$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1c6d454f-eff3-36c5-a242-1155de42889c.roa File: 1c6d454f-eff3-36c5-a242-1155de42889c.roa (raw, json) Hash identifier: jeZb0mpH4wLXQEtg/wIj5dhXUcsQqArZHgrbWnfq9gg= Subject key identifier: 6B:C3:9C:0D:DE:DE:8D:70:A8:25:67:4D:6F:ED:26:91:A0:AC:AA:B3 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584AAB265D70B84CD591BE023700 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1c6d454f-eff3-36c5-a242-1155de42889c.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 129.41.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:5d:70:b8:4c:d5:91:be:02:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=6f430865-e621-4226-b4cb-5518dc428723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:94:ab:93:fc:08:a3:06:ba:5a:02:27:11:5f: 47:61:b0:12:d4:a5:67:a7:62:ef:25:eb:a1:1b:cc: 1a:ae:5f:1a:fe:a6:f5:40:00:0f:c1:5c:d0:40:e5: 43:aa:0c:4e:bd:e2:c4:1c:a3:6b:63:67:8e:02:cc: 41:68:37:94:f0:31:dc:81:cb:81:07:3d:f5:2d:c5: 27:a3:3b:90:a8:9f:9a:ce:18:ca:44:74:5b:9a:3a: 99:bd:8a:dc:bc:87:38:56:df:e1:47:f4:2d:5e:b2: 43:34:57:3d:cd:b6:1e:d5:15:5c:7a:57:4b:aa:39: 8e:35:42:c4:56:26:70:8b:66:56:0e:56:d3:e9:4f: 19:98:ba:aa:71:c2:cb:64:b5:07:13:16:51:6a:66: 2e:dd:a5:08:20:d9:2e:2b:e7:6e:6b:0e:90:96:8e: c3:a0:a4:ff:da:8a:1d:00:bd:02:6b:9d:40:29:c5: e5:80:e5:b5:76:b1:d2:99:90:71:00:f9:cc:c9:dc: 85:c4:4d:c3:4f:7e:e5:13:23:bd:39:e8:a6:69:30: e5:e2:ef:5a:7f:c9:ca:7e:6c:72:0d:06:04:c4:97: ef:e6:33:81:c5:fa:24:83:81:c2:08:9c:de:b4:22: 95:7f:2a:ed:75:d6:24:6d:e8:ee:1e:4c:31:ca:4a: 12:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C3:9C:0D:DE:DE:8D:70:A8:25:67:4D:6F:ED:26:91:A0:AC:AA:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1c6d454f-eff3-36c5-a242-1155de42889c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:64:40:28:12:96:8d:a4:49:51:89:96:d4:19:07:5f:ef:58: 66:c3:d5:60:50:20:75:c0:e7:65:d7:07:ab:f2:bf:2b:9e:3a: 81:09:92:90:37:5e:5e:6d:36:b7:6b:94:07:d0:ef:d1:04:ff: d2:64:7e:ca:fc:41:e5:02:b3:00:dd:c8:c5:7f:29:dd:b5:bd: cd:75:60:59:2f:3b:fd:bd:68:47:68:c7:11:5c:45:5d:bc:7c: 9b:ca:16:52:f7:36:e0:80:67:ef:be:c2:18:7f:60:89:8a:4b: 4d:db:a8:58:b8:e0:8a:a2:70:c9:08:e5:15:4b:b1:b0:83:3e: 89:69:f6:a5:26:b5:38:be:4b:b5:66:e2:cb:b6:03:72:dc:c3: 03:6d:a4:92:65:67:61:85:e9:58:26:e3:63:c3:f5:e2:19:ba: dc:00:ac:fb:67:42:e4:52:4b:d1:d5:e6:2d:c2:0e:ec:a0:76: 4f:fd:05:df:2c:37:43:21:4c:98:e8:c9:43:c4:1b:73:ac:15: 7b:61:9f:61:8d:f2:ce:8e:35:d1:cb:cf:16:21:50:bd:47:7e: 51:19:a8:ec:e7:95:7c:18:62:c3:ba:45:55:27:5d:c8:f3:9e: 1c:01:b6:b3:5d:09:4f:c5:65:71:ee:51:ff:d1:c6:63:77:e2: d3:a8:f8:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJl1wuEzVkb4CNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NmY0MzA4NjUtZTYyMS00MjI2LWI0Y2ItNTUxOGRjNDI4NzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJSrk/wIowa6WgInEV9HYbAS1KVnp2LvJeuh G8warl8a/qb1QAAPwVzQQOVDqgxOveLEHKNrY2eOAsxBaDeU8DHcgcuBBz31LcUn ozuQqJ+azhjKRHRbmjqZvYrcvIc4Vt/hR/QtXrJDNFc9zbYe1RVceldLqjmONULE ViZwi2ZWDlbT6U8ZmLqqccLLZLUHExZRamYu3aUIINkuK+duaw6Qlo7DoKT/2ood AL0Ca51AKcXlgOW1drHSmZBxAPnMydyFxE3DT37lEyO9OeimaTDl4u9af8nKfmxy DQYExJfv5jOBxfokg4HCCJzetCKVfyrtddYkbejuHkwxykoSOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvDnA3e3o1wqCVnTW/tJpGgrKqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMWM2ZDQ1NGYtZWZmMy0z NmM1LWEyNDItMTE1NWRlNDI4ODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSmnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNkQCgSlo2kSVGJltQZB1/vWGbD1WBQIHXA52XXB6vyvyueOoEJkpA3 Xl5tNrdrlAfQ79EE/9Jkfsr8QeUCswDdyMV/Kd21vc11YFkvO/29aEdoxxFcRV28 fJvKFlL3NuCAZ+++whh/YImKS03bqFi44IqicMkI5RVLsbCDPolp9qUmtTi+S7Vm 4su2A3LcwwNtpJJlZ2GF6Vgm42PD9eIZutwArPtnQuRSS9HV5i3CDuygdk/9Bd8s N0MhTJjoyUPEG3OsFXthn2GN8s6ONdHLzxYhUL1HflEZqOznlXwYYsO6RVUnXcjz nhwBtrNdCU/FZXHuUf/RxmN34tOo+GU= -----END CERTIFICATE-----Generated at Mon Aug 4 22:16:51 2025 by rpki-client