$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa File: 0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa (raw, json) Hash identifier: XY0349h6LXCATK4g9WesLx+NppwgLN4S7Eonkbn40HU= Subject key identifier: 99:E8:45:1E:F5:B2:54:FC:CE:C6:B6:70:81:25:5E:68:6A:DE:51:A9 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849F7152370EF9A55AA28D8BA80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 1225 IP address blocks: 129.250.35.248/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:23:70:ef:9a:55:aa:28:d8:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=d5e7f995-e417-471c-a85c-02dd23f91bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:77:f6:38:d6:39:73:84:a6:c4:9f:38:14:31: 07:26:c5:b1:1f:3c:d1:a2:df:72:ee:4d:88:b5:d7: b1:8e:e2:41:88:53:92:f7:f9:ef:56:59:8b:c5:89: 2b:6b:1c:73:96:d8:e2:5d:61:d5:78:38:f4:1d:fd: 08:23:5f:a9:34:a8:d2:9b:76:06:5c:6e:72:17:e1: a3:dc:7a:9d:33:d4:44:7f:90:a5:13:98:84:04:08: 37:22:b6:c7:7c:4a:87:55:89:de:a4:70:42:e2:fd: 55:b9:d9:30:e9:d7:74:0d:60:e2:c9:53:1e:a0:11: d3:d7:ed:08:ca:d2:87:98:0c:66:40:54:3f:ec:45: 81:ec:83:45:05:f3:79:16:e1:11:93:3e:e9:08:82: 7f:57:fb:5c:67:2e:ab:33:56:f9:34:83:15:4d:e6: 14:47:7b:c9:7e:fe:db:87:93:b2:31:ae:fc:5d:fb: 1c:4b:c6:cf:8e:01:25:28:16:75:fb:8f:4c:b0:a2: e9:ba:90:67:bf:1b:b9:4e:7d:8e:67:a9:15:88:3b: f5:36:d9:2b:93:23:f6:fc:61:39:c1:da:e5:53:97: d7:92:de:e5:83:38:f3:5f:f7:ba:b3:56:c2:11:3f: ee:a1:a8:c4:88:78:f7:a4:81:ad:9a:83:a4:a5:9a: b9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E8:45:1E:F5:B2:54:FC:CE:C6:B6:70:81:25:5E:68:6A:DE:51:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.248/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:90:f5:03:d6:16:cd:24:23:75:67:0b:2b:f4:4b:9b:80:2a: 13:bd:74:ac:38:d7:a7:3c:d6:e1:2c:f8:c1:39:20:56:b0:3c: 62:a7:c0:e3:0b:5d:e9:79:e9:15:fc:e2:bd:66:4e:73:a9:bd: 67:63:6d:87:2d:f7:aa:19:96:2f:3c:af:e0:17:0f:19:25:a3: 9e:73:03:6f:e9:ec:cb:9a:12:cb:53:9f:60:94:f8:b4:b8:49: 66:20:e0:96:2a:25:0a:61:14:d0:96:5e:1e:9a:b6:4f:bf:3b: f1:38:32:b7:e5:a1:6c:e8:2f:d1:9a:27:27:4d:7d:90:3e:5c: 28:79:d0:1d:73:dd:a1:7b:3e:94:5a:c1:cd:6e:b6:1d:fd:d9: 4d:fd:17:29:62:d1:3c:4f:92:19:b0:8a:0a:06:f5:9c:45:e7: 95:5b:b7:6c:b6:e3:5f:05:97:03:0e:a0:73:82:bd:66:7b:f9: 05:30:16:4f:f1:56:2f:93:40:2a:03:d5:40:f6:54:7d:df:cd: bc:19:d4:4a:75:f7:ce:2f:1f:bb:d5:98:9f:27:82:94:bf:4d: c2:d8:86:b2:90:8c:d1:d2:d0:7b:97:6f:41:22:3a:39:e4:e1: 25:44:e7:75:6a:18:51:f8:3e:13:0f:f3:35:1f:d1:b0:13:e6: 7b:5d:26:49 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn3FSNw75pVqijYuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk ZDVlN2Y5OTUtZTQxNy00NzFjLWE4NWMtMDJkZDIzZjkxYmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXf2ONY5c4SmxJ84FDEHJsWxHzzRot9y7k2I tdexjuJBiFOS9/nvVlmLxYkraxxzltjiXWHVeDj0Hf0II1+pNKjSm3YGXG5yF+Gj 3HqdM9REf5ClE5iEBAg3IrbHfEqHVYnepHBC4v1Vudkw6dd0DWDiyVMeoBHT1+0I ytKHmAxmQFQ/7EWB7INFBfN5FuERkz7pCIJ/V/tcZy6rM1b5NIMVTeYUR3vJfv7b h5OyMa78XfscS8bPjgElKBZ1+49MsKLpupBnvxu5Tn2OZ6kViDv1NtkrkyP2/GE5 wdrlU5fXkt7lgzjzX/e6s1bCET/uoajEiHj3pIGtmoOkpZq5lwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJnoRR71slT8zsa2cIElXmhq3lGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGNiZjcwYWEtN2JiOS0z ZDczLWIxMmUtZjAyYTczZjA4MTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDgfoj+DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDBkPUD1hbNJCN1Zwsr9EubgCoTvXSsONenPNbhLPjBOSBWsDxip8Dj C13peekV/OK9Zk5zqb1nY22HLfeqGZYvPK/gFw8ZJaOecwNv6ezLmhLLU59glPi0 uElmIOCWKiUKYRTQll4emrZPvzvxODK35aFs6C/RmicnTX2QPlwoedAdc92hez6U WsHNbrYd/dlN/RcpYtE8T5IZsIoKBvWcReeVW7dstuNfBZcDDqBzgr1me/kFMBZP 8VYvk0AqA9VA9lR93828GdRKdffOLx+71ZifJ4KUv03C2IaykIzR0tB7l29BIjo5 5OElROd1ahhR+D4TD/M1H9GwE+Z7XSZJ -----END CERTIFICATE-----Generated at Sun Jun 15 16:05:09 2025 by rpki-client