$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b336070a-6543-35fe-95ed-f03fdfb0f671.roa File: b336070a-6543-35fe-95ed-f03fdfb0f671.roa (raw, json) Hash identifier: Pot5K4vyPcdugWzFXteWNEe89baaRrA6cNzev1KcbVg= Subject key identifier: 42:7F:C2:2A:D3:70:53:00:1B:58:54:3D:51:3C:97:56:9F:22:71:FF Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584AAB26546BE4C65890FDC6EC00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b336070a-6543-35fe-95ed-f03fdfb0f671.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 129.33.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:54:6b:e4:c6:58:90:fd:c6:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=ecc35a33-b279-4824-8997-8211c2bdb1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f6:ed:20:54:c1:a2:af:77:b5:47:8e:63:22: 80:6c:f9:82:5e:d1:3b:4f:21:74:b8:1e:75:6a:98: 99:1a:6f:72:b3:a8:7b:b8:ac:a6:24:1f:02:7c:79: 18:4f:d5:c1:05:41:0c:0b:67:b5:e8:94:34:28:00: 25:ef:09:8a:fc:00:fb:db:f0:93:75:e4:ee:8a:ae: 96:97:11:2e:15:2b:0e:1e:3e:08:14:ef:99:80:94: e1:36:58:eb:0e:83:22:84:01:01:28:ec:71:d1:f2: fc:95:8f:44:12:bd:18:b1:25:f0:6e:3a:00:8d:5a: 36:c7:58:19:11:d6:7e:0f:59:a2:30:cc:ff:94:c9: 19:06:24:55:d6:91:ed:d1:87:9b:35:53:28:9f:1c: e5:e6:5a:2c:a7:46:fc:96:a0:5e:f0:cd:fb:b7:3f: fb:92:0d:5c:c3:28:a9:eb:00:31:82:40:13:d0:34: 05:5d:97:8e:5e:74:76:6c:d0:06:3c:59:83:b4:0e: 8d:65:90:bc:4d:a4:26:b5:8f:fa:25:b4:67:c2:00: 5d:f6:a4:3a:c2:34:ab:65:34:33:b6:31:31:04:67: da:92:be:c5:b0:3c:28:5b:40:04:74:a0:ac:e6:cb: d5:a6:e1:f2:19:5c:49:1b:50:51:0f:d4:d4:dd:92: 59:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7F:C2:2A:D3:70:53:00:1B:58:54:3D:51:3C:97:56:9F:22:71:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b336070a-6543-35fe-95ed-f03fdfb0f671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:8a:b9:e1:c1:18:69:df:85:4c:79:8d:17:0a:ae:04:39:0b: 37:9f:35:79:e6:aa:05:b8:56:d7:21:3b:11:7a:a9:60:d3:69: 82:95:7a:f2:6c:0f:03:79:d8:36:2e:c5:36:73:60:6a:81:b1: 5d:26:d8:aa:63:61:b9:eb:12:06:e2:8b:97:bd:1d:67:57:b2: a0:18:32:79:17:d9:cd:98:3b:62:e5:cc:b0:e1:9c:2f:79:27: 0d:14:c1:29:16:66:fc:9a:6a:6a:9c:dc:55:e3:2a:3a:94:92: b8:f2:37:1f:08:c1:e7:46:26:4e:78:e5:e3:6c:45:c9:dd:9f: 1c:eb:59:ee:c2:22:e8:75:a9:dd:e0:55:61:55:09:a8:af:56: 22:a2:51:7d:9b:b9:67:18:9c:e4:22:a3:47:b5:bd:36:7c:c0: ef:bd:b6:2f:1a:64:40:84:78:06:7d:be:2e:fa:68:28:f9:d8: 30:95:4a:35:ce:7e:16:cf:b2:29:94:21:0e:8f:c5:8c:a9:53: eb:e7:ce:0f:cb:e5:18:b2:89:e2:45:72:bd:20:43:89:14:55: 53:a3:6a:c1:c2:5b:e9:51:f4:6f:76:75:9b:78:6b:bb:ef:d3: 74:f9:eb:6a:e4:d3:64:1c:13:48:46:4c:93:a4:03:b8:45:e5: c3:28:38:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlRr5MZYkP3G7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZWNjMzVhMzMtYjI3OS00ODI0LTg5OTctODIxMWMyYmRiMWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/btIFTBoq93tUeOYyKAbPmCXtE7TyF0uB51 apiZGm9ys6h7uKymJB8CfHkYT9XBBUEMC2e16JQ0KAAl7wmK/AD72/CTdeTuiq6W lxEuFSsOHj4IFO+ZgJThNljrDoMihAEBKOxx0fL8lY9EEr0YsSXwbjoAjVo2x1gZ EdZ+D1miMMz/lMkZBiRV1pHt0YebNVMonxzl5losp0b8lqBe8M37tz/7kg1cwyip 6wAxgkAT0DQFXZeOXnR2bNAGPFmDtA6NZZC8TaQmtY/6JbRnwgBd9qQ6wjSrZTQz tjExBGfakr7FsDwoW0AEdKCs5svVpuHyGVxJG1BRD9TU3ZJZJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ/wirTcFMAG1hUPVE8l1afInH/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYjMzNjA3MGEtNjU0My0z NWZlLTk1ZWQtZjAzZmRmYjBmNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGKueHBGGnfhUx5jRcKrgQ5CzefNXnmqgW4VtchOxF6qWDTaYKVevJs DwN52DYuxTZzYGqBsV0m2KpjYbnrEgbii5e9HWdXsqAYMnkX2c2YO2LlzLDhnC95 Jw0UwSkWZvyaamqc3FXjKjqUkrjyNx8IwedGJk545eNsRcndnxzrWe7CIuh1qd3g VWFVCaivViKiUX2buWcYnOQio0e1vTZ8wO+9ti8aZECEeAZ9vi76aCj52DCVSjXO fhbPsimUIQ6PxYypU+vnzg/L5RiyieJFcr0gQ4kUVVOjasHCW+lR9G92dZt4a7vv 03T562rk02QcE0hGTJOkA7hF5cMoOPA= -----END CERTIFICATE-----Generated at Mon Aug 4 19:07:51 2025 by rpki-client