$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9a04c360-2582-30c3-8634-70c1a0fd710d.roa File: 9a04c360-2582-30c3-8634-70c1a0fd710d.roa (raw, json) Hash identifier: HoqJleClVWUBEoJBdkLx1sIRoJ3dnGYcjPmeqlPVS+A= Subject key identifier: 91:C6:32:D4:1F:D7:EC:6D:22:B2:03:DC:74:90:8F:A6:E9:53:B9:45 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584AAB2653FD4F2D1EC9F4258F00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9a04c360-2582-30c3-8634-70c1a0fd710d.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 129.41.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:53:fd:4f:2d:1e:c9:f4:25:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=2909bb6d-78bd-450e-ba4c-e1e01d2c870e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0a:0e:13:9a:ab:b6:90:50:e5:b2:39:c3:28: 9d:d9:51:4f:f7:df:e0:1a:aa:af:58:62:d0:75:f2: 9c:0b:ab:1c:6e:e0:95:15:db:a0:7c:35:4d:57:6c: 08:9a:b9:f2:3d:0d:29:52:24:24:ff:1f:75:3f:a6: 6a:25:86:88:ed:59:3c:54:4a:d3:5f:e5:86:1a:60: 5f:1e:36:55:0b:dd:14:03:81:b0:06:85:09:95:59: 55:ae:cb:ac:16:00:42:bb:4a:55:b4:ca:d0:8f:9a: 5f:aa:7b:44:3f:75:43:07:47:2f:ef:1f:8f:97:9e: 50:e6:f9:a1:dd:27:75:8f:b5:3f:e9:2e:99:40:c6: 6a:ec:f0:f8:7e:3b:43:78:9c:3e:8a:18:72:19:84: 75:42:b1:bd:cf:84:dc:f6:be:5f:b9:62:a4:13:1b: 09:8b:a5:5e:32:6a:02:f7:65:77:96:33:dd:32:9f: d6:65:87:a7:92:3d:59:2c:f8:11:5a:a2:2a:9d:19: 17:19:17:d3:91:5b:c9:6c:8a:64:b9:70:d3:02:91: 04:c1:03:d0:8b:3a:54:31:c6:c4:b5:d6:a5:09:66: c5:43:a5:a7:4a:8c:e8:92:24:8d:c3:b3:f1:03:a5: 96:5d:00:22:8b:7f:82:c0:4a:a7:35:fd:34:a2:f2: dc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C6:32:D4:1F:D7:EC:6D:22:B2:03:DC:74:90:8F:A6:E9:53:B9:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9a04c360-2582-30c3-8634-70c1a0fd710d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a7:84:86:1a:b6:96:6c:63:c3:2c:37:88:65:b1:fa:e5:78: 93:50:8e:c6:f1:de:3f:12:40:cd:03:55:ce:99:5d:a3:34:b4: 8a:87:f1:d3:0b:4d:76:b6:3e:5b:2d:cf:9d:36:dd:25:76:df: b4:3f:d2:0b:ef:e5:1c:79:34:1b:64:db:c3:11:5c:90:8c:76: de:eb:ec:12:b4:5a:0f:e0:b9:67:6a:e5:bf:f1:e6:c0:1d:66: cd:53:45:66:83:34:cb:a7:34:33:59:bb:93:bf:20:bc:96:cf: c4:7e:13:be:86:dd:78:68:7a:27:1d:cf:2e:08:e7:18:9d:68: 61:f0:73:d9:a2:8c:b1:ab:fe:35:2c:9e:53:ff:6d:7b:06:fa: bc:c5:6e:e4:17:9d:4e:67:64:0c:8f:68:2d:9f:09:f4:de:9a: 2b:98:b4:6a:c3:df:a7:5e:4d:fd:fd:03:15:f1:0e:15:86:11: ea:56:6a:db:c3:e3:56:4d:a8:97:9e:ec:d1:e8:7b:12:60:26: 38:13:7f:07:35:fa:f6:9c:2b:f5:fa:cd:73:23:91:a2:b8:b3: 65:81:15:db:9e:0a:29:0a:a3:ae:2e:43:8e:fc:1b:65:55:72: 6f:56:93:54:ad:73:54:72:e9:e1:c5:39:b0:c4:7a:0b:8b:19: 93:de:31:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlP9Ty0eyfQljwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk MjkwOWJiNmQtNzhiZC00NTBlLWJhNGMtZTFlMDFkMmM4NzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAoOE5qrtpBQ5bI5wyid2VFP99/gGqqvWGLQ dfKcC6scbuCVFdugfDVNV2wImrnyPQ0pUiQk/x91P6ZqJYaI7Vk8VErTX+WGGmBf HjZVC90UA4GwBoUJlVlVrsusFgBCu0pVtMrQj5pfqntEP3VDB0cv7x+Pl55Q5vmh 3Sd1j7U/6S6ZQMZq7PD4fjtDeJw+ihhyGYR1QrG9z4Tc9r5fuWKkExsJi6VeMmoC 92V3ljPdMp/WZYenkj1ZLPgRWqIqnRkXGRfTkVvJbIpkuXDTApEEwQPQizpUMcbE tdalCWbFQ6WnSozokiSNw7PxA6WWXQAii3+CwEqnNf00ovLc+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHGMtQf1+xtIrID3HSQj6bpU7lFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOWEwNGMzNjAtMjU4Mi0z MGMzLTg2MzQtNzBjMWEwZmQ3MTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgSlYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACnhIYatpZsY8MsN4hlsfrleJNQjsbx3j8SQM0DVc6ZXaM0tIqH8dML TXa2Plstz5023SV237Q/0gvv5Rx5NBtk28MRXJCMdt7r7BK0Wg/guWdq5b/x5sAd Zs1TRWaDNMunNDNZu5O/ILyWz8R+E76G3Xhoeicdzy4I5xidaGHwc9mijLGr/jUs nlP/bXsG+rzFbuQXnU5nZAyPaC2fCfTemiuYtGrD36deTf39AxXxDhWGEepWatvD 41ZNqJee7NHoexJgJjgTfwc1+vacK/X6zXMjkaK4s2WBFdueCikKo64uQ478G2VV cm9Wk1Stc1Ry6eHFObDEeguLGZPeMa0= -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:10 2025 by rpki-client