$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa File: 4347f76d-c74a-3942-9dc0-3e3301512261.roa (raw, json) Hash identifier: GVXBycwWU2Hkx2dHc3BbDT5IWsg6z8PFZsE8im6ss4s= Subject key identifier: 69:64:B1:04:86:D8:C8:1D:98:C3:DD:D1:C6:64:80:10:FD:28:68:4F Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584E9A7FBD13BD535D51E25C8580 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 16509 IP address blocks: 129.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:bd:13:bd:53:5d:51:e2:5c:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=c07c05c9-042a-456b-9a5e-5ef1a81cae4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:20:c9:80:17:e1:e5:6d:24:24:b4:dd:e8:b1: e5:8b:4b:bd:ae:f0:e9:aa:cd:9a:89:b0:31:b8:1a: e5:b2:3a:9a:0d:e1:38:f4:0a:c8:b3:de:02:44:63: f1:30:9b:e5:0c:1e:0a:39:23:9d:8c:13:fb:40:81: a2:66:e0:f2:d0:8f:60:e3:9c:b7:de:aa:70:b1:76: 59:a7:02:5c:73:a7:28:e0:01:2d:6e:59:b4:62:0b: 64:2d:5f:de:25:33:b6:4b:af:25:18:d4:b4:b6:4b: ff:4a:10:ef:51:06:1d:9d:60:21:8f:c4:3a:d5:20: 06:cb:10:de:ac:9e:6d:b9:ec:ba:38:85:10:d2:87: b5:5a:a2:d0:9c:74:87:fb:69:50:b9:7c:97:58:80: da:85:08:87:21:28:0d:9f:7f:94:8b:4e:a9:60:3b: 39:fc:cb:fb:7e:a0:1d:ed:0b:f8:9f:a0:0f:f1:71: 7b:5d:b0:c7:9a:06:ec:18:6e:95:3e:e0:bc:90:54: 39:2c:32:ae:5d:fa:06:69:92:1d:48:51:47:e8:f2: 02:0d:56:fd:f8:a4:9d:bb:ab:a8:e2:9d:33:a0:14: 6c:a4:84:d0:01:f8:b8:60:e6:6c:5d:77:f8:b5:b8: ee:00:b7:7c:f0:b7:39:6b:5f:9d:05:24:a7:e8:4f: b6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:64:B1:04:86:D8:C8:1D:98:C3:DD:D1:C6:64:80:10:FD:28:68:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:25:a4:e5:6b:e8:1e:58:15:0e:76:6f:a9:10:7a:f0:8e:8b: 31:3c:16:7b:e6:af:d5:51:2c:cc:34:ea:1d:67:32:29:11:12: 32:5a:39:b3:66:17:a5:4d:aa:0e:63:fb:47:c0:ae:e3:01:8f: fb:46:3e:b0:49:d0:54:f7:e3:0e:8a:a4:23:8f:3c:67:73:a5: 84:28:1f:96:8f:6c:55:15:0e:38:1b:fa:6c:d5:62:3b:c8:6e: 20:12:70:ef:05:8c:3e:f3:7c:61:c0:fa:b9:9c:84:64:9f:8c: 3b:0b:0e:1a:5e:bf:7a:cc:6a:75:39:1b:5e:97:54:04:18:8d: 34:19:05:e5:e3:b3:2a:3d:52:82:b3:0a:cd:b8:a7:6b:03:be: ff:92:3d:02:9b:7f:bb:ef:59:91:1b:d7:ac:70:99:f1:e1:15: fd:3e:0f:76:5d:72:3a:85:c1:b2:3d:09:d2:a8:88:9c:97:17: 84:a4:d7:a6:70:ee:7a:ef:7d:14:56:33:16:87:e8:f6:2e:55: d7:fe:f1:fb:fc:58:f4:c4:8d:d8:3a:0a:d9:e0:5d:b1:88:95: 51:df:7f:3d:9f:c2:5a:6d:54:95:21:84:04:35:71:9e:6e:db: 49:e8:f0:90:35:45:81:b1:f0:aa:31:c0:5f:7e:64:36:9e:91: e9:f9:9a:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af70TvVNdUeJchYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk YzA3YzA1YzktMDQyYS00NTZiLTlhNWUtNWVmMWE4MWNhZTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SDJgBfh5W0kJLTd6LHli0u9rvDpqs2aibAx uBrlsjqaDeE49ArIs94CRGPxMJvlDB4KOSOdjBP7QIGiZuDy0I9g45y33qpwsXZZ pwJcc6co4AEtblm0YgtkLV/eJTO2S68lGNS0tkv/ShDvUQYdnWAhj8Q61SAGyxDe rJ5tuey6OIUQ0oe1WqLQnHSH+2lQuXyXWIDahQiHISgNn3+Ui06pYDs5/Mv7fqAd 7Qv4n6AP8XF7XbDHmgbsGG6VPuC8kFQ5LDKuXfoGaZIdSFFH6PICDVb9+KSdu6uo 4p0zoBRspITQAfi4YOZsXXf4tbjuALd88Lc5a1+dBSSn6E+2hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlksQSG2MgdmMPd0cZkgBD9KGhPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNDM0N2Y3NmQtYzc0YS0z OTQyLTlkYzAtM2UzMzAxNTEyMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUlpOVr6B5YFQ52b6kQevCOizE8Fnvmr9VRLMw06h1nMikREjJaObNm F6VNqg5j+0fAruMBj/tGPrBJ0FT34w6KpCOPPGdzpYQoH5aPbFUVDjgb+mzVYjvI biAScO8FjD7zfGHA+rmchGSfjDsLDhpev3rManU5G16XVAQYjTQZBeXjsyo9UoKz Cs24p2sDvv+SPQKbf7vvWZEb16xwmfHhFf0+D3ZdcjqFwbI9CdKoiJyXF4Sk16Zw 7nrvfRRWMxaH6PYuVdf+8fv8WPTEjdg6CtngXbGIlVHffz2fwlptVJUhhAQ1cZ5u 20no8JA1RYGx8KoxwF9+ZDaeken5mrI= -----END CERTIFICATE-----Generated at Fri Jul 24 11:54:39 2026 by rpki-client