$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/de7438ce-fca5-31f5-9f3b-71378f8444ba.roa File: de7438ce-fca5-31f5-9f3b-71378f8444ba.roa (raw, json) Hash identifier: YCumhmCx4fRDmWoMxZVjggaoOMOm0St5LZvvbyuFUu4= Subject key identifier: 43:37:A8:96:9F:9F:F8:90:30:0A:2E:3A:93:E8:73:E3:D1:8E:63:05 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584F3CE2890680A376D2F277DF00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/de7438ce-fca5-31f5-9f3b-71378f8444ba.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 19795 IP address blocks: 129.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:89:06:80:a3:76:d2:f2:77:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=6ee34e6b-bdfe-4588-ad07-106c4750e423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d1:58:ff:ba:39:cf:76:bf:97:0f:46:3e:3e: 3a:a7:29:6f:c5:8c:75:6a:99:d8:ed:63:d3:b5:1d: f1:6e:f3:39:4c:88:5c:4f:0b:dd:f6:eb:d8:b1:0a: e1:19:8b:01:aa:d4:8b:ff:c0:8d:d3:49:40:17:04: fa:36:cb:1d:76:6f:c0:b3:60:24:dd:fe:0c:1c:f4: 2c:e2:72:ac:24:1a:9f:86:8a:0b:dc:b5:61:82:d3: 58:88:0a:fe:47:47:61:0c:21:0c:d4:a0:60:4d:7d: 8b:ec:82:1a:70:53:51:7e:68:bd:d7:ac:12:36:e5: 53:cd:02:b1:fc:8b:6a:4f:24:16:db:58:43:8f:a3: e4:57:f0:c3:57:a4:0f:45:88:7f:f2:5d:1a:aa:cb: 6a:e7:7e:85:10:c1:f4:ea:52:4c:df:42:ec:78:7e: 44:ba:2d:5c:83:05:85:7b:4c:39:ca:10:af:a0:d9: bd:47:58:54:7b:b3:69:77:f3:59:5c:a5:a3:a3:44: 30:84:9f:42:b1:40:61:d8:71:b1:d0:27:e1:91:a2: b8:0a:b0:69:d0:60:9e:bc:1f:87:3f:59:cb:d3:aa: d0:eb:1e:f1:bf:3d:d7:70:8e:25:be:ee:4a:30:12: 22:68:c5:28:ee:df:88:11:8a:9a:15:f9:01:d4:b8: 59:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:37:A8:96:9F:9F:F8:90:30:0A:2E:3A:93:E8:73:E3:D1:8E:63:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/de7438ce-fca5-31f5-9f3b-71378f8444ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:80:e8:9d:f0:8f:6e:3f:59:69:53:fc:56:a2:3b:de:ea:a1: bf:18:77:b1:b6:ab:d7:19:07:9e:41:28:86:2f:22:39:02:bf: 59:22:d5:3a:d9:9c:bb:c7:68:0b:4c:ff:f3:83:a1:0a:77:4f: b5:c3:56:fc:cd:ce:3d:01:fd:68:a1:a6:db:2f:2f:6b:47:8d: 12:bc:92:1b:f3:19:f8:50:0a:22:5f:c0:25:70:cd:67:b9:78: 69:3a:e0:dc:73:31:69:98:51:58:33:5f:2e:3c:7b:5d:a0:cf: 7b:b7:99:8e:ed:0e:6e:b6:cc:2a:ce:0e:e5:38:a0:84:59:bc: a3:ab:6e:8a:c1:b5:61:19:96:ef:0e:fc:0e:81:42:45:0b:e4: cd:ca:60:6a:0b:9f:c5:03:20:94:12:e2:c7:78:2c:fb:1f:cf: af:de:43:17:dc:c2:19:ea:c5:72:67:ca:3c:9d:47:97:b6:17: 24:e3:6d:f0:a5:0b:3b:02:89:f8:37:64:16:ba:e3:0a:04:57: e4:f5:76:22:8f:28:29:2f:aa:a8:68:64:64:d4:8c:ba:b6:66: 06:5f:12:8e:1e:cf:3b:f4:99:ad:aa:6d:28:ab:d2:0e:5b:3b: 5b:8e:ec:6f:7a:9e:0e:7c:e0:1e:52:06:80:ee:c5:d2:70:28: 1f:1a:64:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884okGgKN20vJ33wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk NmVlMzRlNmItYmRmZS00NTg4LWFkMDctMTA2YzQ3NTBlNDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNFY/7o5z3a/lw9GPj46pylvxYx1apnY7WPT tR3xbvM5TIhcTwvd9uvYsQrhGYsBqtSL/8CN00lAFwT6Nssddm/As2Ak3f4MHPQs 4nKsJBqfhooL3LVhgtNYiAr+R0dhDCEM1KBgTX2L7IIacFNRfmi916wSNuVTzQKx /ItqTyQW21hDj6PkV/DDV6QPRYh/8l0aqstq536FEMH06lJM30LseH5Eui1cgwWF e0w5yhCvoNm9R1hUe7Npd/NZXKWjo0QwhJ9CsUBh2HGx0CfhkaK4CrBp0GCevB+H P1nL06rQ6x7xvz3XcI4lvu5KMBIiaMUo7t+IEYqaFfkB1LhZhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEM3qJafn/iQMAouOpPoc+PRjmMFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZGU3NDM4Y2UtZmNhNS0z MWY1LTlmM2ItNzEzNzhmODQ0NGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWA6J3wj24/WWlT/FaiO97qob8Yd7G2q9cZB55BKIYvIjkCv1ki1TrZ nLvHaAtM//ODoQp3T7XDVvzNzj0B/WihptsvL2tHjRK8khvzGfhQCiJfwCVwzWe5 eGk64NxzMWmYUVgzXy48e12gz3u3mY7tDm62zCrODuU4oIRZvKOrborBtWEZlu8O /A6BQkUL5M3KYGoLn8UDIJQS4sd4LPsfz6/eQxfcwhnqxXJnyjydR5e2FyTjbfCl CzsCifg3ZBa64woEV+T1diKPKCkvqqhoZGTUjLq2ZgZfEo4ezzv0ma2qbSir0g5b O1uO7G96ng584B5SBoDuxdJwKB8aZBs= -----END CERTIFICATE-----Generated at Thu Oct 8 17:17:26 2026 by rpki-client