$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa File: 4347f76d-c74a-3942-9dc0-3e3301512261.roa (raw, json) Hash identifier: XkKSGm466GoWffoGMiabNHys/99UA2L5V5AeH0+Ermg= Subject key identifier: 7B:1D:13:D7:49:7F:48:79:8A:C5:96:13:FE:E2:06:43:2F:55:B9:6F Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1806C9A9107F6FA49B1B75E0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 129.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c9:a9:10:7f:6f:a4:9b:1b:75:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=4a9b8e12-e54d-46d2-a663-16cf2e8b9d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c6:1a:54:9f:bc:c0:7a:e9:f6:43:8d:6a:fa: 01:f3:af:5d:30:1b:29:e1:fc:17:88:07:0e:79:33: 54:3c:96:c9:73:00:6d:0e:ed:92:9f:1d:5c:e4:e3: 16:fd:ef:b6:b5:a3:4c:9c:7e:25:21:e1:8d:be:9f: 19:70:23:8d:d3:21:51:2e:95:7c:cc:17:4a:c9:cb: 4f:f5:c5:6d:32:89:97:a7:ab:63:05:05:48:8b:51: 88:a2:d1:c2:07:21:16:56:8b:e0:28:8a:7d:7a:7d: fb:4d:bc:41:96:07:b3:74:a1:32:d8:c8:c7:09:65: 51:9b:e8:29:82:fd:cb:09:70:1f:8b:79:a4:42:08: 4b:84:93:89:a8:bd:3c:41:4b:a0:8d:d3:54:72:4c: 12:50:85:74:96:15:fc:c3:ea:3e:f9:f7:f2:f5:e3: 79:f4:a3:8e:05:6f:c9:34:75:ca:5b:2e:56:c7:5a: 22:cc:98:d2:de:30:b2:d6:f3:cd:d9:bc:33:35:63: ee:63:26:aa:b2:b6:a8:10:8f:42:9d:e3:12:43:70: 2c:fa:c6:6f:96:58:fd:91:57:ff:98:94:6c:dc:cc: 94:e3:2f:59:e8:5d:ec:dd:2b:37:af:ce:2a:cf:30: 8e:d9:b2:bd:2b:9c:fb:fa:43:cb:9e:82:37:3e:ea: d1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1D:13:D7:49:7F:48:79:8A:C5:96:13:FE:E2:06:43:2F:55:B9:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b6:3e:11:bf:99:e1:97:50:7e:46:ad:26:70:1a:6d:e5:8f: e9:e9:a9:c2:a6:de:95:0e:57:5f:4b:7c:bb:e4:8c:4c:78:7e: e2:26:83:b7:51:81:1d:80:1d:8b:c2:4b:90:db:34:94:0c:6f: bb:51:4b:9d:3c:71:05:79:63:37:4c:29:da:38:aa:3f:dd:d0: b2:da:72:e2:9b:b6:e9:d4:f7:5b:d0:f2:6c:0d:03:fb:18:81: 38:88:e7:96:65:09:fe:37:4d:28:2a:74:31:e6:ce:94:ad:40: f8:0c:07:45:70:42:99:54:cf:a3:38:04:f3:09:e2:9a:e7:4f: a0:f7:30:6c:9e:4a:dc:46:49:0e:14:ea:d4:3b:39:38:4c:40: 28:9a:b9:3b:bf:e3:f9:7d:be:27:68:f9:59:8e:c3:57:62:e5: 0a:01:cd:5a:cb:da:97:cb:b0:26:df:46:e0:f1:a2:16:aa:82: d5:46:e2:9a:1e:8d:58:0f:fa:41:ee:5f:8d:32:62:0d:41:18: 1d:0f:15:50:b5:e2:0a:f1:39:37:d2:82:9b:20:a2:e6:83:3d: e5:df:1e:4a:d8:53:2d:26:13:5d:6d:90:08:21:d0:89:9c:5f: 71:a6:f1:1d:d3:0c:4c:b3:e8:c1:33:73:69:4f:fe:17:53:99: 56:03:2e:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsmpEH9vpJsbdeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NGE5YjhlMTItZTU0ZC00NmQyLWE2NjMtMTZjZjJlOGI5ZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcYaVJ+8wHrp9kONavoB869dMBsp4fwXiAcO eTNUPJbJcwBtDu2Snx1c5OMW/e+2taNMnH4lIeGNvp8ZcCON0yFRLpV8zBdKyctP 9cVtMomXp6tjBQVIi1GIotHCByEWVovgKIp9en37TbxBlgezdKEy2MjHCWVRm+gp gv3LCXAfi3mkQghLhJOJqL08QUugjdNUckwSUIV0lhX8w+o++ffy9eN59KOOBW/J NHXKWy5Wx1oizJjS3jCy1vPN2bwzNWPuYyaqsraoEI9CneMSQ3As+sZvllj9kVf/ mJRs3MyU4y9Z6F3s3Ss3r84qzzCO2bK9K5z7+kPLnoI3PurRcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsdE9dJf0h5isWWE/7iBkMvVblvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNDM0N2Y3NmQtYzc0YS0z OTQyLTlkYzAtM2UzMzAxNTEyMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy2PhG/meGXUH5GrSZwGm3lj+npqcKm3pUOV19LfLvkjEx4fuImg7dR gR2AHYvCS5DbNJQMb7tRS508cQV5YzdMKdo4qj/d0LLacuKbtunU91vQ8mwNA/sY gTiI55ZlCf43TSgqdDHmzpStQPgMB0VwQplUz6M4BPMJ4prnT6D3MGyeStxGSQ4U 6tQ7OThMQCiauTu/4/l9vido+VmOw1di5QoBzVrL2pfLsCbfRuDxohaqgtVG4poe jVgP+kHuX40yYg1BGB0PFVC14grxOTfSgpsgouaDPeXfHkrYUy0mE11tkAgh0Imc X3Gm8R3TDEyz6MEzc2lP/hdTmVYDLos= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:23 2025 by rpki-client