$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/efdaf484-41c7-3d50-b9ff-645dd7ba3c00.roa File: efdaf484-41c7-3d50-b9ff-645dd7ba3c00.roa (raw, json) Hash identifier: 3aXFnmn4LCfVFYfYYZUzSnOSVtSe0pfjBbdlm/o5X3k= Subject key identifier: C6:0F:A7:B7:81:39:E2:E5:8F:4C:D1:6A:48:70:03:CA:EA:76:C6:6F Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584D4A8F99449874B4F1F1BAD3C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/efdaf484-41c7-3d50-b9ff-645dd7ba3c00.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 129.41.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:99:44:98:74:b4:f1:f1:ba:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=6de8e08b-db19-40c0-9b45-8e2549d9df5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:00:88:79:2a:b4:d2:30:b1:1c:3d:22:f9: b1:6f:a7:dc:0e:f5:76:6e:73:cb:ec:a1:9b:5c:6b: d6:a8:14:eb:81:5f:a2:7a:f2:4c:36:96:76:65:47: 5a:71:12:c1:9d:bc:38:b0:00:83:bb:b8:bf:00:a1: 54:c9:2d:69:de:5b:07:fd:06:b1:78:10:c9:1a:9b: 7a:35:c4:7a:b3:1e:83:40:a5:64:17:9e:7a:c5:16: 0e:ea:bc:d9:40:bc:6a:85:94:15:9c:64:48:2b:95: 85:12:6a:33:17:63:e3:63:62:bd:5a:e5:97:c6:62: 6c:ea:12:67:1c:26:91:27:0f:6e:0f:eb:88:26:e8: cb:0d:26:88:e5:de:69:2e:71:5f:5c:74:f1:d8:e0: c4:4d:44:a8:a8:94:95:28:66:a8:09:f9:9f:b1:ec: 8d:81:fa:01:3e:0a:23:2d:1e:59:b9:20:21:2e:7e: f6:75:89:7c:0b:b0:9c:15:0b:cc:6d:8d:c4:85:d2: 4d:4d:de:6c:f5:ba:fd:fe:fb:a6:23:60:2a:84:69: dd:ba:bb:e3:bb:a3:87:a7:71:e0:c3:9b:7a:67:7f: 36:11:38:d5:10:64:82:65:d7:72:5b:0e:f8:41:1c: 3e:7f:6b:14:16:56:29:17:3f:d6:bb:6a:99:53:00: e9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0F:A7:B7:81:39:E2:E5:8F:4C:D1:6A:48:70:03:CA:EA:76:C6:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/efdaf484-41c7-3d50-b9ff-645dd7ba3c00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b8:4d:a8:00:7f:9c:08:fa:2b:b6:b6:7b:9f:f6:b4:4d:9f: a9:de:b4:dd:68:5a:63:a4:f9:a7:55:2d:f8:34:21:4a:ad:bf: b7:bc:0c:d3:2f:5c:78:aa:8a:f3:d5:59:8c:05:f3:9d:2d:c9: 7b:5b:7a:23:2d:7b:b4:8f:47:02:9d:07:7e:eb:91:d1:32:4b: 1c:4f:7a:3d:b2:c6:24:dc:d9:71:b2:c6:fb:67:75:b2:b3:73: 7c:24:f0:57:03:15:9b:f9:5c:f3:fa:90:0e:aa:81:ce:d9:28: 8e:16:5c:57:9e:f0:89:a0:18:dd:b2:db:6b:5a:44:97:bf:fe: 9c:c7:60:d6:c7:ee:fb:d6:66:0e:0f:42:09:2c:50:73:ff:16: c0:5b:10:e7:45:b5:9b:80:a6:28:a9:2f:e0:99:f5:ca:7f:c2: 65:0e:8e:02:a0:ac:ef:97:ad:12:fb:3a:8b:be:54:4e:38:2f: 82:57:12:b7:0a:34:87:0b:0a:81:eb:ab:3c:d5:56:71:fd:c9: 3f:8a:1e:6c:4e:05:9d:73:69:64:72:99:a8:bb:f7:52:98:17: b5:f4:ce:69:bd:98:23:06:2f:ce:61:7b:5b:83:5c:75:c3:84: 7a:c7:59:93:2f:fa:de:7c:46:a2:d6:68:81:e4:95:ce:5d:43: e1:cd:d4:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj5lEmHS08fG608AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk NmRlOGUwOGItZGIxOS00MGMwLTliNDUtOGUyNTQ5ZDlkZjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkkAiHkqtNIwsRw9Ivmxb6fcDvV2bnPL7KGb XGvWqBTrgV+ievJMNpZ2ZUdacRLBnbw4sACDu7i/AKFUyS1p3lsH/QaxeBDJGpt6 NcR6sx6DQKVkF556xRYO6rzZQLxqhZQVnGRIK5WFEmozF2PjY2K9WuWXxmJs6hJn HCaRJw9uD+uIJujLDSaI5d5pLnFfXHTx2ODETUSoqJSVKGaoCfmfseyNgfoBPgoj LR5ZuSAhLn72dYl8C7CcFQvMbY3EhdJNTd5s9br9/vumI2AqhGndurvju6OHp3Hg w5t6Z382ETjVEGSCZddyWw74QRw+f2sUFlYpFz/Wu2qZUwDp9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYPp7eBOeLlj0zRakhwA8rqdsZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZWZkYWY0ODQtNDFjNy0z ZDUwLWI5ZmYtNjQ1ZGQ3YmEzYzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIq4TagAf5wI+iu2tnuf9rRNn6netN1oWmOk+adVLfg0IUqtv7e8DNMv XHiqivPVWYwF850tyXtbeiMte7SPRwKdB37rkdEySxxPej2yxiTc2XGyxvtndbKz c3wk8FcDFZv5XPP6kA6qgc7ZKI4WXFee8ImgGN2y22taRJe//pzHYNbH7vvWZg4P QgksUHP/FsBbEOdFtZuApiipL+CZ9cp/wmUOjgKgrO+XrRL7Oou+VE44L4JXErcK NIcLCoHrqzzVVnH9yT+KHmxOBZ1zaWRymai791KYF7X0zmm9mCMGL85he1uDXHXD hHrHWZMv+t58RqLWaIHklc5dQ+HN1Ik= -----END CERTIFICATE-----Generated at Thu Mar 26 03:58:18 2026 by rpki-client