$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/c058fc98-65f7-3486-8b73-3e4835cd630c.roa File: c058fc98-65f7-3486-8b73-3e4835cd630c.roa (raw, json) Hash identifier: 5Q3Gdn2nkXJkMrmNqB4+d8xQUL0Nvi0/5oCb7nkJ2ZM= Subject key identifier: 71:E9:E9:98:8D:82:37:CA:38:F9:BD:30:15:F8:62:A8:B9:23:35:6C Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584E38C9C54303053739B7280DF0 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/c058fc98-65f7-3486-8b73-3e4835cd630c.roa Signing time: Fri 19 Jun 2026 09:00:12 +0000 ROA not before: Fri 19 Jun 2026 09:00:12 +0000 ROA not after: Thu 17 Sep 2026 09:00:12 +0000 asID: 17390 IP address blocks: 129.41.8.0/24 maxlen: 24 170.224.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:38:c9:c5:43:03:05:37:39:b7:28:0d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Jun 19 09:00:12 2026 GMT Not After : Sep 17 09:00:12 2026 GMT Subject: CN=eb7c0b21-84dc-4cec-8926-9f087bc2a9ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9f:fc:56:e5:40:91:7c:73:10:16:7a:63:0d: 4e:82:28:d7:07:93:e0:02:86:07:ed:53:56:5f:fc: 21:74:75:a1:d7:07:aa:e4:82:a2:7a:f7:94:d3:89: 47:24:55:e1:92:42:73:ca:bf:03:b7:f1:d6:26:07: 9d:d6:18:6c:2c:67:39:2b:03:e8:e7:79:f7:8a:7f: a1:ef:33:9e:fb:05:5f:7a:e5:ac:3d:67:a6:dd:25: ae:20:40:e7:09:ea:17:f0:97:2a:d4:aa:7f:21:c5: 06:bc:e9:d1:5f:98:0e:12:e2:61:35:b9:78:0d:35: 54:12:1d:8b:0d:68:a6:0f:2e:0e:6c:be:f2:96:68: 30:28:01:48:38:04:9c:62:5e:5b:20:63:5e:ac:8d: b3:1a:a6:56:35:2e:a1:39:c0:e7:da:fb:17:b0:db: 1c:03:d5:c3:b5:27:0a:f9:98:7f:11:7e:1a:cb:d4: bf:b4:dc:96:bc:9f:bf:47:dd:c1:55:53:ce:36:f4: 90:32:aa:27:82:93:6a:1b:18:ed:a5:48:4a:74:bc: b2:01:38:8a:8c:b5:cf:51:d1:8c:43:81:fb:8a:3c: 91:f4:b0:ab:10:c5:0d:31:5c:e2:e1:84:97:dd:3a: de:e5:3b:c3:82:d4:90:c3:15:8f:b6:ef:6d:be:6e: ed:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E9:E9:98:8D:82:37:CA:38:F9:BD:30:15:F8:62:A8:B9:23:35:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/c058fc98-65f7-3486-8b73-3e4835cd630c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 129.41.8.0/24 170.224.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d3:00:b9:27:9d:98:63:f1:7d:2d:8c:81:2e:3f:d1:79:17: 2a:69:6f:83:14:52:38:b6:dd:f2:52:85:89:10:84:c8:ee:98: 4b:54:c5:7f:af:55:6e:82:69:72:49:50:79:c6:30:7d:52:b4: 9c:fc:bf:f3:08:ed:5e:04:49:d0:cf:5e:d4:d2:cc:3b:19:e1: d6:2f:c4:ba:ae:8c:2f:a5:4c:fa:82:32:13:54:b8:cb:f5:d5: cb:d5:ae:7a:8b:f1:de:61:dd:5d:85:4e:8d:87:a6:d4:60:23: 2f:56:6e:28:02:17:52:42:e6:7c:03:57:64:00:36:af:45:21: 2b:94:3c:5e:07:85:a1:2e:2f:98:ce:d0:c4:30:4e:8c:bb:78: 44:32:06:b8:99:15:91:7b:29:9f:48:3f:40:f9:72:37:67:2b: 40:f5:51:14:1b:55:7b:ed:23:c9:00:36:53:ce:39:2e:2c:83: ec:0f:f2:25:cc:e5:ad:af:a2:f0:74:c3:cf:d7:51:3d:2a:e9: ba:8c:c8:62:93:a1:a4:1c:31:ef:a7:17:12:85:70:21:b8:71: ae:f6:35:d5:2c:14:4a:02:2f:45:28:58:5c:38:a1:8e:5c:c9: 6e:ca:93:a6:fd:5d:74:fc:bd:b9:09:04:3c:4f:14:20:56:9c: 07:4b:d1:e5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE44ycVDAwU3ObcoDfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDYxOTA5MDAxMloXDTI2MDkxNzA5MDAxMlowLzEtMCsGA1UEAxMk ZWI3YzBiMjEtODRkYy00Y2VjLTg5MjYtOWYwODdiYzJhOWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ/8VuVAkXxzEBZ6Yw1OgijXB5PgAoYH7VNW X/whdHWh1weq5IKieveU04lHJFXhkkJzyr8Dt/HWJged1hhsLGc5KwPo53n3in+h 7zOe+wVfeuWsPWem3SWuIEDnCeoX8Jcq1Kp/IcUGvOnRX5gOEuJhNbl4DTVUEh2L DWimDy4ObL7ylmgwKAFIOAScYl5bIGNerI2zGqZWNS6hOcDn2vsXsNscA9XDtScK +Zh/EX4ay9S/tNyWvJ+/R93BVVPONvSQMqongpNqGxjtpUhKdLyyATiKjLXPUdGM Q4H7ijyR9LCrEMUNMVzi4YSX3Tre5TvDgtSQwxWPtu9tvm7tpQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHHp6ZiNgjfKOPm9MBX4Yqi5IzVsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvYzA1OGZjOTgtNjVmNy0z NDg2LThiNzMtM2U0ODM1Y2Q2MzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgSkIAwQA quCYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFrTALknnZhj8X0tjIEuP9F5Fyppb4MUUji23fJShYkQhMju mEtUxX+vVW6CaXJJUHnGMH1StJz8v/MI7V4ESdDPXtTSzDsZ4dYvxLqujC+lTPqC MhNUuMv11cvVrnqL8d5h3V2FTo2HptRgIy9WbigCF1JC5nwDV2QANq9FISuUPF4H haEuL5jO0MQwToy7eEQyBriZFZF7KZ9IP0D5cjdnK0D1URQbVXvtI8kANlPOOS4s g+wP8iXM5a2vovB0w8/XUT0q6bqMyGKToaQcMe+nFxKFcCG4ca72NdUsFEoCL0Uo WFw4oY5cyW7Kk6b9XXT8vbkJBDxPFCBWnAdL0eU= -----END CERTIFICATE-----Generated at Sat Jun 20 05:25:59 2026 by rpki-client