$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9b8fb5ff-8f44-354e-9e25-b728c267775e.roa File: 9b8fb5ff-8f44-354e-9e25-b728c267775e.roa (raw, json) Hash identifier: PjgNz/qwLhug7042/q8SVSbNDaQJ5IAjaoGxfjMsFaY= Subject key identifier: A9:F7:8F:0A:4B:9A:55:04:39:21:5F:A6:5C:0E:FB:15:66:CA:15:85 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584F3CE288E3398067852715B120 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9b8fb5ff-8f44-354e-9e25-b728c267775e.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 19795 IP address blocks: 129.33.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:88:e3:39:80:67:85:27:15:b1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=289f6476-c2ac-425b-b373-59541b03f0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3d:73:95:96:7e:e8:ea:2c:bc:32:2e:dd:ba: 1e:5b:ce:79:36:e4:93:aa:32:50:23:dd:d3:c3:37: cb:d9:a3:82:13:d2:d0:ad:66:d9:8f:7f:56:2a:b1: 55:ef:59:59:c7:5e:54:26:d0:dc:cc:6f:74:3f:bc: de:e8:71:41:92:c3:9e:81:8a:e9:f7:f3:49:77:85: 90:39:15:09:ec:08:aa:da:45:1e:cf:f5:da:03:0b: 42:c7:2a:9f:9b:67:4c:8e:64:51:ef:0c:61:80:7d: 8a:c5:df:2f:83:1a:bd:8e:7d:55:c0:1f:20:20:8b: 7e:51:d0:0f:14:ab:1e:7d:ea:1c:b1:ff:c8:e8:e7: ca:e6:4b:f0:a1:9b:49:6e:3e:a4:c7:f8:ed:93:68: 5e:07:5d:3d:90:02:76:86:6c:f4:13:70:b8:81:8a: 2b:f0:1a:92:06:21:2a:a5:0e:6c:09:01:ee:96:a1: 12:30:35:11:e2:74:f2:54:39:e9:6b:6d:65:eb:10: b6:08:01:b5:16:78:b6:7b:d7:00:fd:a5:b4:57:34: aa:74:d7:1f:01:15:a7:2d:e9:03:48:7a:81:87:90: 35:5f:3f:88:1f:37:ec:f9:88:7b:a2:51:3d:e2:94: 6f:ab:76:38:4e:84:c6:38:75:e9:67:c3:21:85:dc: 18:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F7:8F:0A:4B:9A:55:04:39:21:5F:A6:5C:0E:FB:15:66:CA:15:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9b8fb5ff-8f44-354e-9e25-b728c267775e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:06:83:93:0f:3a:4c:8f:4c:8c:4e:8a:80:79:f2:b9:ac:3a: 89:c8:a1:bc:7b:18:a3:2a:f6:a8:2b:97:ca:6d:10:59:59:2d: 4c:c2:f4:c5:7c:26:ea:01:22:13:0d:fd:5a:6a:4a:84:ba:ba: 12:d6:51:8f:0f:a7:6e:0c:36:c6:78:88:03:7c:c5:63:b8:02: 48:37:ed:40:d3:13:5c:23:b4:25:74:04:2f:06:4a:29:1f:dc: 19:99:2f:65:ff:56:b9:02:f4:01:e7:15:47:64:e1:0e:d0:0c: b4:1f:e9:be:ce:c2:28:f2:05:55:b5:c9:68:20:38:36:b3:4b: e6:74:fb:a2:3e:8f:fb:9e:8b:47:76:2f:4c:ee:fc:03:2d:75: bc:56:64:f5:26:d6:2b:f7:f1:78:ea:ba:2b:c9:2d:e7:cf:e3: e3:91:39:25:c1:ca:59:9e:b5:2b:e6:fe:16:f2:69:fd:4c:85: 04:ab:bc:85:0f:e6:1b:f1:fa:bb:a0:3f:2b:30:0d:02:ab:80: 8d:47:cc:12:61:84:be:c5:35:2f:c5:39:c8:09:20:92:2c:09: 45:0c:3f:b3:a3:6c:ad:4c:8b:eb:20:1a:e7:6a:ce:0f:ce:04: c5:cf:a3:ea:f7:18:9f:d8:ba:e6:a4:98:1a:ed:57:d7:4f:9b: 6e:26:53:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884ojjOYBnhScVsSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk Mjg5ZjY0NzYtYzJhYy00MjViLWIzNzMtNTk1NDFiMDNmMGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD1zlZZ+6OosvDIu3boeW855NuSTqjJQI93T wzfL2aOCE9LQrWbZj39WKrFV71lZx15UJtDczG90P7ze6HFBksOegYrp9/NJd4WQ ORUJ7Aiq2kUez/XaAwtCxyqfm2dMjmRR7wxhgH2Kxd8vgxq9jn1VwB8gIIt+UdAP FKsefeocsf/I6OfK5kvwoZtJbj6kx/jtk2heB109kAJ2hmz0E3C4gYor8BqSBiEq pQ5sCQHulqESMDUR4nTyVDnpa21l6xC2CAG1Fni2e9cA/aW0VzSqdNcfARWnLekD SHqBh5A1Xz+IHzfs+Yh7olE94pRvq3Y4ToTGOHXpZ8MhhdwYwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKn3jwpLmlUEOSFfplwO+xVmyhWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOWI4ZmI1ZmYtOGY0NC0z NTRlLTllMjUtYjcyOGMyNjc3NzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIGg5MPOkyPTIxOioB58rmsOonIobx7GKMq9qgrl8ptEFlZLUzC9MV8 JuoBIhMN/VpqSoS6uhLWUY8Pp24MNsZ4iAN8xWO4Akg37UDTE1wjtCV0BC8GSikf 3BmZL2X/VrkC9AHnFUdk4Q7QDLQf6b7OwijyBVW1yWggODazS+Z0+6I+j/uei0d2 L0zu/AMtdbxWZPUm1iv38XjquivJLefP4+OROSXBylmetSvm/hbyaf1MhQSrvIUP 5hvx+rugPyswDQKrgI1HzBJhhL7FNS/FOcgJIJIsCUUMP7OjbK1Mi+sgGudqzg/O BMXPo+r3GJ/YuuakmBrtV9dPm24mUxc= -----END CERTIFICATE-----Generated at Tue Sep 29 12:24:03 2026 by rpki-client