$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9b8fb5ff-8f44-354e-9e25-b728c267775e.roa File: 9b8fb5ff-8f44-354e-9e25-b728c267775e.roa (raw, json) Hash identifier: lsDpNlFhx4J6htNBKgqYUgSuCEDLqK5J7cVN2R3p97s= Subject key identifier: 3C:F4:6F:38:32:E7:32:EA:13:06:5D:B3:99:13:C8:1B:43:2B:53:56 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1806C956240956BEB15CBC40 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9b8fb5ff-8f44-354e-9e25-b728c267775e.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 19795 IP address blocks: 129.33.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c9:56:24:09:56:be:b1:5c:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=1e6b5263-4bf4-437f-a256-fb35d523ad3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:82:5c:28:49:20:22:a7:a5:c4:4a:bd:40:22: 0e:87:80:4b:cf:5c:52:c5:3c:53:9a:5c:c5:3a:3d: 6d:a7:59:29:c0:36:78:e2:7f:bc:23:2e:26:19:79: f2:a9:9c:ac:d4:f4:ba:b1:72:a8:00:63:8d:e1:0f: 2f:d1:93:4c:cc:25:a9:dd:66:60:b5:51:25:be:47: 8a:4f:cc:a5:bf:d9:52:d4:db:cb:24:e2:19:7d:aa: 47:70:81:38:5a:14:0f:08:ec:30:e7:ad:64:2c:96: 6e:db:d5:d7:5e:61:d6:82:80:58:23:fa:be:07:f6: 63:81:93:0b:b4:90:d9:ad:e5:05:04:52:f7:74:f2: 81:56:72:72:39:b8:19:b9:b0:37:90:c0:f2:d7:c4: 78:aa:89:ba:d9:9c:ca:37:d7:9a:9d:d7:97:20:35: 17:76:3f:4c:bb:8b:63:53:63:7f:d1:82:0a:c8:7c: 39:6e:c4:da:ab:75:7a:0e:cc:d3:5b:c4:7f:d0:38: e1:aa:75:8a:df:01:fe:de:0c:3a:41:97:e2:75:24: f0:d1:f3:72:34:4d:a9:96:34:bf:bd:8e:8e:7c:7e: bc:b1:64:96:51:19:7f:cc:9e:94:6e:5d:d6:a9:fa: 2a:b6:1d:69:7a:2c:be:71:6a:11:4e:10:a2:61:54: f9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F4:6F:38:32:E7:32:EA:13:06:5D:B3:99:13:C8:1B:43:2B:53:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9b8fb5ff-8f44-354e-9e25-b728c267775e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b2:ec:d7:ce:9e:0d:ab:60:67:8c:50:6e:91:71:c0:55:66: f4:f9:66:eb:13:2b:fe:69:c4:2f:0c:03:67:5c:01:dd:ed:14: 93:89:92:2e:c4:d0:c4:bf:85:bb:5f:46:58:73:f4:ed:f8:6a: bd:83:08:84:f9:ad:45:ab:ee:fa:f0:76:5f:3e:58:cc:8b:f6: 4d:30:a2:c3:9d:4b:ff:56:ca:f5:a6:b2:74:56:b8:88:9c:65: e6:97:2c:0d:be:21:65:cf:e1:12:db:a5:8b:8f:8d:40:f9:b5: d8:e3:24:d6:e3:aa:87:cb:8e:1f:9d:cf:1b:f5:c9:ee:65:9e: df:62:a6:f8:14:a4:18:0c:2e:86:f3:96:34:8c:6c:e1:af:58: 17:ad:50:b1:06:fa:02:96:d9:3c:54:a1:f7:c9:6e:99:c8:b0: 82:4f:72:69:ab:56:22:05:cc:be:17:91:cb:72:49:70:eb:2c: aa:da:d4:bd:1c:d1:91:97:05:f9:3d:12:97:4c:43:5a:04:48: a2:88:d7:0c:b5:87:07:c4:7f:e7:7a:cc:11:6c:5b:7d:45:c9: 06:ce:9b:58:97:0a:6d:c6:4b:e6:bd:a8:23:90:df:6a:8b:82: 1b:9b:f2:61:34:d6:7e:63:52:32:cc:65:3b:a2:5b:56:de:ad: 55:e7:7c:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBslWJAlWvrFcvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MWU2YjUyNjMtNGJmNC00MzdmLWEyNTYtZmIzNWQ1MjNhZDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4JcKEkgIqelxEq9QCIOh4BLz1xSxTxTmlzF Oj1tp1kpwDZ44n+8Iy4mGXnyqZys1PS6sXKoAGON4Q8v0ZNMzCWp3WZgtVElvkeK T8ylv9lS1NvLJOIZfapHcIE4WhQPCOww561kLJZu29XXXmHWgoBYI/q+B/ZjgZML tJDZreUFBFL3dPKBVnJyObgZubA3kMDy18R4qom62ZzKN9eandeXIDUXdj9Mu4tj U2N/0YIKyHw5bsTaq3V6DszTW8R/0DjhqnWK3wH+3gw6QZfidSTw0fNyNE2pljS/ vY6OfH68sWSWURl/zJ6Ubl3Wqfoqth1peiy+cWoRThCiYVT5aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDz0bzgy5zLqEwZds5kTyBtDK1NWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOWI4ZmI1ZmYtOGY0NC0z NTRlLTllMjUtYjcyOGMyNjc3NzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADey7NfOng2rYGeMUG6RccBVZvT5ZusTK/5pxC8MA2dcAd3tFJOJki7E 0MS/hbtfRlhz9O34ar2DCIT5rUWr7vrwdl8+WMyL9k0wosOdS/9WyvWmsnRWuIic ZeaXLA2+IWXP4RLbpYuPjUD5tdjjJNbjqofLjh+dzxv1ye5lnt9ipvgUpBgMLobz ljSMbOGvWBetULEG+gKW2TxUoffJbpnIsIJPcmmrViIFzL4XkctySXDrLKra1L0c 0ZGXBfk9EpdMQ1oESKKI1wy1hwfEf+d6zBFsW31FyQbOm1iXCm3GS+a9qCOQ32qL ghub8mE01n5jUjLMZTuiW1berVXnfO4= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:32 2025 by rpki-client