$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c653b90b-349b-3969-a8b1-e7d98267d38b.roa File: c653b90b-349b-3969-a8b1-e7d98267d38b.roa (raw, json) Hash identifier: jkFaKVWWinz3GAz8GFn92AzNXtRFEHBOzI7NxX5rmSg= Subject key identifier: C1:F8:1E:05:8E:45:7C:A5:AF:B1:68:16:F1:10:D3:C8:5D:C1:88:2C Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584F3CE28C601841B6EA09FC6280 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c653b90b-349b-3969-a8b1-e7d98267d38b.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 129.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:8c:60:18:41:b6:ea:09:fc:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=3aa9da60-9a13-44aa-a412-1a98766e59b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:41:9a:b4:bb:b0:d4:0a:54:75:9c:93:e5:0d: 55:31:76:08:29:4e:74:a4:cd:77:93:8f:14:1d:b0: 0a:e3:36:17:2a:13:5c:24:e9:eb:55:89:c0:79:5c: fb:a0:b5:db:1c:81:b1:d7:72:4a:2a:bf:13:3c:b6: 04:08:d4:86:47:04:e0:7c:6c:a4:80:52:29:7c:a4: e9:ea:b3:12:41:85:81:e6:1b:e8:04:62:68:0a:c4: 01:d6:80:3b:83:b4:ca:2f:7a:3b:8a:e2:fc:7c:8f: 13:bc:a6:b2:d9:ff:22:d1:e6:87:80:8f:1d:13:6e: a9:71:02:49:f6:11:10:19:1d:2d:79:c0:2f:3b:d0: 3a:37:f3:32:7b:3a:f2:62:73:55:34:7b:b9:cc:f1: 7c:77:3b:43:97:c3:b3:64:72:ee:9d:83:de:80:e0: 37:c4:87:ce:e4:b2:13:5c:be:f3:1c:fa:7b:48:59: 14:b4:40:54:44:0d:85:18:69:03:1b:94:da:da:96: 78:6e:e8:ff:54:bc:5e:44:36:b8:19:f1:4b:6e:cd: 26:c1:de:43:58:49:5c:4e:cd:b8:bd:49:ff:03:7e: f9:c8:b6:75:c3:31:ae:48:d8:56:0b:67:a6:ea:ab: 36:bc:4f:3b:7e:32:a6:23:32:46:ea:f3:47:79:72: a8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F8:1E:05:8E:45:7C:A5:AF:B1:68:16:F1:10:D3:C8:5D:C1:88:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c653b90b-349b-3969-a8b1-e7d98267d38b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e7:44:18:96:51:29:5c:c4:0b:ef:ae:49:78:89:a5:0a:f6: cd:7b:50:e2:28:92:24:88:38:93:df:e8:2d:59:69:96:90:29: 47:7f:94:97:1e:1e:c6:36:a2:65:a5:ba:27:96:0a:66:73:1c: 6e:79:1c:a1:d3:84:de:ad:bb:58:9a:c1:10:85:03:72:d0:54: 4b:21:60:44:d2:c3:aa:90:01:4c:a9:97:ba:b9:cb:39:e0:f7: 3a:ce:43:22:1a:ea:8d:7f:50:d2:5a:a9:f2:62:2e:bf:da:37: a6:64:a4:f0:8b:ec:9c:88:e8:e4:52:13:68:7a:58:c0:20:63: 4d:28:a9:60:33:3b:fd:f6:a4:9c:0a:36:fa:e9:30:34:d2:2c: 86:71:4a:15:7d:d5:d4:5f:21:67:10:bb:98:db:a6:0b:96:06: 6a:78:90:55:34:e5:79:6e:20:5a:99:d9:ef:16:0a:09:66:d5: 98:d4:27:d4:cf:11:a6:56:2d:c1:9f:72:8c:cc:d6:82:08:51: 51:91:0d:78:30:8d:24:bc:55:ed:9f:1e:3c:57:9c:f9:5e:69: 57:7f:a2:ed:fc:be:4c:1d:f5:d7:b2:63:8e:1b:cf:13:50:c8: e4:89:df:92:c7:3d:45:88:2a:be:98:af:c4:dc:a1:2a:d4:f7: 4e:40:92:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884oxgGEG26gn8YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk M2FhOWRhNjAtOWExMy00NGFhLWE0MTItMWE5ODc2NmU1OWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0GatLuw1ApUdZyT5Q1VMXYIKU50pM13k48U HbAK4zYXKhNcJOnrVYnAeVz7oLXbHIGx13JKKr8TPLYECNSGRwTgfGykgFIpfKTp 6rMSQYWB5hvoBGJoCsQB1oA7g7TKL3o7iuL8fI8TvKay2f8i0eaHgI8dE26pcQJJ 9hEQGR0tecAvO9A6N/MyezryYnNVNHu5zPF8dztDl8OzZHLunYPegOA3xIfO5LIT XL7zHPp7SFkUtEBURA2FGGkDG5Ta2pZ4buj/VLxeRDa4GfFLbs0mwd5DWElcTs24 vUn/A375yLZ1wzGuSNhWC2em6qs2vE87fjKmIzJG6vNHeXKoEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMH4HgWORXylr7FoFvEQ08hdwYgsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYzY1M2I5MGItMzQ5Yi0z OTY5LWE4YjEtZTdkOTgyNjdkMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHnRBiWUSlcxAvvrkl4iaUK9s17UOIokiSIOJPf6C1ZaZaQKUd/lJce HsY2omWluieWCmZzHG55HKHThN6tu1iawRCFA3LQVEshYETSw6qQAUypl7q5yzng 9zrOQyIa6o1/UNJaqfJiLr/aN6ZkpPCL7JyI6ORSE2h6WMAgY00oqWAzO/32pJwK NvrpMDTSLIZxShV91dRfIWcQu5jbpguWBmp4kFU05XluIFqZ2e8WCglm1ZjUJ9TP EaZWLcGfcozM1oIIUVGRDXgwjSS8Ve2fHjxXnPleaVd/ou38vkwd9deyY44bzxNQ yOSJ35LHPUWIKr6Yr8TcoSrU905Akrg= -----END CERTIFICATE-----Generated at Sat Sep 26 06:27:59 2026 by rpki-client