$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b091665b-9f2c-3e1e-abd7-b5073bcef442.roa File: b091665b-9f2c-3e1e-abd7-b5073bcef442.roa (raw, json) Hash identifier: 83CZ4+LGJABV0pp+jS/DPogDrQGs2CB2N8Ou1XVyGEo= Subject key identifier: B9:3C:13:11:B2:BE:28:F0:B7:F5:C2:D0:F7:F3:F2:CE:4A:0B:EF:48 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584AC2E0DD9AE36D52CDD3D56BF8 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b091665b-9f2c-3e1e-abd7-b5073bcef442.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 129.33.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:dd:9a:e3:6d:52:cd:d3:d5:6b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=0d5fefe1-9b6f-462b-977d-05cca2abe9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:f7:1d:65:13:41:a4:2e:16:c4:b1:43:50: 9a:6d:15:1c:54:84:0b:3a:08:a4:9c:dd:bc:41:8e: dd:ce:56:52:94:28:24:80:56:97:88:55:0a:7e:00: 5c:87:49:9e:f3:76:37:2b:99:12:97:e8:92:52:3c: cc:71:46:ae:71:57:96:11:6e:25:e6:7e:51:5f:bd: cc:af:e1:25:8a:04:48:d6:8e:90:5d:e5:44:1d:2c: c1:65:09:d8:06:64:d5:48:74:6b:ea:96:16:36:c1: 20:89:5f:07:13:c2:b1:ab:f3:89:b3:ed:d7:d1:aa: 4e:83:a9:bc:3e:31:5a:f7:0d:bc:36:4d:85:7e:7a: 74:54:69:37:70:7f:52:74:77:1a:96:54:ec:cc:4a: db:94:ab:85:ee:9a:f0:58:5b:93:d9:b7:a2:d2:be: ec:b9:5e:c5:98:ea:4b:23:4b:30:96:2b:45:76:23: e0:9f:32:01:cd:74:67:c4:7d:9a:83:04:f2:34:40: c9:26:ce:62:94:18:27:03:78:57:ac:a7:f0:2e:8f: 7b:a6:07:c6:0f:01:04:66:2d:a7:57:35:b4:a6:e2: 30:e2:a0:ac:3e:39:cb:97:9a:57:9d:4d:d7:9c:86: 05:ee:78:13:c3:15:af:4c:33:ce:2d:44:fa:0d:6f: d3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3C:13:11:B2:BE:28:F0:B7:F5:C2:D0:F7:F3:F2:CE:4A:0B:EF:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b091665b-9f2c-3e1e-abd7-b5073bcef442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:45:e1:ca:32:cb:d8:58:89:c1:41:ae:b6:38:b7:83:ef:d6: f4:76:4c:60:c4:68:9a:1f:a1:f4:80:0d:12:fd:f1:aa:c7:36: c8:1c:44:d4:ff:df:e6:7e:62:a2:02:1c:46:7f:87:aa:47:63: 8d:6d:11:a6:89:85:c8:d5:c5:63:4d:81:81:59:85:26:23:0d: 54:e8:6f:10:d5:26:f2:ed:d6:09:b1:af:ee:d5:4b:56:0f:8e: 77:f3:b0:5a:ed:5c:1b:93:ec:e9:99:41:56:e1:d9:d5:b1:bd: 65:a8:1e:d7:f3:63:27:bd:ae:db:d7:52:1a:2f:d8:46:ef:9c: 1e:16:03:b0:0f:d7:a0:e1:c7:d4:f4:53:b9:cb:15:85:ba:ae: 98:55:fa:18:31:84:fa:dc:26:fb:17:bb:87:32:04:85:68:cc: 64:20:8d:df:ac:8c:09:6e:99:e8:74:ce:7d:29:e8:cb:4d:2b: b2:db:19:ab:73:59:7c:77:08:d1:db:a1:82:3f:37:36:f9:60: d4:cf:a5:a5:3a:67:95:26:f6:c9:e9:61:df:22:44:08:2c:e1: a7:41:f6:a6:ec:17:d9:3e:c6:c1:86:2e:5c:06:cd:26:89:5b: a2:e7:50:74:0e:a9:f5:07:09:28:4f:d8:79:12:f8:94:f9:6f: fe:89:41:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4N2a421SzdPVa/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MGQ1ZmVmZTEtOWI2Zi00NjJiLTk3N2QtMDVjY2EyYWJlOWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryX3HWUTQaQuFsSxQ1CabRUcVIQLOgiknN28 QY7dzlZSlCgkgFaXiFUKfgBch0me83Y3K5kSl+iSUjzMcUaucVeWEW4l5n5RX73M r+EligRI1o6QXeVEHSzBZQnYBmTVSHRr6pYWNsEgiV8HE8Kxq/OJs+3X0apOg6m8 PjFa9w28Nk2Ffnp0VGk3cH9SdHcallTszErblKuF7prwWFuT2bei0r7suV7FmOpL I0swlitFdiPgnzIBzXRnxH2agwTyNEDJJs5ilBgnA3hXrKfwLo97pgfGDwEEZi2n VzW0puIw4qCsPjnLl5pXnU3XnIYF7ngTwxWvTDPOLUT6DW/TUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLk8ExGyvijwt/XC0Pfz8s5KC+9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYjA5MTY2NWItOWYyYy0z ZTFlLWFiZDctYjUwNzNiY2VmNDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgSGKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApF4coyy9hYicFBrrY4t4Pv1vR2TGDEaJofofSADRL98arHNsgcRNT/ 3+Z+YqICHEZ/h6pHY41tEaaJhcjVxWNNgYFZhSYjDVTobxDVJvLt1gmxr+7VS1YP jnfzsFrtXBuT7OmZQVbh2dWxvWWoHtfzYye9rtvXUhov2EbvnB4WA7AP16Dhx9T0 U7nLFYW6rphV+hgxhPrcJvsXu4cyBIVozGQgjd+sjAlumeh0zn0p6MtNK7LbGatz WXx3CNHboYI/Nzb5YNTPpaU6Z5Um9snpYd8iRAgs4adB9qbsF9k+xsGGLlwGzSaJ W6LnUHQOqfUHCShP2HkS+JT5b/6JQbc= -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:04 2025 by rpki-client