$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/04ec7425-cefd-36db-9516-40e01881cc8c.roa File: 04ec7425-cefd-36db-9516-40e01881cc8c.roa (raw, json) Hash identifier: L1KkZt4JGz0XZZ5LCI421nZdPJykkGOfqAkHDIp6L+0= Subject key identifier: 9E:4C:13:49:7E:7A:B3:CE:5E:7C:FF:77:89:9B:4E:63:DE:3D:C1:21 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584F498772CCB00F10962E4E3600 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/04ec7425-cefd-36db-9516-40e01881cc8c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 129.41.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:72:cc:b0:0f:10:96:2e:4e:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=96e064e2-09ce-41cb-8ed3-439bb74c8b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:be:b1:07:2a:85:79:ae:64:1f:9a:29:68:15: 3c:15:be:3b:e8:58:4a:2e:d2:0d:77:42:ff:4d:66: 8f:22:8d:02:2d:87:81:7e:10:3a:7f:ea:4f:a2:ee: 4d:5d:ec:0d:01:9a:ac:c7:c5:6f:16:8b:18:06:08: 34:21:9c:02:32:6b:1e:be:0a:55:2f:dc:de:f9:3f: 9a:5f:8f:8e:c7:ef:23:06:26:25:33:99:7f:19:fc: 55:e4:2a:98:e2:75:c5:c5:e8:7e:4e:08:fa:75:29: ea:12:1c:7c:4d:6f:3e:05:73:21:61:2d:1c:2f:e3: 36:ad:a7:84:b3:80:ee:c5:36:3a:94:80:b4:9f:3c: bb:e0:3d:17:d6:d3:34:35:89:63:46:f5:6d:e1:a0: f4:fa:b8:68:d3:f4:37:97:bc:8b:6c:c7:5c:ba:f2: 9e:ce:1b:1c:14:af:6a:61:6b:86:4e:07:0c:5d:31: 35:f3:e2:fe:18:df:af:26:d2:b6:cd:6e:82:f4:d2: 1d:1f:89:08:f2:c5:24:93:01:82:d0:a6:aa:23:66: 8f:63:e1:2c:97:ca:55:93:da:1f:54:8f:f9:b7:7c: 41:88:c3:04:0c:08:00:75:49:12:7c:01:b7:a7:15: 45:92:a4:a9:c9:c0:09:3d:92:bd:96:7f:ae:b8:35: 92:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4C:13:49:7E:7A:B3:CE:5E:7C:FF:77:89:9B:4E:63:DE:3D:C1:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/04ec7425-cefd-36db-9516-40e01881cc8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 129.41.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:05:c7:13:fe:c1:38:60:f9:d6:06:ae:fc:95:ae:3f:f6:1d: 73:31:22:69:a3:78:99:0c:96:3c:98:fc:a8:df:55:c2:5e:25: ab:cc:f0:9a:8f:f0:0d:e1:94:67:7b:cc:2b:c0:83:9f:40:2c: ed:82:bc:62:98:b8:da:94:f6:fc:4d:28:81:3b:c9:68:f5:21: da:a2:84:ba:38:a4:fb:30:1f:39:28:0d:43:61:35:74:68:d4: a5:a3:5f:28:30:c9:d0:4c:ff:75:27:fd:27:54:83:cc:1a:52: 9e:5f:be:31:d0:5c:f8:81:5a:61:07:e1:4f:e6:ad:1d:2d:dc: 1c:75:6c:29:3e:f0:3e:95:8a:bc:32:bc:1d:80:b2:12:3a:2c: 16:05:8f:56:65:96:2f:05:e9:9f:5c:8d:98:98:7e:2e:9f:fe: bf:e0:ab:22:bf:08:08:ce:c2:21:ed:75:08:df:ea:5b:fa:d4: 46:a7:40:67:db:c4:3a:94:d8:bd:ae:3d:5e:56:b3:7e:aa:e5: 88:c8:1c:41:25:4d:76:9d:13:6d:ee:2c:b3:79:ef:a8:74:24: 27:1f:77:71:ba:b3:00:ba:d1:35:08:25:56:0d:12:7f:e2:d3: 84:1b:6f:93:55:5a:39:a1:fb:36:71:9b:bf:33:d1:9a:13:fd: 2b:4c:81:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh3LMsA8Qli5ONgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTZlMDY0ZTItMDljZS00MWNiLThlZDMtNDM5YmI3NGM4YjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr6xByqFea5kH5opaBU8Fb476FhKLtINd0L/ TWaPIo0CLYeBfhA6f+pPou5NXewNAZqsx8VvFosYBgg0IZwCMmsevgpVL9ze+T+a X4+Ox+8jBiYlM5l/GfxV5CqY4nXFxeh+Tgj6dSnqEhx8TW8+BXMhYS0cL+M2raeE s4DuxTY6lIC0nzy74D0X1tM0NYljRvVt4aD0+rho0/Q3l7yLbMdcuvKezhscFK9q YWuGTgcMXTE18+L+GN+vJtK2zW6C9NIdH4kI8sUkkwGC0KaqI2aPY+Esl8pVk9of VI/5t3xBiMMEDAgAdUkSfAG3pxVFkqSpycAJPZK9ln+uuDWSFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5ME0l+erPOXnz/d4mbTmPePcEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvMDRlYzc0MjUtY2VmZC0z NmRiLTk1MTYtNDBlMDE4ODFjYzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIFxxP+wThg+dYGrvyVrj/2HXMxImmjeJkMljyY/KjfVcJeJavM8JqP 8A3hlGd7zCvAg59ALO2CvGKYuNqU9vxNKIE7yWj1IdqihLo4pPswHzkoDUNhNXRo 1KWjXygwydBM/3Un/SdUg8waUp5fvjHQXPiBWmEH4U/mrR0t3Bx1bCk+8D6Virwy vB2AshI6LBYFj1Zlli8F6Z9cjZiYfi6f/r/gqyK/CAjOwiHtdQjf6lv61EanQGfb xDqU2L2uPV5Ws36q5YjIHEElTXadE23uLLN576h0JCcfd3G6swC60TUIJVYNEn/i 04Qbb5NVWjmh+zZxm78z0ZoT/StMgbs= -----END CERTIFICATE-----Generated at Tue Sep 29 06:53:13 2026 by rpki-client