$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b16f2e13-ee7f-3cce-82c9-db1b36e21e63.roa File: b16f2e13-ee7f-3cce-82c9-db1b36e21e63.roa (raw, json) Hash identifier: oBhpGKlKKUyjhpErcuD7j56qQ9yP7ZwXQigtq+xdGKQ= Subject key identifier: CD:5F:D3:A7:F5:00:77:A1:FF:35:ED:A6:EF:E5:35:43:2D:C1:AA:94 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A25AA7707E011AA6EB02DE1C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b16f2e13-ee7f-3cce-82c9-db1b36e21e63.roa Signing time: Tue 10 Jun 2025 17:29:08 +0000 ROA not before: Tue 10 Jun 2025 17:29:08 +0000 ROA not after: Mon 08 Sep 2025 17:29:08 +0000 asID: 3939 IP address blocks: 129.250.35.112/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:25:aa:77:07:e0:11:aa:6e:b0:2d:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 10 17:29:08 2025 GMT Not After : Sep 8 17:29:08 2025 GMT Subject: CN=5f8551bc-bc08-491a-836b-1bbaacecb5cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e0:98:4f:3d:01:d8:95:2a:de:90:32:5f:29: eb:ea:c6:6d:ff:23:74:8c:9d:13:fb:82:89:39:16: 4b:77:72:b0:5b:58:ae:e6:ec:9a:0e:97:b8:3f:84: 5c:10:78:70:5c:48:4b:b4:2f:64:06:c0:c5:1e:76: 61:51:a7:ae:c3:73:31:18:73:aa:99:32:3a:93:f5: 27:89:cd:bd:22:d4:b8:83:fa:46:bf:a6:34:52:a9: 32:d6:9d:9f:8e:48:93:7e:f5:c1:46:3d:ab:43:58: 25:1b:34:70:30:33:c0:15:6c:b5:a4:d7:e3:d3:b1: 21:84:71:e0:a7:6e:47:5a:22:42:88:c2:01:27:21: ab:b1:34:55:7d:8a:07:88:e8:38:13:2b:03:c0:09: c3:9a:0b:7c:80:9a:d8:54:0d:5d:07:f3:18:19:b5: ee:e4:7d:47:53:64:a2:4c:2f:76:5c:45:47:55:52: 04:89:d0:39:8e:d2:ab:88:f6:d6:34:b0:d2:47:bb: 9f:52:ea:6b:8a:ae:5d:44:e8:4a:e3:bb:aa:f4:57: f7:ab:b6:5d:b4:24:df:b7:6d:70:06:fd:cc:cd:3a: 76:5f:8c:69:ce:b0:0d:66:ca:0e:79:8a:a3:21:11: 6f:ab:8c:36:ec:78:63:9b:92:67:88:6d:ff:7b:5b: 05:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5F:D3:A7:F5:00:77:A1:FF:35:ED:A6:EF:E5:35:43:2D:C1:AA:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b16f2e13-ee7f-3cce-82c9-db1b36e21e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.112/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e5:a3:40:83:b7:1b:ce:ed:f5:8e:07:32:89:7f:db:93:32: dc:9e:38:be:aa:55:af:93:7c:d5:8b:ae:de:0f:de:7e:a0:7b: 7d:c6:73:1e:40:21:37:cd:db:89:6d:ad:19:65:85:b4:e2:ae: 87:f1:cf:17:6a:8d:0f:f4:bb:20:da:ae:0a:06:53:48:06:b9: ba:0f:b4:4b:b6:13:3c:ac:4b:2a:82:5a:26:11:6f:17:cc:9b: b0:84:98:79:19:41:79:19:cb:68:26:29:78:93:ac:6a:39:f1: be:a0:84:45:c4:cf:2f:1c:e9:ed:73:8e:5a:11:86:ff:4f:20: 2c:36:6a:cf:35:f8:87:55:1e:ba:f8:c7:c9:f4:cb:c6:ab:d7: 90:b1:df:29:df:2c:be:e9:42:ee:d5:d1:4c:37:9e:55:32:1d: 13:f6:a8:32:11:c8:fd:23:3b:a3:e9:93:8a:f8:2b:b4:be:d3: 29:58:b5:a5:a2:a2:f1:33:7e:e6:02:ef:df:01:a3:b7:84:0d: f8:1b:4f:9b:43:b7:e0:23:1f:06:2d:e5:24:60:46:96:fc:1f: a2:36:c7:44:cc:28:c7:21:2d:30:6e:58:45:2b:eb:ea:b0:66: c9:80:64:bf:85:61:95:87:7e:e2:10:d8:3a:ea:08:4f:5e:8b: a0:ef:15:26 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEolqncH4BGqbrAt4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYxMDE3MjkwOFoXDTI1MDkwODE3MjkwOFowLzEtMCsGA1UEAxMk NWY4NTUxYmMtYmMwOC00OTFhLTgzNmItMWJiYWFjZWNiNWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeCYTz0B2JUq3pAyXynr6sZt/yN0jJ0T+4KJ ORZLd3KwW1iu5uyaDpe4P4RcEHhwXEhLtC9kBsDFHnZhUaeuw3MxGHOqmTI6k/Un ic29ItS4g/pGv6Y0Uqky1p2fjkiTfvXBRj2rQ1glGzRwMDPAFWy1pNfj07EhhHHg p25HWiJCiMIBJyGrsTRVfYoHiOg4EysDwAnDmgt8gJrYVA1dB/MYGbXu5H1HU2Si TC92XEVHVVIEidA5jtKriPbWNLDSR7ufUupriq5dROhK47uq9Ff3q7ZdtCTft21w Bv3MzTp2X4xpzrANZsoOeYqjIRFvq4w27Hhjm5JniG3/e1sFpwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM1f06f1AHeh/zXtpu/lNUMtwaqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYjE2ZjJlMTMtZWU3Zi0z Y2NlLTgyYzktZGIxYjM2ZTIxZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfojcDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAb5aNAg7cbzu31jgcyiX/bkzLcnji+qlWvk3zVi67eD95+oHt9xnMe QCE3zduJba0ZZYW04q6H8c8Xao0P9Lsg2q4KBlNIBrm6D7RLthM8rEsqglomEW8X zJuwhJh5GUF5GctoJil4k6xqOfG+oIRFxM8vHOntc45aEYb/TyAsNmrPNfiHVR66 +MfJ9MvGq9eQsd8p3yy+6ULu1dFMN55VMh0T9qgyEcj9Izuj6ZOK+Cu0vtMpWLWl oqLxM37mAu/fAaO3hA34G0+bQ7fgIx8GLeUkYEaW/B+iNsdEzCjHIS0wblhFK+vq sGbJgGS/hWGVh37iENg66ghPXoug7xUm -----END CERTIFICATE-----Generated at Sun Jun 15 15:21:59 2025 by rpki-client