$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aad4443-6edd-32c1-a02e-69bfb2c56f8b.roa File: 6aad4443-6edd-32c1-a02e-69bfb2c56f8b.roa (raw, json) Hash identifier: D981VWCM6CR8cyAX+WGiXqQFVdEdmJiEFg350E/EfD0= Subject key identifier: C8:28:42:CF:9F:E7:E2:0D:76:75:68:9E:3E:4E:61:41:F5:D1:35:9A Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584917DC36ABD2543690A07091A0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aad4443-6edd-32c1-a02e-69bfb2c56f8b.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 1225 IP address blocks: 129.250.38.192/27 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:36:ab:d2:54:36:90:a0:70:91:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=0051f1e9-77aa-4035-b96e-1b12b671317b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:10:f6:90:4c:8c:2f:1a:ac:96:c9:55:29:71: 2a:d2:0c:b6:7a:f4:b0:80:4d:e5:1b:1a:9f:64:c0: ff:62:d6:4a:03:c4:92:db:e7:ab:85:5d:e5:4a:6b: 94:53:36:3d:4a:e1:1d:d7:f7:95:ff:aa:4b:87:e8: 1a:11:5c:f8:52:2f:c4:43:ea:be:e4:56:f6:85:dd: ab:86:c2:98:e3:93:e1:b0:d8:02:a7:b9:c4:51:30: 36:a8:66:7c:94:37:09:37:bf:d5:31:e0:3c:1a:6f: d5:f5:a1:11:56:cf:bf:bc:38:0c:7a:05:d5:32:4f: 03:ae:cb:98:1c:d3:5e:ca:e0:94:7d:ff:4c:0a:57: aa:93:16:e6:d3:0e:1f:62:bd:02:b0:58:dc:e7:9b: 28:16:37:54:04:50:30:5c:68:21:b5:bc:91:fb:17: a0:db:76:53:75:db:69:64:c9:d1:ed:6c:6c:dd:df: 49:5e:5c:bc:ff:f6:42:e2:83:c4:a0:88:bc:81:ff: cb:52:8f:46:e4:4d:ca:b6:53:78:5a:5f:41:da:a6: b2:65:29:b3:0e:ef:1b:bd:4b:57:d4:50:56:7b:5d: f0:22:35:56:e6:91:6a:50:a8:e1:80:9b:e9:d6:7f: d7:2d:66:8d:47:cd:3b:52:a1:b4:40:be:74:4b:79: 92:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:28:42:CF:9F:E7:E2:0D:76:75:68:9E:3E:4E:61:41:F5:D1:35:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aad4443-6edd-32c1-a02e-69bfb2c56f8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.38.192/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:d1:b3:2c:23:12:92:2d:8e:da:03:95:d4:ca:ac:2e:fd:18: 98:ce:93:d5:7e:49:b0:c5:7a:4c:6e:2a:f3:3d:59:a3:e7:48: ef:b4:69:dc:ae:1a:44:1e:02:3a:6c:f8:8b:87:56:c7:86:07: 5a:2b:ef:b6:33:88:f7:e5:6c:27:6c:7a:33:f0:ab:f0:8f:c4: 34:61:b8:76:4e:34:a2:d9:72:3f:ca:e9:61:1f:4b:2c:d2:12: ae:aa:bf:1b:0f:c1:ae:c9:49:31:77:1a:49:7f:25:fa:47:75: db:1e:28:a8:ea:27:71:39:85:fa:10:e4:24:87:71:d7:4b:ce: 90:dc:5c:63:16:11:c2:aa:db:ff:ad:82:43:a8:df:be:2a:60: f4:25:4b:d3:70:1e:b0:e0:35:e4:9b:40:50:77:95:e8:22:16: e7:94:48:f6:07:f4:7d:90:e5:05:71:84:c2:d5:40:d3:78:2c: 3e:11:40:29:d3:27:54:ae:4b:1c:fd:18:32:7b:bf:e9:27:ba: 6b:56:34:bf:aa:5e:a3:1b:37:1a:af:f4:e0:a2:e4:51:9a:e0: a5:d5:2a:22:2a:fe:aa:75:64:b8:32:63:6c:97:6f:b6:2f:45: 6f:59:b3:ad:28:0f:fa:04:68:91:9e:3a:ac:39:ba:6f:dd:5e: 3b:e4:07:8b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkX3Dar0lQ2kKBwkaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MDA1MWYxZTktNzdhYS00MDM1LWI5NmUtMWIxMmI2NzEzMTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihD2kEyMLxqslslVKXEq0gy2evSwgE3lGxqf ZMD/YtZKA8SS2+erhV3lSmuUUzY9SuEd1/eV/6pLh+gaEVz4Ui/EQ+q+5Fb2hd2r hsKY45PhsNgCp7nEUTA2qGZ8lDcJN7/VMeA8Gm/V9aERVs+/vDgMegXVMk8DrsuY HNNeyuCUff9MCleqkxbm0w4fYr0CsFjc55soFjdUBFAwXGghtbyR+xeg23ZTddtp ZMnR7Wxs3d9JXly8//ZC4oPEoIi8gf/LUo9G5E3KtlN4Wl9B2qayZSmzDu8bvUtX 1FBWe13wIjVW5pFqUKjhgJvp1n/XLWaNR807UqG0QL50S3mSdwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMgoQs+f5+INdnVonj5OYUH10TWaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNmFhZDQ0NDMtNmVkZC0z MmMxLWEwMmUtNjliZmIyYzU2ZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFgfomwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCM0bMsIxKSLY7aA5XUyqwu/RiYzpPVfkmwxXpMbirzPVmj50jvtGnc rhpEHgI6bPiLh1bHhgdaK++2M4j35WwnbHoz8Kvwj8Q0Ybh2TjSi2XI/yulhH0ss 0hKuqr8bD8GuyUkxdxpJfyX6R3XbHiio6idxOYX6EOQkh3HXS86Q3FxjFhHCqtv/ rYJDqN++KmD0JUvTcB6w4DXkm0BQd5XoIhbnlEj2B/R9kOUFcYTC1UDTeCw+EUAp 0ydUrksc/Rgye7/pJ7prVjS/ql6jGzcar/TgouRRmuCl1SoiKv6qdWS4MmNsl2+2 L0VvWbOtKA/6BGiRnjqsObpv3V475AeL -----END CERTIFICATE-----Generated at Sun Apr 27 13:03:18 2025 by rpki-client