$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/dab4f573-bf8a-3738-9694-b55138019840.roa File: dab4f573-bf8a-3738-9694-b55138019840.roa (raw, json) Hash identifier: ClCYw47pZbUptV7lIuz0THB3fWP1cyhueAqNZzhc4AQ= Subject key identifier: B2:C1:FF:47:BE:80:BE:8F:65:89:E9:87:85:3E:0D:81:6D:65:D8:BF Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584B4617055D5E8C98C566EA0480 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/dab4f573-bf8a-3738-9694-b55138019840.roa Signing time: Mon 22 Sep 2025 01:00:33 +0000 ROA not before: Mon 22 Sep 2025 01:00:33 +0000 ROA not after: Sun 21 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 129.41.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:17:05:5d:5e:8c:98:c5:66:ea:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Sep 22 01:00:33 2025 GMT Not After : Dec 21 02:00:33 2025 GMT Subject: CN=85bbe00a-efca-4a6d-9448-a2dad5eaec24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:74:1d:26:c5:e6:8e:8c:b3:88:f3:6a:52:df: 0a:2d:c5:73:47:b9:82:e8:9f:0c:9a:ed:bc:83:76: 0b:28:9b:32:7f:48:e9:e6:c4:55:8e:8e:5f:cd:b6: b3:a9:bc:67:dc:62:2d:26:e3:15:77:54:ee:5f:cb: 0c:78:02:ea:6f:b9:14:aa:33:2a:12:be:c5:8d:0d: b1:f1:1c:45:27:65:f1:64:01:8e:66:01:d3:66:e3: f2:bf:d1:a0:78:1d:e8:29:a2:8e:1c:fe:c6:17:48: 2b:42:9b:49:e7:d4:96:99:26:da:64:77:4e:11:38: a7:32:19:67:97:9f:71:47:7d:5d:38:9e:bc:2e:6e: cc:77:20:c0:c3:9d:50:85:82:2e:97:36:36:fc:94: e8:7c:cb:c4:71:36:0b:23:81:5c:a8:bf:fa:5d:a1: 03:4a:1d:df:6d:8a:88:c3:ec:e6:1b:7d:ae:26:5a: 8f:66:c4:64:01:09:82:ef:9d:64:ce:5d:28:37:e7: c2:32:c0:30:9c:c4:90:3d:6b:24:1d:ba:c6:cd:28: 57:55:c1:e8:42:29:2f:11:d4:63:7b:5f:16:80:f2: c6:cb:58:71:3b:93:ba:32:f9:51:73:5d:5f:9a:8f: a9:62:35:8a:a4:eb:d4:f8:7c:14:37:21:15:23:3c: 86:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C1:FF:47:BE:80:BE:8F:65:89:E9:87:85:3E:0D:81:6D:65:D8:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/dab4f573-bf8a-3738-9694-b55138019840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 129.41.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:58:ea:cf:12:6d:c2:44:77:a1:92:2b:00:f2:e2:24:5d:03: 71:90:39:0d:b0:89:7e:97:c6:2b:84:ac:d8:ce:1b:30:dc:9c: 2b:62:fd:2f:15:d2:af:27:e4:e8:16:7f:84:a1:a1:18:6a:e1: 86:ff:2b:af:1a:f8:31:b6:21:27:37:24:ac:cf:cc:9b:b1:cb: c4:e8:45:6c:be:82:71:63:35:c3:75:9e:bf:83:6a:d9:4e:0a: 16:68:05:1c:85:85:d0:90:ba:fc:01:21:0b:82:17:6b:c2:fc: 84:86:b8:aa:fb:76:0c:b2:83:7e:57:98:7d:46:ad:87:af:8c: 52:8c:34:d2:42:ff:3b:70:d2:e7:99:53:9a:60:6f:43:c3:69: ff:d0:cc:88:2f:e0:66:2b:3a:46:54:c3:ae:d3:cc:44:79:f6: 2c:ac:2d:fb:7b:27:38:a5:51:3a:68:4f:d7:13:b1:62:d1:a0: c4:8c:4e:9d:d8:6c:1a:b1:7e:73:b0:a8:03:40:db:27:1d:8d: 3a:10:2b:85:2f:9b:41:5d:e3:d1:05:40:4d:4b:4b:d0:31:0d: 6a:b6:a1:a1:7a:5f:21:39:ec:56:b6:a3:3f:99:dd:49:61:f4: ba:93:11:35:b0:de:13:16:61:93:71:17:3f:ec:61:46:5d:45: a7:29:4f:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFwVdXoyYxWbqBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk ODViYmUwMGEtZWZjYS00YTZkLTk0NDgtYTJkYWQ1ZWFlYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3QdJsXmjoyziPNqUt8KLcVzR7mC6J8Mmu28 g3YLKJsyf0jp5sRVjo5fzbazqbxn3GItJuMVd1TuX8sMeALqb7kUqjMqEr7FjQ2x 8RxFJ2XxZAGOZgHTZuPyv9GgeB3oKaKOHP7GF0grQptJ59SWmSbaZHdOETinMhln l59xR31dOJ68Lm7MdyDAw51QhYIulzY2/JTofMvEcTYLI4FcqL/6XaEDSh3fbYqI w+zmG32uJlqPZsRkAQmC751kzl0oN+fCMsAwnMSQPWskHbrGzShXVcHoQikvEdRj e18WgPLGy1hxO5O6MvlRc11fmo+pYjWKpOvU+HwUNyEVIzyGRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLB/0e+gL6PZYnph4U+DYFtZdi/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvZGFiNGY1NzMtYmY4YS0z NzM4LTk2OTQtYjU1MTM4MDE5ODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJY6s8SbcJEd6GSKwDy4iRdA3GQOQ2wiX6XxiuErNjOGzDcnCti/S8V 0q8n5OgWf4ShoRhq4Yb/K68a+DG2ISc3JKzPzJuxy8ToRWy+gnFjNcN1nr+DatlO ChZoBRyFhdCQuvwBIQuCF2vC/ISGuKr7dgyyg35XmH1GrYevjFKMNNJC/ztw0ueZ U5pgb0PDaf/QzIgv4GYrOkZUw67TzER59iysLft7JzilUTpoT9cTsWLRoMSMTp3Y bBqxfnOwqANA2ycdjToQK4Uvm0Fd49EFQE1LS9AxDWq2oaF6XyE57Fa2oz+Z3Ulh 9LqTETWw3hMWYZNxFz/sYUZdRacpT2c= -----END CERTIFICATE-----Generated at Sun Oct 19 23:28:48 2025 by rpki-client