$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa File: c9dd7a45-36e9-37a5-9068-6420d65d9719.roa (raw, json) Hash identifier: TQTTMOpq9m5tSY5vs/nsYfMwNs8mVMOOrL1uJGcOgnw= Subject key identifier: B5:8E:A5:94:1E:1B:C1:67:41:2B:48:62:79:3D:4F:F2:35:AD:34:07 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584D4A8F99A404AAA731ACB2C080 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 129.33.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:99:a4:04:aa:a7:31:ac:b2:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=dd6015be-5f21-45bd-b4b7-6dadc4ec2ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a4:43:14:51:40:5f:00:ab:00:d9:a0:e0:aa: b6:19:2c:f3:fd:70:ac:6e:bf:fa:56:55:15:0c:64: e4:07:96:e4:95:0f:14:94:79:0d:7c:f7:56:37:63: 93:84:d2:ac:43:44:c6:e0:29:a6:e5:de:99:2c:1b: 61:18:53:a0:7a:73:b0:4f:9d:1a:8a:90:5a:7c:c2: 1c:45:85:74:08:84:6b:4c:f0:08:3f:53:a6:36:0d: 79:5a:f8:9e:aa:a8:de:26:1c:a0:f2:7e:af:b6:9a: 11:18:c4:18:8d:4c:e4:e7:f6:5c:b6:5d:40:36:6e: 82:a7:60:60:0a:9e:5e:d0:46:83:fc:bf:11:04:e9: 79:d5:a1:f0:ad:59:2a:b4:ee:ae:ad:d0:ed:20:9b: 4d:bd:cb:18:27:27:1c:8a:98:04:27:af:00:3b:46: b0:e5:71:d6:47:0c:1a:bf:73:3f:8a:38:4e:c0:8d: 79:41:40:1d:31:f9:ec:e9:0c:0d:98:46:46:ff:08: 62:8d:37:66:f6:fc:99:6e:30:db:83:4b:95:9c:74: ab:f5:8b:6f:84:26:8b:33:e7:0e:82:1b:bf:bd:0d: 70:61:64:63:db:10:bd:16:cd:ce:77:50:05:88:19: 8f:cd:c0:19:55:6b:3c:16:c6:dc:0e:15:eb:4d:1f: 8e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8E:A5:94:1E:1B:C1:67:41:2B:48:62:79:3D:4F:F2:35:AD:34:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:6e:5e:89:b5:f0:c4:d9:3c:ed:e3:46:02:a5:fd:ed:49:42: 86:92:c0:7d:75:cd:08:da:04:4a:63:5e:00:d6:4c:e1:77:f2: 52:1c:41:ce:18:6a:21:64:7b:a4:da:08:e1:08:2d:ea:0a:76: 9a:07:dd:69:d1:a7:5d:2c:37:d9:f7:be:b5:ee:87:92:d7:9b: 09:6d:ac:6f:e8:2e:80:6d:f6:45:b7:18:cb:c1:fc:03:ea:6c: 41:f5:b3:86:a5:f5:6c:c8:44:b3:1c:4a:23:8d:15:1a:84:01: 61:6a:d9:f5:08:20:bc:36:db:76:4b:a7:0c:d1:fd:fc:4d:31: 0c:d4:92:25:7a:bb:3f:82:79:ec:ca:d0:65:67:87:86:3b:b5: 46:e4:4d:e1:2f:10:a7:0c:13:1a:60:ba:91:79:10:b0:83:38: 4f:68:54:f8:07:a1:c3:6d:46:96:3b:fc:4e:22:13:6e:32:23: c5:c4:d4:8a:3a:bf:b4:6e:2f:d9:6d:44:e9:a8:6a:fa:d6:c8: ae:88:26:e3:16:a0:0f:5f:bd:42:dc:5f:ac:1f:ed:e6:df:12: e7:39:e1:ff:0a:94:4f:5a:74:ce:98:4d:11:c1:82:87:17:5d: 55:97:1d:42:e7:92:99:be:30:4a:33:c9:04:12:34:3b:85:0e: 65:08:03:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj5mkBKqnMayywIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ZGQ2MDE1YmUtNWYyMS00NWJkLWI0YjctNmRhZGM0ZWMyY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqRDFFFAXwCrANmg4Kq2GSzz/XCsbr/6VlUV DGTkB5bklQ8UlHkNfPdWN2OThNKsQ0TG4Cmm5d6ZLBthGFOgenOwT50aipBafMIc RYV0CIRrTPAIP1OmNg15WvieqqjeJhyg8n6vtpoRGMQYjUzk5/Zctl1ANm6Cp2Bg Cp5e0EaD/L8RBOl51aHwrVkqtO6urdDtIJtNvcsYJyccipgEJ68AO0aw5XHWRwwa v3M/ijhOwI15QUAdMfns6QwNmEZG/whijTdm9vyZbjDbg0uVnHSr9YtvhCaLM+cO ghu/vQ1wYWRj2xC9Fs3Od1AFiBmPzcAZVWs8FsbcDhXrTR+O3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWOpZQeG8FnQStIYnk9T/I1rTQHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYzlkZDdhNDUtMzZlOS0z N2E1LTkwNjgtNjQyMGQ2NWQ5NzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVuXom18MTZPO3jRgKl/e1JQoaSwH11zQjaBEpjXgDWTOF38lIcQc4Y aiFke6TaCOEILeoKdpoH3WnRp10sN9n3vrXuh5LXmwltrG/oLoBt9kW3GMvB/APq bEH1s4al9WzIRLMcSiONFRqEAWFq2fUIILw223ZLpwzR/fxNMQzUkiV6uz+CeezK 0GVnh4Y7tUbkTeEvEKcMExpgupF5ELCDOE9oVPgHocNtRpY7/E4iE24yI8XE1Io6 v7RuL9ltROmoavrWyK6IJuMWoA9fvULcX6wf7ebfEuc54f8KlE9adM6YTRHBgocX XVWXHULnkpm+MEozyQQSNDuFDmUIA18= -----END CERTIFICATE-----Generated at Thu Mar 26 15:50:28 2026 by rpki-client