$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa File: d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa (raw, json) Hash identifier: eboUiLOjoF1FM+BlL+hQ80yjaLPKyam83unsY8NsdfE= Subject key identifier: 5F:25:09:94:63:F3:64:46:2F:9E:27:19:78:44:3C:51:7F:95:87:3B Certificate issuer: /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Certificate serial: 010D0C9F4328584A103535159D2B6CD1950D9E80 Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 15267 IP address blocks: 138.129.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:35:15:9d:2b:6c:d1:95:0d:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=8f4d0055-fecf-4f21-9e04-2b8b012327a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:29:74:71:b0:a3:09:c2:1a:a7:4b:3b:15:c2: f6:9b:39:4b:58:0c:94:58:b4:89:28:ee:89:01:bf: 1a:24:b7:64:f1:52:94:75:1a:aa:fc:e5:47:61:b1: cb:24:f9:30:e1:85:4a:16:76:14:24:b6:80:11:52: 58:53:f1:4e:6d:14:8e:60:a1:8e:ca:f3:e7:66:59: 08:8b:dd:8a:29:51:dc:82:92:83:f9:8c:24:33:32: a4:2d:57:76:94:ee:ae:d3:80:a9:c2:a1:65:41:a4: 8f:e8:9f:00:51:66:d8:eb:e4:3a:21:d2:bc:b7:90: 29:9b:86:26:98:bc:7a:16:dd:6f:16:ad:17:2a:4a: 04:8f:10:40:ed:85:91:5a:d8:7d:a8:69:f8:39:72: 0c:68:f4:1e:d4:3b:4a:f6:aa:b9:d9:02:0c:1b:96: 51:65:ea:9f:f9:e3:73:19:83:0e:03:80:9f:3e:90: 08:05:91:2a:3b:9c:6f:6a:26:6c:55:0c:80:ad:da: 44:6c:f4:5b:ec:82:30:7b:10:5f:41:b3:b4:58:e7: af:09:0a:3a:b7:0b:84:e4:55:c4:45:9c:f2:78:76: 7b:ef:b4:a2:60:c2:fb:3c:16:eb:d6:5e:6c:10:b5: 9b:9c:0e:84:d5:33:51:10:62:51:28:9e:cb:83:28: 71:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:25:09:94:63:F3:64:46:2F:9E:27:19:78:44:3C:51:7F:95:87:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/d1c2980a-1dad-3fe0-8a48-38729cd5ba6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl X509v3 Authority Key Identifier: keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer sbgp-ipAddrBlock: critical IPv4: 138.129.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:7b:10:ba:64:ea:fc:95:3b:93:8e:ab:c3:97:16:be:dc:0f: 7f:ef:f8:d9:24:67:d4:82:57:fa:a0:a1:e5:a3:69:fe:9a:fe: 25:2b:a0:05:58:28:55:89:c5:2b:da:f0:d5:78:06:c0:ee:5c: bf:ad:02:31:ad:c5:0f:6a:af:e7:80:f8:33:7e:f5:86:3b:00: 69:0d:d1:c5:9c:45:7c:b4:ca:a7:7c:43:53:10:17:17:cc:5c: 96:3c:17:4a:e8:de:2a:d8:29:87:00:68:fb:37:83:a9:5c:60: 98:98:90:13:f4:2f:38:24:a4:4a:11:77:8e:79:f3:76:16:87: df:ce:33:26:3c:ba:36:f4:5b:31:1d:73:ee:d9:54:6e:35:e0: 05:ad:b5:f5:f0:b7:5a:b6:90:90:4e:56:9c:c6:15:5e:8b:34: 43:dc:db:b3:95:1b:d2:4b:e5:4f:08:66:c3:ed:e0:ce:96:d5: a2:fb:7d:f2:d7:ae:39:97:e4:ee:c9:a8:13:36:cd:9d:db:8e: ea:d7:1b:bf:82:04:8c:84:a8:38:0a:59:e8:3c:d8:73:60:4f: cb:87:a6:dc:c3:2a:c6:0c:0d:f1:7d:01:c4:b0:3b:db:fd:19: 61:43:50:d0:6d:a3:c8:23:05:a6:0b:5f:9a:c8:11:f2:63:23: 1e:b2:37:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNTUVnSts0ZUNnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyYWVlZjgtYjM1Yi00Y2E2LWI3YTMtOTNiZTFhMTgx MzM4MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk OGY0ZDAwNTUtZmVjZi00ZjIxLTllMDQtMmI4YjAxMjMyN2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyl0cbCjCcIap0s7FcL2mzlLWAyUWLSJKO6J Ab8aJLdk8VKUdRqq/OVHYbHLJPkw4YVKFnYUJLaAEVJYU/FObRSOYKGOyvPnZlkI i92KKVHcgpKD+YwkMzKkLVd2lO6u04CpwqFlQaSP6J8AUWbY6+Q6IdK8t5Apm4Ym mLx6Ft1vFq0XKkoEjxBA7YWRWth9qGn4OXIMaPQe1DtK9qq52QIMG5ZRZeqf+eNz GYMOA4CfPpAIBZEqO5xvaiZsVQyArdpEbPRb7IIwexBfQbO0WOevCQo6twuE5FXE RZzyeHZ777SiYML7PBbr1l5sELWbnA6E1TNREGJRKJ7LgyhxUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8lCZRj82RGL54nGXhEPFF/lYc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjJh ZWVmOC1iMzViLTRjYTYtYjdhMy05M2JlMWExODEzMzgvZDFjMjk4MGEtMWRhZC0z ZmUwLThhNDgtMzg3MjljZDViYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTYyYWVlZjgtYjM1Yi00Y2E2LWI3 YTMtOTNiZTFhMTgxMzM4L2E2MmFlZWY4LWIzNWItNGNhNi1iN2EzLTkzYmUxYTE4 MTMzOC5jcmwwHwYDVR0jBBgwFoAUJc5b1tIqbFP5lyX2l2HW+cay6IcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjJhZWVmOC1iMzViLTRjYTYtYjdhMy05M2Jl MWExODEzMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDioEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp7ELpk6vyVO5OOq8OXFr7cD3/v+NkkZ9SCV/qgoeWjaf6a/iUroAVY KFWJxSva8NV4BsDuXL+tAjGtxQ9qr+eA+DN+9YY7AGkN0cWcRXy0yqd8Q1MQFxfM XJY8F0ro3irYKYcAaPs3g6lcYJiYkBP0LzgkpEoRd45583YWh9/OMyY8ujb0WzEd c+7ZVG414AWttfXwt1q2kJBOVpzGFV6LNEPc27OVG9JL5U8IZsPt4M6W1aL7ffLX rjmX5O7JqBM2zZ3bjurXG7+CBIyEqDgKWeg82HNgT8uHptzDKsYMDfF9AcSwO9v9 GWFDUNBto8gjBaYLX5rIEfJjIx6yN60= -----END CERTIFICATE-----Generated at Sun Jun 15 15:42:57 2025 by rpki-client