$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa File: aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa (raw, json) Hash identifier: 8XvaSKp5TuoVNuLDGmgXpgjaZQ9mjoA3TrRm6eO66mk= Subject key identifier: BA:26:DA:05:E8:C5:9A:49:27:E1:F3:2B:D0:97:97:A1:BE:EC:E1:43 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584C6B56A356F867DE042E544080 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa Signing time: Mon 05 Jan 2026 02:00:31 +0000 ROA not before: Mon 05 Jan 2026 02:00:31 +0000 ROA not after: Sun 05 Apr 2026 01:00:31 +0000 asID: 16509 IP address blocks: 129.41.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6b:56:a3:56:f8:67:de:04:2e:54:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 5 02:00:31 2026 GMT Not After : Apr 5 01:00:31 2026 GMT Subject: CN=a76296a9-c50d-428a-8798-4cb5e0892c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1c:da:b6:43:4a:f7:ee:11:ec:51:8d:5c:b0: 91:0b:b3:04:aa:84:27:16:62:41:29:43:f6:9c:7b: 72:ea:b7:5d:2b:86:1d:b2:3c:42:c4:57:3d:3b:2a: 97:87:0f:31:d5:7f:29:26:24:3e:87:f5:77:88:d2: ec:6b:f8:8d:07:6e:1d:97:f5:76:7c:6c:40:cd:0d: 23:83:43:c1:f4:9c:69:4c:38:04:ad:ba:31:05:9a: 61:4c:2e:0f:71:ac:cb:bd:ca:6d:e4:b5:40:e9:b6: 0f:51:84:bd:ff:48:e0:c7:bd:e3:09:3a:a4:99:fb: 6d:2c:9f:ce:8d:10:ac:4c:b2:4f:72:9b:3f:05:9f: 07:21:eb:f9:60:32:38:24:1b:10:a6:f5:fb:76:e4: 67:30:c3:d0:d0:59:7f:cb:5c:fc:80:47:b5:f4:01: d4:94:76:7a:e9:ac:f5:87:82:57:65:3b:36:96:ac: 39:93:83:ee:c1:11:99:85:20:e2:9b:72:67:f7:fc: 2a:36:1f:04:ab:90:1d:d3:63:51:eb:55:af:21:28: eb:d4:94:97:21:14:b0:55:ea:85:f5:4c:39:50:e1: 8c:fc:51:59:2a:ba:e8:91:95:57:9d:12:7d:59:ec: 7c:4f:5d:a5:57:5a:fd:3f:4a:fa:a2:24:dc:b0:64: c8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:26:DA:05:E8:C5:9A:49:27:E1:F3:2B:D0:97:97:A1:BE:EC:E1:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:54:a1:ea:0e:cc:6a:21:95:20:2a:b2:d4:10:ee:16:28:25: 5d:31:3e:7f:40:58:a5:da:dd:77:6e:8a:ab:7b:d8:d0:2b:7d: ac:17:05:d6:e8:6e:6e:5d:f4:42:6f:be:6d:44:a5:30:8a:6a: 51:38:40:08:2f:00:50:e8:31:54:0e:e6:86:92:f9:5f:96:a7: fe:24:65:71:20:fa:7a:59:70:52:de:2d:9a:46:48:5c:cd:80: 48:65:d4:ba:76:80:dc:7a:46:95:19:60:db:d0:2d:1d:6a:32: 63:d3:52:28:65:c1:77:26:15:25:89:99:5c:af:34:05:00:37: 6d:56:3b:89:3e:88:a8:0b:18:a3:25:4c:bf:0d:51:ac:57:15: 46:2b:5a:ae:4f:66:aa:b9:86:9f:64:16:ce:ab:e0:3d:c4:39: 2f:a9:05:de:36:68:d0:32:2e:04:2d:0f:67:1a:f1:be:44:79: 25:40:b1:b3:48:fb:d4:59:63:3e:35:e1:42:ce:8b:57:52:f1: 99:9a:0a:e4:40:5a:e7:25:d4:f2:0e:16:44:11:a1:94:59:e9: 8f:e0:49:0f:8c:53:6c:42:45:ef:31:4c:66:3a:b4:c8:b7:8b: 7b:f4:c1:0b:1d:27:f9:da:78:ba:75:81:8f:18:5e:04:f4:cc: 71:60:4f:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExrVqNW+GfeBC5UQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDEwNTAyMDAzMVoXDTI2MDQwNTAxMDAzMVowLzEtMCsGA1UEAxMk YTc2Mjk2YTktYzUwZC00MjhhLTg3OTgtNGNiNWUwODkyYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBzatkNK9+4R7FGNXLCRC7MEqoQnFmJBKUP2 nHty6rddK4YdsjxCxFc9OyqXhw8x1X8pJiQ+h/V3iNLsa/iNB24dl/V2fGxAzQ0j g0PB9JxpTDgErboxBZphTC4PcazLvcpt5LVA6bYPUYS9/0jgx73jCTqkmfttLJ/O jRCsTLJPcps/BZ8HIev5YDI4JBsQpvX7duRnMMPQ0Fl/y1z8gEe19AHUlHZ66az1 h4JXZTs2lqw5k4PuwRGZhSDim3Jn9/wqNh8Eq5Ad02NR61WvISjr1JSXIRSwVeqF 9Uw5UOGM/FFZKrrokZVXnRJ9Wex8T12lV1r9P0r6oiTcsGTIlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLom2gXoxZpJJ+HzK9CXl6G+7OFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYWViMzk5MGItNWQ0OS0z OTY1LTkxZGEtOWJjYzhlNWY3ZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9UoeoOzGohlSAqstQQ7hYoJV0xPn9AWKXa3Xduiqt72NArfawXBdbo bm5d9EJvvm1EpTCKalE4QAgvAFDoMVQO5oaS+V+Wp/4kZXEg+npZcFLeLZpGSFzN gEhl1Lp2gNx6RpUZYNvQLR1qMmPTUihlwXcmFSWJmVyvNAUAN21WO4k+iKgLGKMl TL8NUaxXFUYrWq5PZqq5hp9kFs6r4D3EOS+pBd42aNAyLgQtD2ca8b5EeSVAsbNI +9RZYz414ULOi1dS8ZmaCuRAWucl1PIOFkQRoZRZ6Y/gSQ+MU2xCRe8xTGY6tMi3 i3v0wQsdJ/naeLp1gY8YXgT0zHFgT1M= -----END CERTIFICATE-----Generated at Mon Mar 2 00:52:12 2026 by rpki-client