$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa File: fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa (raw, json) Hash identifier: gV5owjQBDIXCeOIT9kdDMSP7VPmHE0zljHLcutFo0Ik= Subject key identifier: C1:44:0D:7E:1B:8F:C7:BF:20:3F:B8:95:A4:BF:DD:3C:28:92:D6:AD Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849F71523635D37A18A50B3DA40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 1225 IP address blocks: 129.250.35.224/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:23:63:5d:37:a1:8a:50:b3:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=60d1a35a-af52-4d35-8da6-7101d815eb41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:3f:6b:10:b8:fb:49:f8:8b:7e:ad:d8:e8: ce:30:0d:26:24:18:d8:e2:24:ab:1d:9a:2e:9e:04: c6:8c:04:09:0a:45:69:bc:6d:f0:81:95:55:df:3c: 63:7e:5a:9e:e6:b3:ed:0b:96:eb:03:94:74:18:6c: 30:f1:72:e9:8e:65:3b:11:f4:b8:68:b1:c2:e9:38: c4:30:07:05:38:45:fa:6f:70:ac:3c:16:d1:e4:db: 05:d8:38:ae:6a:8a:06:75:0b:a5:2d:56:23:2b:db: 1f:18:14:2b:87:80:19:0f:22:a8:b5:f8:f9:29:18: e7:51:c5:20:d0:dc:cb:ed:a6:ad:a6:67:e7:0d:1a: d8:42:c4:c1:df:66:a5:4b:b5:71:c1:eb:40:71:b7: a6:d5:05:8d:a3:a3:8d:9c:35:38:0e:9e:3a:a4:8f: 2b:e8:96:43:13:36:7f:5e:e5:4b:b2:6a:02:92:3b: 46:35:85:a7:83:d4:01:a3:64:ed:8e:ec:1e:92:a0: 89:18:db:e8:26:4e:68:68:0d:ec:f4:03:bd:5f:ff: ab:f1:55:1e:92:b8:cf:d5:6a:36:7a:ba:02:98:cf: b4:d3:26:5a:ed:f4:10:1e:b7:ab:eb:b2:39:6e:df: cb:d6:e4:9c:93:fb:37:1d:36:df:e2:a2:e0:e8:57: d2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:44:0D:7E:1B:8F:C7:BF:20:3F:B8:95:A4:BF:DD:3C:28:92:D6:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.224/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:44:21:6d:23:31:0a:52:da:96:45:c2:45:29:fa:36:e4:7e: 2d:5e:92:7e:08:22:4b:30:89:70:db:76:27:58:91:9f:15:07: 26:88:ee:6c:31:80:86:dc:79:5a:4e:5c:d1:cf:0e:29:90:16: 14:d2:30:43:5a:f5:36:bd:46:5c:06:01:be:0f:5d:4f:e4:2a: 02:51:01:ad:41:d3:01:83:83:05:c4:ea:0e:ab:23:99:12:f1: a5:6c:27:76:39:c9:f7:a8:a6:a2:5c:80:79:20:b9:94:80:12: 92:66:b7:76:09:12:3d:e6:e9:7b:b0:6c:08:37:43:7a:04:5f: 35:fb:dc:fd:5c:93:2a:8e:71:4a:a7:89:9a:19:7a:85:a5:ef: 79:28:63:90:04:38:51:ce:10:b2:08:86:8f:2c:4b:5e:59:51: b7:2c:e8:a3:db:df:fd:0b:68:1f:6f:3f:76:7b:29:2c:7b:0f: 8c:84:08:e0:6f:1b:f8:0f:b3:1b:3a:51:25:45:d8:e3:04:8d: b6:cf:33:31:58:61:f6:60:c8:aa:a8:f3:c1:28:86:ad:13:59: 34:cd:6b:9a:c9:69:42:cf:89:ba:a2:f8:27:4c:df:55:c7:83: 8d:c3:5b:43:4a:e6:6c:ff:69:c8:8f:f0:2b:29:14:3f:4d:50: 82:3f:6a:81 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn3FSNjXTehilCz2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk NjBkMWEzNWEtYWY1Mi00ZDM1LThkYTYtNzEwMWQ4MTVlYjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtog/axC4+0n4i36t2OjOMA0mJBjY4iSrHZou ngTGjAQJCkVpvG3wgZVV3zxjflqe5rPtC5brA5R0GGww8XLpjmU7EfS4aLHC6TjE MAcFOEX6b3CsPBbR5NsF2DiuaooGdQulLVYjK9sfGBQrh4AZDyKotfj5KRjnUcUg 0NzL7aatpmfnDRrYQsTB32alS7VxwetAcbem1QWNo6ONnDU4Dp46pI8r6JZDEzZ/ XuVLsmoCkjtGNYWng9QBo2TtjuwekqCJGNvoJk5oaA3s9AO9X/+r8VUekrjP1Wo2 eroCmM+00yZa7fQQHrer67I5bt/L1uSck/s3HTbf4qLg6FfSnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMFEDX4bj8e/ID+4laS/3TwoktatMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmI0Yjk0ZDEtMzdhMS0z YzExLWE4NmYtNjdjMWNmMTk1NGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfoj4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB3RCFtIzEKUtqWRcJFKfo25H4tXpJ+CCJLMIlw23YnWJGfFQcmiO5s MYCG3HlaTlzRzw4pkBYU0jBDWvU2vUZcBgG+D11P5CoCUQGtQdMBg4MFxOoOqyOZ EvGlbCd2Ocn3qKaiXIB5ILmUgBKSZrd2CRI95ul7sGwIN0N6BF81+9z9XJMqjnFK p4maGXqFpe95KGOQBDhRzhCyCIaPLEteWVG3LOij29/9C2gfbz92eyksew+MhAjg bxv4D7MbOlElRdjjBI22zzMxWGH2YMiqqPPBKIatE1k0zWuayWlCz4m6ovgnTN9V x4ONw1tDSuZs/2nIj/ArKRQ/TVCCP2qB -----END CERTIFICATE-----Generated at Sun Jun 15 15:57:26 2025 by rpki-client