$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/7d688b7e-7ab5-3ea2-95de-3039e60de945.roa File: 7d688b7e-7ab5-3ea2-95de-3039e60de945.roa (raw, json) Hash identifier: c0RSV7xVKeZpn9uLI+3u2LAPrvBVrHksK+e0eh8tseI= Subject key identifier: 60:1E:81:AF:BE:8D:3E:D7:D9:64:31:E5:40:EC:63:91:FA:00:F2:3E Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584F6F23043A3EC6C7DE2F536104 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/7d688b7e-7ab5-3ea2-95de-3039e60de945.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 16509 IP address blocks: 129.41.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:04:3a:3e:c6:c7:de:2f:53:61:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=b0c0daba-fb78-4a92-b0e7-e2e6553d33f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:82:9f:08:a4:6b:b6:2f:a9:b4:20:dc:ef:6d: 9b:71:e8:24:f0:9f:0b:c8:ba:22:45:bf:9c:0e:df: c1:09:16:ae:8e:c9:04:91:d9:69:77:29:af:39:c5: a3:e6:6a:42:c9:6f:54:ae:93:0d:7d:35:1a:4a:48: 6a:5b:ce:89:4f:fe:4c:f7:0c:40:7e:16:f2:da:fc: d7:d2:4a:e1:6f:be:dd:bb:b3:32:c2:4f:d3:16:6c: 98:8a:8e:be:a2:f8:fb:3a:98:30:e0:18:cb:cf:6b: af:8a:df:cb:a5:02:7f:fa:78:1a:18:f8:ea:03:4c: fa:35:c4:30:c4:ac:42:95:3d:1e:66:eb:c8:70:1c: ba:38:09:9b:9b:65:09:9c:31:b0:b2:1b:9e:6c:d0: 92:6c:4a:b5:eb:cb:7e:4f:df:a9:67:80:78:1a:cb: 96:a1:c1:68:61:bc:c5:0b:86:a6:22:a2:7f:dd:95: 68:04:9d:ce:06:91:7e:65:4a:91:99:67:16:9d:3a: eb:47:a0:4b:26:4e:ad:57:8d:ea:51:f4:b2:68:03: 8b:75:d2:15:8e:72:d5:64:80:38:eb:e2:b1:0c:24: c9:ff:7e:34:ef:cb:cc:ef:d4:6e:82:fd:0b:80:64: 56:c5:99:21:31:cc:f0:9e:ad:00:0b:5c:e0:8c:89: d2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1E:81:AF:BE:8D:3E:D7:D9:64:31:E5:40:EC:63:91:FA:00:F2:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/7d688b7e-7ab5-3ea2-95de-3039e60de945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:26:f1:cb:2a:47:79:ee:57:72:09:31:b2:a0:0e:c4:c3:42: 52:1e:46:fe:5d:72:1a:66:34:9a:19:08:23:1b:a7:ba:bd:29: a5:11:4c:61:c3:05:7a:3a:e0:46:5a:58:ce:a0:75:de:57:4f: 9d:9a:18:fc:df:cb:aa:79:da:96:c9:f5:89:17:d6:18:07:ff: ca:a1:3b:5b:31:ca:eb:89:a9:b0:d2:dd:46:4e:6c:36:46:ab: e5:b3:d0:46:1a:80:74:99:24:d3:29:4f:d6:8a:d8:be:ae:75: 3b:dc:de:6a:12:a5:77:d4:2a:7c:67:9b:05:3b:40:94:56:fe: 25:25:24:92:87:be:c0:32:ab:b2:b1:1c:6d:b8:a7:e7:2b:fc: 25:33:3f:ff:fc:2a:6f:46:a3:1e:b3:9c:de:d0:67:13:99:3b: 17:b1:9e:c3:dc:d6:09:11:04:00:3c:a0:a3:9f:15:4c:a1:7d: 0e:95:52:d2:1f:e6:d5:65:cd:b9:64:22:49:80:d5:32:d7:e4: 6f:d8:77:e3:15:53:06:02:52:7f:95:f3:92:7c:1b:b1:3d:0a: bf:be:13:8a:59:f8:c7:fa:77:e1:b9:ab:92:73:b0:b0:07:5a: 67:e4:ab:fe:d7:a9:61:53:ae:84:22:56:3b:cb:18:6c:65:0c: f5:69:ad:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIwQ6PsbH3i9TYQQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk YjBjMGRhYmEtZmI3OC00YTkyLWIwZTctZTJlNjU1M2QzM2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYKfCKRrti+ptCDc722bcegk8J8LyLoiRb+c Dt/BCRaujskEkdlpdymvOcWj5mpCyW9UrpMNfTUaSkhqW86JT/5M9wxAfhby2vzX 0krhb77du7Mywk/TFmyYio6+ovj7Opgw4BjLz2uvit/LpQJ/+ngaGPjqA0z6NcQw xKxClT0eZuvIcBy6OAmbm2UJnDGwshuebNCSbEq168t+T9+pZ4B4GsuWocFoYbzF C4amIqJ/3ZVoBJ3OBpF+ZUqRmWcWnTrrR6BLJk6tV43qUfSyaAOLddIVjnLVZIA4 6+KxDCTJ/34078vM79Rugv0LgGRWxZkhMczwnq0AC1zgjInSTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAega++jT7X2WQx5UDsY5H6API+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvN2Q2ODhiN2UtN2FiNS0z ZWEyLTk1ZGUtMzAzOWU2MGRlOTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSmuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0m8csqR3nuV3IJMbKgDsTDQlIeRv5dchpmNJoZCCMbp7q9KaURTGHD BXo64EZaWM6gdd5XT52aGPzfy6p52pbJ9YkX1hgH/8qhO1sxyuuJqbDS3UZObDZG q+Wz0EYagHSZJNMpT9aK2L6udTvc3moSpXfUKnxnmwU7QJRW/iUlJJKHvsAyq7Kx HG24p+cr/CUzP//8Km9Gox6znN7QZxOZOxexnsPc1gkRBAA8oKOfFUyhfQ6VUtIf 5tVlzblkIkmA1TLX5G/Yd+MVUwYCUn+V85J8G7E9Cr++E4pZ+Mf6d+G5q5JzsLAH Wmfkq/7XqWFTroQiVjvLGGxlDPVprZE= -----END CERTIFICATE-----Generated at Fri Oct 9 17:47:35 2026 by rpki-client