$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a3d64299-88e0-30b0-86eb-d53a0c17e673.roa File: a3d64299-88e0-30b0-86eb-d53a0c17e673.roa (raw, json) Hash identifier: XvdulhrmQo1DVyZ6gwOt5fpe5i1S0Q086ciuS4RNlVo= Subject key identifier: 0F:1A:CD:77:81:22:61:46:E6:D4:60:89:E4:A0:F6:0B:94:26:A4:2D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A25A9A570E233522D0A671080 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a3d64299-88e0-30b0-86eb-d53a0c17e673.roa Signing time: Tue 10 Jun 2025 17:27:29 +0000 ROA not before: Tue 10 Jun 2025 17:27:29 +0000 ROA not after: Mon 08 Sep 2025 17:27:29 +0000 asID: 3939 IP address blocks: 129.250.15.160/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:25:a9:a5:70:e2:33:52:2d:0a:67:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 10 17:27:29 2025 GMT Not After : Sep 8 17:27:29 2025 GMT Subject: CN=d29e0015-f7fd-4e1c-b82b-c7e66c698864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1f:d2:45:42:f7:ee:39:52:31:63:f6:fc:27: 91:69:8a:7b:a3:9b:cb:24:d0:e8:f0:2f:61:24:83: 64:27:00:be:d2:d4:18:c0:5d:c0:03:f8:1c:fd:b7: c1:3e:24:e3:b8:d8:c7:45:b4:7e:2f:7d:dc:da:6e: 5a:80:cb:84:8d:14:58:70:06:5d:f1:bc:fa:ea:be: 90:ed:6e:4b:fc:81:c8:6b:2d:4c:5e:f1:dd:a5:03: 53:47:b6:b7:25:d5:9f:fe:96:b7:07:09:8c:f1:4d: ff:39:9e:4c:e0:cb:b8:2a:e0:29:ed:78:33:3c:2d: 06:00:6c:e1:83:4b:53:36:4f:c6:4b:a1:6b:02:04: 13:30:66:9f:f8:44:bb:88:59:4f:ae:d6:ab:9f:07: 7c:ca:dc:85:4f:83:25:d6:e7:56:6b:ef:82:1c:16: 30:9a:f2:a0:86:c7:c3:e0:ae:f8:44:7e:3b:c9:c2: 3c:4b:66:91:e0:06:4f:68:a1:21:93:76:4f:b4:34: a3:c6:49:2f:85:25:a7:05:2f:74:fe:c0:71:2c:8e: fc:fa:0f:f2:f1:b4:d2:f7:45:ec:6d:32:d3:35:b3: ac:0d:0d:99:72:ba:50:45:b1:a0:66:32:75:97:b7: 2f:45:ae:1d:82:27:32:68:b9:72:fe:a6:ab:9c:15: 35:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1A:CD:77:81:22:61:46:E6:D4:60:89:E4:A0:F6:0B:94:26:A4:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a3d64299-88e0-30b0-86eb-d53a0c17e673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.15.160/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:66:00:1f:d0:27:4b:b3:75:d3:21:2f:37:10:e9:62:93:c5: 11:69:17:50:59:ec:13:81:93:db:1c:aa:d6:a5:82:c0:ed:3a: 31:70:08:11:76:bb:37:ab:fd:cb:4f:ef:d5:36:73:15:1f:44: 26:da:e1:4e:0a:32:27:6b:90:91:d9:dc:5c:9b:33:73:16:b1: 39:95:82:05:f1:6e:ab:58:c9:05:43:b5:de:ad:f8:8e:a6:ba: ce:01:1b:a9:a9:3d:ad:ad:0f:f3:59:f2:96:f5:b1:fa:bb:d1: e6:f9:78:73:e6:31:37:d4:a3:02:33:c1:b6:2b:f0:06:0b:80: 91:4b:e3:f6:4e:2d:dc:b8:c1:0a:22:d1:7a:03:dd:4a:82:10: d0:3c:8a:59:3c:46:4e:b2:27:bb:6b:0a:d7:bb:b8:1e:45:9a: 0f:53:2d:a4:30:35:02:98:65:95:dc:49:ad:b3:e7:2e:15:d3: 4e:78:a9:d3:73:89:c0:db:13:cf:5b:23:9f:6a:de:cb:c0:06: 25:fd:3e:db:3d:72:1d:a6:21:61:50:e9:39:bd:8e:e3:28:a6: ac:cc:24:85:58:d6:6a:cf:0e:f9:b8:d4:d7:d0:87:d4:48:11: bf:da:22:b9:82:38:31:54:d7:69:9d:b3:f1:93:aa:5c:18:7d: ce:8e:e7:01 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEolqaVw4jNSLQpnEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYxMDE3MjcyOVoXDTI1MDkwODE3MjcyOVowLzEtMCsGA1UEAxMk ZDI5ZTAwMTUtZjdmZC00ZTFjLWI4MmItYzdlNjZjNjk4ODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih/SRUL37jlSMWP2/CeRaYp7o5vLJNDo8C9h JINkJwC+0tQYwF3AA/gc/bfBPiTjuNjHRbR+L33c2m5agMuEjRRYcAZd8bz66r6Q 7W5L/IHIay1MXvHdpQNTR7a3JdWf/pa3BwmM8U3/OZ5M4Mu4KuAp7XgzPC0GAGzh g0tTNk/GS6FrAgQTMGaf+ES7iFlPrtarnwd8ytyFT4Ml1udWa++CHBYwmvKghsfD 4K74RH47ycI8S2aR4AZPaKEhk3ZPtDSjxkkvhSWnBS90/sBxLI78+g/y8bTS90Xs bTLTNbOsDQ2ZcrpQRbGgZjJ1l7cvRa4dgicyaLly/qarnBU1qwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFA8azXeBImFG5tRgieSg9guUJqQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTNkNjQyOTktODhlMC0z MGIwLTg2ZWItZDUzYTBjMTdlNjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFgfoPoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBPZgAf0CdLs3XTIS83EOlik8URaRdQWewTgZPbHKrWpYLA7ToxcAgR drs3q/3LT+/VNnMVH0Qm2uFOCjIna5CR2dxcmzNzFrE5lYIF8W6rWMkFQ7XerfiO prrOARupqT2trQ/zWfKW9bH6u9Hm+Xhz5jE31KMCM8G2K/AGC4CRS+P2Ti3cuMEK ItF6A91KghDQPIpZPEZOsie7awrXu7geRZoPUy2kMDUCmGWV3Emts+cuFdNOeKnT c4nA2xPPWyOfat7LwAYl/T7bPXIdpiFhUOk5vY7jKKaszCSFWNZqzw75uNTX0IfU SBG/2iK5gjgxVNdpnbPxk6pcGH3OjucB -----END CERTIFICATE-----Generated at Sun Jun 15 17:29:35 2025 by rpki-client