$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1d8a4a16-99fc-3e6c-baa3-235457a94ebf.roa File: 1d8a4a16-99fc-3e6c-baa3-235457a94ebf.roa (raw, json) Hash identifier: 5sCkA9BIPR/CTIwcZp7puPYg/l1OvPvjqKbXBj1jvhI= Subject key identifier: BA:05:D4:B9:2E:8B:37:E3:E7:4D:5D:03:40:17:C0:CA:69:25:5F:8E Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1AD1796904601814B657A780 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1d8a4a16-99fc-3e6c-baa3-235457a94ebf.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 19795 IP address blocks: 129.41.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:79:69:04:60:18:14:b6:57:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=71345c2b-6ba2-4449-9e56-c6e9e647aeef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0b:18:83:72:8a:51:f1:e6:be:b7:5b:0d:f0: 73:09:c5:b2:47:b2:b7:e9:a6:de:92:1c:5a:8b:49: 62:ff:09:f5:03:44:a6:ec:26:33:e8:45:59:06:0d: 64:d7:19:b7:83:5f:a7:1b:96:ec:b8:41:74:0b:61: ba:d9:4e:a5:0a:50:01:26:3a:c9:81:a7:4a:04:24: b4:cc:8c:fd:b5:7b:de:6a:16:7f:04:4b:08:18:1e: 83:26:d0:f4:47:98:16:e7:f5:e8:9c:93:b0:40:8b: 71:60:3b:59:80:a6:d9:7e:83:84:91:e1:c4:f8:87: 68:cb:e0:c7:ab:80:dd:8a:76:df:fa:26:4b:59:73: c5:91:b4:ca:0f:c7:2a:0f:37:0d:c3:02:27:6a:9f: 20:13:90:68:5e:b7:8e:ef:ed:5b:37:f3:88:92:85: 6c:4e:5c:db:9f:52:3e:00:c2:48:10:e8:29:af:53: 7a:ff:78:95:56:5e:99:81:73:a9:25:79:1e:41:cb: cc:dd:0f:1b:9a:f4:5e:22:65:88:79:55:65:8f:ec: 20:66:7b:d1:60:9b:09:66:fb:e9:ac:d0:69:00:a2: 59:91:a6:d0:1f:25:d9:ab:84:f5:78:54:27:55:d9: 79:5c:93:e1:4c:63:0c:7c:fb:af:6a:75:70:bc:0e: 53:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:05:D4:B9:2E:8B:37:E3:E7:4D:5D:03:40:17:C0:CA:69:25:5F:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1d8a4a16-99fc-3e6c-baa3-235457a94ebf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:94:c1:69:7f:e0:9e:7c:e2:fe:44:ed:e0:e6:fd:8f:a6:41: bc:58:eb:b8:27:73:2f:62:7b:6b:a8:30:02:b4:4c:69:c9:31: 84:52:13:8d:38:e5:8b:13:4f:13:10:74:19:6e:4c:ee:5f:75: 01:eb:bc:e6:7e:55:64:97:e7:f4:35:4d:1c:84:82:27:d7:45: ce:27:00:c8:c2:e5:c5:24:90:df:5e:58:75:33:98:5e:79:95: 95:ac:41:b2:38:ce:e1:cc:81:b7:db:6e:96:3d:bc:0c:7e:27: 5a:61:1d:6c:6a:ba:38:eb:f2:29:d4:75:80:7c:5d:77:ad:ad: 5e:5a:de:8a:3e:92:15:f2:3c:d2:c2:25:2f:34:7c:fe:66:d6: cd:36:82:d4:17:d0:ec:3c:b7:1b:4d:02:3e:92:72:c1:8b:bc: ac:43:3b:7a:1b:d8:a2:68:01:92:7a:c3:66:cd:4f:a5:36:9f: c8:1c:3e:e5:ca:25:98:de:74:81:a4:4d:b0:87:61:85:10:ff: 32:d8:c6:0c:82:78:33:40:fc:2a:71:b2:e9:72:48:97:82:b3: fb:32:61:c6:8b:34:8b:9b:09:6c:cb:6b:f4:6a:19:78:10:61: 37:16:de:b3:88:49:b3:62:0a:94:48:5c:68:bc:7e:82:17:ea: 35:1a:52:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XlpBGAYFLZXp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NzEzNDVjMmItNmJhMi00NDQ5LTllNTYtYzZlOWU2NDdhZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wsYg3KKUfHmvrdbDfBzCcWyR7K36abekhxa i0li/wn1A0Sm7CYz6EVZBg1k1xm3g1+nG5bsuEF0C2G62U6lClABJjrJgadKBCS0 zIz9tXveahZ/BEsIGB6DJtD0R5gW5/XonJOwQItxYDtZgKbZfoOEkeHE+Idoy+DH q4Ddinbf+iZLWXPFkbTKD8cqDzcNwwInap8gE5BoXreO7+1bN/OIkoVsTlzbn1I+ AMJIEOgpr1N6/3iVVl6ZgXOpJXkeQcvM3Q8bmvReImWIeVVlj+wgZnvRYJsJZvvp rNBpAKJZkabQHyXZq4T1eFQnVdl5XJPhTGMMfPuvanVwvA5TOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoF1Lkuizfj501dA0AXwMppJV+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMWQ4YTRhMTYtOTlmYy0z ZTZjLWJhYTMtMjM1NDU3YTk0ZWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgSmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+UwWl/4J584v5E7eDm/Y+mQbxY67gncy9ie2uoMAK0TGnJMYRSE404 5YsTTxMQdBluTO5fdQHrvOZ+VWSX5/Q1TRyEgifXRc4nAMjC5cUkkN9eWHUzmF55 lZWsQbI4zuHMgbfbbpY9vAx+J1phHWxqujjr8inUdYB8XXetrV5a3oo+khXyPNLC JS80fP5m1s02gtQX0Ow8txtNAj6ScsGLvKxDO3ob2KJoAZJ6w2bNT6U2n8gcPuXK JZjedIGkTbCHYYUQ/zLYxgyCeDNA/CpxsulySJeCs/syYcaLNIubCWzLa/RqGXgQ YTcW3rOISbNiCpRIXGi8foIX6jUaUps= -----END CERTIFICATE-----Generated at Wed Nov 5 10:48:24 2025 by rpki-client