$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa File: c9dd7a45-36e9-37a5-9068-6420d65d9719.roa (raw, json) Hash identifier: hzOr8RvCl+mBXWWc/Q/wlhuIPpvvueI+mG1gDEZaYic= Subject key identifier: D3:22:FF:A0:B0:6A:C2:6F:BA:43:08:91:45:8A:63:61:C3:34:FE:AC Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584E2AD457AB5148F5BE1F05C000 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa Signing time: Sun 14 Jun 2026 09:00:11 +0000 ROA not before: Sun 14 Jun 2026 09:00:11 +0000 ROA not after: Sat 12 Sep 2026 09:00:11 +0000 asID: 14618 IP address blocks: 129.33.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2a:d4:57:ab:51:48:f5:be:1f:05:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 14 09:00:11 2026 GMT Not After : Sep 12 09:00:11 2026 GMT Subject: CN=af697722-c2e9-4c63-9c54-d99fc3d3b4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:13:b8:fb:93:2f:0b:95:38:7f:97:0e:9d:c7: 8c:6a:63:3e:de:bb:42:1b:a6:6b:d9:4b:45:a4:a9: 01:07:61:b8:ef:13:ec:f9:4d:a4:eb:c0:9b:9f:9c: e1:ba:ef:dd:57:74:5d:7d:bc:d7:60:c3:5a:87:d3: be:4b:a4:27:bc:b1:7a:58:1f:cc:ac:22:cd:11:82: ee:2b:d7:43:75:dc:78:f8:fb:e9:74:93:4f:84:2e: 67:37:65:2f:23:47:2b:21:8a:d8:2f:3b:d3:f1:09: 8a:93:c9:7e:0f:f3:c3:88:bf:fa:48:f4:ef:86:5a: 40:3a:fb:b4:d4:35:bb:4a:e0:18:9a:f4:42:ad:de: ca:4b:48:98:c5:74:fa:29:2e:01:2c:ff:d7:c6:34: 86:a6:82:da:ce:27:ed:e7:ed:38:c7:37:68:b2:9b: b8:6c:cf:78:66:29:96:16:38:a7:55:8b:63:f2:a3: f8:a8:b8:c9:82:30:32:d2:ae:34:c3:17:ae:db:71: cb:72:99:79:a7:69:fc:43:aa:27:ec:8f:43:76:77: 51:a3:bb:88:0a:35:37:98:a6:0a:d9:e9:14:3a:5f: 63:39:72:5f:fa:90:eb:75:4a:8e:fe:70:0a:fd:39: ff:44:5a:e2:b2:11:67:12:e3:fa:d0:a4:02:72:a6: 76:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:22:FF:A0:B0:6A:C2:6F:BA:43:08:91:45:8A:63:61:C3:34:FE:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:9a:a2:66:68:71:54:ab:1d:ff:80:56:98:ef:b1:31:ca:3b: 8e:95:38:67:6c:44:da:6e:5c:52:be:d8:ad:ae:88:9f:33:8b: ad:6c:27:eb:86:59:e5:19:91:25:21:6c:45:ac:ec:bf:ee:d8: bf:c1:16:66:82:64:13:51:a2:cb:ff:4a:95:f9:24:2b:2a:2d: b6:4e:99:b7:8d:00:f0:ad:39:71:38:98:b1:8f:6a:8b:74:ff: 1b:0e:ba:81:84:bc:65:47:38:99:df:ae:00:fa:03:c1:2c:1e: 1e:5c:03:74:48:91:17:02:67:7f:d5:72:1b:f5:00:78:02:5a: ba:d8:41:ed:3f:27:50:b9:d4:a7:48:3e:3f:88:c0:41:08:be: b5:37:18:2f:79:1e:a1:b7:8c:e0:a5:88:a4:78:3e:2a:7c:c3: f9:30:a4:7a:6c:98:a4:07:69:0f:21:a9:15:fb:fc:b5:2c:37: bb:2b:e5:e4:c9:58:90:cd:d2:5b:46:e7:49:9f:de:68:66:55: ef:b0:ff:1b:c9:40:e2:e6:52:4f:10:45:e6:4f:a2:c2:2d:ff: 98:bc:c1:c9:45:87:46:5b:76:dc:21:5f:08:d1:89:f7:60:5b: 51:80:a4:f7:9b:d2:d8:ec:f0:8b:63:6f:aa:d8:0f:61:e4:ed: 0a:e4:6d:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1FerUUj1vh8FwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk YWY2OTc3MjItYzJlOS00YzYzLTljNTQtZDk5ZmMzZDNiNGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxO4+5MvC5U4f5cOnceMamM+3rtCG6Zr2UtF pKkBB2G47xPs+U2k68Cbn5zhuu/dV3RdfbzXYMNah9O+S6QnvLF6WB/MrCLNEYLu K9dDddx4+PvpdJNPhC5nN2UvI0crIYrYLzvT8QmKk8l+D/PDiL/6SPTvhlpAOvu0 1DW7SuAYmvRCrd7KS0iYxXT6KS4BLP/XxjSGpoLazift5+04xzdospu4bM94ZimW FjinVYtj8qP4qLjJgjAy0q40wxeu23HLcpl5p2n8Q6on7I9DdndRo7uICjU3mKYK 2ekUOl9jOXJf+pDrdUqO/nAK/Tn/RFrishFnEuP60KQCcqZ2/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMi/6CwasJvukMIkUWKY2HDNP6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYzlkZDdhNDUtMzZlOS0z N2E1LTkwNjgtNjQyMGQ2NWQ5NzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyaomZocVSrHf+AVpjvsTHKO46VOGdsRNpuXFK+2K2uiJ8zi61sJ+uG WeUZkSUhbEWs7L/u2L/BFmaCZBNRosv/SpX5JCsqLbZOmbeNAPCtOXE4mLGPaot0 /xsOuoGEvGVHOJnfrgD6A8EsHh5cA3RIkRcCZ3/Vchv1AHgCWrrYQe0/J1C51KdI Pj+IwEEIvrU3GC95HqG3jOCliKR4Pip8w/kwpHpsmKQHaQ8hqRX7/LUsN7sr5eTJ WJDN0ltG50mf3mhmVe+w/xvJQOLmUk8QReZPosIt/5i8wclFh0ZbdtwhXwjRifdg W1GApPeb0tjs8Itjb6rYD2Hk7QrkbSI= -----END CERTIFICATE-----Generated at Wed Jun 24 20:19:23 2026 by rpki-client