$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1d8a4a16-99fc-3e6c-baa3-235457a94ebf.roa File: 1d8a4a16-99fc-3e6c-baa3-235457a94ebf.roa (raw, json) Hash identifier: LM8cQoUyC2QGqWnKupyq8A3lC+FaSpNWnD3vGnD0iCo= Subject key identifier: 67:95:7E:EB:33:23:09:7F:C7:92:5C:AE:C5:47:0E:BF:57:FF:BB:2C Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A3A157A5ED37AC1C9822DFE00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1d8a4a16-99fc-3e6c-baa3-235457a94ebf.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 19795 IP address blocks: 129.41.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:7a:5e:d3:7a:c1:c9:82:2d:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=495ee7b0-0a57-4011-8eb5-ff5170f0d310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:72:3e:dc:d7:75:16:e8:f8:96:3b:96:72:1f: dc:b1:69:f6:a5:d4:0b:42:24:f9:6c:c1:74:63:dd: 9e:df:69:e1:f0:4a:25:1b:91:ee:0f:b5:30:ad:99: 99:34:01:57:99:6c:fc:b6:7b:aa:9c:c6:8a:d0:94: 0e:b9:f0:38:4c:e0:03:6b:1e:29:c3:6b:18:d7:69: fb:19:b7:45:7d:bf:7a:c4:cc:5b:13:42:b1:a1:00: 6b:8e:e9:21:2d:1a:23:d3:86:cb:e5:a4:fc:da:37: 7e:8e:9a:06:fc:3e:9f:dc:cf:5b:2c:53:6e:82:3c: 91:f3:33:5d:99:ef:12:50:e6:e8:56:6e:b4:96:5e: eb:bb:82:e3:75:b8:67:20:bc:dd:b8:b3:2a:94:bf: d8:54:ba:66:9a:bf:61:71:7c:5f:3b:92:9e:0e:ec: 2d:2b:b8:4a:ec:16:d1:86:f2:b2:21:50:45:15:da: 8b:ce:1c:b3:e2:42:54:ba:87:9d:0e:b7:5a:92:d7: 19:8b:3d:0c:57:a9:70:32:c8:a4:94:13:c7:ae:9d: 6d:a3:4c:d2:f5:44:a8:8c:f1:e3:7d:3a:92:17:01: 0b:73:4e:ae:fe:ea:1c:f6:e8:71:53:07:9b:7b:1d: 41:99:3e:3d:fd:f6:dd:2e:ee:4d:73:10:3e:78:5f: ce:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:95:7E:EB:33:23:09:7F:C7:92:5C:AE:C5:47:0E:BF:57:FF:BB:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1d8a4a16-99fc-3e6c-baa3-235457a94ebf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:18:df:ba:f4:7a:93:e5:a3:6b:04:30:a1:07:0d:48:05:a5: 75:41:f4:20:68:67:c2:fb:39:e9:2d:73:c4:ec:2a:35:cc:0d: 23:d3:c3:eb:c8:84:bc:d1:78:4c:cf:a1:70:2c:34:b9:9b:26: e0:cc:73:99:15:b8:c1:d2:85:9c:fb:d5:a4:92:f9:d9:e5:92: 92:4e:1c:c0:63:14:18:f0:9f:da:40:7e:24:f1:28:87:e4:e6: e9:34:e4:cf:9f:55:fb:44:aa:2d:cf:74:e3:b0:b0:19:70:91: f6:13:5f:3a:f4:59:94:0c:33:ca:5d:46:6e:f9:72:37:5b:14: db:f1:ea:f8:55:26:09:56:b2:39:35:d6:3d:04:5f:bf:22:6b: 88:48:28:45:4a:96:36:b2:b5:ab:d1:f7:25:81:b1:53:20:92: bb:cd:c8:6c:79:35:cd:13:3c:78:9f:b1:b1:04:03:18:b4:d2: e8:82:7b:a2:4d:eb:1e:d4:07:38:d0:b8:6c:40:68:13:15:57: 20:87:c7:a7:5f:32:5a:83:5c:37:2d:e5:7c:0b:e1:e2:2e:01: 59:65:cd:7d:d8:15:1a:04:bf:18:0e:c9:65:d6:8b:b5:c6:d4: 3c:ea:76:24:ac:51:c8:bd:bb:71:09:e3:d5:d4:f8:3c:24:38: 51:ec:57:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXpe03rByYIt/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk NDk1ZWU3YjAtMGE1Ny00MDExLThlYjUtZmY1MTcwZjBkMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHI+3Nd1Fuj4ljuWch/csWn2pdQLQiT5bMF0 Y92e32nh8EolG5HuD7UwrZmZNAFXmWz8tnuqnMaK0JQOufA4TOADax4pw2sY12n7 GbdFfb96xMxbE0KxoQBrjukhLRoj04bL5aT82jd+jpoG/D6f3M9bLFNugjyR8zNd me8SUOboVm60ll7ru4LjdbhnILzduLMqlL/YVLpmmr9hcXxfO5KeDuwtK7hK7BbR hvKyIVBFFdqLzhyz4kJUuoedDrdaktcZiz0MV6lwMsiklBPHrp1to0zS9USojPHj fTqSFwELc06u/uoc9uhxUwebex1BmT49/fbdLu5NcxA+eF/OdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeVfuszIwl/x5JcrsVHDr9X/7ssMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMWQ4YTRhMTYtOTlmYy0z ZTZjLWJhYTMtMjM1NDU3YTk0ZWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgSmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0Y37r0epPlo2sEMKEHDUgFpXVB9CBoZ8L7Oektc8TsKjXMDSPTw+vI hLzReEzPoXAsNLmbJuDMc5kVuMHShZz71aSS+dnlkpJOHMBjFBjwn9pAfiTxKIfk 5uk05M+fVftEqi3PdOOwsBlwkfYTXzr0WZQMM8pdRm75cjdbFNvx6vhVJglWsjk1 1j0EX78ia4hIKEVKljaytavR9yWBsVMgkrvNyGx5Nc0TPHifsbEEAxi00uiCe6JN 6x7UBzjQuGxAaBMVVyCHx6dfMlqDXDct5XwL4eIuAVllzX3YFRoEvxgOyWXWi7XG 1DzqdiSsUci9u3EJ49XU+DwkOFHsV8Q= -----END CERTIFICATE-----Generated at Sun Jun 29 16:32:29 2025 by rpki-client