$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a9d63830-af6c-3450-85d9-b6a575a21f7e.roa File: a9d63830-af6c-3450-85d9-b6a575a21f7e.roa (raw, json) Hash identifier: 5nrSdZBuvg0kdDyiU/yA1BzHadq3fKKhe/s0UZ5fQHg= Subject key identifier: 37:FC:75:F7:3E:1B:BE:26:86:10:50:A6:2E:01:65:CB:3E:89:27:66 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584DBA3AE76A019E772E060FC1C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a9d63830-af6c-3450-85d9-b6a575a21f7e.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 16509 IP address blocks: 129.33.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:e7:6a:01:9e:77:2e:06:0f:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=0b9ba1af-4f2f-4c33-961f-c051523f9014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8b:29:18:ee:ee:3c:7c:a7:c6:a1:e1:7a:a4: 08:4d:9b:5b:48:cb:63:f2:4d:87:3c:fa:93:7e:98: f1:2b:a6:30:6f:af:bb:78:92:32:ee:8d:57:9a:de: 9f:28:2f:16:fb:cb:b8:39:db:5a:41:9f:a2:e8:36: 55:3f:78:96:a7:78:02:8f:55:4d:e5:b2:cb:6a:f8: 0c:cd:c6:5b:72:6a:e5:7a:82:cb:87:50:70:d7:32: 26:1c:1a:18:fc:29:2f:68:62:92:10:9b:da:2d:6d: 72:10:31:e2:b5:11:8e:11:df:d7:b4:70:77:8b:80: c4:8b:88:72:6c:08:d5:ee:1f:da:45:c6:95:68:6f: 2a:ba:99:44:25:68:49:8c:59:07:24:ce:4e:14:79: 2a:1c:0b:95:c5:bc:31:59:62:d8:ca:f3:75:dc:0d: 80:1a:77:41:3a:88:a0:6d:49:48:8f:62:33:d9:63: 4f:ff:d0:79:f9:4d:fa:5f:c8:b7:92:b8:2c:13:d6: 07:de:a8:67:40:73:ae:6f:f0:b1:2b:c6:0e:61:16: 8e:fe:66:e1:2a:50:b3:5f:a5:a6:18:b8:10:fb:b2: 1e:af:13:6d:7e:3f:6e:93:02:ce:f3:af:9e:fa:7f: 6c:f0:cb:70:7a:72:79:6c:d7:9e:31:cd:03:2a:ff: 1b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FC:75:F7:3E:1B:BE:26:86:10:50:A6:2E:01:65:CB:3E:89:27:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a9d63830-af6c-3450-85d9-b6a575a21f7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a8:2a:fd:c4:48:8b:f9:7e:a5:e7:37:1d:da:40:e6:cf:23: be:5d:0b:8b:99:24:20:d6:fc:73:06:91:63:9d:7f:3f:7f:a0: 60:73:14:bc:51:47:04:8a:66:8f:b6:e3:44:5c:d9:6e:62:09: 87:0b:cf:ea:1e:51:43:55:fc:2b:b3:b2:87:2d:23:ac:67:45: 33:db:26:c8:2f:40:1b:ff:ce:f0:7c:4c:38:55:a1:99:80:13: e2:09:39:5a:03:ef:76:fe:d2:9f:4e:55:7a:68:ad:24:cc:40: 1a:a3:85:4d:52:fa:1d:23:99:da:8a:d8:b0:68:8b:01:e4:c2: 10:35:e7:1b:30:5e:00:a3:3f:4b:ab:a3:5a:7c:78:31:96:b6: 3c:f9:2e:f4:2b:66:af:29:fe:38:7b:e5:49:58:5f:ed:d0:64: a6:65:a7:d9:0b:aa:9c:1d:e5:37:aa:85:3c:d3:86:76:ae:0e: a0:2c:d5:7a:e4:36:04:33:ed:08:ca:b6:d5:a8:5f:8b:0a:55: 25:b0:74:3d:43:ed:8a:d2:f4:a4:83:b1:be:ba:25:a0:e1:b7: c2:d3:02:41:d7:22:a5:b9:46:8b:79:11:43:a2:10:19:43:7b: 1e:b4:4f:e4:4d:1d:2e:e4:3a:2b:b1:de:bf:8e:9a:01:41:c5: d9:24:23:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OudqAZ53LgYPwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk MGI5YmExYWYtNGYyZi00YzMzLTk2MWYtYzA1MTUyM2Y5MDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4spGO7uPHynxqHheqQITZtbSMtj8k2HPPqT fpjxK6Ywb6+7eJIy7o1Xmt6fKC8W+8u4OdtaQZ+i6DZVP3iWp3gCj1VN5bLLavgM zcZbcmrleoLLh1Bw1zImHBoY/CkvaGKSEJvaLW1yEDHitRGOEd/XtHB3i4DEi4hy bAjV7h/aRcaVaG8quplEJWhJjFkHJM5OFHkqHAuVxbwxWWLYyvN13A2AGndBOoig bUlIj2Iz2WNP/9B5+U36X8i3krgsE9YH3qhnQHOub/CxK8YOYRaO/mbhKlCzX6Wm GLgQ+7IerxNtfj9ukwLO86+e+n9s8MtwenJ5bNeeMc0DKv8bXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDf8dfc+G74mhhBQpi4BZcs+iSdmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYTlkNjM4MzAtYWY2Yy0z NDUwLTg1ZDktYjZhNTc1YTIxZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaoKv3ESIv5fqXnNx3aQObPI75dC4uZJCDW/HMGkWOdfz9/oGBzFLxR RwSKZo+240Rc2W5iCYcLz+oeUUNV/CuzsoctI6xnRTPbJsgvQBv/zvB8TDhVoZmA E+IJOVoD73b+0p9OVXporSTMQBqjhU1S+h0jmdqK2LBoiwHkwhA15xswXgCjP0ur o1p8eDGWtjz5LvQrZq8p/jh75UlYX+3QZKZlp9kLqpwd5TeqhTzThnauDqAs1Xrk NgQz7QjKttWoX4sKVSWwdD1D7YrS9KSDsb66JaDht8LTAkHXIqW5Rot5EUOiEBlD ex60T+RNHS7kOiux3r+OmgFBxdkkI1o= -----END CERTIFICATE-----Generated at Wed May 13 12:09:49 2026 by rpki-client