$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b091665b-9f2c-3e1e-abd7-b5073bcef442.roa File: b091665b-9f2c-3e1e-abd7-b5073bcef442.roa (raw, json) Hash identifier: mKNcoBB/JMhmwS9x9o5Xk/Kg9+JL/8nFKx4NTcGMpXw= Subject key identifier: 37:80:2B:1B:D3:18:76:BD:EF:0B:4D:DE:3E:57:FC:E5:0E:90:49:0E Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584BA39CFBD3081EC041AC5B3480 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b091665b-9f2c-3e1e-abd7-b5073bcef442.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 16509 IP address blocks: 129.33.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:fb:d3:08:1e:c0:41:ac:5b:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=004d2678-eba8-4a4b-aedd-41b8018e51c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a7:5f:f5:d5:ff:0b:7f:64:6c:04:42:a5:c9: 5c:66:ad:65:3f:b7:1e:fe:31:07:3b:68:62:5d:95: 57:7e:cb:7c:38:7c:ca:29:1c:d4:7a:3b:1f:43:f0: 29:69:5d:9a:1b:91:8e:a9:d9:b9:e8:e8:a6:ea:47: 21:88:0d:4e:0b:f0:87:39:72:55:60:43:7b:7c:88: 67:03:48:6a:37:fb:df:24:82:bd:5c:7e:e2:f2:e8: d1:15:db:94:e4:ce:32:7a:cd:37:27:fd:a2:92:81: 78:a4:9f:6c:94:8d:52:cf:f5:ad:7d:d1:de:49:25: d6:af:20:8b:3b:f4:97:8a:bd:a8:7c:c2:9c:9d:9d: 82:ec:01:69:6e:c6:93:42:b1:4d:05:01:43:e8:93: b4:f0:ff:cd:68:56:bb:1f:29:e4:94:93:9d:e6:57: 4d:79:66:19:05:cb:48:c0:9e:2f:01:73:97:2b:70: f6:f7:5e:e3:89:9b:20:6b:70:ce:57:d6:1b:06:32: b6:a9:d6:61:e3:9e:2c:21:41:46:38:74:ed:69:85: 39:d8:a0:af:4f:f5:17:0f:4a:69:7d:27:06:b9:47: ac:76:e3:ed:cf:b9:29:b1:34:e1:f0:b0:cb:fd:1c: d4:f8:7e:c2:89:3f:71:0a:7f:f6:80:6d:4c:48:18: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:80:2B:1B:D3:18:76:BD:EF:0B:4D:DE:3E:57:FC:E5:0E:90:49:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b091665b-9f2c-3e1e-abd7-b5073bcef442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a0:a5:d1:54:d9:b5:8b:0e:2b:9e:ab:67:21:cd:7e:24:04: 23:52:48:55:b0:5f:89:95:f5:bf:e8:dd:10:22:c3:50:d2:24: 02:07:dc:85:f9:b8:6b:d6:a3:fa:b3:e2:24:d8:0a:78:77:3b: 86:78:9a:19:8c:a2:a4:0c:cf:48:b3:4d:48:a2:f4:6c:f9:29: 8b:9f:f3:e2:dd:e1:c1:ae:3e:f4:1e:1b:4a:9d:36:7b:45:1b: 8c:80:19:68:c7:36:b3:71:55:ed:7c:35:ce:2b:cd:9c:d2:9b: 1d:79:ff:55:35:a6:49:48:b2:be:d2:6f:57:35:15:51:15:8f: d0:0c:b3:f7:47:87:0c:68:7e:40:a1:dc:e7:04:37:17:ae:d0: 4e:26:b0:68:e1:5c:75:37:f5:a7:0f:70:73:8b:67:1b:be:08: da:de:0b:91:c0:18:01:13:6f:4f:98:a4:59:c4:b7:88:a5:c5: 6e:38:7a:a4:0e:d2:e0:26:fc:58:06:94:60:98:23:51:4c:b5: e3:36:5c:16:d6:3b:28:eb:0d:65:48:e6:17:ab:da:c7:02:f3: 44:ee:14:80:5d:4b:58:66:3c:3f:98:8d:2d:19:89:07:d9:f9: 3c:3c:ad:87:7b:b8:d2:ce:ad:9c:44:1c:64:7b:ea:b8:7a:56: 60:d8:e4:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPvTCB7AQaxbNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MDA0ZDI2NzgtZWJhOC00YTRiLWFlZGQtNDFiODAxOGU1MWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKdf9dX/C39kbARCpclcZq1lP7ce/jEHO2hi XZVXfst8OHzKKRzUejsfQ/ApaV2aG5GOqdm56Oim6kchiA1OC/CHOXJVYEN7fIhn A0hqN/vfJIK9XH7i8ujRFduU5M4yes03J/2ikoF4pJ9slI1Sz/WtfdHeSSXWryCL O/SXir2ofMKcnZ2C7AFpbsaTQrFNBQFD6JO08P/NaFa7HynklJOd5ldNeWYZBctI wJ4vAXOXK3D2917jiZsga3DOV9YbBjK2qdZh454sIUFGOHTtaYU52KCvT/UXD0pp fScGuUesduPtz7kpsTTh8LDL/RzU+H7CiT9xCn/2gG1MSBg8HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeAKxvTGHa97wtN3j5X/OUOkEkOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYjA5MTY2NWItOWYyYy0z ZTFlLWFiZDctYjUwNzNiY2VmNDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgSGKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6gpdFU2bWLDiueq2chzX4kBCNSSFWwX4mV9b/o3RAiw1DSJAIH3IX5 uGvWo/qz4iTYCnh3O4Z4mhmMoqQMz0izTUii9Gz5KYuf8+Ld4cGuPvQeG0qdNntF G4yAGWjHNrNxVe18Nc4rzZzSmx15/1U1pklIsr7Sb1c1FVEVj9AMs/dHhwxofkCh 3OcENxeu0E4msGjhXHU39acPcHOLZxu+CNreC5HAGAETb0+YpFnEt4ilxW44eqQO 0uAm/FgGlGCYI1FMteM2XBbWOyjrDWVI5her2scC80TuFIBdS1hmPD+YjS0ZiQfZ +Tw8rYd7uNLOrZxEHGR76rh6VmDY5A0= -----END CERTIFICATE-----Generated at Wed Nov 5 12:12:16 2025 by rpki-client