$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b972c047-2afd-30a4-a40b-2b850202cf41.roa File: b972c047-2afd-30a4-a40b-2b850202cf41.roa (raw, json) Hash identifier: Sz8BbQNCst0n55k/XsjtBByhtAb7jajuk491Dy9DKBM= Subject key identifier: AC:8D:9E:E8:80:85:96:17:D5:70:67:72:12:D7:48:56:65:33:8B:AF Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577 Certificate serial: 010D0C9F43285849A1EF6FFC927F87B157DE2D80 Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b972c047-2afd-30a4-a40b-2b850202cf41.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 14593 IP address blocks: 135.129.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:6f:fc:92:7f:87:b1:57:de:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=1da39b12-776b-4aa2-8ca2-33d348bdc40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:74:19:74:17:f1:9b:4b:88:7c:5e:7c:6a:da: 88:2f:67:ff:5e:ad:91:f8:ae:68:e7:df:a6:d7:5f: 12:ab:37:b7:3b:76:fd:a7:1a:51:c6:e6:b7:06:7a: 37:bd:78:30:38:d6:0d:3f:62:43:43:97:40:74:a4: f3:4d:6e:8e:db:26:00:91:ee:09:a7:aa:d6:ab:a8: 14:67:84:b9:54:fa:15:13:7f:02:45:9f:c6:7a:9b: 16:16:4b:08:eb:8e:20:85:3b:31:c5:5a:a7:2e:45: b0:8a:2e:10:db:16:ca:87:1e:ae:0f:7e:93:93:a3: 31:15:ec:14:83:82:5f:c1:d9:30:7c:9a:57:b7:ad: e0:1a:b8:8b:cc:02:a5:2c:83:55:53:63:92:12:bc: 0f:00:f5:6e:c8:11:0a:34:68:c3:01:0c:eb:29:7c: 33:be:38:9b:35:0a:40:e4:0a:81:0b:d4:37:ac:24: 6d:b9:db:9f:f4:9f:71:f8:ea:eb:51:e8:94:15:09: bc:c7:3f:ea:ad:87:47:c1:5b:fe:93:9b:c6:a8:de: 60:24:9c:2b:c8:12:bd:48:f2:4c:b5:70:74:eb:3a: 46:65:2f:d9:78:1e:2a:c0:7c:02:e0:0e:6f:8c:0f: a0:b2:e1:53:f2:dd:55:3b:0e:d1:6f:36:1f:d3:d0: 79:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8D:9E:E8:80:85:96:17:D5:70:67:72:12:D7:48:56:65:33:8B:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b972c047-2afd-30a4-a40b-2b850202cf41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl X509v3 Authority Key Identifier: keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer sbgp-ipAddrBlock: critical IPv4: 135.129.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:17:1a:b4:ce:4f:20:76:10:ad:1a:78:26:97:20:25:31:bc: 20:f3:bb:73:2e:a0:a9:e3:fd:a7:8e:fe:65:e3:1d:c9:76:aa: 40:bc:07:e8:dc:dd:2a:98:b6:4e:77:d8:0d:5e:7e:3f:7f:1e: df:cd:30:c4:5c:49:45:09:68:fe:f2:b0:08:74:29:ce:26:94: 24:fb:8b:85:ba:b5:6b:dc:d7:29:23:47:d8:8d:d2:2b:82:0b: 6a:0a:2b:3e:e0:5c:76:f0:af:d3:69:6e:ba:a8:ed:20:3d:ef: dd:50:3e:88:5b:eb:0d:07:16:da:a6:da:a0:49:14:38:d1:ee: 13:b0:9c:10:46:ec:ea:35:bb:ef:5b:9a:7a:47:32:7b:bc:3f: 34:ce:90:b1:1f:99:b2:9f:7b:58:12:1b:3c:e8:3e:bf:dd:88: e3:e9:d9:2c:de:61:6b:d5:12:05:24:e4:63:78:07:55:7e:0c: 38:ca:f2:38:32:c6:4c:ca:55:64:16:eb:8a:20:11:e8:de:14: fc:02:ce:2e:5e:90:fd:22:b9:d1:78:8c:c7:00:2b:1e:1d:ff: 01:91:6d:a2:4e:15:e4:6f:fa:9a:a5:fb:56:11:81:9b:fc:72: c0:b6:ab:12:a1:31:1d:7f:68:43:91:59:1b:f7:cd:38:2e:cd: 64:71:6c:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh72/8kn+HsVfeLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi NTc3MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MWRhMzliMTItNzc2Yi00YWEyLThjYTItMzNkMzQ4YmRjNDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3QZdBfxm0uIfF58atqIL2f/Xq2R+K5o59+m 118Sqze3O3b9pxpRxua3Bno3vXgwONYNP2JDQ5dAdKTzTW6O2yYAke4Jp6rWq6gU Z4S5VPoVE38CRZ/GepsWFksI644ghTsxxVqnLkWwii4Q2xbKhx6uD36Tk6MxFewU g4JfwdkwfJpXt63gGriLzAKlLINVU2OSErwPAPVuyBEKNGjDAQzrKXwzvjibNQpA 5AqBC9Q3rCRtuduf9J9x+OrrUeiUFQm8xz/qrYdHwVv+k5vGqN5gJJwryBK9SPJM tXB06zpGZS/ZeB4qwHwC4A5vjA+gsuFT8t1VOw7RbzYf09B5dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyNnuiAhZYX1XBnchLXSFZlM4uvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2 OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvYjk3MmMwNDctMmFmZC0z MGE0LWE0MGItMmI4NTAyMDJjZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5 ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3 YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEh4HwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0XGrTOTyB2EK0aeCaXICUxvCDzu3MuoKnj/aeO/mXjHcl2qkC8B+jc 3SqYtk532A1efj9/Ht/NMMRcSUUJaP7ysAh0Kc4mlCT7i4W6tWvc1ykjR9iN0iuC C2oKKz7gXHbwr9Npbrqo7SA9791QPohb6w0HFtqm2qBJFDjR7hOwnBBG7Oo1u+9b mnpHMnu8PzTOkLEfmbKfe1gSGzzoPr/diOPp2SzeYWvVEgUk5GN4B1V+DDjK8jgy xkzKVWQW64ogEejeFPwCzi5ekP0iudF4jMcAKx4d/wGRbaJOFeRv+pql+1YRgZv8 csC2qxKhMR1/aEORWRv3zTguzWRxbD8= -----END CERTIFICATE-----Generated at Tue Apr 29 07:46:58 2025 by rpki-client