$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/efdaf484-41c7-3d50-b9ff-645dd7ba3c00.roa File: efdaf484-41c7-3d50-b9ff-645dd7ba3c00.roa (raw, json) Hash identifier: b/Luvga6Z9AskNfk0fNFPjO6Rjffz54aM5PxjN1Zib0= Subject key identifier: 8E:07:E2:01:37:96:41:9C:60:8B:E0:CE:BE:EB:CC:42:5F:48:A6:55 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584AAB26542A4851A6390D9DDD40 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/efdaf484-41c7-3d50-b9ff-645dd7ba3c00.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 14618 IP address blocks: 129.41.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:54:2a:48:51:a6:39:0d:9d:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=ba76fc84-54d0-4679-a399-b2935c1f7a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:98:c4:aa:6a:2f:a4:33:b1:14:04:4e:f8:bf: 49:4b:09:08:b0:82:47:3f:e7:92:82:2f:27:59:e8: 32:04:30:41:60:d8:34:4d:1e:61:27:9d:98:d4:bc: 08:25:9a:98:8a:fc:f6:93:d8:8f:0c:e7:2d:f9:36: 30:be:87:d4:cb:f8:7b:35:9c:5c:07:12:5b:fc:b3: 45:ee:94:66:fe:8d:68:3a:7e:3a:98:5e:fb:dd:a0: 2e:58:9e:0b:8e:80:12:67:20:39:d4:7d:d0:08:43: cf:9f:62:e8:21:d4:48:c8:9e:4d:c0:36:dc:9f:1a: 5e:24:82:39:ac:00:16:7a:d6:41:f5:8d:4c:bc:12: db:c2:b4:1a:dc:4c:43:da:79:17:c5:a9:f6:19:bb: d3:3e:3f:4e:87:74:c1:ca:23:fa:96:88:7a:e9:a6: 33:39:50:9f:ad:60:b9:57:f0:4b:ac:18:07:e4:2c: 37:f4:42:a8:6b:c4:ff:45:38:80:a6:de:a7:73:50: 4a:57:b3:e2:e7:ab:ad:cc:9b:2e:c4:48:57:1b:86: 0d:3f:94:ea:af:ae:04:e7:7f:6a:10:ff:60:f0:9e: e1:0c:4a:71:17:2f:f0:c5:5a:67:6f:08:ea:f9:43: 96:5a:b0:8e:f1:c9:35:07:0f:6d:8b:e6:11:8a:96: 6d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:07:E2:01:37:96:41:9C:60:8B:E0:CE:BE:EB:CC:42:5F:48:A6:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/efdaf484-41c7-3d50-b9ff-645dd7ba3c00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:74:71:8e:6a:f7:d1:00:81:f7:26:7f:a1:2c:76:b0:6e:8c: 6b:9d:84:6b:dc:21:15:df:b2:42:12:5f:e9:ba:8b:6e:f1:ab: 44:d2:64:ae:22:da:8c:bf:8f:e0:cd:1e:fc:06:46:80:f2:8d: 67:60:53:9f:67:0b:18:19:84:54:03:09:ff:4a:4f:63:13:21: 92:46:6b:ea:55:e1:d1:34:b5:15:52:98:ef:44:e9:43:0e:71: 76:61:2e:8b:04:cd:ca:07:8b:e5:d9:a3:c8:2e:35:ba:c4:6e: 9a:02:7e:93:34:11:51:37:5d:c1:ea:2f:58:3b:df:f0:65:65: d0:12:71:b9:98:6b:11:bf:31:81:9e:b5:2e:48:73:da:fe:d1: da:b7:94:92:2c:3f:e1:cd:b4:e6:18:19:6a:95:4e:59:24:ad: e5:cc:ca:40:4c:33:4c:82:d3:1a:f5:bc:18:97:ea:55:df:a4: 30:c2:8d:18:ad:52:6a:af:83:c0:62:37:d7:38:8c:7a:9a:93: bb:b7:03:1d:fa:25:e0:b1:a9:63:71:c6:49:8d:24:22:53:74: f9:ce:01:aa:ff:19:3c:43:11:f1:57:8d:d2:89:e1:00:9c:6a: 74:91:a4:f3:78:cd:1b:f5:6e:2d:fb:8e:fb:78:25:f9:5f:2d: 23:e5:d7:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlQqSFGmOQ2d3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk YmE3NmZjODQtNTRkMC00Njc5LWEzOTktYjI5MzVjMWY3YTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpjEqmovpDOxFARO+L9JSwkIsIJHP+eSgi8n WegyBDBBYNg0TR5hJ52Y1LwIJZqYivz2k9iPDOct+TYwvofUy/h7NZxcBxJb/LNF 7pRm/o1oOn46mF773aAuWJ4LjoASZyA51H3QCEPPn2LoIdRIyJ5NwDbcnxpeJII5 rAAWetZB9Y1MvBLbwrQa3ExD2nkXxan2GbvTPj9Oh3TByiP6loh66aYzOVCfrWC5 V/BLrBgH5Cw39EKoa8T/RTiApt6nc1BKV7Pi56utzJsuxEhXG4YNP5Tqr64E539q EP9g8J7hDEpxFy/wxVpnbwjq+UOWWrCO8ck1Bw9ti+YRipZtkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4H4gE3lkGcYIvgzr7rzEJfSKZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZWZkYWY0ODQtNDFjNy0z ZDUwLWI5ZmYtNjQ1ZGQ3YmEzYzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR0cY5q99EAgfcmf6EsdrBujGudhGvcIRXfskISX+m6i27xq0TSZK4i 2oy/j+DNHvwGRoDyjWdgU59nCxgZhFQDCf9KT2MTIZJGa+pV4dE0tRVSmO9E6UMO cXZhLosEzcoHi+XZo8guNbrEbpoCfpM0EVE3XcHqL1g73/BlZdAScbmYaxG/MYGe tS5Ic9r+0dq3lJIsP+HNtOYYGWqVTlkkreXMykBMM0yC0xr1vBiX6lXfpDDCjRit Umqvg8BiN9c4jHqak7u3Ax36JeCxqWNxxkmNJCJTdPnOAar/GTxDEfFXjdKJ4QCc anSRpPN4zRv1bi37jvt4JflfLSPl12s= -----END CERTIFICATE-----Generated at Mon Aug 4 15:05:16 2025 by rpki-client