$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa File: 4347f76d-c74a-3942-9dc0-3e3301512261.roa (raw, json) Hash identifier: SvZRXM9BSmWVaeDlvftKr6LjAOo6VRJS1dhDfh1YWAM= Subject key identifier: CF:6D:A4:DB:E7:F7:79:82:92:B7:83:F8:53:35:D6:A7:B8:D2:23:AA Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584F3CE28912EC59418BE5B824B8 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 129.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:89:12:ec:59:41:8b:e5:b8:24:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=9f5e7c46-0e60-4c43-b898-a55707e6ed39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cc:1b:52:88:02:0f:26:37:f2:1f:95:5f:3a: f7:a1:75:a6:42:b1:68:21:28:fc:a2:83:81:72:a1: 68:f1:6f:09:af:82:17:81:d0:4d:07:84:57:9c:16: 6a:38:fe:64:6e:b5:f6:cb:17:24:28:48:ec:9d:0d: ad:1b:4c:5d:ec:14:6c:45:d7:f9:64:6c:4e:53:0b: 0d:bc:ce:14:26:66:ae:6e:7d:2a:40:d0:18:e4:33: 69:c9:e7:30:6c:5e:95:86:52:d1:1d:30:cf:e9:1f: 80:03:de:a2:8c:6f:37:9e:9e:65:18:49:69:5b:f4: d2:5a:3d:1b:2e:04:f7:04:f9:bc:41:62:ea:77:04: 9b:23:ed:c7:29:bd:32:8b:b2:83:64:48:34:6c:ba: 38:d8:9f:7f:d1:30:da:57:c4:71:c9:17:c3:c3:72: 16:3d:fe:40:4c:1a:76:f4:89:36:6d:8c:48:21:90: db:f5:14:3b:fc:a8:60:8f:72:90:ec:2b:f7:c6:db: 6d:8b:bb:63:ac:5b:82:15:4e:c9:b7:65:6b:d7:44: 0f:54:95:17:92:3a:ea:98:85:4d:80:6b:d0:9e:cd: f9:f1:aa:dd:a8:39:18:27:57:0f:f3:d2:10:45:41: f4:e7:4e:44:97:79:9f:80:13:ae:d9:cd:38:61:8a: aa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6D:A4:DB:E7:F7:79:82:92:B7:83:F8:53:35:D6:A7:B8:D2:23:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:00:fb:82:cd:34:bf:f4:4c:47:59:a1:43:c6:e2:62:73:7e: 0d:83:8e:56:8e:91:e5:e6:ac:87:f2:e4:17:84:d6:df:31:a3: 34:b5:c5:e9:aa:e8:7c:32:d6:22:c2:30:dd:39:45:3f:21:4e: fb:08:3a:62:79:52:f5:08:28:0a:a8:18:01:cc:e6:6d:34:6e: 29:ee:80:3a:45:2c:fe:34:51:0e:9d:fe:d8:96:c8:1e:23:50: b7:27:dc:fe:33:d4:d9:f5:96:35:31:e2:db:84:19:8f:1e:8c: 36:d0:e6:94:26:b5:5f:7c:b1:9c:8e:5c:45:7d:54:4a:d4:48: 41:78:81:6f:c4:ee:3a:e9:38:72:59:24:3d:10:1e:76:ad:5c: 8f:1e:e2:c1:d2:47:61:ee:2e:82:af:81:44:a3:9f:97:33:13: 60:46:52:eb:7a:6e:f2:d4:32:ee:4b:cc:43:cb:fa:ef:52:89: 1a:35:5b:ff:d8:f6:4b:40:03:5b:5f:05:3f:e4:c4:56:56:c2: 8d:79:e5:9d:6a:3b:15:b2:dc:63:53:7c:87:fb:72:f5:27:60: 51:52:c0:22:47:c3:86:32:bd:f3:46:03:6c:63:bb:0a:e5:84: d2:ac:8a:2d:ac:fa:29:6c:87:04:31:c1:07:9c:06:42:98:40: 95:0e:72:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884okS7FlBi+W4JLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk OWY1ZTdjNDYtMGU2MC00YzQzLWI4OTgtYTU1NzA3ZTZlZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgswbUogCDyY38h+VXzr3oXWmQrFoISj8ooOB cqFo8W8Jr4IXgdBNB4RXnBZqOP5kbrX2yxckKEjsnQ2tG0xd7BRsRdf5ZGxOUwsN vM4UJmaubn0qQNAY5DNpyecwbF6VhlLRHTDP6R+AA96ijG83np5lGElpW/TSWj0b LgT3BPm8QWLqdwSbI+3HKb0yi7KDZEg0bLo42J9/0TDaV8RxyRfDw3IWPf5ATBp2 9Ik2bYxIIZDb9RQ7/Khgj3KQ7Cv3xttti7tjrFuCFU7Jt2Vr10QPVJUXkjrqmIVN gGvQns358ardqDkYJ1cP89IQRUH0505El3mfgBOu2c04YYqq8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9tpNvn93mCkreD+FM11qe40iOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNDM0N2Y3NmQtYzc0YS0z OTQyLTlkYzAtM2UzMzAxNTEyMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0A+4LNNL/0TEdZoUPG4mJzfg2DjlaOkeXmrIfy5BeE1t8xozS1xemq 6Hwy1iLCMN05RT8hTvsIOmJ5UvUIKAqoGAHM5m00binugDpFLP40UQ6d/tiWyB4j ULcn3P4z1Nn1ljUx4tuEGY8ejDbQ5pQmtV98sZyOXEV9VErUSEF4gW/E7jrpOHJZ JD0QHnatXI8e4sHSR2HuLoKvgUSjn5czE2BGUut6bvLUMu5LzEPL+u9SiRo1W//Y 9ktAA1tfBT/kxFZWwo155Z1qOxWy3GNTfIf7cvUnYFFSwCJHw4YyvfNGA2xjuwrl hNKsii2s+ilshwQxwQecBkKYQJUOcms= -----END CERTIFICATE-----Generated at Sun Oct 4 14:24:12 2026 by rpki-client