$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ce8144b7-b5c9-3b37-bb93-aa14d409ea5f.roa File: ce8144b7-b5c9-3b37-bb93-aa14d409ea5f.roa (raw, json) Hash identifier: JxxGuZFnIz/o/lkNS01ZTZEaGoX3gxueGS2PmNrt8Bw= Subject key identifier: 6A:67:A5:F6:F8:F8:DE:86:A6:04:9A:D0:65:B0:5D:81:5E:5D:0B:64 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584EE7BC9FD5C25E57CF91BBE700 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ce8144b7-b5c9-3b37-bb93-aa14d409ea5f.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 14618 IP address blocks: 129.33.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:9f:d5:c2:5e:57:cf:91:bb:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=16921dd9-c35d-4ecd-9707-73dee0a11639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0a:b9:5a:53:bc:07:a2:cd:93:34:90:6a:89: 51:e9:6e:e6:b4:15:32:e3:b9:8e:12:dd:0a:59:9f: 70:dd:02:a5:76:85:94:da:5c:2e:0b:53:c7:05:41: 6b:75:a5:3b:84:5d:c1:0c:e2:1c:45:3f:22:92:97: 24:18:75:a1:08:e3:ea:df:c3:07:95:e1:99:91:ea: 63:46:bf:b4:37:44:ac:d2:f7:a4:67:98:98:cd:27: 84:16:61:d7:90:c4:b8:53:ad:d4:01:40:a3:e1:24: e8:38:8f:38:2e:28:d5:eb:99:cb:a5:26:eb:20:01: ce:2c:48:03:14:aa:ab:c9:7e:91:73:59:2d:da:62: c6:06:e9:40:1c:16:48:0f:aa:36:69:85:c8:26:99: cf:63:1b:24:ad:73:e3:fd:ea:cf:d4:12:e7:e5:ac: c5:4f:58:67:b2:d2:89:47:5a:0c:11:c5:79:4b:45: 1c:24:a8:70:2a:85:de:ad:65:f9:37:50:14:19:6b: 63:6a:21:e4:2d:e2:a8:e3:5a:7d:f7:e9:20:a8:b6: 84:4d:9c:cf:4d:27:2e:1b:8d:65:76:e7:2a:cb:e6: 80:ce:47:48:54:68:81:6a:70:f6:44:86:28:ae:61: 34:3a:0b:64:a2:25:7b:c2:21:6f:cd:4d:be:65:21: ab:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:67:A5:F6:F8:F8:DE:86:A6:04:9A:D0:65:B0:5D:81:5E:5D:0B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ce8144b7-b5c9-3b37-bb93-aa14d409ea5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:b8:4a:1c:b0:d2:23:28:63:3e:b3:df:d9:97:10:6c:76:47: 3a:82:cf:84:a6:12:da:2f:d5:e9:6c:dc:89:3b:97:22:06:60: de:ad:8e:cc:2e:92:62:41:05:a8:91:59:b3:ee:69:65:41:b4: be:ba:f5:2a:cd:eb:8b:44:49:ed:34:37:d5:b4:36:90:53:da: 3c:41:de:1f:99:31:6b:5e:4c:9e:31:09:60:96:e6:0b:c9:34: 67:06:c7:70:87:92:81:c3:09:78:f0:0a:5b:12:71:48:00:00: 57:84:c5:fa:9b:0f:c2:83:d8:b5:ff:96:4d:bb:a7:63:ba:56: 77:ba:99:b0:c9:09:f3:9c:32:36:e4:7c:d3:05:30:c7:ef:f9: d7:06:db:2d:90:1b:b8:86:6b:48:aa:82:a5:c1:ee:52:57:f3: 9e:0c:7d:c7:d2:a0:7c:16:d8:6c:64:f4:3b:31:34:d1:55:04: 2c:70:01:85:05:31:94:c9:4c:6c:2d:3d:ae:de:d6:85:df:ae: 3c:3c:ad:ff:0a:a0:60:0b:5e:62:51:fa:ff:da:ac:03:dc:76: 73:ee:46:b0:ac:10:86:e1:fc:96:94:94:54:76:ec:f0:dd:11: 78:4f:9f:1a:ca:73:9b:31:ba:04:de:e3:90:92:46:74:1c:23: 97:39:64:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvJ/Vwl5Xz5G75wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk MTY5MjFkZDktYzM1ZC00ZWNkLTk3MDctNzNkZWUwYTExNjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwq5WlO8B6LNkzSQaolR6W7mtBUy47mOEt0K WZ9w3QKldoWU2lwuC1PHBUFrdaU7hF3BDOIcRT8ikpckGHWhCOPq38MHleGZkepj Rr+0N0Ss0vekZ5iYzSeEFmHXkMS4U63UAUCj4SToOI84LijV65nLpSbrIAHOLEgD FKqryX6Rc1kt2mLGBulAHBZID6o2aYXIJpnPYxskrXPj/erP1BLn5azFT1hnstKJ R1oMEcV5S0UcJKhwKoXerWX5N1AUGWtjaiHkLeKo41p99+kgqLaETZzPTScuG41l ducqy+aAzkdIVGiBanD2RIYormE0OgtkoiV7wiFvzU2+ZSGrfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpnpfb4+N6GpgSa0GWwXYFeXQtkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvY2U4MTQ0YjctYjVjOS0z YjM3LWJiOTMtYWExNGQ0MDllYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgSGKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEi4Shyw0iMoYz6z39mXEGx2RzqCz4SmEtov1els3Ik7lyIGYN6tjswu kmJBBaiRWbPuaWVBtL669SrN64tESe00N9W0NpBT2jxB3h+ZMWteTJ4xCWCW5gvJ NGcGx3CHkoHDCXjwClsScUgAAFeExfqbD8KD2LX/lk27p2O6Vne6mbDJCfOcMjbk fNMFMMfv+dcG2y2QG7iGa0iqgqXB7lJX854MfcfSoHwW2Gxk9DsxNNFVBCxwAYUF MZTJTGwtPa7e1oXfrjw8rf8KoGALXmJR+v/arAPcdnPuRrCsEIbh/JaUlFR27PDd EXhPnxrKc5sxugTe45CSRnQcI5c5ZFk= -----END CERTIFICATE-----Generated at Tue Sep 29 19:38:23 2026 by rpki-client