$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b336070a-6543-35fe-95ed-f03fdfb0f671.roa File: b336070a-6543-35fe-95ed-f03fdfb0f671.roa (raw, json) Hash identifier: ScHmszg2iBL5551I4vsQiw7lSiIKxMlGHF9avc/H2tE= Subject key identifier: C6:82:18:50:11:6B:36:71:0E:9C:1C:1C:25:10:75:49:83:6C:7C:0A Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584D4A8F998FF1FC4985F4D46A40 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b336070a-6543-35fe-95ed-f03fdfb0f671.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 129.33.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:99:8f:f1:fc:49:85:f4:d4:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=98c31c14-2e3d-4831-b8b7-a1d80be957c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:31:8d:55:ab:f2:80:94:38:f5:8d:97:05:52: df:23:b6:6d:23:77:57:0e:25:90:bc:9c:de:06:89: 2e:fa:ea:5b:93:78:74:34:17:05:c4:48:02:60:f7: d8:31:cf:2c:46:9e:3b:fb:f0:56:f3:5c:5f:90:b2: 10:8e:d7:30:cb:79:e6:83:f5:7a:60:26:a4:15:25: 61:7d:a9:14:8f:54:02:6b:6e:48:b2:12:0d:4f:da: 05:65:4c:50:6f:94:dc:8f:77:00:b9:e7:4e:34:c6: 91:73:2a:96:87:06:6f:3c:5e:d3:37:79:c8:b1:ae: 92:d8:c1:70:f6:90:70:60:b2:14:a4:8e:d6:fe:8c: bb:b5:13:70:b6:08:13:ef:c3:5b:d3:82:05:c3:86: 09:3c:30:9d:37:e8:97:77:3a:3f:1b:dc:42:a3:29: 88:29:2d:2c:18:00:f1:de:d4:ae:95:b6:af:6b:53: 47:85:5f:94:fd:96:7f:4e:9b:88:2d:21:ab:6c:29: ca:1f:68:90:0b:f1:09:56:68:4d:5c:d4:ca:25:20: be:0a:bb:31:54:74:c6:ea:50:2d:38:09:48:8a:90: 93:b2:5d:5c:40:0f:94:e2:3b:8a:77:02:fc:b3:07: 95:e9:2f:cc:1e:0c:4e:ca:fc:75:62:8b:42:68:05: 0d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:82:18:50:11:6B:36:71:0E:9C:1C:1C:25:10:75:49:83:6C:7C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b336070a-6543-35fe-95ed-f03fdfb0f671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:cd:0c:c4:14:49:14:80:e1:13:92:a5:3c:ac:bf:31:65:f6: 94:11:60:44:17:50:0a:a6:dd:f3:0a:97:c3:0a:38:41:0d:21: 0e:62:ae:e4:5e:5a:6f:1b:28:e3:3c:a9:ad:97:eb:f7:91:6d: 18:3f:b7:26:5b:15:bc:2a:c5:ed:ec:23:51:02:ea:c1:fd:86: 77:ad:d8:1e:5a:49:a5:cf:94:93:ce:b8:89:87:31:8c:f9:4e: 00:5c:6e:97:bb:75:db:10:33:0c:7f:1b:c6:6b:80:cc:16:b5: 4b:1d:cb:b4:d0:66:d1:b5:49:28:e2:5a:7d:07:35:69:35:70: 1e:ce:1b:a8:42:90:29:5e:34:c0:9e:c0:e8:e2:4c:ba:7b:d6: 81:da:a0:90:2f:e5:b7:2e:c8:19:f6:82:1b:96:1e:e4:18:2f: cc:b7:38:e6:08:00:b6:1c:2d:11:f5:b2:9e:58:a8:e5:1b:4b: 7e:12:94:c9:d0:d5:76:27:a7:a2:76:cd:91:01:3c:cf:77:a2: 58:14:42:6b:46:3b:7f:75:27:ba:3d:d7:c9:2a:af:86:c3:6c: 63:11:b3:0a:d5:88:c6:12:23:c3:18:0e:f3:82:e2:a7:30:7c: 31:b5:cc:4f:42:a6:42:85:84:b1:73:d9:a2:cc:73:73:39:ca: 2f:44:0b:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj5mP8fxJhfTUakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk OThjMzFjMTQtMmUzZC00ODMxLWI4YjctYTFkODBiZTk1N2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjGNVavygJQ49Y2XBVLfI7ZtI3dXDiWQvJze Boku+upbk3h0NBcFxEgCYPfYMc8sRp47+/BW81xfkLIQjtcwy3nmg/V6YCakFSVh fakUj1QCa25IshINT9oFZUxQb5Tcj3cAuedONMaRcyqWhwZvPF7TN3nIsa6S2MFw 9pBwYLIUpI7W/oy7tRNwtggT78Nb04IFw4YJPDCdN+iXdzo/G9xCoymIKS0sGADx 3tSulbava1NHhV+U/ZZ/TpuILSGrbCnKH2iQC/EJVmhNXNTKJSC+CrsxVHTG6lAt OAlIipCTsl1cQA+U4juKdwL8sweV6S/MHgxOyvx1YotCaAUNwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaCGFARazZxDpwcHCUQdUmDbHwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYjMzNjA3MGEtNjU0My0z NWZlLTk1ZWQtZjAzZmRmYjBmNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPNDMQUSRSA4ROSpTysvzFl9pQRYEQXUAqm3fMKl8MKOEENIQ5iruRe Wm8bKOM8qa2X6/eRbRg/tyZbFbwqxe3sI1EC6sH9hnet2B5aSaXPlJPOuImHMYz5 TgBcbpe7ddsQMwx/G8ZrgMwWtUsdy7TQZtG1SSjiWn0HNWk1cB7OG6hCkCleNMCe wOjiTLp71oHaoJAv5bcuyBn2ghuWHuQYL8y3OOYIALYcLRH1sp5YqOUbS34SlMnQ 1XYnp6J2zZEBPM93olgUQmtGO391J7o918kqr4bDbGMRswrViMYSI8MYDvOC4qcw fDG1zE9CpkKFhLFz2aLMc3M5yi9EC5I= -----END CERTIFICATE-----Generated at Thu Mar 26 04:00:19 2026 by rpki-client