$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa File: aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa (raw, json) Hash identifier: jGN9UMiodc5Cfoe6PzbTecB21alLod6i6ntAWLE6yKk= Subject key identifier: 31:9F:41:FD:64:BE:7B:13:B4:F0:01:21:C0:AE:25:C1:03:9B:B2:27 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584AAB26541CB77B380690C7C878 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 129.41.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:54:1c:b7:7b:38:06:90:c7:c8:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=055f1b3b-ce76-4d43-b591-8036b60d458d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:36:e0:db:97:ad:68:32:f7:29:c5:28:e9: e3:f8:7d:14:02:64:3e:df:ae:bb:b7:ac:a4:c0:66: be:a8:43:3e:df:17:e0:ba:a4:c9:bf:c6:8c:6e:cf: f2:ff:aa:71:ee:5e:fd:1f:20:41:42:2c:e1:a0:ca: 19:34:cf:68:2b:e0:fb:8b:40:59:e0:5b:7a:fb:01: 36:32:57:3e:09:12:dd:4d:ba:08:53:01:66:ed:49: 14:07:bc:02:5a:21:b9:cb:6a:7a:1a:0e:c9:ad:76: 59:b1:9c:da:05:73:b2:9f:5d:56:97:e6:d1:be:62: 17:d2:dc:8b:80:18:a5:5f:09:9f:92:9a:10:d4:64: ec:b4:2f:49:6b:07:85:cd:74:4c:53:de:83:b9:10: 38:f9:20:04:09:c1:fb:04:f2:37:0c:c3:8f:c8:35: 06:ea:d9:60:6f:24:92:97:d1:d6:a0:22:20:17:cc: 02:d2:ff:88:98:6c:52:bd:d5:56:48:ac:b9:80:05: fe:a8:5b:23:b5:ee:c4:d9:7a:e0:a2:87:12:a7:c5: 86:7b:f3:85:5e:44:19:af:d3:98:a7:2b:df:3f:fd: db:f4:55:4b:d7:ba:66:1b:96:5d:1f:b8:29:6e:cc: ec:c6:23:66:02:cc:27:90:60:cd:26:3f:ed:2a:e8: 34:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9F:41:FD:64:BE:7B:13:B4:F0:01:21:C0:AE:25:C1:03:9B:B2:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:d2:46:54:37:cb:a1:0f:c9:d0:8a:f2:88:9a:c0:1c:81:bb: be:81:67:c7:86:b0:14:9e:c6:c9:a6:e9:82:91:30:2d:d6:5d: 72:0c:58:05:20:e6:09:5e:f1:df:74:32:1c:5b:64:11:24:57: d6:73:fd:42:4b:c6:98:35:8e:2f:22:e9:84:01:de:96:20:85: ef:64:94:16:48:14:d9:9b:44:e3:a0:3e:0f:d4:5c:f2:a4:6c: b8:b8:2c:7c:d3:9f:5e:fe:3e:2d:d4:1c:61:e3:2c:ee:6a:81: 7d:42:db:7a:92:a1:59:08:1c:e6:8a:95:09:ef:4b:2a:3e:78: 9f:89:fc:bb:80:62:12:5f:f8:35:ef:22:be:2d:8d:77:c6:0d: 1b:ca:5d:4b:bb:fc:81:20:c7:43:3c:ec:23:d6:f6:77:11:70: 77:53:ba:cf:77:5f:ee:f9:b2:09:a2:4c:0a:17:c1:cd:e7:b9: 19:b3:63:cb:77:43:91:cf:14:fd:1b:7f:0b:d1:05:02:5c:03: e1:99:93:82:c4:60:80:a7:15:69:5b:86:3c:e4:ef:44:03:a9: 42:17:6b:31:90:53:aa:c3:f8:06:e0:91:b3:08:dc:ff:c9:0c: 2b:1f:e3:a5:51:9e:24:cd:b3:19:02:d1:ef:da:12:ac:3a:09: 3a:c5:b7:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlQct3s4BpDHyHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk MDU1ZjFiM2ItY2U3Ni00ZDQzLWI1OTEtODAzNmI2MGQ0NThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA824NuXrWgy9ynFKOnj+H0UAmQ+3667t6yk wGa+qEM+3xfguqTJv8aMbs/y/6px7l79HyBBQizhoMoZNM9oK+D7i0BZ4Ft6+wE2 Mlc+CRLdTboIUwFm7UkUB7wCWiG5y2p6Gg7JrXZZsZzaBXOyn11Wl+bRvmIX0tyL gBilXwmfkpoQ1GTstC9JaweFzXRMU96DuRA4+SAECcH7BPI3DMOPyDUG6tlgbySS l9HWoCIgF8wC0v+ImGxSvdVWSKy5gAX+qFsjte7E2XrgoocSp8WGe/OFXkQZr9OY pyvfP/3b9FVL17pmG5ZdH7gpbszsxiNmAswnkGDNJj/tKug0dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGfQf1kvnsTtPABIcCuJcEDm7InMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYWViMzk5MGItNWQ0OS0z OTY1LTkxZGEtOWJjYzhlNWY3ZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfSRlQ3y6EPydCK8oiawByBu76BZ8eGsBSexsmm6YKRMC3WXXIMWAUg 5gle8d90MhxbZBEkV9Zz/UJLxpg1ji8i6YQB3pYghe9klBZIFNmbROOgPg/UXPKk bLi4LHzTn17+Pi3UHGHjLO5qgX1C23qSoVkIHOaKlQnvSyo+eJ+J/LuAYhJf+DXv Ir4tjXfGDRvKXUu7/IEgx0M87CPW9ncRcHdTus93X+75sgmiTAoXwc3nuRmzY8t3 Q5HPFP0bfwvRBQJcA+GZk4LEYICnFWlbhjzk70QDqUIXazGQU6rD+AbgkbMI3P/J DCsf46VRniTNsxkC0e/aEqw6CTrFt9A= -----END CERTIFICATE-----Generated at Mon Aug 4 19:13:50 2025 by rpki-client