$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c653b90b-349b-3969-a8b1-e7d98267d38b.roa File: c653b90b-349b-3969-a8b1-e7d98267d38b.roa (raw, json) Hash identifier: 2Tl3akEp/06ad+p8fbEGtym/sImOpbUNm0RoCoi7jYI= Subject key identifier: CF:5D:0B:8D:E0:D4:8A:DD:17:8B:A5:17:5B:35:57:E2:F4:95:04:2D Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584DBA3AEB43956FB0ED61E10780 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c653b90b-349b-3969-a8b1-e7d98267d38b.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 14618 IP address blocks: 129.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:eb:43:95:6f:b0:ed:61:e1:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=1778e5f7-b284-4e0d-b213-3a36564482e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3c:3c:9c:0e:76:04:6e:bf:da:0b:eb:a3:02: f3:a8:6d:3f:bb:56:85:48:d2:9f:e4:4f:e0:81:88: 16:5d:e3:e7:20:6c:d1:40:9a:06:81:b5:8c:aa:61: a7:f8:c7:9d:d7:a1:d0:98:99:43:4b:71:52:8e:9c: 7c:b4:65:81:55:af:14:14:bb:87:2f:a8:0e:8c:b8: 9c:3d:39:d5:07:17:24:eb:c4:12:bf:e2:89:fe:7c: f8:83:d6:03:e9:2a:12:bb:16:94:c3:20:cb:dc:61: 42:bb:9f:34:dd:10:42:ce:1c:e5:d0:d4:f2:a0:9c: 58:be:32:bc:01:ea:ed:21:45:f5:63:c1:c8:2f:f1: 80:08:64:ce:2f:5c:cb:9f:8a:ff:15:a4:06:25:87: d0:25:2d:47:95:1c:07:5a:7e:59:6b:ec:0a:bd:38: 0d:ff:4d:3d:10:fb:1b:38:7a:6c:1e:7f:ac:62:ef: ee:b5:78:64:62:4a:f9:df:7d:9c:fd:c7:56:aa:c9: 93:83:af:b5:9b:9a:17:50:b0:41:54:72:7d:82:f0: d6:1e:10:69:6b:83:fd:93:af:dd:2b:13:ca:30:0f: 8d:26:14:9f:11:2b:b4:23:c6:4b:b7:e4:ef:6d:52: 5e:a9:ad:d7:5b:c0:7d:6c:0a:99:ec:16:63:7f:de: f6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5D:0B:8D:E0:D4:8A:DD:17:8B:A5:17:5B:35:57:E2:F4:95:04:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c653b90b-349b-3969-a8b1-e7d98267d38b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:91:4f:2c:59:17:7a:d6:55:ca:ba:45:97:a0:92:73:94:08: 09:59:62:f8:c0:af:24:62:17:b6:62:63:60:06:b1:05:3d:57: 96:cc:e5:dd:8f:a7:18:fd:19:1c:3f:fa:1b:0e:30:ce:e7:1e: 8e:26:94:26:3d:00:ed:ce:72:fa:a4:19:0e:2b:8a:21:01:36: 73:82:13:14:a5:11:a0:5a:39:6e:5e:d7:a7:08:66:23:35:94: 91:d4:d4:20:52:10:67:e0:f3:79:7c:4e:76:5c:3a:b8:94:3f: 72:d0:99:81:6d:b2:cd:56:49:cf:b0:85:98:ae:0c:e3:02:99: 66:58:0c:40:ea:d4:35:d0:04:da:f7:fa:2b:e0:a6:5d:c9:ef: 73:24:ff:7e:36:37:c3:e5:12:a3:45:95:5f:c5:70:07:29:e4: 45:76:f4:a1:c8:d5:17:ac:99:e3:24:ef:7b:25:5a:87:94:fe: 42:1c:24:e2:51:32:78:c9:5e:b7:47:5c:71:2e:64:a9:25:cc: 88:6f:75:b3:c0:d4:1e:2d:6a:f0:9f:44:93:24:3e:fb:d1:86: e1:2f:2d:fa:38:ad:10:46:c1:95:79:19:c2:f1:51:7a:a7:88: 3a:29:62:26:2f:ca:d8:53:0b:79:63:ce:44:39:b9:08:80:aa: 85:7e:d0:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OutDlW+w7WHhB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk MTc3OGU1ZjctYjI4NC00ZTBkLWIyMTMtM2EzNjU2NDQ4MmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzw8nA52BG6/2gvrowLzqG0/u1aFSNKf5E/g gYgWXePnIGzRQJoGgbWMqmGn+Med16HQmJlDS3FSjpx8tGWBVa8UFLuHL6gOjLic PTnVBxck68QSv+KJ/nz4g9YD6SoSuxaUwyDL3GFCu5803RBCzhzl0NTyoJxYvjK8 AertIUX1Y8HIL/GACGTOL1zLn4r/FaQGJYfQJS1HlRwHWn5Za+wKvTgN/009EPsb OHpsHn+sYu/utXhkYkr5332c/cdWqsmTg6+1m5oXULBBVHJ9gvDWHhBpa4P9k6/d KxPKMA+NJhSfESu0I8ZLt+TvbVJeqa3XW8B9bAqZ7BZjf972/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9dC43g1IrdF4ulF1s1V+L0lQQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYzY1M2I5MGItMzQ5Yi0z OTY5LWE4YjEtZTdkOTgyNjdkMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWRTyxZF3rWVcq6RZegknOUCAlZYvjAryRiF7ZiY2AGsQU9V5bM5d2P pxj9GRw/+hsOMM7nHo4mlCY9AO3OcvqkGQ4riiEBNnOCExSlEaBaOW5e16cIZiM1 lJHU1CBSEGfg83l8TnZcOriUP3LQmYFtss1WSc+whZiuDOMCmWZYDEDq1DXQBNr3 +ivgpl3J73Mk/342N8PlEqNFlV/FcAcp5EV29KHI1ResmeMk73slWoeU/kIcJOJR MnjJXrdHXHEuZKklzIhvdbPA1B4tavCfRJMkPvvRhuEvLfo4rRBGwZV5GcLxUXqn iDopYiYvythTC3ljzkQ5uQiAqoV+0AE= -----END CERTIFICATE-----Generated at Wed May 13 09:07:25 2026 by rpki-client