$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/34cf4545-7377-3604-bfb9-15fe8de88b2e.roa File: 34cf4545-7377-3604-bfb9-15fe8de88b2e.roa (raw, json) Hash identifier: upsX/xqnFeaAWB1OscnjzuL69CzxRZKUewQACEwShLY= Subject key identifier: B5:AC:CE:E3:9E:E4:2F:77:0F:50:8E:64:0A:7C:67:E2:65:3E:2D:DF Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B8BE21A69604DF2CEB1727F00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/34cf4545-7377-3604-bfb9-15fe8de88b2e.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 129.41.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:1a:69:60:4d:f2:ce:b1:72:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=f06ffbcd-520e-4a87-aa08-fd2c60ff5095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6e:d4:75:f1:d1:39:65:5a:26:68:ed:9f:fd: 32:c5:68:96:39:45:9f:74:3a:d0:3b:cf:15:d9:53: 15:42:12:c0:95:89:72:ee:8a:11:55:3e:d8:a2:fb: d0:09:f4:b2:78:15:c3:43:21:01:9d:65:7b:90:8d: a8:37:d1:0c:82:85:69:4b:fd:8a:a2:31:cd:41:45: 6d:3e:e7:96:76:9a:6a:ab:38:60:71:65:ef:98:b9: a7:1a:9d:b0:49:d7:70:b9:2a:f1:c5:42:7d:cf:e0: b2:9b:b3:ba:6b:1a:8f:a1:7a:3f:27:5d:2e:37:08: d3:8d:dd:57:c5:40:4c:00:ca:3b:cd:25:27:4c:03: 95:bf:30:35:29:5b:0a:97:f3:cb:08:70:cd:de:d9: 32:ff:84:77:c4:58:43:f6:c1:4c:56:df:21:7c:1d: b2:d5:3e:0f:fa:e8:d7:ab:cb:2a:c9:46:87:da:25: ef:c0:3f:b0:a4:ea:14:69:84:35:7f:31:73:4c:bd: a8:c5:b0:c0:a6:bf:1a:5c:e3:95:2d:ec:12:91:dc: 16:36:a0:58:bc:15:e8:0d:02:83:97:3e:00:e0:14: b6:ad:ca:95:86:8a:5c:bb:bc:3f:32:98:37:05:54: f3:cf:42:55:8a:b5:04:5e:6f:3c:1a:dc:2c:1e:3c: ab:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AC:CE:E3:9E:E4:2F:77:0F:50:8E:64:0A:7C:67:E2:65:3E:2D:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/34cf4545-7377-3604-bfb9-15fe8de88b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:41:b9:eb:01:a3:2e:fb:a6:c4:7a:b7:d1:95:81:b8:8a:5b: 34:6c:ab:eb:f2:90:d4:f7:89:7e:fb:13:fc:6c:ae:2c:ff:fd: d4:91:45:d2:09:3e:b9:38:4f:f1:71:5f:65:06:33:41:e1:46: ab:24:a9:1b:17:17:57:ed:19:8c:bd:c9:d3:e3:2a:c1:cd:a5: 4b:45:d0:38:4c:de:37:96:0a:b0:64:c0:65:e7:e6:ad:fc:ba: 4a:07:5f:f3:9a:40:87:51:bb:75:df:74:40:50:d5:06:85:95: 75:44:28:0c:8e:20:1e:f3:98:37:95:c6:14:a5:1f:9d:48:59: ab:b2:9f:6e:4c:17:f3:09:66:99:1b:62:3b:93:2d:fa:98:5d: 87:c7:36:c5:7b:f5:96:90:f7:cc:34:11:94:4a:83:62:fd:b1: f1:46:60:dc:c2:13:42:f1:80:25:55:50:66:0e:77:a9:68:d0: 07:4f:ff:c8:1d:75:a0:90:0f:c4:ce:01:68:dd:8c:c9:e2:8e: db:fa:24:08:2f:b3:24:63:41:1b:54:22:a2:d7:e3:54:d7:90: 8c:d2:58:50:1a:39:d4:67:4e:f2:64:3c:bd:20:b4:1f:01:4d: 82:22:b9:87:2b:9d:d7:b2:62:77:0a:71:46:01:43:99:c6:75: ed:29:f2:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hppYE3yzrFyfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk ZjA2ZmZiY2QtNTIwZS00YTg3LWFhMDgtZmQyYzYwZmY1MDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG7UdfHROWVaJmjtn/0yxWiWOUWfdDrQO88V 2VMVQhLAlYly7ooRVT7YovvQCfSyeBXDQyEBnWV7kI2oN9EMgoVpS/2KojHNQUVt PueWdppqqzhgcWXvmLmnGp2wSddwuSrxxUJ9z+Cym7O6axqPoXo/J10uNwjTjd1X xUBMAMo7zSUnTAOVvzA1KVsKl/PLCHDN3tky/4R3xFhD9sFMVt8hfB2y1T4P+ujX q8sqyUaH2iXvwD+wpOoUaYQ1fzFzTL2oxbDApr8aXOOVLewSkdwWNqBYvBXoDQKD lz4A4BS2rcqVhopcu7w/Mpg3BVTzz0JVirUEXm88GtwsHjyrBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWszuOe5C93D1COZAp8Z+JlPi3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMzRjZjQ1NDUtNzM3Ny0z NjA0LWJmYjktMTVmZThkZTg4YjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSmvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdBuesBoy77psR6t9GVgbiKWzRsq+vykNT3iX77E/xsriz//dSRRdIJ Prk4T/FxX2UGM0HhRqskqRsXF1ftGYy9ydPjKsHNpUtF0DhM3jeWCrBkwGXn5q38 ukoHX/OaQIdRu3XfdEBQ1QaFlXVEKAyOIB7zmDeVxhSlH51IWauyn25MF/MJZpkb YjuTLfqYXYfHNsV79ZaQ98w0EZRKg2L9sfFGYNzCE0LxgCVVUGYOd6lo0AdP/8gd daCQD8TOAWjdjMnijtv6JAgvsyRjQRtUIqLX41TXkIzSWFAaOdRnTvJkPL0gtB8B TYIiuYcrndeyYncKcUYBQ5nGde0p8tQ= -----END CERTIFICATE-----Generated at Mon Oct 20 05:04:26 2025 by rpki-client