$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0578337a-fdcb-36c1-b6a6-64d7a5c2a944.roa File: 0578337a-fdcb-36c1-b6a6-64d7a5c2a944.roa (raw, json) Hash identifier: U+Gq3fbBT0t5C46HujV5eZFWIjeADhPWnu/DlkHttUQ= Subject key identifier: 25:B2:2E:44:98:96:57:3F:1F:A0:E0:41:6B:99:F8:C8:49:1B:B5:74 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584D4A8FA4B95F521330584862C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0578337a-fdcb-36c1-b6a6-64d7a5c2a944.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 129.41.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a4:b9:5f:52:13:30:58:48:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=95345f2a-2d06-4459-9e24-f906fedceca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6c:cc:21:e0:57:2c:f2:16:1b:69:66:82:1a: 2f:b1:45:c1:70:91:a7:eb:07:b2:35:f7:1d:bd:12: a3:74:a7:a5:22:08:54:bc:19:e2:ce:e1:9b:f4:15: 3b:70:ce:51:da:a4:da:42:ff:e6:ae:42:a6:52:1d: 80:76:be:31:a6:3b:d6:d8:cd:68:a8:86:3d:4a:56: 5d:0b:12:5c:8d:af:f3:66:6a:3c:1b:26:b7:1a:b6: 2f:c4:ba:78:39:6d:a7:7c:44:16:d2:3d:7a:9f:93: 3c:f5:12:35:01:35:7b:17:b9:fd:a3:bd:cd:55:4e: a1:12:5b:2b:60:cf:91:dc:21:29:13:c6:6c:55:46: cd:d4:b8:b5:eb:d9:eb:df:b2:95:a3:33:aa:2b:d0: 68:70:66:05:df:15:1d:a9:f5:01:a8:d6:c6:34:e4: fb:e8:1d:a2:9b:f3:be:cb:c7:4e:05:d3:94:75:d1: a0:5c:11:8f:b5:45:57:87:2f:30:07:29:a5:49:0c: 63:0d:57:70:4d:72:dd:85:08:97:ef:ab:b5:02:f4: f6:70:c5:62:a6:62:88:f6:c9:14:58:11:81:df:33: 16:32:fb:13:e3:26:a7:15:ef:37:e2:fe:7c:bb:3f: 1b:83:24:e0:37:1d:e7:74:25:2e:3a:a3:5e:e9:36: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B2:2E:44:98:96:57:3F:1F:A0:E0:41:6B:99:F8:C8:49:1B:B5:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0578337a-fdcb-36c1-b6a6-64d7a5c2a944.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:99:09:b9:50:a6:26:79:d3:37:d8:1d:49:78:c5:c8:6c:d4: c5:1b:d2:54:1c:e2:3e:bc:73:70:67:e4:e4:01:49:9f:e4:7f: 30:e1:4b:47:3a:5f:34:ab:08:b5:f0:7a:94:ed:fd:14:fa:a8: 44:4a:65:b5:e0:38:16:dc:9f:5a:69:43:38:79:db:46:89:ac: cb:b3:f5:fb:72:17:6c:41:c9:0c:52:e3:ef:21:f2:02:27:40: 60:d4:c9:bc:75:4c:de:e3:46:e7:79:d4:28:ef:d9:70:b6:ba: 4f:20:4a:ee:54:9c:71:e2:7a:f5:dd:fb:bc:17:f9:5b:03:a2: 3b:8f:27:d7:85:4b:ba:4b:ef:13:68:41:45:11:2d:99:48:a1: 46:af:63:1d:cf:f9:c3:6e:d2:b0:30:4a:23:54:88:38:05:80: 51:46:2e:3f:a1:e5:d4:77:7d:69:8a:e9:59:2f:63:e4:e3:9a: cd:56:1b:d8:0c:ae:ea:b5:9c:1b:c9:7f:6f:c5:cf:3b:32:85: 64:dc:93:43:3c:e3:94:f6:a9:9f:a7:ab:3b:25:49:6d:c4:44: f4:98:b6:b3:2f:7a:2c:c1:dc:f1:e3:90:2b:ac:ed:16:43:a7: 04:df:1f:ac:1c:d9:5c:89:42:11:e3:ae:2a:47:48:d8:8e:ed: 20:8a:b2:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6S5X1ITMFhIYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk OTUzNDVmMmEtMmQwNi00NDU5LTllMjQtZjkwNmZlZGNlY2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmzMIeBXLPIWG2lmghovsUXBcJGn6weyNfcd vRKjdKelIghUvBnizuGb9BU7cM5R2qTaQv/mrkKmUh2Adr4xpjvW2M1oqIY9SlZd CxJcja/zZmo8Gya3GrYvxLp4OW2nfEQW0j16n5M89RI1ATV7F7n9o73NVU6hElsr YM+R3CEpE8ZsVUbN1Li169nr37KVozOqK9BocGYF3xUdqfUBqNbGNOT76B2im/O+ y8dOBdOUddGgXBGPtUVXhy8wBymlSQxjDVdwTXLdhQiX76u1AvT2cMVipmKI9skU WBGB3zMWMvsT4yanFe834v58uz8bgyTgNx3ndCUuOqNe6TZAbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWyLkSYllc/H6DgQWuZ+MhJG7V0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMDU3ODMzN2EtZmRjYi0z NmMxLWI2YTYtNjRkN2E1YzJhOTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSmnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOZCblQpiZ50zfYHUl4xchs1MUb0lQc4j68c3Bn5OQBSZ/kfzDhS0c6 XzSrCLXwepTt/RT6qERKZbXgOBbcn1ppQzh520aJrMuz9ftyF2xByQxS4+8h8gIn QGDUybx1TN7jRud51Cjv2XC2uk8gSu5UnHHievXd+7wX+VsDojuPJ9eFS7pL7xNo QUURLZlIoUavYx3P+cNu0rAwSiNUiDgFgFFGLj+h5dR3fWmK6VkvY+Tjms1WG9gM ruq1nBvJf2/FzzsyhWTck0M845T2qZ+nqzslSW3ERPSYtrMveizB3PHjkCus7RZD pwTfH6wc2VyJQhHjripHSNiO7SCKsv8= -----END CERTIFICATE-----Generated at Thu Mar 26 03:48:13 2026 by rpki-client