$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa File: 4347f76d-c74a-3942-9dc0-3e3301512261.roa (raw, json) Hash identifier: JmBmqbbo+fd3zPKymDYO9qHRonWnky/ssRm9sfmBYl0= Subject key identifier: 13:62:C7:C1:EC:5A:CF:7F:23:4A:B1:20:94:D0:17:75:72:49:44:34 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584DBA3AE78EE4C1251BC6563880 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 16509 IP address blocks: 129.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:e7:8e:e4:c1:25:1b:c6:56:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=3f4872b6-9713-4839-8162-a172f719f25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:33:ee:2f:48:43:d4:14:7c:49:a2:3e:1f:ed: 36:f4:ed:25:0d:72:91:85:37:80:b4:c9:f7:2a:b6: 44:a2:23:8b:ff:fa:30:2a:22:78:13:70:75:12:e3: a5:0a:6a:68:97:79:4c:c1:a9:e2:80:56:b8:cb:30: cf:72:c8:3d:f7:0a:6b:e7:cf:39:17:ff:dc:df:cd: fb:4f:0b:1a:6d:06:05:e1:2c:48:2c:7f:13:08:eb: 42:ef:e9:36:17:e8:61:a9:13:b3:29:dd:73:b9:a0: ce:6b:52:1a:11:2e:f0:44:7b:e1:e2:5a:ec:90:17: b9:ba:f9:a4:85:96:4f:c2:60:d3:d7:65:89:51:8e: 6a:3b:89:31:3e:8f:7c:73:7c:8a:ab:a0:d1:77:e8: 24:66:bf:70:e0:68:65:af:d5:dd:92:01:a4:c0:3e: 6e:a9:2d:e6:88:c5:39:1c:60:e1:0c:34:76:00:a0: 0a:47:68:c0:06:75:42:e6:0c:89:a5:1e:8e:94:76: 87:35:31:be:a5:ba:d7:a0:27:b3:78:2d:16:d1:c5: 2c:83:eb:a9:74:95:db:92:07:ed:2d:bc:45:c8:5b: fe:4a:2b:98:fe:31:d5:06:ff:fb:1d:2e:99:55:11: f0:0b:a6:9f:8b:ed:67:00:f0:61:0c:54:0a:7f:ec: 28:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:62:C7:C1:EC:5A:CF:7F:23:4A:B1:20:94:D0:17:75:72:49:44:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:40:da:3f:b0:42:fa:43:69:df:22:af:f9:8f:1f:84:e8:6c: 78:6f:b2:23:8e:0e:b8:d8:cd:28:09:d6:31:e6:2c:0e:5a:6b: ea:94:91:41:11:a0:12:7f:ae:75:11:27:81:03:12:3f:db:5b: 59:f1:ed:c8:57:00:54:68:66:76:07:d3:f8:08:48:1f:dc:0a: 1b:8c:be:cf:47:60:c4:40:7e:6b:5b:12:5a:ce:c8:c8:70:f0: 18:ce:9b:f3:97:4d:eb:03:b0:56:4c:6d:0e:19:05:ae:e6:56: 3a:d4:42:14:e1:08:31:5b:fa:0c:c1:5b:f5:e2:b0:58:2e:68: 22:91:2c:35:7a:6a:a8:b8:90:84:0c:fd:39:e5:6a:75:b9:42: 29:f1:61:a1:88:1e:d1:a8:d9:e5:2c:ed:43:8e:68:04:60:d4: cd:4a:e2:a1:f6:61:8f:c2:f5:38:14:0b:57:46:34:3b:a3:92: 5d:f0:d8:da:b9:d8:6f:d7:9e:9c:7e:11:76:47:13:7b:20:18: 55:57:03:67:09:db:6d:aa:40:68:71:4e:18:77:a6:23:4e:20: c8:4b:c9:62:55:e9:71:39:78:b4:52:55:6d:7a:1a:cb:8b:fa: 2f:b7:e5:f0:81:9c:87:bc:f4:a9:6f:d4:55:13:48:4b:36:0a: e7:06:88:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OueO5MElG8ZWOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk M2Y0ODcyYjYtOTcxMy00ODM5LTgxNjItYTE3MmY3MTlmMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjPuL0hD1BR8SaI+H+029O0lDXKRhTeAtMn3 KrZEoiOL//owKiJ4E3B1EuOlCmpol3lMwanigFa4yzDPcsg99wpr5885F//c3837 TwsabQYF4SxILH8TCOtC7+k2F+hhqROzKd1zuaDOa1IaES7wRHvh4lrskBe5uvmk hZZPwmDT12WJUY5qO4kxPo98c3yKq6DRd+gkZr9w4Ghlr9XdkgGkwD5uqS3miMU5 HGDhDDR2AKAKR2jABnVC5gyJpR6OlHaHNTG+pbrXoCezeC0W0cUsg+updJXbkgft LbxFyFv+SiuY/jHVBv/7HS6ZVRHwC6afi+1nAPBhDFQKf+woiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNix8HsWs9/I0qxIJTQF3VySUQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNDM0N2Y3NmQtYzc0YS0z OTQyLTlkYzAtM2UzMzAxNTEyMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJA2j+wQvpDad8ir/mPH4TobHhvsiOODrjYzSgJ1jHmLA5aa+qUkUER oBJ/rnURJ4EDEj/bW1nx7chXAFRoZnYH0/gISB/cChuMvs9HYMRAfmtbElrOyMhw 8BjOm/OXTesDsFZMbQ4ZBa7mVjrUQhThCDFb+gzBW/XisFguaCKRLDV6aqi4kIQM /TnlanW5QinxYaGIHtGo2eUs7UOOaARg1M1K4qH2YY/C9TgUC1dGNDujkl3w2Nq5 2G/Xnpx+EXZHE3sgGFVXA2cJ222qQGhxThh3piNOIMhLyWJV6XE5eLRSVW16GsuL +i+35fCBnIe89Klv1FUTSEs2CucGiCo= -----END CERTIFICATE-----Generated at Wed May 13 12:34:27 2026 by rpki-client