$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a9d63830-af6c-3450-85d9-b6a575a21f7e.roa File: a9d63830-af6c-3450-85d9-b6a575a21f7e.roa (raw, json) Hash identifier: wBEAr61sUMnZ/U6m7L06FK1Vnqsa9wM/9OOyF7rit9w= Subject key identifier: 41:96:75:4D:A8:2A:56:1B:B7:67:69:BB:8E:EF:D4:17:E3:6D:61:7F Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584E9A7FBCEF64B7E26243DDEE80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a9d63830-af6c-3450-85d9-b6a575a21f7e.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 16509 IP address blocks: 129.33.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:bc:ef:64:b7:e2:62:43:dd:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=15253109-d8d0-461e-8493-3400c8b50dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:88:84:36:45:7a:32:e4:27:9c:fd:bd:f3:fe: fe:a9:39:43:e8:62:ab:dd:5d:48:40:20:a2:de:78: 81:6b:90:be:22:36:49:05:06:98:0c:aa:32:58:75: e8:96:7c:e1:39:d1:e6:ce:83:2e:7a:e1:ec:a7:71: ab:2a:83:c5:ad:20:11:6e:ec:ab:7b:64:68:5c:19: 51:f3:25:bb:b8:c5:ac:85:98:66:9d:eb:eb:41:26: 50:46:ba:c3:f9:ef:b5:37:64:22:f7:bb:a0:d5:19: a8:80:62:1a:26:52:be:26:47:20:78:12:e4:12:86: e3:92:bd:26:0f:38:9b:9b:50:f5:5a:7a:5e:63:06: 9b:f2:0f:2c:0a:c3:b9:99:86:bd:e9:ca:42:c0:a1: e1:05:6f:43:3c:a3:25:d7:31:d9:d8:b3:09:41:d4: da:ae:98:57:57:44:5a:09:c4:ca:60:07:27:a6:a7: bf:cc:0c:7e:89:38:ef:e1:ac:90:89:c6:39:c4:7e: b7:6f:b9:fc:4c:fa:fc:91:82:bd:9e:34:b8:1e:70: 99:e4:8b:53:f4:36:c4:bd:88:f6:33:a8:92:a2:c0: c0:c0:d2:ac:5d:e3:09:69:b3:2b:42:f0:59:f1:01: 09:53:b4:b5:f4:de:01:7c:78:cd:e3:53:43:70:3a: 50:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:96:75:4D:A8:2A:56:1B:B7:67:69:BB:8E:EF:D4:17:E3:6D:61:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a9d63830-af6c-3450-85d9-b6a575a21f7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:8c:e0:02:7a:0d:75:76:3d:a9:77:8b:c3:7a:eb:72:13:50: 74:4c:b1:e8:a1:75:c5:7e:2f:ca:db:1c:ff:f6:45:02:ce:f3: 04:6b:71:5c:e5:5d:6a:42:a4:00:67:5a:fc:eb:55:77:0c:23: ee:ac:fd:cf:4b:3b:f7:bb:b6:0f:b6:63:19:74:10:05:1c:c8: 68:10:d0:c3:d5:11:5a:47:a7:e2:f3:0a:54:ea:9a:6d:3e:a8: 97:11:ee:f4:6e:77:74:4c:15:b7:5f:dc:eb:ab:6c:34:dc:9c: 53:19:6a:a2:42:f7:30:2a:02:e9:09:dd:5c:1a:2f:b4:6f:85: 81:f7:a3:e1:7e:70:ff:3c:f1:cf:b5:21:b5:53:a6:be:f0:57: d5:c5:f3:89:79:9a:83:15:55:96:5a:c2:bc:eb:d6:cd:3f:c3: 33:64:47:4a:c9:af:43:48:50:ac:a4:46:74:87:8a:47:59:d6: f4:cc:e3:09:f7:92:a0:46:77:e2:e9:b4:ef:9c:ac:41:ea:ee: 8b:63:2b:78:ea:56:d4:7b:3f:62:d1:87:b2:f9:fc:ee:ec:32: ad:f3:98:d4:ec:4e:51:5a:17:1a:47:ad:5f:de:b9:ac:7e:36: d3:8b:57:52:98:e0:7d:14:d4:0b:35:3d:67:13:6f:5a:62:40: 6c:b7:4d:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af7zvZLfiYkPd7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk MTUyNTMxMDktZDhkMC00NjFlLTg0OTMtMzQwMGM4YjUwZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4iENkV6MuQnnP298/7+qTlD6GKr3V1IQCCi 3niBa5C+IjZJBQaYDKoyWHXolnzhOdHmzoMueuHsp3GrKoPFrSARbuyre2RoXBlR 8yW7uMWshZhmnevrQSZQRrrD+e+1N2Qi97ug1RmogGIaJlK+JkcgeBLkEobjkr0m Dzibm1D1WnpeYwab8g8sCsO5mYa96cpCwKHhBW9DPKMl1zHZ2LMJQdTarphXV0Ra CcTKYAcnpqe/zAx+iTjv4ayQicY5xH63b7n8TPr8kYK9njS4HnCZ5ItT9DbEvYj2 M6iSosDAwNKsXeMJabMrQvBZ8QEJU7S19N4BfHjN41NDcDpQPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGWdU2oKlYbt2dpu47v1BfjbWF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYTlkNjM4MzAtYWY2Yy0z NDUwLTg1ZDktYjZhNTc1YTIxZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+M4AJ6DXV2Pal3i8N663ITUHRMseihdcV+L8rbHP/2RQLO8wRrcVzl XWpCpABnWvzrVXcMI+6s/c9LO/e7tg+2Yxl0EAUcyGgQ0MPVEVpHp+LzClTqmm0+ qJcR7vRud3RMFbdf3OurbDTcnFMZaqJC9zAqAukJ3VwaL7RvhYH3o+F+cP888c+1 IbVTpr7wV9XF84l5moMVVZZawrzr1s0/wzNkR0rJr0NIUKykRnSHikdZ1vTM4wn3 kqBGd+LptO+crEHq7otjK3jqVtR7P2LRh7L5/O7sMq3zmNTsTlFaFxpHrV/euax+ NtOLV1KY4H0U1As1PWcTb1piQGy3TZs= -----END CERTIFICATE-----Generated at Fri Jul 24 14:25:52 2026 by rpki-client