$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa File: 8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa (raw, json) Hash identifier: iEP889uv1jk0Q/J6T1Ev8+efmoexgrHuIlK/bU5evPc= Subject key identifier: 82:40:0A:6A:63:73:49:B9:76:19:05:82:30:20:24:A3:2A:30:5B:7E Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584D0647A8830B573783F6903B80 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 14618 IP address blocks: 129.41.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:a8:83:0b:57:37:83:f6:90:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=1a640de9-852e-4b44-8129-d27533a55f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e5:d1:53:b6:b7:4c:c8:09:bc:d5:e7:f1:15: 90:df:09:fd:76:a1:af:aa:93:49:29:f3:31:5b:c7: a5:80:a7:d1:0e:0d:63:7c:2c:63:56:2c:76:bc:74: 17:1a:3e:da:b7:83:71:b1:a4:ab:32:2e:a1:8d:8b: 92:de:37:10:89:be:0a:73:78:dc:73:a4:03:5c:99: d8:9a:ae:ff:45:bf:7c:63:71:bb:8c:f2:1d:61:28: 74:c2:b4:00:04:5a:0a:a4:3b:2c:cc:24:e7:88:d5: e0:df:ad:bf:d1:2a:43:5f:ba:f6:16:22:5b:01:4b: db:ad:ef:2e:78:29:78:6d:30:66:69:d3:29:07:9d: 8f:31:67:c4:1e:74:23:0d:9d:aa:5b:77:6c:82:6b: c1:bd:b4:96:f3:04:a2:c1:f6:c2:62:b9:64:c6:0c: f1:74:02:a0:61:f5:08:bc:f1:0a:50:40:2c:6b:4e: 4f:8a:d6:72:93:24:2d:6f:bc:14:cb:0b:92:c7:3a: 48:13:b3:86:e9:47:38:c3:84:4c:22:fe:be:f9:3e: a8:1f:04:8c:d6:d0:f4:32:68:af:e7:15:7e:3e:ab: 2a:7d:3c:3e:fc:8b:a7:20:22:18:ad:cc:a9:ef:ea: 5a:3c:30:5f:63:06:35:9c:f1:aa:6e:7f:27:d9:dd: ff:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:40:0A:6A:63:73:49:B9:76:19:05:82:30:20:24:A3:2A:30:5B:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 129.41.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:35:26:60:d1:5f:78:b7:aa:23:f3:37:81:25:6b:a9:91:c2: 04:dc:53:3d:0f:84:22:2e:6e:1a:6a:9b:dd:0f:38:5a:19:db: e3:6e:cc:a6:71:21:3a:f2:9d:15:46:3b:1f:fc:17:d8:59:5f: f8:29:b9:76:e6:16:3e:8b:04:20:dd:1c:9b:97:f3:8c:15:b0: 32:49:b5:5a:b9:85:31:1e:e7:cd:d3:c6:c5:03:3a:ca:60:ff: b7:d6:78:3a:1d:f6:da:8b:37:de:44:29:30:e8:2b:2c:e6:da: 0a:14:52:3a:5a:dd:1e:8c:01:2a:97:cf:c4:ab:11:06:3f:c0: 9e:40:f8:a7:4f:55:6a:39:16:cb:66:66:2e:b9:74:e8:48:45: 75:4b:f9:b8:3a:ea:83:d5:35:45:47:56:f6:d1:3b:f8:47:57: 3f:9f:1d:2a:6f:13:b2:fe:95:29:1a:2b:ef:94:a6:5f:2e:bd: 93:e4:ab:f7:e0:83:76:2f:a9:29:b0:6e:b8:05:1a:cb:63:28: b3:24:26:c4:65:13:cf:77:cb:90:e0:b0:07:0b:b2:08:3c:48: fd:e8:be:58:92:75:6f:eb:e1:78:ad:e0:ed:5c:b9:8a:23:1c: 29:9e:02:1c:a1:af:f5:11:43:b3:6b:5d:98:6e:f6:e3:dc:59: f4:e9:4c:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR6iDC1c3g/aQO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk MWE2NDBkZTktODUyZS00YjQ0LTgxMjktZDI3NTMzYTU1ZjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuXRU7a3TMgJvNXn8RWQ3wn9dqGvqpNJKfMx W8elgKfRDg1jfCxjVix2vHQXGj7at4NxsaSrMi6hjYuS3jcQib4Kc3jcc6QDXJnY mq7/Rb98Y3G7jPIdYSh0wrQABFoKpDsszCTniNXg362/0SpDX7r2FiJbAUvbre8u eCl4bTBmadMpB52PMWfEHnQjDZ2qW3dsgmvBvbSW8wSiwfbCYrlkxgzxdAKgYfUI vPEKUEAsa05PitZykyQtb7wUywuSxzpIE7OG6Uc4w4RMIv6++T6oHwSM1tD0Mmiv 5xV+PqsqfTw+/IunICIYrcyp7+paPDBfYwY1nPGqbn8n2d3/fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJACmpjc0m5dhkFgjAgJKMqMFt+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvOGY5YWNlNTItNzA2Yi0z ZDBkLWI5MDktZDJhYjM0YjFhOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAY1JmDRX3i3qiPzN4Ela6mRwgTcUz0PhCIubhpqm90POFoZ2+NuzKZx ITrynRVGOx/8F9hZX/gpuXbmFj6LBCDdHJuX84wVsDJJtVq5hTEe583TxsUDOspg /7fWeDod9tqLN95EKTDoKyzm2goUUjpa3R6MASqXz8SrEQY/wJ5A+KdPVWo5Fstm Zi65dOhIRXVL+bg66oPVNUVHVvbRO/hHVz+fHSpvE7L+lSkaK++Upl8uvZPkq/fg g3YvqSmwbrgFGstjKLMkJsRlE893y5DgsAcLsgg8SP3ovliSdW/r4Xit4O1cuYoj HCmeAhyhr/URQ7NrXZhu9uPcWfTpTEs= -----END CERTIFICATE-----Generated at Sun Mar 1 23:12:03 2026 by rpki-client