$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a708dc8a-229d-3054-8be8-f07bbc2a3158.roa File: a708dc8a-229d-3054-8be8-f07bbc2a3158.roa (raw, json) Hash identifier: e5Ng/vO2EWpl0fr+Yf9FFfR4z7/8PSarJ/LZ027qT0k= Subject key identifier: 0D:7E:4D:3D:C3:F5:33:BA:D8:6C:2D:46:49:FB:83:17:11:7B:45:30 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584D4A8F996CBFD4CE943458BE80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a708dc8a-229d-3054-8be8-f07bbc2a3158.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 129.41.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:99:6c:bf:d4:ce:94:34:58:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=7d27cbb3-14f4-4bbb-9775-90929c728f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6e:5c:47:8a:0b:24:a7:eb:4a:47:51:fc:3c: c7:39:dd:e9:c5:c6:f5:62:65:35:1f:11:05:2c:0d: c9:e1:36:32:d9:05:8a:00:95:8a:37:1d:63:09:0d: 89:9d:aa:31:0d:f5:9a:55:b4:2b:a3:84:6f:0e:b0: c2:a0:08:9f:78:13:65:ec:b2:c5:9a:65:04:9f:f7: 62:13:e9:48:cc:e6:2a:9d:29:64:ff:4c:12:0a:95: 80:f9:5c:13:36:98:0a:04:e9:9f:7d:42:8f:18:ad: 9b:66:90:da:35:98:09:a7:f1:96:ea:96:5a:bc:8e: 32:c2:43:6e:3f:0f:1d:12:3d:a6:11:87:88:f6:2d: 14:ac:aa:4f:1b:26:47:ea:b6:68:b8:48:0b:4c:e4: bf:2d:45:9e:2c:33:52:72:f6:ae:9a:94:05:51:4d: f2:ce:10:33:d2:e7:a3:ef:a3:4b:83:c0:3f:62:34: 4a:42:d8:5a:8b:6c:d3:35:6b:b5:7e:34:51:24:fb: 59:c2:b1:f1:b6:40:5a:eb:35:db:7d:d1:ec:fc:8a: b1:ff:01:d3:cd:92:18:dc:ab:43:b0:15:c6:2c:9e: b0:fb:fa:02:3f:91:fd:ee:e3:61:cf:30:87:9b:75: cf:ab:ff:5e:3b:2e:33:ed:9e:56:17:d3:54:7c:47: 24:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7E:4D:3D:C3:F5:33:BA:D8:6C:2D:46:49:FB:83:17:11:7B:45:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a708dc8a-229d-3054-8be8-f07bbc2a3158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:a5:3b:b3:a6:a2:1f:eb:02:2b:93:41:8f:d2:ad:f4:fb:53: 87:7c:e8:a7:05:15:78:b9:e1:7d:59:7e:56:fb:df:34:d8:61: 4d:6c:7c:c3:50:40:01:62:d4:72:02:cc:f9:95:af:49:1f:b1: 49:18:a2:6a:e0:f9:6b:61:51:64:e1:74:ed:c7:1e:ac:fe:21: a6:6d:10:a5:de:2a:de:54:43:2f:a0:57:98:ed:c2:8b:2c:69: 74:e7:ad:b0:f0:19:38:c2:44:cf:9c:e9:f8:b6:eb:f8:9c:4a: 8f:14:d7:17:b2:79:7c:1a:be:c1:50:71:ff:32:3c:67:18:83: f5:26:36:0d:82:4e:80:d7:19:e6:da:2f:08:56:ec:70:ec:76: 3f:2d:f1:56:4c:69:8f:a4:4a:98:ef:c1:10:14:5b:96:69:91: 2b:7c:31:95:8d:97:98:b9:4a:e0:88:29:e0:72:d1:08:b6:5b: 32:b0:1e:8e:2d:6f:16:7a:11:5e:98:c0:8f:d0:d6:11:e6:15: 52:e5:5a:e6:b4:01:5f:01:57:1d:2b:b4:d4:41:92:df:37:af: ca:1e:fc:18:72:29:af:a0:a5:49:d0:0a:21:39:d4:50:66:a5: 2c:09:5f:05:1b:8b:1a:44:17:7c:15:ef:8e:ec:fe:aa:cd:81: 8d:fb:fc:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj5lsv9TOlDRYvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk N2QyN2NiYjMtMTRmNC00YmJiLTk3NzUtOTA5MjljNzI4ZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm5cR4oLJKfrSkdR/DzHOd3pxcb1YmU1HxEF LA3J4TYy2QWKAJWKNx1jCQ2JnaoxDfWaVbQro4RvDrDCoAifeBNl7LLFmmUEn/di E+lIzOYqnSlk/0wSCpWA+VwTNpgKBOmffUKPGK2bZpDaNZgJp/GW6pZavI4ywkNu Pw8dEj2mEYeI9i0UrKpPGyZH6rZouEgLTOS/LUWeLDNScvaumpQFUU3yzhAz0uej 76NLg8A/YjRKQthai2zTNWu1fjRRJPtZwrHxtkBa6zXbfdHs/Iqx/wHTzZIY3KtD sBXGLJ6w+/oCP5H97uNhzzCHm3XPq/9eOy4z7Z5WF9NUfEckxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1+TT3D9TO62GwtRkn7gxcRe0UwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYTcwOGRjOGEtMjI5ZC0z MDU0LThiZTgtZjA3YmJjMmEzMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSmvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+lO7Omoh/rAiuTQY/SrfT7U4d86KcFFXi54X1Zflb73zTYYU1sfMNQ QAFi1HICzPmVr0kfsUkYomrg+WthUWThdO3HHqz+IaZtEKXeKt5UQy+gV5jtwoss aXTnrbDwGTjCRM+c6fi26/icSo8U1xeyeXwavsFQcf8yPGcYg/UmNg2CToDXGeba LwhW7HDsdj8t8VZMaY+kSpjvwRAUW5ZpkSt8MZWNl5i5SuCIKeBy0Qi2WzKwHo4t bxZ6EV6YwI/Q1hHmFVLlWua0AV8BVx0rtNRBkt83r8oe/BhyKa+gpUnQCiE51FBm pSwJXwUbixpEF3wV747s/qrNgY37/FE= -----END CERTIFICATE-----Generated at Thu Mar 26 03:58:50 2026 by rpki-client