$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa File: 0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa (raw, json) Hash identifier: ZwS+1us633Cep6u7ZZdM1g4XHdPoFrNnPkfH8iFcNu4= Subject key identifier: E3:5A:64:53:7A:88:9F:83:C4:53:6C:C1:87:FA:5A:AA:BA:16:F3:9D Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584993FA01F640F42CC8793AE000 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 63293 IP address blocks: 129.134.128.0/24 maxlen: 24 129.134.130.0/24 maxlen: 24 129.134.131.0/24 maxlen: 24 129.134.132.0/24 maxlen: 24 129.134.135.0/24 maxlen: 24 129.134.136.0/24 maxlen: 24 129.134.137.0/24 maxlen: 24 129.134.138.0/24 maxlen: 24 129.134.139.0/24 maxlen: 24 129.134.140.0/24 maxlen: 24 129.134.143.0/24 maxlen: 24 129.134.144.0/24 maxlen: 24 129.134.147.0/24 maxlen: 24 129.134.148.0/24 maxlen: 24 129.134.149.0/24 maxlen: 24 129.134.150.0/24 maxlen: 24 129.134.154.0/24 maxlen: 24 129.134.155.0/24 maxlen: 24 129.134.156.0/24 maxlen: 24 129.134.157.0/24 maxlen: 24 129.134.158.0/24 maxlen: 24 129.134.159.0/24 maxlen: 24 129.134.160.0/26 maxlen: 26 129.134.161.0/24 maxlen: 24 129.134.163.0/24 maxlen: 24 129.134.164.0/24 maxlen: 24 129.134.165.0/24 maxlen: 24 129.134.168.0/24 maxlen: 24 129.134.169.0/24 maxlen: 24 129.134.170.0/24 maxlen: 24 129.134.171.0/24 maxlen: 24 129.134.172.0/24 maxlen: 24 129.134.173.0/24 maxlen: 24 129.134.174.0/24 maxlen: 24 129.134.175.0/24 maxlen: 24 129.134.176.0/24 maxlen: 24 129.134.177.0/24 maxlen: 24 129.134.178.0/24 maxlen: 24 129.134.179.0/24 maxlen: 24 129.134.181.0/24 maxlen: 24 129.134.182.0/24 maxlen: 24 129.134.183.0/24 maxlen: 24 129.134.184.0/24 maxlen: 24 129.134.185.0/24 maxlen: 24 129.134.186.0/24 maxlen: 24 129.134.187.0/24 maxlen: 24 157.240.128.0/24 maxlen: 24 157.240.157.0/24 maxlen: 24 157.240.158.0/24 maxlen: 24 157.240.169.0/24 maxlen: 24 157.240.170.0/24 maxlen: 24 157.240.175.0/24 maxlen: 24 157.240.176.0/24 maxlen: 24 157.240.177.0/24 maxlen: 24 157.240.179.0/24 maxlen: 24 157.240.181.0/24 maxlen: 24 157.240.182.0/24 maxlen: 24 157.240.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:01:f6:40:f4:2c:c8:79:3a:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=1290e9dc-1f20-4599-b5de-34745b77055e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:db:95:91:e6:f7:c9:42:8f:e0:c9:19:80:86: e2:f1:76:ef:86:96:2d:b7:8e:b3:d0:16:f3:1c:01: 8b:74:c7:bd:bb:34:28:9a:cc:c2:66:2e:45:7d:32: 3f:cf:ff:28:f8:39:9f:c6:c6:4c:42:c0:85:b5:5d: c6:87:8b:d9:cb:a0:49:fc:bc:7e:a5:6a:e0:cf:9e: de:42:07:35:59:1a:ac:8c:d3:35:2e:c8:52:8e:f7: 36:cb:48:b7:cb:90:e8:72:86:59:62:67:41:9d:af: 3b:d9:8c:68:de:11:01:21:56:9d:42:ec:ce:84:f1: 98:9f:93:e5:85:38:1e:5e:44:eb:ec:34:5f:04:cf: ea:fd:29:54:df:3f:57:d5:71:36:16:7b:52:a5:7d: 55:27:c5:a0:d3:37:d8:d2:dd:76:24:11:47:a3:dc: b7:eb:e3:a1:45:21:19:38:28:90:b4:09:bf:8c:99: 60:2d:a6:9b:7b:08:14:c2:ac:78:35:8b:dd:96:00: 18:67:47:13:64:03:5d:91:8d:88:55:ba:9b:e4:46: c5:bf:0e:30:66:3e:08:6a:a2:d6:0c:30:39:f3:61: ad:e7:27:97:d2:ac:44:e4:fd:2e:e8:2b:c3:72:af: da:8d:01:0e:82:72:03:73:b3:cd:65:6f:1f:9d:56: e9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5A:64:53:7A:88:9F:83:C4:53:6C:C1:87:FA:5A:AA:BA:16:F3:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0f6981fa-1e72-324a-bc08-0e353c6fbbda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 129.134.128.0/24 129.134.130.0-129.134.132.255 129.134.135.0-129.134.140.255 129.134.143.0-129.134.144.255 129.134.147.0-129.134.150.255 129.134.154.0-129.134.160.63 129.134.161.0/24 129.134.163.0-129.134.165.255 129.134.168.0-129.134.179.255 129.134.181.0-129.134.187.255 157.240.128.0/24 157.240.157.0-157.240.158.255 157.240.169.0-157.240.170.255 157.240.175.0-157.240.177.255 157.240.179.0/24 157.240.181.0-157.240.183.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3e:08:e8:0b:88:a6:13:c9:0a:60:c8:5b:ad:a2:02:39:15: 6e:05:e9:49:79:b3:e7:9f:e3:02:87:6a:e6:4a:77:6b:35:5c: eb:20:64:35:6c:4f:dd:0f:6a:65:2b:39:67:80:d2:bb:06:d9: e3:be:7f:f3:7d:c9:00:f9:ab:7b:3b:62:fe:63:1d:97:3b:a8: a2:3e:98:e5:50:b7:54:3e:de:2f:c3:af:78:b7:cb:bc:c4:5a: 46:58:fb:e5:a9:4c:80:c7:73:e4:23:71:d7:9a:9f:3b:ae:89: 7d:d6:f9:4a:e6:c2:8b:e6:09:ca:13:da:3a:3a:05:d8:cf:e1: b6:df:5c:d0:4b:f2:4f:82:d7:8c:92:8a:be:42:f1:bd:63:bc: d0:6e:7a:27:d0:5c:09:18:c7:04:58:dc:48:58:4a:77:0d:6f: 7d:0b:67:d7:c8:69:ad:21:6c:0e:c4:45:a1:39:47:a7:64:0c: f2:65:f1:56:90:0f:48:ac:01:b6:6c:19:ec:10:76:56:92:37: 6c:94:ac:b1:3d:93:cb:60:f8:47:fc:88:fd:5c:2f:8b:a5:90: be:c8:c2:47:fa:9d:42:ff:0e:69:ef:ac:89:1c:18:58:82:c7: 9f:9e:ae:19:b4:f2:a1:28:96:7d:ae:8a:d6:6a:56:7b:ab:8d: a2:10:0d:88 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEmT+gH2QPQsyHk64AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MTI5MGU5ZGMtMWYyMC00NTk5LWI1ZGUtMzQ3NDViNzcwNTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtuVkeb3yUKP4MkZgIbi8XbvhpYtt46z0Bbz HAGLdMe9uzQomszCZi5FfTI/z/8o+DmfxsZMQsCFtV3Gh4vZy6BJ/Lx+pWrgz57e Qgc1WRqsjNM1LshSjvc2y0i3y5DocoZZYmdBna872Yxo3hEBIVadQuzOhPGYn5Pl hTgeXkTr7DRfBM/q/SlU3z9X1XE2FntSpX1VJ8Wg0zfY0t12JBFHo9y36+OhRSEZ OCiQtAm/jJlgLaabewgUwqx4NYvdlgAYZ0cTZANdkY2IVbqb5EbFvw4wZj4IaqLW DDA582Gt5yeX0qxE5P0u6CvDcq/ajQEOgnIDc7PNZW8fnVbpiwIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFONaZFN6iJ+DxFNswYf6Wqq6FvOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMGY2OTgxZmEtMWU3Mi0z MjRhLWJjMDgtMGUzNTNjNmZiYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMIHeBggrBgEFBQcBBwEB/wSBzjCByzCByAQCAAEwgcEDBACB hoAwDAMEAYGGggMEAIGGhDAMAwQAgYaHAwQAgYaMMAwDBACBho8DBACBhpAwDAME AIGGkwMEAIGGljANAwQBgYaaAwUGgYagAAMEAIGGoTAMAwQAgYajAwQBgYakMAwD BAOBhqgDBAKBhrAwDAMEAIGGtQMEAoGGuAMEAJ3wgDAMAwQAnfCdAwQAnfCeMAwD BACd8KkDBACd8KowDAMEAJ3wrwMEAZ3wsAMEAJ3wszAMAwQAnfC1AwQDnfCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU+COgLiKYTyQpgyFutogI5FW4F6Ul5s+ef4wKHauZKd2s1XOsgZDVs T90PamUrOWeA0rsG2eO+f/N9yQD5q3s7Yv5jHZc7qKI+mOVQt1Q+3i/Dr3i3y7zE WkZY++WpTIDHc+QjcdeanzuuiX3W+UrmwovmCcoT2jo6BdjP4bbfXNBL8k+C14yS ir5C8b1jvNBueifQXAkYxwRY3EhYSncNb30LZ9fIaa0hbA7ERaE5R6dkDPJl8VaQ D0isAbZsGewQdlaSN2yUrLE9k8tg+Ef8iP1cL4ulkL7Iwkf6nUL/DmnvrIkcGFiC x5+erhm08qEoln2uitZqVnurjaIQDYg= -----END CERTIFICATE-----Generated at Mon Jun 16 22:44:58 2025 by rpki-client