$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9a04c360-2582-30c3-8634-70c1a0fd710d.roa File: 9a04c360-2582-30c3-8634-70c1a0fd710d.roa (raw, json) Hash identifier: e7mOoqLltysLq+QoADDPZRQYRecPy4Sd3jKjh5vjNf0= Subject key identifier: 95:D2:BC:5C:49:37:1A:73:97:03:20:73:9C:E7:AF:FB:A0:E2:95:B1 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584D4A8F99109373418585131840 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9a04c360-2582-30c3-8634-70c1a0fd710d.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 129.41.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:99:10:93:73:41:85:85:13:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=92ea934b-d41d-402a-be85-44c3d3a7f018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ac:58:02:17:54:7f:b5:ea:2f:ce:4f:bd:2c: a4:3a:d8:7e:41:59:41:53:11:40:0c:fc:f6:d0:9f: 78:a7:81:25:de:0d:b4:9a:94:5a:83:11:75:7c:65: 5c:6e:d7:6c:ee:a6:ce:29:89:81:a8:5b:e8:58:8b: 00:e4:a5:9f:34:fa:76:d2:00:7a:25:51:22:04:92: 87:a6:dc:4a:58:96:34:94:f9:a8:0b:49:46:6e:58: 35:e4:7f:62:14:67:b8:e7:39:25:01:2a:d1:8a:f3: a8:dd:2b:3d:70:09:38:46:29:5e:f4:3c:1b:3a:c8: d8:6d:e6:65:e7:26:2d:61:ef:03:7c:7d:a9:a8:26: 56:6c:46:fa:f2:c6:ba:f7:bb:45:6f:09:a8:52:cb: d0:30:8c:46:f1:72:3f:50:3c:c3:ad:dc:d4:cc:0a: a1:42:bc:4c:77:72:3c:95:22:ac:7c:f6:4f:d3:94: c1:0f:40:6d:63:5b:c3:49:e5:e2:cf:c2:16:03:a7: 85:e9:2b:a3:c0:96:6f:33:c7:df:50:5d:70:a2:87: d4:35:23:01:4d:ac:f5:bc:7c:92:2f:39:48:fe:ca: 90:e8:31:b7:c7:83:c6:77:f3:a0:30:dc:ab:ca:e3: a3:eb:6d:fe:9f:50:d7:86:16:19:cb:e4:cb:39:4a: fe:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D2:BC:5C:49:37:1A:73:97:03:20:73:9C:E7:AF:FB:A0:E2:95:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9a04c360-2582-30c3-8634-70c1a0fd710d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:42:3d:be:2a:91:e4:fb:f8:3b:e3:93:0a:a2:8f:f7:1e:c7: 7d:e2:d0:b1:a0:e7:07:d1:8d:a9:5d:6a:55:4b:d6:98:bf:b6: 08:bb:e9:0f:2d:7f:57:6f:d7:f1:24:ba:1c:c6:69:20:aa:ea: 5b:a5:ec:99:36:40:5d:d5:ee:ea:fd:ae:fc:d5:9a:75:89:70: a0:fc:92:18:cf:70:2c:2e:81:8c:73:a3:9f:dd:f2:1d:43:69: 92:ef:21:00:5d:a9:e1:9a:d9:f8:48:a0:e6:06:c4:66:a1:05: c0:18:e1:c5:c8:0a:73:a2:88:bd:af:e5:48:7e:fb:3f:b8:bf: ba:5c:0e:30:bf:d7:69:6e:a4:59:a0:48:50:a1:d6:c9:2a:08: 6b:e4:96:b3:49:a9:b5:ff:41:a8:e0:b2:36:47:9f:a2:9c:b2: a2:16:46:35:64:c5:20:2c:66:f1:cf:d8:92:33:8c:06:7a:c8: d5:46:63:4c:9a:b0:f7:31:59:1b:07:9c:45:13:7d:2b:e7:2b: ac:ba:c7:38:01:aa:2a:23:38:54:70:31:d3:6c:4e:c2:2f:f5: 92:98:cf:af:4d:57:5e:bd:50:a2:c1:40:f1:5a:64:b6:e3:d1: 5f:64:12:c6:bd:de:32:b3:e1:bb:8a:3e:0c:b6:62:43:b0:19: b7:81:06:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj5kQk3NBhYUTGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk OTJlYTkzNGItZDQxZC00MDJhLWJlODUtNDRjM2QzYTdmMDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaxYAhdUf7XqL85PvSykOth+QVlBUxFADPz2 0J94p4El3g20mpRagxF1fGVcbtds7qbOKYmBqFvoWIsA5KWfNPp20gB6JVEiBJKH ptxKWJY0lPmoC0lGblg15H9iFGe45zklASrRivOo3Ss9cAk4Rile9DwbOsjYbeZl 5yYtYe8DfH2pqCZWbEb68sa697tFbwmoUsvQMIxG8XI/UDzDrdzUzAqhQrxMd3I8 lSKsfPZP05TBD0BtY1vDSeXiz8IWA6eF6SujwJZvM8ffUF1woofUNSMBTaz1vHyS LzlI/sqQ6DG3x4PGd/OgMNyryuOj623+n1DXhhYZy+TLOUr+OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXSvFxJNxpzlwMgc5znr/ug4pWxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOWEwNGMzNjAtMjU4Mi0z MGMzLTg2MzQtNzBjMWEwZmQ3MTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgSlYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtCPb4qkeT7+Dvjkwqij/cex33i0LGg5wfRjaldalVL1pi/tgi76Q8t f1dv1/EkuhzGaSCq6lul7Jk2QF3V7ur9rvzVmnWJcKD8khjPcCwugYxzo5/d8h1D aZLvIQBdqeGa2fhIoOYGxGahBcAY4cXICnOiiL2v5Uh++z+4v7pcDjC/12lupFmg SFCh1skqCGvklrNJqbX/QajgsjZHn6KcsqIWRjVkxSAsZvHP2JIzjAZ6yNVGY0ya sPcxWRsHnEUTfSvnK6y6xzgBqiojOFRwMdNsTsIv9ZKYz69NV169UKLBQPFaZLbj 0V9kEsa93jKz4buKPgy2YkOwGbeBBhA= -----END CERTIFICATE-----Generated at Thu Mar 26 04:00:21 2026 by rpki-client