$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/73444b36-9ee3-313a-9eda-5f9a96351220.roa File: 73444b36-9ee3-313a-9eda-5f9a96351220.roa (raw, json) Hash identifier: BN/GTz9lWnPnbnodBpVYKa/g7K54q1SqHQj8vMkUFbs= Subject key identifier: E3:32:C5:F6:D5:FC:F7:32:F1:38:B5:0A:FA:08:F9:89:65:41:62:FB Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584F4987210BCE06DBEBF29DEC80 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/73444b36-9ee3-313a-9eda-5f9a96351220.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 129.41.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:21:0b:ce:06:db:eb:f2:9d:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9720e665-2ba3-43cf-a089-097462f837ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:46:31:b8:92:fe:0a:b9:cc:71:a8:36:28:9c: fb:9c:b3:bc:ea:ad:a1:f6:d8:22:0e:c6:ac:f6:fd: fe:2e:0c:e4:1a:04:58:ea:08:29:c0:d7:fa:ca:da: 56:8c:06:b7:7f:df:13:76:35:a0:3c:f6:40:85:ea: 8d:17:54:da:6e:14:20:7a:c9:c8:cd:b6:74:66:08: 24:c0:88:24:f0:ac:12:8e:d6:ae:f3:d0:fa:68:fc: f8:6f:09:cc:d9:e4:7b:b8:22:a6:09:10:eb:a4:a4: 66:34:8a:d7:6d:96:74:4c:27:91:b4:69:6d:40:bd: 14:7f:65:bd:a0:86:08:52:04:29:74:ee:9e:af:1c: ba:1f:02:ca:07:2b:1b:76:c9:47:6d:9b:ba:6e:d2: eb:9e:56:70:41:37:88:4d:f0:be:1c:2b:bd:20:06: aa:c9:df:ae:28:2d:18:eb:f5:b0:0f:4a:81:a9:0b: 83:5d:41:0f:58:82:21:aa:cf:da:d1:ec:83:45:ff: ba:0f:a1:e6:f8:75:ba:ad:8d:c7:42:81:7a:8d:7f: 5f:50:70:1e:59:35:8d:67:24:5f:86:2b:72:41:ff: 59:5a:e9:1f:67:64:c9:df:8d:ab:5e:7d:1b:eb:67: bb:84:3a:f9:bd:8a:36:5d:3b:18:9e:91:c6:39:a7: 55:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:32:C5:F6:D5:FC:F7:32:F1:38:B5:0A:FA:08:F9:89:65:41:62:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/73444b36-9ee3-313a-9eda-5f9a96351220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 129.41.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:4a:0a:4d:62:21:21:02:ee:4c:bc:7e:a8:3a:16:32:40:ef: 6e:41:d2:bb:32:d4:28:f4:a2:c9:1f:48:3f:09:b8:e2:d0:13: 43:44:a0:91:9b:eb:d5:20:01:20:5b:d4:d4:4f:64:4f:5d:ad: d5:7f:bb:2d:41:2b:6a:c3:49:a4:5c:84:a3:db:f7:f6:86:13: c8:28:9c:92:a6:a1:7d:c3:89:f1:92:14:48:5f:45:c2:e5:5e: a7:ef:6a:93:43:10:64:83:7c:58:b3:6c:23:d2:05:76:f1:bb: 86:85:6a:76:6a:28:03:8e:0d:66:43:cf:b6:3a:df:40:bd:af: 9d:e7:96:ea:e7:bc:d1:06:f5:48:f1:81:e9:e3:74:b2:75:a0: 89:e6:f8:04:7c:e2:c4:11:6b:d6:b6:87:98:91:92:3e:d0:71: 0a:28:6e:25:a8:c0:50:b0:bb:e4:a6:e3:0f:28:ce:b5:2f:de: 62:26:e5:c9:12:a6:9d:1d:6c:a7:76:20:f6:39:8a:4f:8d:fc: 0e:36:4b:b9:2c:57:41:23:07:db:91:f8:ed:3b:f7:ce:62:72: 5d:0e:5f:6d:ee:1b:7d:90:77:0e:fc:05:ef:c3:75:6d:f8:c4: 94:a5:37:f8:3f:4e:69:67:64:de:4e:8f:22:5e:00:34:c9:0a: 72:bc:2c:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhyELzgbb6/Kd7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTcyMGU2NjUtMmJhMy00M2NmLWEwODktMDk3NDYyZjgzN2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEYxuJL+CrnMcag2KJz7nLO86q2h9tgiDsas 9v3+LgzkGgRY6ggpwNf6ytpWjAa3f98TdjWgPPZAheqNF1TabhQgesnIzbZ0Zggk wIgk8KwSjtau89D6aPz4bwnM2eR7uCKmCRDrpKRmNIrXbZZ0TCeRtGltQL0Uf2W9 oIYIUgQpdO6erxy6HwLKBysbdslHbZu6btLrnlZwQTeITfC+HCu9IAaqyd+uKC0Y 6/WwD0qBqQuDXUEPWIIhqs/a0eyDRf+6D6Hm+HW6rY3HQoF6jX9fUHAeWTWNZyRf hityQf9ZWukfZ2TJ342rXn0b62e7hDr5vYo2XTsYnpHGOadVnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMyxfbV/Pcy8Ti1CvoI+YllQWL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvNzM0NDRiMzYtOWVlMy0z MTNhLTllZGEtNWY5YTk2MzUxMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxKCk1iISEC7ky8fqg6FjJA725B0rsy1Cj0oskfSD8JuOLQE0NEoJGb 69UgASBb1NRPZE9drdV/uy1BK2rDSaRchKPb9/aGE8gonJKmoX3DifGSFEhfRcLl XqfvapNDEGSDfFizbCPSBXbxu4aFanZqKAOODWZDz7Y630C9r53nlurnvNEG9Ujx genjdLJ1oInm+AR84sQRa9a2h5iRkj7QcQoobiWowFCwu+Sm4w8ozrUv3mIm5ckS pp0dbKd2IPY5ik+N/A42S7ksV0EjB9uR+O07985icl0OX23uG32Qdw78Be/DdW34 xJSlN/g/TmlnZN5OjyJeADTJCnK8LFM= -----END CERTIFICATE-----Generated at Sun Sep 27 19:11:21 2026 by rpki-client