$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/dab4f573-bf8a-3738-9694-b55138019840.roa File: dab4f573-bf8a-3738-9694-b55138019840.roa (raw, json) Hash identifier: PJOZ0nAgg+pO4/dLlZW6wHEnbPZSfy+CVsIXAFTKRjI= Subject key identifier: 23:17:A3:2E:30:1E:AC:AA:B5:CA:CE:F9:E4:A3:8D:CD:F4:B3:82:1B Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584D0647AAC1A6A02B53076E1000 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/dab4f573-bf8a-3738-9694-b55138019840.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 14618 IP address blocks: 129.41.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:aa:c1:a6:a0:2b:53:07:6e:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=dbae3990-4198-4d9b-a793-20a99df7c168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6e:ca:e0:cd:36:c4:bd:6e:f0:aa:84:9d:a4: 88:4f:6e:4f:5a:04:a7:e8:32:8f:68:9a:a5:bc:af: 4b:87:ae:e5:0c:04:e5:76:19:d2:75:54:c1:30:db: b1:32:7d:e0:28:f1:11:72:b4:3f:7d:b4:ea:aa:ac: f8:ac:81:63:db:7e:3e:8b:6c:23:8f:60:79:63:ea: a9:20:13:48:54:d4:b5:2c:5d:1c:20:dd:fb:7f:2c: d6:ad:ea:38:c5:82:85:b9:9f:ee:78:8c:82:39:31: d2:53:2e:39:fe:f2:3e:e9:f9:8b:eb:ef:38:00:fc: 3b:f6:ce:5b:95:8e:2e:89:a4:a9:bf:96:87:7f:f9: f5:00:6e:74:38:c6:dd:b7:51:37:0e:40:f6:e2:c5: 32:46:90:7a:89:04:ed:76:48:07:6c:c6:98:3d:ef: 43:2c:8d:3d:8b:df:d6:ef:24:48:c8:84:74:c5:41: ef:4d:f6:02:ca:bc:a1:e6:98:e6:3f:56:5e:08:8d: ec:e7:2b:71:ac:d6:98:46:0b:2e:8e:5f:5b:7f:91: 86:0d:9f:54:66:33:cf:d0:d6:87:c2:b8:7d:f8:ef: 76:f9:a3:62:e1:22:03:26:98:6f:83:f8:8b:44:ce: 47:2d:58:02:04:ee:f8:0e:32:3e:64:72:b4:28:1a: 67:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:17:A3:2E:30:1E:AC:AA:B5:CA:CE:F9:E4:A3:8D:CD:F4:B3:82:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/dab4f573-bf8a-3738-9694-b55138019840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 129.41.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:18:07:89:0f:bd:3c:73:91:dc:d3:61:e3:12:d5:a0:a5:a6: fa:5b:0d:c2:c7:38:88:6d:fb:80:b4:b3:4e:3f:4d:d5:83:6d: ee:32:d7:61:44:c0:e9:ad:19:6a:01:9c:3a:fc:9d:94:1b:8a: b8:63:ed:a2:73:05:05:ce:08:47:b9:d1:d2:74:c2:50:03:f1: 74:0f:57:a8:2c:23:47:c1:94:f9:33:c4:a7:28:7e:6a:60:89: a3:98:9a:eb:bf:55:ca:72:77:1b:bd:42:02:01:bc:32:8d:52: bc:c0:a4:7a:70:24:1d:00:34:7f:32:0f:2a:40:d9:39:ed:10: 1d:6c:5c:f2:6e:f8:74:87:06:f6:cf:d4:44:ac:f4:14:67:f4: a8:1d:2e:77:16:c0:f2:29:d5:51:39:f6:3d:dc:ef:6b:8c:2b: a9:b3:e1:e2:7a:af:16:54:1b:98:e4:23:2a:5b:bf:cc:df:da: b7:8f:8a:80:bb:35:a8:e0:d5:0b:3a:0a:42:b6:8f:31:7d:ed: da:e1:ce:cd:d2:74:91:93:28:bc:c0:94:95:7b:9c:7a:e7:7f: eb:7f:ce:b2:0f:de:56:99:43:8f:ba:92:fe:a5:69:c7:f6:41: cc:f9:5d:55:0a:4f:45:86:8d:6a:c2:10:de:b2:e8:ad:42:51: 04:39:33:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR6rBpqArUwduEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZGJhZTM5OTAtNDE5OC00ZDliLWE3OTMtMjBhOTlkZjdjMTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG7K4M02xL1u8KqEnaSIT25PWgSn6DKPaJql vK9Lh67lDATldhnSdVTBMNuxMn3gKPERcrQ/fbTqqqz4rIFj234+i2wjj2B5Y+qp IBNIVNS1LF0cIN37fyzWreo4xYKFuZ/ueIyCOTHSUy45/vI+6fmL6+84APw79s5b lY4uiaSpv5aHf/n1AG50OMbdt1E3DkD24sUyRpB6iQTtdkgHbMaYPe9DLI09i9/W 7yRIyIR0xUHvTfYCyryh5pjmP1ZeCI3s5ytxrNaYRgsujl9bf5GGDZ9UZjPP0NaH wrh9+O92+aNi4SIDJphvg/iLRM5HLVgCBO74DjI+ZHK0KBpndwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMXoy4wHqyqtcrO+eSjjc30s4IbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvZGFiNGY1NzMtYmY4YS0z NzM4LTk2OTQtYjU1MTM4MDE5ODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsYB4kPvTxzkdzTYeMS1aClpvpbDcLHOIht+4C0s04/TdWDbe4y12FE wOmtGWoBnDr8nZQbirhj7aJzBQXOCEe50dJ0wlAD8XQPV6gsI0fBlPkzxKcofmpg iaOYmuu/Vcpydxu9QgIBvDKNUrzApHpwJB0ANH8yDypA2TntEB1sXPJu+HSHBvbP 1ESs9BRn9KgdLncWwPIp1VE59j3c72uMK6mz4eJ6rxZUG5jkIypbv8zf2rePioC7 Najg1Qs6CkK2jzF97drhzs3SdJGTKLzAlJV7nHrnf+t/zrIP3laZQ4+6kv6lacf2 Qcz5XVUKT0WGjWrCEN6y6K1CUQQ5MwM= -----END CERTIFICATE-----Generated at Mon Mar 2 20:15:48 2026 by rpki-client