$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a9d63830-af6c-3450-85d9-b6a575a21f7e.roa File: a9d63830-af6c-3450-85d9-b6a575a21f7e.roa (raw, json) Hash identifier: Foe4a9Rwe+Upprf/pzDuAuVdRuJBeWAttqpHHWN/YXk= Subject key identifier: C8:4C:F0:01:13:72:17:5D:7D:04:F4:60:EB:D0:71:11:22:47:B7:91 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584CD99CC4EF7CE8EA12EA29E0A0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a9d63830-af6c-3450-85d9-b6a575a21f7e.roa Signing time: Fri 13 Feb 2026 14:00:41 +0000 ROA not before: Fri 13 Feb 2026 14:00:41 +0000 ROA not after: Thu 14 May 2026 13:00:41 +0000 asID: 16509 IP address blocks: 129.33.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:9c:c4:ef:7c:e8:ea:12:ea:29:e0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Feb 13 14:00:41 2026 GMT Not After : May 14 13:00:41 2026 GMT Subject: CN=e383a90b-ca6c-4340-90af-eb37cabd2205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:32:34:41:a0:42:42:57:96:d0:a1:77:8a:c0: a3:e9:db:ab:8e:cd:0d:73:df:61:1b:19:a1:45:c1: bc:43:c6:37:4f:eb:b7:cf:f2:a3:5d:20:85:ec:1b: 8e:a0:a3:11:68:12:c7:5f:7e:3f:fc:b5:f0:e0:2d: f1:81:e8:72:52:85:c3:e3:d1:bc:80:7b:4e:60:f2: e2:8f:1a:bc:63:28:ea:a7:e0:96:26:d3:58:4c:e9: 6c:8c:48:f4:9d:52:0d:0c:1a:27:81:d6:14:20:37: e8:6f:c5:f7:cd:b1:f2:e7:2c:a6:f9:54:9b:e6:68: b8:fd:29:6e:d9:81:7e:31:1d:7d:d6:f9:3e:af:a8: 2e:bd:1a:62:c2:d3:cb:12:e4:49:12:86:d6:4a:3f: a5:a4:ff:eb:75:33:c4:7b:eb:90:16:f7:da:d2:e6: ce:fc:18:df:f3:7c:85:e4:6d:69:4b:4d:ea:71:b7: 23:a7:2e:28:ba:78:3e:50:4b:e7:8c:00:81:2f:d8: a2:cb:be:20:6b:48:52:02:af:ce:9c:09:d1:33:7b: 76:93:55:b4:47:95:bf:e9:87:25:6c:8d:9a:e2:3f: cb:6a:51:dc:d8:03:76:74:4b:e6:4a:ac:26:70:9f: a8:22:f4:85:4d:d9:d7:ea:3a:ec:32:55:15:84:4c: 38:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4C:F0:01:13:72:17:5D:7D:04:F4:60:EB:D0:71:11:22:47:B7:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a9d63830-af6c-3450-85d9-b6a575a21f7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:f5:73:69:c4:a0:e2:22:8a:f8:0c:2e:e5:4e:ab:37:31:c5: e8:96:bb:5b:65:8a:08:8f:f7:6c:ce:72:d4:8c:c6:fb:f7:a7: bb:25:76:fa:84:6d:ed:02:4c:76:33:cc:54:b6:83:74:79:21: be:72:5a:15:c6:e3:89:4f:1a:77:7c:8f:78:29:18:94:a9:cf: a2:f5:df:08:55:45:fb:a4:50:2d:3e:51:61:a5:db:8a:a4:0f: ba:76:56:be:31:ab:01:42:44:2b:9a:59:ba:2f:15:c3:55:30: d7:54:7f:2e:74:92:6e:e6:7d:51:cc:6d:29:c7:4a:50:7a:b8: bb:32:5b:0f:01:0c:2a:00:bc:8f:da:ab:36:cb:04:b4:31:27: 78:a4:35:6b:59:18:4b:fd:05:11:95:55:b5:e0:ce:24:77:13: 23:21:d4:1f:1b:b7:db:17:fd:9b:2c:47:d3:bc:e4:0b:05:c0: c4:25:dc:0f:78:da:05:16:92:c6:78:57:34:6f:c4:4c:3c:34: 28:b9:84:66:ec:a8:d1:95:00:a2:e0:0a:fc:1e:f7:2d:0c:f5: c7:a2:ac:72:65:e2:52:af:bb:c3:24:e7:de:a6:4a:b8:30:9c: a1:60:48:1e:e0:72:c0:c6:fe:87:35:86:f0:49:f0:53:87:a7: 04:99:6b:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzZnMTvfOjqEuop4KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk ZTM4M2E5MGItY2E2Yy00MzQwLTkwYWYtZWIzN2NhYmQyMjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTI0QaBCQleW0KF3isCj6durjs0Nc99hGxmh RcG8Q8Y3T+u3z/KjXSCF7BuOoKMRaBLHX34//LXw4C3xgehyUoXD49G8gHtOYPLi jxq8Yyjqp+CWJtNYTOlsjEj0nVINDBongdYUIDfob8X3zbHy5yym+VSb5mi4/Slu 2YF+MR191vk+r6guvRpiwtPLEuRJEobWSj+lpP/rdTPEe+uQFvfa0ubO/Bjf83yF 5G1pS03qcbcjpy4oung+UEvnjACBL9iiy74ga0hSAq/OnAnRM3t2k1W0R5W/6Ycl bI2a4j/LalHc2AN2dEvmSqwmcJ+oIvSFTdnX6jrsMlUVhEw49wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhM8AETchddfQT0YOvQcREiR7eRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYTlkNjM4MzAtYWY2Yy0z NDUwLTg1ZDktYjZhNTc1YTIxZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFr1c2nEoOIiivgMLuVOqzcxxeiWu1tligiP92zOctSMxvv3p7sldvqE be0CTHYzzFS2g3R5Ib5yWhXG44lPGnd8j3gpGJSpz6L13whVRfukUC0+UWGl24qk D7p2Vr4xqwFCRCuaWbovFcNVMNdUfy50km7mfVHMbSnHSlB6uLsyWw8BDCoAvI/a qzbLBLQxJ3ikNWtZGEv9BRGVVbXgziR3EyMh1B8bt9sX/ZssR9O85AsFwMQl3A94 2gUWksZ4VzRvxEw8NCi5hGbsqNGVAKLgCvwe9y0M9ceirHJl4lKvu8Mk596mSrgw nKFgSB7gcsDG/oc1hvBJ8FOHpwSZa5M= -----END CERTIFICATE-----Generated at Mon Mar 2 11:40:48 2026 by rpki-client