$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/c2446d85-2daf-3006-ad5c-0e641c698184.roa File: c2446d85-2daf-3006-ad5c-0e641c698184.roa (raw, json) Hash identifier: cGENaAeZjy07X3zFzGbyAzzjkvvRn+/e426TxAsWs1Y= Subject key identifier: BA:B4:4E:13:A9:77:F8:87:80:57:04:22:72:79:79:CE:D4:51:2A:24 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584D0647A26827B23C21069E7500 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/c2446d85-2daf-3006-ad5c-0e641c698184.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 14618 IP address blocks: 129.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:a2:68:27:b2:3c:21:06:9e:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=9b51df68-012a-4c04-940d-eb05d59cbe7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b1:ac:a1:e1:f1:48:7f:69:b7:8a:98:a2:2b: dc:d6:c6:b5:7f:b3:8c:19:07:89:a7:21:a4:12:d0: d4:50:17:9f:0e:3b:a6:4e:64:5e:38:93:e3:9c:21: 56:3e:a0:95:a6:06:d4:1d:6d:27:ff:d3:48:df:66: a7:88:fa:44:c4:b1:ee:d6:9c:6d:9a:24:f1:81:88: 87:60:4b:16:5a:c5:ec:52:e8:b0:e2:f0:a0:0c:a1: bc:04:77:a1:38:f4:1a:33:0c:fb:37:17:6c:7e:33: 2c:c3:60:1a:b8:4d:d3:3f:99:73:58:dd:ae:53:2e: 58:e3:63:38:ce:15:73:95:89:ff:9e:13:5f:65:bf: de:b0:31:5f:de:97:a2:b4:ae:34:c3:c3:e7:d3:65: f7:b7:18:51:0f:09:a5:37:0f:51:31:00:08:38:b3: 20:af:63:dd:29:31:cd:97:0f:5f:07:33:9d:da:13: 81:14:3d:ec:e6:7d:db:cf:d5:b1:02:53:45:71:bd: 67:dc:2a:b2:c8:ad:fc:d6:43:21:2f:ba:e5:ec:36: be:1a:e0:0b:52:83:9d:b1:d0:59:91:4c:b6:25:fa: d4:17:f4:37:a2:1d:b1:bb:f5:08:32:47:76:08:c2: 34:b1:7a:2c:87:5d:ec:15:af:67:82:7d:d9:cf:63: 16:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B4:4E:13:A9:77:F8:87:80:57:04:22:72:79:79:CE:D4:51:2A:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/c2446d85-2daf-3006-ad5c-0e641c698184.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 129.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:21:bb:ea:cc:ca:fd:0e:59:ce:d1:ef:f1:04:3a:de:cb:21: b4:f2:01:8d:79:1b:0c:38:76:12:4b:d1:f9:ab:7b:b0:ed:11: 2c:6d:8a:0f:ee:05:56:95:4b:9c:66:c6:0c:20:e6:f8:fd:85: bf:30:72:36:31:bd:9d:04:4f:65:48:57:b6:30:7f:4f:a3:3d: 52:7f:28:61:eb:f2:ec:7b:9f:68:73:54:16:0d:fa:85:36:79: 5b:7a:64:da:4b:f3:93:ba:a4:a3:d8:7f:97:2e:5e:19:a8:99: 84:88:da:77:ec:25:35:e5:95:00:a1:57:d2:c8:7a:92:93:f3: 0b:cd:68:fc:eb:52:b9:93:69:6d:89:af:43:b4:b1:09:f3:7f: f8:25:18:ad:96:3d:d3:18:1f:e7:96:83:d5:a7:18:0a:5f:da: bd:c8:aa:21:2f:b8:b9:7b:ac:b2:ca:10:77:19:15:78:5d:27: 2c:e8:5a:de:7d:ba:f1:d4:5f:ae:70:a3:0e:06:96:5d:06:12: e4:74:df:20:1e:59:81:7b:ef:4b:60:6f:aa:87:db:6d:22:53: 99:1d:a8:41:a8:06:f1:da:0f:47:3a:d6:6f:c6:c4:42:f2:53: 2a:79:ee:d1:02:a4:b3:b4:29:74:d9:bf:7b:7b:f1:4d:0a:9b: 58:22:5d:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR6JoJ7I8IQaedQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk OWI1MWRmNjgtMDEyYS00YzA0LTk0MGQtZWIwNWQ1OWNiZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7GsoeHxSH9pt4qYoivc1sa1f7OMGQeJpyGk EtDUUBefDjumTmReOJPjnCFWPqCVpgbUHW0n/9NI32aniPpExLHu1pxtmiTxgYiH YEsWWsXsUuiw4vCgDKG8BHehOPQaMwz7NxdsfjMsw2AauE3TP5lzWN2uUy5Y42M4 zhVzlYn/nhNfZb/esDFf3peitK40w8Pn02X3txhRDwmlNw9RMQAIOLMgr2PdKTHN lw9fBzOd2hOBFD3s5n3bz9WxAlNFcb1n3CqyyK381kMhL7rl7Da+GuALUoOdsdBZ kUy2JfrUF/Q3oh2xu/UIMkd2CMI0sXosh13sFa9ngn3Zz2MWjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLq0ThOpd/iHgFcEInJ5ec7UUSokMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvYzI0NDZkODUtMmRhZi0z MDA2LWFkNWMtMGU2NDFjNjk4MTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8hu+rMyv0OWc7R7/EEOt7LIbTyAY15Gww4dhJL0fmre7DtESxtig/u BVaVS5xmxgwg5vj9hb8wcjYxvZ0ET2VIV7Ywf0+jPVJ/KGHr8ux7n2hzVBYN+oU2 eVt6ZNpL85O6pKPYf5cuXhmomYSI2nfsJTXllQChV9LIepKT8wvNaPzrUrmTaW2J r0O0sQnzf/glGK2WPdMYH+eWg9WnGApf2r3IqiEvuLl7rLLKEHcZFXhdJyzoWt59 uvHUX65wow4Gll0GEuR03yAeWYF770tgb6qH220iU5kdqEGoBvHaD0c61m/GxELy Uyp57tECpLO0KXTZv3t78U0Km1giXYE= -----END CERTIFICATE-----Generated at Mon Mar 2 08:35:14 2026 by rpki-client