$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa File: c9dd7a45-36e9-37a5-9068-6420d65d9719.roa (raw, json) Hash identifier: bboqMRlh2NtZksAEaJtFxfADFSik7N8+tWQKxjJ6870= Subject key identifier: 3C:14:DD:A1:5F:9A:FC:3B:C1:64:47:75:BD:40:43:A9:A7:C3:11:98 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B8BE21AB53993F88CA618B2C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 129.33.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:1a:b5:39:93:f8:8c:a6:18:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=88f08c40-3943-4576-abfe-90da04cac4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bd:ff:40:64:75:b7:c3:7e:c9:36:64:43:83: 82:0d:ec:c8:d8:5a:f4:e4:3b:33:5d:e9:17:10:35: a4:b1:a8:86:5b:08:cf:a9:7e:ff:b2:6c:49:91:16: fb:8b:34:f3:79:92:0b:0e:c3:2f:4d:b3:d5:78:8f: 8f:d2:ce:f8:8c:83:1d:32:a8:5e:51:27:b4:c9:63: 79:42:e2:10:ca:f0:68:08:40:d5:de:c1:bd:25:76: b6:a1:7e:9f:d5:5a:2e:d7:c2:37:c3:7e:76:fa:6f: 1c:7c:fc:1a:1e:3b:65:3b:3c:63:96:1d:e6:fa:cc: f3:4e:0d:43:69:31:1c:7d:5e:a7:05:b6:21:e7:15: 32:65:6e:1a:40:36:ee:21:19:9b:7d:b8:06:93:b3: f7:10:ed:45:2d:f1:90:74:b6:61:a6:6a:3f:59:74: 95:30:84:1e:ee:ac:4a:91:6a:6e:7a:b8:66:72:5a: bb:69:59:d8:26:14:60:b0:cb:d1:c7:88:f5:f0:59: ae:8c:9a:45:76:7d:b2:f6:d6:57:ff:30:ce:b6:36: 2e:c3:68:6b:24:10:6c:4a:3b:47:0c:c3:3f:db:f1: 3a:42:37:2d:ee:c5:f1:3d:95:bd:fc:12:51:a2:e4: 75:4d:5a:7c:53:99:f6:63:e5:6a:86:49:c1:80:e7: 61:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:14:DD:A1:5F:9A:FC:3B:C1:64:47:75:BD:40:43:A9:A7:C3:11:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:57:c8:b3:e3:ae:b8:bb:ea:19:dc:e3:ad:87:79:00:5b:ad: f0:89:9f:7b:33:7e:1c:ee:2a:9d:4e:82:ab:87:78:f5:e3:7d: 26:3e:37:ba:8b:90:00:e6:f1:89:40:2f:b1:d7:91:3a:4f:33: 4a:cb:c3:74:52:ed:d4:d0:ac:1c:6c:7b:f8:b4:3f:b5:f1:4b: 04:5e:0a:ec:0e:1e:cd:66:0c:1b:99:19:e0:ae:83:98:6b:46: 70:8f:1e:30:70:ca:ad:f2:38:5f:0f:b4:df:55:58:ef:68:a1: 5d:76:62:f6:38:72:01:80:59:96:99:97:60:d5:cd:6d:57:dc: 85:80:4f:95:e9:da:d2:64:eb:59:9d:96:5d:09:9c:01:ba:31: 66:a9:8a:d3:0b:1c:98:ac:ad:42:da:46:fc:01:43:93:aa:f5: 25:1e:35:95:a7:87:67:6e:62:f0:3e:22:63:cc:ed:72:78:e1: dc:78:ec:65:41:15:e1:af:b2:7c:07:93:08:ea:5a:c1:dc:5b: 4f:9b:c8:e7:8e:87:61:e4:f2:51:7b:65:bc:11:08:5d:c1:82: e7:d0:50:a4:d4:c4:3e:b3:eb:ba:2b:00:a5:aa:da:7c:b6:cb: 73:a4:30:d9:ad:59:ca:fa:cf:23:73:f1:9a:98:69:86:9d:77: fa:dd:7e:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hq1OZP4jKYYssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk ODhmMDhjNDAtMzk0My00NTc2LWFiZmUtOTBkYTA0Y2FjNGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk73/QGR1t8N+yTZkQ4OCDezI2Fr05DszXekX EDWksaiGWwjPqX7/smxJkRb7izTzeZILDsMvTbPVeI+P0s74jIMdMqheUSe0yWN5 QuIQyvBoCEDV3sG9JXa2oX6f1Vou18I3w352+m8cfPwaHjtlOzxjlh3m+szzTg1D aTEcfV6nBbYh5xUyZW4aQDbuIRmbfbgGk7P3EO1FLfGQdLZhpmo/WXSVMIQe7qxK kWpuerhmclq7aVnYJhRgsMvRx4j18FmujJpFdn2y9tZX/zDOtjYuw2hrJBBsSjtH DMM/2/E6Qjct7sXxPZW9/BJRouR1TVp8U5n2Y+VqhknBgOdhuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwU3aFfmvw7wWRHdb1AQ6mnwxGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYzlkZDdhNDUtMzZlOS0z N2E1LTkwNjgtNjQyMGQ2NWQ5NzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhXyLPjrri76hnc462HeQBbrfCJn3szfhzuKp1OgquHePXjfSY+N7qL kADm8YlAL7HXkTpPM0rLw3RS7dTQrBxse/i0P7XxSwReCuwOHs1mDBuZGeCug5hr RnCPHjBwyq3yOF8PtN9VWO9ooV12YvY4cgGAWZaZl2DVzW1X3IWAT5Xp2tJk61md ll0JnAG6MWapitMLHJisrULaRvwBQ5Oq9SUeNZWnh2duYvA+ImPM7XJ44dx47GVB FeGvsnwHkwjqWsHcW0+byOeOh2Hk8lF7ZbwRCF3BgufQUKTUxD6z67orAKWq2ny2 y3OkMNmtWcr6zyNz8ZqYaYadd/rdfp8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:06:23 2025 by rpki-client