$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ce8144b7-b5c9-3b37-bb93-aa14d409ea5f.roa File: ce8144b7-b5c9-3b37-bb93-aa14d409ea5f.roa (raw, json) Hash identifier: SQoL5yJwQt6MymfmBcddDVkd8b0HWx8FwaIcbcpT9Aw= Subject key identifier: 2B:89:38:87:31:94:7B:3B:A7:D6:05:76:61:38:B8:23:E6:CA:FD:60 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584BA39CFBE712FC8C7739897EC0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ce8144b7-b5c9-3b37-bb93-aa14d409ea5f.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 14618 IP address blocks: 129.33.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:fb:e7:12:fc:8c:77:39:89:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=018d0b55-33b0-46f8-bc67-b1c7086325d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c2:e0:7b:e9:c5:cb:7f:1d:bc:4f:6a:65:a3: 56:ef:04:6c:d8:dc:11:aa:37:a8:a2:e1:42:88:a6: 23:52:80:e4:67:b7:1b:7d:53:a3:af:60:d7:d1:df: 6a:54:19:49:57:5f:76:2b:87:0c:86:fe:38:df:c7: 9b:c0:6d:ae:f0:cd:41:72:6d:c3:1f:10:65:06:4a: 9d:33:c6:16:60:f6:9e:9a:21:ff:d1:ca:c4:aa:c2: 3e:a4:2f:75:0a:96:c7:cf:4c:8d:fb:74:72:c8:a5: 09:fc:e6:c7:a8:2e:8a:6e:85:61:bc:f0:b9:76:1d: b6:90:23:42:c7:fa:c2:bc:36:9f:66:21:bb:57:06: ed:4f:eb:35:e3:05:55:84:20:1d:a8:82:38:96:74: db:ab:12:a0:e1:93:7a:bc:73:bc:02:6f:2f:af:9a: 9e:b3:be:ec:a4:13:95:b6:6d:e8:95:44:00:ef:0c: 69:e9:29:f4:69:88:f6:8a:6a:a9:a1:9d:23:8e:a7: 44:a4:48:12:1f:6a:e3:b7:91:d9:cb:b0:79:d8:83: b3:0a:d6:51:c7:68:f2:1d:72:05:dc:81:d3:4e:ff: f1:46:9b:f6:88:21:fd:54:e6:fe:fc:55:b9:9e:70: 79:2e:47:70:1e:f3:db:8e:02:61:6d:b2:2c:02:6d: df:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:89:38:87:31:94:7B:3B:A7:D6:05:76:61:38:B8:23:E6:CA:FD:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ce8144b7-b5c9-3b37-bb93-aa14d409ea5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f6:c1:f5:73:e4:2c:45:da:a8:e1:ce:0a:d7:aa:ce:d3:1c: ce:c5:7b:98:75:ca:2c:2e:40:e7:03:42:7b:c5:6a:8e:3f:d8: 69:33:d4:0c:3f:58:1c:85:5a:38:94:89:3a:a3:7e:8c:3d:28: d0:5c:67:d9:fe:60:ec:8e:ee:d4:b9:5f:86:39:fe:78:60:12: 81:79:33:a5:b0:5b:69:f2:95:10:6b:22:eb:31:9c:e2:80:96: 86:a4:25:fa:95:d3:99:97:e5:eb:cc:dc:13:8d:1e:d9:44:fa: bd:f1:72:d7:6d:a5:5b:b4:d3:52:a1:0d:2d:d1:0a:51:76:75: 18:e4:6b:bf:c6:f7:67:f3:f7:87:32:57:98:3c:90:41:87:0f: 78:55:22:ff:df:e9:59:d3:ec:8d:e5:70:fe:85:c8:ea:88:90: c2:4a:c5:d0:20:42:c0:54:35:e1:d8:5b:8d:40:6a:45:cf:ec: ba:46:ce:7a:24:9c:6c:7c:ed:c4:1d:3d:08:b8:f1:01:83:e1: 98:11:a7:90:89:62:f5:91:f9:3d:41:83:a4:c0:37:b4:cb:62: 35:48:07:20:fa:f3:55:d9:a0:f4:f4:ed:9d:9e:d4:55:bb:b4: 77:b3:00:3a:cc:51:de:82:e6:7f:b9:5c:87:49:d8:16:c7:0f: 2e:a0:bf:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPvnEvyMdzmJfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MDE4ZDBiNTUtMzNiMC00NmY4LWJjNjctYjFjNzA4NjMyNWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8Lge+nFy38dvE9qZaNW7wRs2NwRqjeoouFC iKYjUoDkZ7cbfVOjr2DX0d9qVBlJV192K4cMhv4438ebwG2u8M1Bcm3DHxBlBkqd M8YWYPaemiH/0crEqsI+pC91CpbHz0yN+3RyyKUJ/ObHqC6KboVhvPC5dh22kCNC x/rCvDafZiG7VwbtT+s14wVVhCAdqII4lnTbqxKg4ZN6vHO8Am8vr5qes77spBOV tm3olUQA7wxp6Sn0aYj2imqpoZ0jjqdEpEgSH2rjt5HZy7B52IOzCtZRx2jyHXIF 3IHTTv/xRpv2iCH9VOb+/FW5nnB5LkdwHvPbjgJhbbIsAm3fKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuJOIcxlHs7p9YFdmE4uCPmyv1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvY2U4MTQ0YjctYjVjOS0z YjM3LWJiOTMtYWExNGQ0MDllYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgSGKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHj2wfVz5CxF2qjhzgrXqs7THM7Fe5h1yiwuQOcDQnvFao4/2Gkz1Aw/ WByFWjiUiTqjfow9KNBcZ9n+YOyO7tS5X4Y5/nhgEoF5M6WwW2nylRBrIusxnOKA loakJfqV05mX5evM3BONHtlE+r3xctdtpVu001KhDS3RClF2dRjka7/G92fz94cy V5g8kEGHD3hVIv/f6VnT7I3lcP6FyOqIkMJKxdAgQsBUNeHYW41AakXP7LpGznok nGx87cQdPQi48QGD4ZgRp5CJYvWR+T1Bg6TAN7TLYjVIByD681XZoPT07Z2e1FW7 tHezADrMUd6C5n+5XIdJ2BbHDy6gv5s= -----END CERTIFICATE-----Generated at Wed Nov 5 10:48:40 2025 by rpki-client