$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1838e719-a60f-32cf-9525-6410b4891dd5.roa File: 1838e719-a60f-32cf-9525-6410b4891dd5.roa (raw, json) Hash identifier: 4lEnJb40vXYEKSpV6YagSoTyWIOAfS+802LL/dYfcgk= Subject key identifier: 26:D7:76:82:C7:3D:EE:C9:BF:D3:88:63:4B:96:1D:7A:AD:BF:CC:CB Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1806C97CA5A807C580D11C80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1838e719-a60f-32cf-9525-6410b4891dd5.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 129.33.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c9:7c:a5:a8:07:c5:80:d1:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=828d47da-2c42-4927-8ec0-05ec3f78a789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:ed:b6:99:34:3c:e6:53:1e:3e:c9:ed:ed: 4a:55:69:51:5f:b1:a8:e3:1c:de:c6:3d:4f:35:37: fc:e9:fd:0b:5c:88:ef:bd:0c:14:af:12:83:a6:f6: 67:6a:12:6f:14:54:55:6c:2a:13:7d:77:97:a2:a1: 04:08:65:55:06:30:55:1c:01:0b:c7:33:93:de:3c: ef:11:2b:69:cc:54:40:15:da:d8:29:ab:11:72:2c: d8:73:cb:77:88:b6:a0:2c:fa:8a:64:62:3e:85:23: e1:f0:a7:75:ce:04:a0:b5:09:d8:8c:b2:dd:26:67: 5c:92:b1:7d:64:a5:9b:4b:e8:8b:37:d7:5e:1a:d0: 51:93:a4:a5:e9:51:da:83:10:d1:98:62:6a:0a:14: d3:40:8b:7e:bc:68:c2:6d:e1:10:98:20:cd:38:da: 45:0a:c0:83:8c:1c:1b:ef:f6:b2:6f:b8:5f:29:ee: 1d:88:d0:1f:27:82:73:e4:61:7a:ef:e6:a4:9d:11: e5:23:7e:75:5d:6d:68:32:b3:14:0a:47:c5:6e:8d: 26:b7:45:26:c2:54:d8:d6:9d:79:1b:0f:88:15:68: fd:11:c4:db:81:46:50:5c:35:cc:bc:b3:fc:54:a7: d2:34:13:dc:8b:ee:4b:2e:7d:1e:c6:69:da:89:22: 6b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D7:76:82:C7:3D:EE:C9:BF:D3:88:63:4B:96:1D:7A:AD:BF:CC:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1838e719-a60f-32cf-9525-6410b4891dd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:fb:c2:ad:ed:53:2d:a3:4d:04:3b:3e:af:61:5a:43:d8:38: 34:6e:e6:da:ae:c1:e1:b3:3e:a5:d8:f3:69:f5:af:1d:b6:bf: df:4f:a6:ac:b6:4e:29:af:85:c0:0f:6f:81:a5:d9:ed:e9:a3: e7:a7:cb:ec:1a:4a:b0:21:ca:be:7e:93:c2:2d:2e:1a:00:43: 61:90:25:e6:97:e6:1d:11:7d:1f:18:11:74:dc:aa:1e:22:bc: 86:e4:19:9a:b8:a2:ef:0f:58:e8:42:29:19:30:5f:52:da:63: a2:55:a1:1a:9b:1a:7e:86:1a:1e:54:cb:34:74:d4:ec:27:a4: 4f:f7:43:fe:db:37:9d:57:41:50:90:71:05:1f:ce:30:11:c8: fb:79:40:45:95:ac:bf:cf:42:08:9d:b6:4c:20:76:6a:ca:01: 85:fb:03:bb:1b:95:4d:da:f8:d2:62:26:dd:7e:d3:d8:6c:e7: 6b:c4:34:d9:dd:bd:25:b8:dd:fc:11:27:0a:7f:2b:47:a5:9c: 40:3f:31:2b:c0:c1:8e:0a:3a:59:6d:aa:73:e0:30:75:79:0f: 88:1c:79:c5:36:c6:ab:fa:a9:7c:f1:73:79:8d:5d:8a:42:77: 83:f0:0d:e1:14:c6:a6:47:01:b7:9d:46:f2:4b:38:7b:c1:c8: 01:d6:97:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsl8pagHxYDRHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ODI4ZDQ3ZGEtMmM0Mi00OTI3LThlYzAtMDVlYzNmNzhhNzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7bttpk0POZTHj7J7e1KVWlRX7Go4xzexj1P NTf86f0LXIjvvQwUrxKDpvZnahJvFFRVbCoTfXeXoqEECGVVBjBVHAELxzOT3jzv EStpzFRAFdrYKasRcizYc8t3iLagLPqKZGI+hSPh8Kd1zgSgtQnYjLLdJmdckrF9 ZKWbS+iLN9deGtBRk6Sl6VHagxDRmGJqChTTQIt+vGjCbeEQmCDNONpFCsCDjBwb 7/ayb7hfKe4diNAfJ4Jz5GF67+aknRHlI351XW1oMrMUCkfFbo0mt0UmwlTY1p15 Gw+IFWj9EcTbgUZQXDXMvLP8VKfSNBPci+5LLn0exmnaiSJrWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbXdoLHPe7Jv9OIY0uWHXqtv8zLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMTgzOGU3MTktYTYwZi0z MmNmLTk1MjUtNjQxMGI0ODkxZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX7wq3tUy2jTQQ7Pq9hWkPYODRu5tquweGzPqXY82n1rx22v99Ppqy2 TimvhcAPb4Gl2e3po+eny+waSrAhyr5+k8ItLhoAQ2GQJeaX5h0RfR8YEXTcqh4i vIbkGZq4ou8PWOhCKRkwX1LaY6JVoRqbGn6GGh5UyzR01OwnpE/3Q/7bN51XQVCQ cQUfzjARyPt5QEWVrL/PQgidtkwgdmrKAYX7A7sblU3a+NJiJt1+09hs52vENNnd vSW43fwRJwp/K0elnEA/MSvAwY4KOlltqnPgMHV5D4gcecU2xqv6qXzxc3mNXYpC d4PwDeEUxqZHAbedRvJLOHvByAHWlw8= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:22 2025 by rpki-client