$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa File: d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa (raw, json) Hash identifier: ZY2OPoiiJY7CJfPhKKsxMXqLuqGxv0ImfJkoUGzNvw0= Subject key identifier: 5A:4D:33:55:27:9A:B0:E3:02:3D:79:CC:FF:E0:56:71:2C:8F:32:C2 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858491D717D08F6F6859D0250BA00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 2914 IP address blocks: 129.250.63.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:7d:08:f6:f6:85:9d:02:50:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=f340c494-0fad-4776-bc00-3236b14dc2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:79:79:d7:35:a7:3c:2b:b3:7b:2c:9f:13:d4: 47:22:d6:ac:25:77:1f:55:4d:c9:38:97:50:f4:68: 0d:59:28:a6:ed:0f:a8:d3:73:f4:0d:a0:0b:7a:38: c2:53:9c:c0:fe:84:ed:77:3f:33:b3:79:37:a0:82: 63:52:a6:71:53:16:2e:df:e9:c6:3f:cc:37:47:6d: 43:3b:a8:99:4c:46:46:5b:71:fb:f1:4f:7e:fb:09: 38:59:48:8b:e7:9f:0c:52:42:8e:ea:50:e3:14:fe: 46:48:86:05:9a:5a:a8:dc:a8:0c:da:2b:6a:25:97: b3:27:5a:3c:05:b7:07:53:75:4e:b1:18:c4:77:db: e3:5b:db:64:e4:2f:96:66:46:e7:5b:ff:38:3c:8a: 19:74:2d:ab:bb:b2:ef:f9:85:e0:63:bb:86:d2:28: 02:e3:69:ee:22:05:66:e3:35:a9:9c:18:0e:7a:47: 99:29:db:99:61:78:db:fc:80:d6:27:c9:69:9f:32: cf:7c:cb:49:dc:7f:a1:aa:ce:72:4b:ee:be:82:3d: da:fb:04:6a:af:cf:c7:57:3e:5f:68:d0:d6:ba:24: bb:d7:9c:6c:88:26:b2:c9:49:38:a4:57:cc:5c:24: f2:ce:32:42:11:a9:d4:30:28:4f:0e:5c:25:03:7f: bb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4D:33:55:27:9A:B0:E3:02:3D:79:CC:FF:E0:56:71:2C:8F:32:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:8e:4a:7b:4d:82:b3:59:42:6b:eb:27:f4:c8:f3:bd:6e:2c: 17:1b:37:96:d9:66:f7:f3:f1:e9:be:74:ae:37:a3:0b:b8:36: 0d:4a:23:97:2b:6e:df:de:6a:17:aa:33:f5:06:25:3f:78:f2: f3:6d:69:61:9e:f0:e8:c5:78:f1:28:66:87:d0:bf:61:7a:c2: 26:92:14:46:7f:7a:02:4b:a5:83:ab:d5:30:74:bf:62:30:b3: 85:90:fc:2a:84:25:bc:06:97:a4:d8:b2:7b:25:75:e4:51:ab: 54:71:95:1d:66:dc:a9:8f:76:6d:12:48:a8:16:e7:6e:73:4e: 96:0e:9e:4f:bc:b2:2b:cd:25:ec:9d:de:a9:5c:a1:e8:96:be: ac:6c:82:94:0a:de:ba:95:b2:51:65:11:23:d3:48:7b:b8:15: 2e:ff:13:dc:5c:79:fb:91:57:5f:96:ff:ac:fb:03:33:38:81: d4:2f:18:8f:a4:59:41:b3:a5:b3:7e:9c:4b:6e:6b:99:ab:c8: 5a:1e:89:f7:37:b7:10:58:a7:15:e4:cb:fb:e5:af:64:60:53: e0:e7:d1:86:a4:85:7e:e8:a3:74:71:1b:1a:fa:ed:35:65:ba: e8:d0:b0:b8:ab:60:79:9e:09:e1:4e:b9:93:ee:b2:82:85:a4: 80:32:f8:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcX0I9vaFnQJQugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZjM0MGM0OTQtMGZhZC00Nzc2LWJjMDAtMzIzNmIxNGRjMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnl51zWnPCuzeyyfE9RHItasJXcfVU3JOJdQ 9GgNWSim7Q+o03P0DaALejjCU5zA/oTtdz8zs3k3oIJjUqZxUxYu3+nGP8w3R21D O6iZTEZGW3H78U9++wk4WUiL558MUkKO6lDjFP5GSIYFmlqo3KgM2itqJZezJ1o8 BbcHU3VOsRjEd9vjW9tk5C+WZkbnW/84PIoZdC2ru7Lv+YXgY7uG0igC42nuIgVm 4zWpnBgOekeZKduZYXjb/IDWJ8lpnzLPfMtJ3H+hqs5yS+6+gj3a+wRqr8/HVz5f aNDWuiS715xsiCayyUk4pFfMXCTyzjJCEanUMChPDlwlA3+7iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpNM1UnmrDjAj15zP/gVnEsjzLCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDgwMGYzNzQtZGM4Zi0z OWVmLWFlMzAtZmM4YzJiYWViMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgfo/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCOSntNgrNZQmvrJ/TI871uLBcbN5bZZvfz8em+dK43owu4Ng1KI5cr bt/eaheqM/UGJT948vNtaWGe8OjFePEoZofQv2F6wiaSFEZ/egJLpYOr1TB0v2Iw s4WQ/CqEJbwGl6TYsnsldeRRq1RxlR1m3KmPdm0SSKgW525zTpYOnk+8sivNJeyd 3qlcoeiWvqxsgpQK3rqVslFlESPTSHu4FS7/E9xcefuRV1+W/6z7AzM4gdQvGI+k WUGzpbN+nEtua5mryFoeifc3txBYpxXky/vlr2RgU+Dn0YakhX7oo3RxGxr67TVl uujQsLirYHmeCeFOuZPusoKFpIAy+AA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:03:04 2025 by rpki-client