$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa File: aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa (raw, json) Hash identifier: RTq3CCMf6hmInV+KJCmRqRS7eOQz4W6v1Y1d5nZuxm0= Subject key identifier: 8D:6E:F9:DF:8B:7E:EB:CA:CD:9D:CC:F4:53:28:A5:6D:DD:EA:C3:02 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B8BE21A4508B116535CA4AE80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 129.41.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:1a:45:08:b1:16:53:5c:a4:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=fecb5c93-38dc-4ade-824c-4463b4bbe202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:56:33:ac:e0:8b:42:1b:26:ea:2e:ed:0f:6f: 59:6f:b3:41:0b:8c:2c:b5:23:08:36:ca:8d:dd:6b: b0:82:31:84:7a:d4:f0:84:8b:33:e3:02:41:25:d2: 11:03:5d:7d:c8:99:9c:bd:c2:99:c8:b7:f2:e8:67: 95:0b:20:8b:68:f1:e4:3c:2c:cc:f5:d5:12:a7:eb: fe:07:1c:60:39:46:e5:96:ef:d8:0c:80:01:6a:c3: da:d5:11:1a:04:a5:37:79:d8:92:db:b9:81:da:04: 86:2a:76:72:f3:fd:1d:c0:72:81:27:3f:df:36:90: 58:fe:00:a7:f0:3b:6f:12:0f:14:fe:1c:56:3b:e4: 2a:49:7a:21:ca:1e:e6:2f:53:96:23:0c:ab:87:dc: 44:e7:2e:b6:d8:a2:2a:6a:85:f0:f5:15:a2:b5:64: 40:a6:60:c3:a8:31:6b:e1:d5:27:81:7d:fb:80:09: 8a:9d:c8:6d:d6:f4:4c:be:73:42:23:b1:81:57:55: f1:f2:b3:50:32:0e:8b:31:c8:77:91:4d:02:32:40: a1:23:0a:7c:1c:f4:62:df:fc:5c:80:a0:81:10:fa: 0f:80:f7:74:c9:9c:7a:8d:ec:22:73:52:9b:18:87: 07:dc:ae:02:dd:12:90:f4:11:dd:1e:ca:0a:ed:32: a3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6E:F9:DF:8B:7E:EB:CA:CD:9D:CC:F4:53:28:A5:6D:DD:EA:C3:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d4:46:96:bf:5d:c7:e7:90:17:78:ba:6b:ad:cf:ee:14:3a: 1e:fd:68:38:8b:f3:9d:ad:22:9e:fc:dd:0c:43:3b:6f:48:98: f7:fc:8f:f9:a7:a8:3e:12:d8:8f:98:92:b4:2e:d8:8c:19:a4: 43:e0:40:ee:c9:91:d6:7a:d8:3a:cb:86:09:20:7a:78:a5:e8: f5:57:ff:53:ae:69:b3:80:dd:02:e1:1a:4c:a6:6e:cc:8b:f7: ce:af:6a:cd:aa:1b:5d:12:e9:2a:01:52:fd:b0:17:e6:3c:8b: 8c:7d:8b:c3:97:f3:d5:78:5e:86:f7:f2:ef:df:74:7f:40:ec: 30:51:08:1e:39:50:ec:7a:25:88:49:20:ff:61:70:87:c2:5e: 03:0f:84:97:be:4a:75:51:5b:70:e2:c6:f7:57:40:c4:6c:9c: 61:f9:97:1e:b8:70:09:28:ad:7f:cf:a6:b7:46:75:54:84:87: 2e:3a:18:53:9b:0b:c9:05:2c:d9:77:52:e2:5e:c0:67:2d:45: 73:b5:55:27:ff:a7:98:94:82:34:e7:36:07:76:00:b5:c7:b7: e0:09:e7:1b:ef:74:0e:88:9e:8f:0d:8b:a6:87:69:03:45:a4: 8e:18:dd:16:e9:1e:da:42:39:48:bd:86:b9:48:aa:1f:37:6d: 14:06:73:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hpFCLEWU1ykroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk ZmVjYjVjOTMtMzhkYy00YWRlLTgyNGMtNDQ2M2I0YmJlMjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlYzrOCLQhsm6i7tD29Zb7NBC4wstSMINsqN 3WuwgjGEetTwhIsz4wJBJdIRA119yJmcvcKZyLfy6GeVCyCLaPHkPCzM9dUSp+v+ BxxgOUbllu/YDIABasPa1REaBKU3ediS27mB2gSGKnZy8/0dwHKBJz/fNpBY/gCn 8DtvEg8U/hxWO+QqSXohyh7mL1OWIwyrh9xE5y622KIqaoXw9RWitWRApmDDqDFr 4dUngX37gAmKncht1vRMvnNCI7GBV1Xx8rNQMg6LMch3kU0CMkChIwp8HPRi3/xc gKCBEPoPgPd0yZx6jewic1KbGIcH3K4C3RKQ9BHdHsoK7TKjfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1u+d+LfuvKzZ3M9FMopW3d6sMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYWViMzk5MGItNWQ0OS0z OTY1LTkxZGEtOWJjYzhlNWY3ZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLURpa/XcfnkBd4umutz+4UOh79aDiL852tIp783QxDO29ImPf8j/mn qD4S2I+YkrQu2IwZpEPgQO7JkdZ62DrLhgkgenil6PVX/1OuabOA3QLhGkymbsyL 986vas2qG10S6SoBUv2wF+Y8i4x9i8OX89V4Xob38u/fdH9A7DBRCB45UOx6JYhJ IP9hcIfCXgMPhJe+SnVRW3DixvdXQMRsnGH5lx64cAkorX/PprdGdVSEhy46GFOb C8kFLNl3UuJewGctRXO1VSf/p5iUgjTnNgd2ALXHt+AJ5xvvdA6Ino8Ni6aHaQNF pI4Y3RbpHtpCOUi9hrlIqh83bRQGc1w= -----END CERTIFICATE-----Generated at Mon Oct 20 07:50:01 2025 by rpki-client