$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b336070a-6543-35fe-95ed-f03fdfb0f671.roa File: b336070a-6543-35fe-95ed-f03fdfb0f671.roa (raw, json) Hash identifier: q35hpH0MJszslwmvdRMmMvV8Oc8vMbY8EqfKe1Hb8AI= Subject key identifier: 3A:B1:B8:59:8C:94:04:F6:B6:EB:28:46:72:4F:87:BF:A4:89:3B:37 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B8BE21AA3E554735B81165140 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b336070a-6543-35fe-95ed-f03fdfb0f671.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 129.33.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:1a:a3:e5:54:73:5b:81:16:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=945bf595-9996-4bc3-accd-5587a04743f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:39:8f:97:4f:99:cf:77:5c:ac:09:8a:a4:c2: 84:cd:ee:1e:88:91:62:4c:c0:78:1b:37:86:4e:b4: b8:eb:ce:49:29:94:10:c8:fc:67:19:29:34:5e:3c: 97:07:0e:a5:6f:7b:70:9a:cf:8a:35:5b:89:0d:01: 73:b4:95:9e:41:b2:59:4d:e6:b0:3a:8d:5e:a6:5b: 2f:65:37:21:c9:54:a0:82:84:15:f6:67:11:7d:9a: 7b:76:8c:0b:79:e2:e1:36:06:59:20:60:1b:41:df: ac:37:69:b0:9c:d9:8f:c6:a6:5f:86:5b:03:f5:24: eb:cd:85:17:9e:31:9e:98:97:4c:6c:68:f8:8c:a1: fc:e6:8d:90:6b:01:28:89:d5:83:11:56:a4:41:4a: ab:1a:e8:45:96:25:45:b4:f1:85:45:d9:62:e4:47: 32:eb:c8:99:6a:9c:82:b1:74:cd:95:49:05:c0:3a: b3:5b:e1:4a:5c:2f:82:f1:e1:bf:bc:38:93:97:f2: dd:83:3b:8b:52:66:84:28:28:de:c8:d0:1a:1a:09: 73:dd:b6:d2:47:12:8f:76:1a:07:73:95:fd:2b:ea: 80:70:62:0d:30:e0:f5:8c:20:07:53:3c:b3:ba:8e: 5b:d0:26:6d:72:33:42:a0:1a:18:1d:63:bd:8f:1b: 09:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B1:B8:59:8C:94:04:F6:B6:EB:28:46:72:4F:87:BF:A4:89:3B:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b336070a-6543-35fe-95ed-f03fdfb0f671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c3:8a:6f:7c:bb:c9:5c:db:7e:ae:fc:b0:1a:a1:7d:2d:76: a2:28:34:13:01:15:17:d4:a3:bf:32:1f:f1:bc:de:b9:cc:57: f3:fc:af:f1:9c:63:59:0a:25:e6:9d:44:d8:12:36:d6:cb:9c: 75:29:3e:59:c3:c7:5f:f2:83:cd:b6:11:b5:10:8d:24:8f:a2: 0c:f1:e7:48:43:44:07:c5:fb:3b:0d:e4:e5:b7:c7:0a:23:78: 71:0c:a6:4a:ee:d0:da:70:72:3d:76:8f:e6:c1:28:15:d2:b5: 88:16:93:a1:34:72:de:28:66:f0:6a:77:31:0f:79:b1:3e:c1: e1:eb:fa:85:d6:b9:04:84:d3:16:de:5e:f8:f9:24:7d:f2:89: 11:b5:9c:d9:1d:a1:1e:03:ca:57:97:c9:fb:4f:e8:18:97:3a: fa:66:46:1e:a6:ca:2f:8b:8a:15:bb:ca:e5:64:54:e4:59:df: 8b:60:c4:63:40:4e:0c:e4:7e:b0:20:91:3b:70:16:22:cc:16: 6d:e9:74:48:a6:11:0c:6a:84:b7:f6:e9:0c:6d:16:8a:84:90: 2b:8d:40:63:bb:a4:7a:4a:79:fa:f5:f0:aa:a4:f7:8e:ab:ae: 9f:bf:69:e8:ee:21:67:27:1a:92:00:b7:71:d6:e4:0c:55:0b: c5:ce:d6:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hqj5VRzW4EWUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk OTQ1YmY1OTUtOTk5Ni00YmMzLWFjY2QtNTU4N2EwNDc0M2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjmPl0+Zz3dcrAmKpMKEze4eiJFiTMB4GzeG TrS4685JKZQQyPxnGSk0XjyXBw6lb3twms+KNVuJDQFztJWeQbJZTeawOo1eplsv ZTchyVSggoQV9mcRfZp7dowLeeLhNgZZIGAbQd+sN2mwnNmPxqZfhlsD9STrzYUX njGemJdMbGj4jKH85o2QawEoidWDEVakQUqrGuhFliVFtPGFRdli5Ecy68iZapyC sXTNlUkFwDqzW+FKXC+C8eG/vDiTl/LdgzuLUmaEKCjeyNAaGglz3bbSRxKPdhoH c5X9K+qAcGINMOD1jCAHUzyzuo5b0CZtcjNCoBoYHWO9jxsJKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqxuFmMlAT2tusoRnJPh7+kiTs3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYjMzNjA3MGEtNjU0My0z NWZlLTk1ZWQtZjAzZmRmYjBmNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzDim98u8lc236u/LAaoX0tdqIoNBMBFRfUo78yH/G83rnMV/P8r/Gc Y1kKJeadRNgSNtbLnHUpPlnDx1/yg822EbUQjSSPogzx50hDRAfF+zsN5OW3xwoj eHEMpkru0Npwcj12j+bBKBXStYgWk6E0ct4oZvBqdzEPebE+weHr+oXWuQSE0xbe Xvj5JH3yiRG1nNkdoR4DyleXyftP6BiXOvpmRh6myi+LihW7yuVkVORZ34tgxGNA TgzkfrAgkTtwFiLMFm3pdEimEQxqhLf26QxtFoqEkCuNQGO7pHpKefr18Kqk946r rp+/aejuIWcnGpIAt3HW5AxVC8XO1sE= -----END CERTIFICATE-----Generated at Mon Oct 20 04:58:41 2025 by rpki-client