$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a95ba82b-efb4-36e6-acb7-a5ac14dd3ca2.roa File: a95ba82b-efb4-36e6-acb7-a5ac14dd3ca2.roa (raw, json) Hash identifier: 2F1RteKmLhSkh99e9jL6P/FnHLVt+dXPA7Dxu0e1Jos= Subject key identifier: CA:DA:7E:C8:DF:F7:35:A9:FF:BB:32:C8:45:F0:8F:B8:47:29:D3:07 Certificate issuer: /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Certificate serial: 010D0C9F4328584A1035354CE2AD4D80F968B360 Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a95ba82b-efb4-36e6-acb7-a5ac14dd3ca2.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 15267 IP address blocks: 138.129.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:35:4c:e2:ad:4d:80:f9:68:b3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=4b89e9cb-9eab-4f25-9478-710068c99ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c9:27:7f:fd:1c:4a:85:d1:63:fa:98:89:11: 40:4b:5b:c5:f6:c2:e9:9f:8c:3f:e9:d7:d5:bb:17: 3e:71:9a:96:2e:85:e0:26:e6:ef:0a:bc:83:9f:84: b3:0b:2a:0c:c5:7c:d7:a7:69:9c:07:2b:5f:8b:32: 2d:ad:ee:ee:79:ee:0c:27:28:30:98:1d:50:36:11: fb:01:2e:6a:20:1e:6d:9f:3c:82:44:28:30:7b:f7: 3e:2c:50:54:51:41:08:c3:ac:d3:ca:f3:6e:b8:6b: 64:a5:67:40:7d:45:28:23:3a:12:8e:1c:54:0b:e6: 26:4b:64:bd:80:08:ae:26:d3:3f:a3:4a:f0:52:1b: 9d:be:50:36:1a:a4:aa:8a:80:b4:7b:54:88:0f:24: 45:ab:0e:e5:de:c7:cf:45:04:f7:50:2b:ab:e6:e5: ac:62:1a:aa:94:e5:3b:9d:b0:cd:5a:70:e3:ce:1b: 30:7e:7f:05:48:68:91:8c:67:ed:7d:3b:32:da:c2: ba:3e:c4:73:9e:8d:a0:e9:04:56:14:d9:3d:d7:98: 03:26:29:99:4c:2b:92:4b:11:77:af:94:2b:df:ca: d2:9c:b2:ba:65:f0:6f:71:9a:5d:83:3c:a2:4b:f1: ac:a2:f6:0d:a6:e7:ea:3d:c8:09:88:9d:2e:90:fc: 26:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DA:7E:C8:DF:F7:35:A9:FF:BB:32:C8:45:F0:8F:B8:47:29:D3:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a95ba82b-efb4-36e6-acb7-a5ac14dd3ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl X509v3 Authority Key Identifier: keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer sbgp-ipAddrBlock: critical IPv4: 138.129.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e5:79:93:b2:03:8f:a6:cf:68:78:96:3f:a5:bd:fb:15:c6: da:c3:c2:43:a6:54:1c:fd:15:58:cb:be:85:d2:8c:fd:aa:71: c6:9c:6b:a7:24:24:73:7a:37:22:9f:1e:21:bf:da:b0:b2:29: cf:c7:c1:58:a3:c3:64:ef:af:52:2e:39:27:a7:b8:d6:f4:20: 47:30:59:b5:73:2e:74:8a:66:c9:81:46:1b:de:38:0b:cb:0a: 6a:e4:3d:13:33:f5:e0:c0:18:42:56:13:04:e9:41:74:19:6e: 9b:1b:1d:f2:a3:bd:21:15:4a:5b:fd:a6:89:06:31:35:09:9c: 8a:86:a9:66:29:b2:74:c2:cc:30:30:72:9c:c8:27:d2:92:ae: 85:cb:56:c2:3f:2c:4e:ab:b2:b8:0b:28:b1:41:f6:f6:2a:5d: fa:de:21:30:68:21:04:41:71:bc:7f:60:11:91:d0:c6:ff:7a: 66:39:6d:5c:3a:47:6d:19:1d:af:dd:77:70:a7:d6:c0:e9:33: 12:f7:d5:20:e9:a2:bf:5f:42:db:f7:e4:ca:be:ee:dd:15:2e: d3:e3:96:fc:e4:7c:c9:7f:62:67:54:75:e1:79:d3:2e:0b:5c: d0:c3:2c:e0:c2:d9:73:cb:a8:b6:92:df:55:e9:8f:36:83:6a: 50:e1:df:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNTVM4q1NgPlos2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyYWVlZjgtYjM1Yi00Y2E2LWI3YTMtOTNiZTFhMTgx MzM4MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk NGI4OWU5Y2ItOWVhYi00ZjI1LTk0NzgtNzEwMDY4Yzk5ZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcknf/0cSoXRY/qYiRFAS1vF9sLpn4w/6dfV uxc+cZqWLoXgJubvCryDn4SzCyoMxXzXp2mcBytfizItre7uee4MJygwmB1QNhH7 AS5qIB5tnzyCRCgwe/c+LFBUUUEIw6zTyvNuuGtkpWdAfUUoIzoSjhxUC+YmS2S9 gAiuJtM/o0rwUhudvlA2GqSqioC0e1SIDyRFqw7l3sfPRQT3UCur5uWsYhqqlOU7 nbDNWnDjzhswfn8FSGiRjGftfTsy2sK6PsRzno2g6QRWFNk915gDJimZTCuSSxF3 r5Qr38rSnLK6ZfBvcZpdgzyiS/GsovYNpufqPcgJiJ0ukPwm7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrafsjf9zWp/7syyEXwj7hHKdMHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjJh ZWVmOC1iMzViLTRjYTYtYjdhMy05M2JlMWExODEzMzgvYTk1YmE4MmItZWZiNC0z NmU2LWFjYjctYTVhYzE0ZGQzY2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTYyYWVlZjgtYjM1Yi00Y2E2LWI3 YTMtOTNiZTFhMTgxMzM4L2E2MmFlZWY4LWIzNWItNGNhNi1iN2EzLTkzYmUxYTE4 MTMzOC5jcmwwHwYDVR0jBBgwFoAUJc5b1tIqbFP5lyX2l2HW+cay6IcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjJhZWVmOC1iMzViLTRjYTYtYjdhMy05M2Jl MWExODEzMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFioEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrleZOyA4+mz2h4lj+lvfsVxtrDwkOmVBz9FVjLvoXSjP2qccaca6ck JHN6NyKfHiG/2rCyKc/HwVijw2Tvr1IuOSenuNb0IEcwWbVzLnSKZsmBRhveOAvL CmrkPRMz9eDAGEJWEwTpQXQZbpsbHfKjvSEVSlv9pokGMTUJnIqGqWYpsnTCzDAw cpzIJ9KSroXLVsI/LE6rsrgLKLFB9vYqXfreITBoIQRBcbx/YBGR0Mb/emY5bVw6 R20ZHa/dd3Cn1sDpMxL31SDpor9fQtv35Mq+7t0VLtPjlvzkfMl/YmdUdeF50y4L XNDDLODC2XPLqLaS31XpjzaDalDh3+M= -----END CERTIFICATE-----Generated at Sun Jun 15 23:16:45 2025 by rpki-client