$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa File: 8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa (raw, json) Hash identifier: WKq8G/TrnEeUMHlwY2EsNJdCuOFXV6Wex5/z1ohzfTI= Subject key identifier: 26:63:7B:D1:0D:48:46:C3:89:3F:B1:DC:56:40:C6:B8:E3:D8:A8:F8 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584B4617056F3C51364E943F20C0 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 129.41.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:17:05:6f:3c:51:36:4e:94:3f:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=39939cc1-9b66-496e-b15e-b22bdceb7922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ad:8d:0b:bc:c7:79:b4:f0:eb:be:1e:78:96: 54:51:a0:a0:ab:55:a8:fa:68:1a:eb:4d:3a:a4:ed: 8e:f1:f5:b4:93:fc:85:ea:9b:88:37:19:e4:a5:96: ab:07:e2:31:d9:f2:23:4a:44:9b:82:ca:97:db:ad: 32:41:02:ff:1b:c9:d5:79:18:23:b4:ec:10:02:dc: cb:79:6b:93:35:9c:3b:8b:fb:b8:76:b8:15:a1:40: 98:d8:1c:5c:d3:72:1e:3d:44:30:20:ce:20:d3:38: 28:98:b2:72:3e:2b:6b:27:65:b7:26:41:6d:c0:10: cc:4e:59:a8:40:c6:46:fc:c0:04:de:37:3c:e3:56: 5d:aa:7b:bd:c6:ae:c4:d9:6c:95:ed:fe:d8:d8:02: 24:c3:10:09:93:06:aa:0e:55:0f:60:e5:9b:30:16: 19:49:4c:89:ff:50:03:31:cb:8a:a9:da:ff:d2:e8: 44:92:1e:4c:a2:25:ba:79:f6:48:2d:68:05:5e:27: 86:7f:3f:da:db:7a:e1:20:9d:bb:c2:cb:9b:17:b4: 04:67:76:a9:2c:30:01:de:9e:d3:09:6b:11:63:f8: ef:69:18:a4:37:ec:9a:be:e4:48:51:04:51:9d:93: 81:0b:63:fc:02:98:d6:48:21:26:6d:0c:15:97:2e: f4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:63:7B:D1:0D:48:46:C3:89:3F:B1:DC:56:40:C6:B8:E3:D8:A8:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 129.41.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:57:e7:b9:74:42:a8:44:ac:7b:c2:86:99:ed:2a:fb:35:ae: 71:73:26:ab:b7:5f:0d:08:18:6f:cc:41:83:3f:e4:3b:c0:7b: e2:80:0d:cb:63:53:7d:b2:06:be:60:3f:50:c5:47:ac:46:42: eb:6f:43:6f:e6:cd:f7:e6:22:58:17:b7:0d:b0:f3:de:20:87: 60:13:30:11:0e:15:a2:5f:f4:da:14:ca:48:4f:29:bb:72:7d: a4:72:d0:4c:dd:93:6b:c2:54:da:77:f3:c3:79:0d:71:31:60: ce:20:e5:6b:e1:54:4a:36:0d:5e:bd:99:bf:4d:66:59:0c:7e: b5:53:ad:d8:5b:55:6b:94:11:3f:b6:72:8c:1c:77:84:c3:52: 3a:25:90:d6:8b:44:cd:9b:ed:d5:83:e0:80:2a:68:9c:07:f7: 1f:b0:27:14:35:41:d2:60:ff:c0:e8:03:e7:bf:1c:ed:d7:65: 41:e3:64:d5:f4:38:ab:a7:ec:f9:55:2c:82:2c:b4:6d:bd:20: 39:24:70:e2:a0:72:e5:44:25:80:93:b5:3f:06:d0:d3:b8:25: 59:04:89:84:75:18:07:3e:61:50:74:81:93:63:11:4f:90:8d: f0:cb:77:67:37:b1:17:53:5b:77:18:be:d6:49:ed:5f:62:34: b5:32:1d:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFwVvPFE2TpQ/IMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk Mzk5MzljYzEtOWI2Ni00OTZlLWIxNWUtYjIyYmRjZWI3OTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq2NC7zHebTw674eeJZUUaCgq1Wo+mga6006 pO2O8fW0k/yF6puINxnkpZarB+Ix2fIjSkSbgsqX260yQQL/G8nVeRgjtOwQAtzL eWuTNZw7i/u4drgVoUCY2Bxc03IePUQwIM4g0zgomLJyPitrJ2W3JkFtwBDMTlmo QMZG/MAE3jc841Zdqnu9xq7E2WyV7f7Y2AIkwxAJkwaqDlUPYOWbMBYZSUyJ/1AD McuKqdr/0uhEkh5MoiW6efZILWgFXieGfz/a23rhIJ27wsubF7QEZ3apLDAB3p7T CWsRY/jvaRikN+yavuRIUQRRnZOBC2P8ApjWSCEmbQwVly70FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZje9ENSEbDiT+x3FZAxrjj2Kj4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvOGY5YWNlNTItNzA2Yi0z ZDBkLWI5MDktZDJhYjM0YjFhOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9X57l0QqhErHvChpntKvs1rnFzJqu3Xw0IGG/MQYM/5DvAe+KADctj U32yBr5gP1DFR6xGQutvQ2/mzffmIlgXtw2w894gh2ATMBEOFaJf9NoUykhPKbty faRy0Ezdk2vCVNp388N5DXExYM4g5WvhVEo2DV69mb9NZlkMfrVTrdhbVWuUET+2 cowcd4TDUjolkNaLRM2b7dWD4IAqaJwH9x+wJxQ1QdJg/8DoA+e/HO3XZUHjZNX0 OKun7PlVLIIstG29IDkkcOKgcuVEJYCTtT8G0NO4JVkEiYR1GAc+YVB0gZNjEU+Q jfDLd2c3sRdTW3cYvtZJ7V9iNLUyHaI= -----END CERTIFICATE-----Generated at Mon Oct 20 10:33:32 2025 by rpki-client