f:73:af:ad:40:35:34:11:d7:4a:9f:cc:83:86: 34:01:ee:63:f4:24:cd:3b:74:78:01:2f:42:2d:c9:cc:ae:ff: e2:0d:15:59:3c:9d:f7:af:3b:80:cc:7c:85:26:63:bc:96:46: 6b:68:8c:c6:32:13:60:fd:35:47:02:df:58:41:c1:5b:c8:f7: da:40:2e:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSiJOJho1MLAZfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk OWNiYWQ4NTYtNjZiMy00MGUxLWI2YTQtY2FhYzc3ZDNlNWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqnYUKfnNF49vZqR2XDlj2qQHVqqxdn7y6UO hNoMWeF6scTEMs+Kw5wxza3pwJpgZay6hUru3hDlacFIDvGu9p5VRD83nx5Inpna SeiL7EPp/k3+a5n1vxKbFARjycczo2/BWyAtjaXmEM/aJEQRjtP1CoQ2ooLi+HeO R+MfSIQM7rflcy7Wbxa0zueH5Y3ooTk2I58r43jI/zjf2MRpt1YEZTFuDZwNswF0 JlcaR5E1cKNvICAlvuhQ24uPJBVPBcXrOw8RGca++/4BedoI8n4wrmBVA5K6MDSp R7PdDbBEyKnHmg10bC2z9QOuXXEUkJSlkxA0QWk5CkrRPDYAvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKmHW1LgXDY6PjBkgSyMhdDLqmSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvNzJjMzcyMmMtNTdlZi0z OWVhLTlkNGQtZGY1NjcyOWZmMjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgYa0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9tpJsCCDJkR0U49ML1LpkgPdJRHuXQnk7LjwXwEPgSIdvocysC5dNO jKMV6UywA/q9t/PpNlw1ljoEM2XvuL4EMLsKMN7CHBMaO6+g4l7XJmW/+7sGAr2g C6m+Rb9BgAz1sIzuNNJei5TePnB++eirBzhMCvPuRafO+yBTabQyVVuuuQFm+c3m PkLuqz1f97DnZtCtmo8mUAXTkvpyAkThf5e0yDbQ46wVYT3t4JfTOTEjuXUz+akP c6+tQDU0EddKn8yDhjQB7mP0JM07dHgBL0Itycyu/+INFVk8nfevO4DMfIUmY7yW RmtojMYyE2D9NUcC31hBwVvI99pALq4= -----END CERTIFICATE-----Generated at Fri Mar 20 22:14:40 2026 by rpki-client