$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa File: 8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa (raw, json) Hash identifier: /fh+X2dWKGAEoKYH8AOMLGOdYHYfRe0u3UfZIrEhnqM= Subject key identifier: 46:5E:0C:0C:1A:C6:F5:31:2B:D7:22:F7:D6:8C:E8:49:84:3D:89:D9 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584EA7917ABD350C91768C99E480 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14618 IP address blocks: 129.41.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:7a:bd:35:0c:91:76:8c:99:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ecdd046a-fcd1-4235-a538-18d41f88dbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3a:37:0c:ae:0f:c7:eb:fb:0f:94:69:48:11: 39:67:8f:bc:f4:b7:9f:88:7e:0f:93:e5:78:fe:98: 89:6c:63:6b:1e:2e:ee:7d:21:1a:86:82:ec:d7:91: 64:d1:63:40:0d:3c:aa:fa:37:30:07:e4:21:a1:3b: 56:a5:65:7d:b7:9a:df:a6:e4:28:b1:67:b6:55:a1: 5f:31:f3:51:8b:52:37:93:ef:9b:e1:c5:1b:a9:56: cc:2a:ca:2e:47:bd:64:dc:f3:02:83:21:59:71:a2: 8f:57:b7:27:8a:d6:01:99:75:34:eb:f0:b5:5d:cf: 1a:78:73:8f:cc:3e:f2:8d:cf:5c:51:66:37:40:db: b9:31:95:de:a1:55:c7:0b:c9:b2:04:85:f5:f3:de: 83:0a:4e:32:aa:92:ce:eb:b5:9e:ab:e3:d3:8b:87: 6b:51:fc:b4:21:7c:20:ef:4f:81:54:8d:70:cd:cd: 90:ac:a5:86:6a:31:19:06:70:8b:24:4a:27:97:f0: b3:d7:a9:00:8c:07:55:34:a9:b5:df:5d:d0:98:99: b3:e9:46:00:3d:eb:dc:18:28:13:d3:63:00:c7:f1: 8e:86:26:11:fb:c2:02:e7:f9:70:49:02:42:7d:5f: 56:26:56:4b:c4:f2:50:4c:16:54:56:33:9f:25:37: b7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5E:0C:0C:1A:C6:F5:31:2B:D7:22:F7:D6:8C:E8:49:84:3D:89:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 129.41.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:db:b3:fe:60:9e:8b:a3:52:50:08:0d:45:10:c9:df:07:98: d7:9d:3f:c3:3b:4d:1d:64:78:15:96:78:96:f8:89:db:f8:0e: 79:1e:bd:e5:b0:d6:33:50:ae:b3:f1:29:f7:b1:94:37:40:b7: 06:80:56:82:ff:e5:b2:e6:09:ae:f6:50:af:0d:ef:f7:ab:8c: 8a:c8:a3:73:9a:7e:aa:b5:82:03:cd:53:6c:5d:d9:3e:57:21: 3e:17:a8:45:b9:94:85:fc:ce:f9:ad:95:d9:1d:47:c5:78:35: ab:cd:c2:cb:1f:ee:0b:3f:d3:83:70:b1:02:22:b5:34:c3:79: f1:4f:5e:af:6d:06:cc:4f:6f:f3:06:fd:08:f1:80:7e:02:57: 1b:08:e0:d3:a9:c8:e3:80:3b:16:fb:fa:8f:03:69:8b:6e:67: 88:5f:c4:18:15:65:d3:b7:e3:bf:e7:cc:5c:86:cf:11:ca:3a: 40:d9:86:be:91:4a:df:0e:32:66:72:cb:04:ec:65:6c:ad:23: 5e:f7:6d:0b:e2:89:a6:44:51:7c:bb:af:66:cd:5a:2e:65:02: e7:3c:d8:df:95:85:2b:1a:63:a8:46:30:5f:df:d4:7f:af:3b: 38:60:6b:6e:e7:bf:80:17:25:ac:c2:b7:0d:4b:23:4c:e5:61: 19:60:f6:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkXq9NQyRdoyZ5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWNkZDA0NmEtZmNkMS00MjM1LWE1MzgtMThkNDFmODhkYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjo3DK4Px+v7D5RpSBE5Z4+89LefiH4Pk+V4 /piJbGNrHi7ufSEahoLs15Fk0WNADTyq+jcwB+QhoTtWpWV9t5rfpuQosWe2VaFf MfNRi1I3k++b4cUbqVbMKsouR71k3PMCgyFZcaKPV7cnitYBmXU06/C1Xc8aeHOP zD7yjc9cUWY3QNu5MZXeoVXHC8myBIX1896DCk4yqpLO67Weq+PTi4drUfy0IXwg 70+BVI1wzc2QrKWGajEZBnCLJEonl/Cz16kAjAdVNKm1313QmJmz6UYAPevcGCgT 02MAx/GOhiYR+8IC5/lwSQJCfV9WJlZLxPJQTBZUVjOfJTe3DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZeDAwaxvUxK9ci99aM6EmEPYnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvOGY5YWNlNTItNzA2Yi0z ZDBkLWI5MDktZDJhYjM0YjFhOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPbs/5gnoujUlAIDUUQyd8HmNedP8M7TR1keBWWeJb4idv4DnkeveWw 1jNQrrPxKfexlDdAtwaAVoL/5bLmCa72UK8N7/erjIrIo3Oafqq1ggPNU2xd2T5X IT4XqEW5lIX8zvmtldkdR8V4NavNwssf7gs/04NwsQIitTTDefFPXq9tBsxPb/MG /QjxgH4CVxsI4NOpyOOAOxb7+o8DaYtuZ4hfxBgVZdO347/nzFyGzxHKOkDZhr6R St8OMmZyywTsZWytI173bQviiaZEUXy7r2bNWi5lAuc82N+VhSsaY6hGMF/f1H+v Ozhga27nv4AXJazCtw1LI0zlYRlg9vA= -----END CERTIFICATE-----Generated at Tue Aug 4 22:54:20 2026 by rpki-client