$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2ef77872-7d74-3cc0-ad82-83a97b8beb59.roa File: 2ef77872-7d74-3cc0-ad82-83a97b8beb59.roa (raw, json) Hash identifier: 15t0XUcH3HbrVCFrhAxPPgXXBRnoM6N9DGkv6YTM/Oo= Subject key identifier: 32:52:55:65:4D:05:BF:9E:BA:F8:8A:C5:05:05:CC:E3:87:7E:CB:C8 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584A90A0F46275E2E7BD5922D168 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2ef77872-7d74-3cc0-ad82-83a97b8beb59.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 32934 IP address blocks: 129.134.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:f4:62:75:e2:e7:bd:59:22:d1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=bfaa5e15-910d-4b00-adbc-68879682044e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a5:d8:f4:b9:fd:10:d9:10:7d:90:f9:3c:8e: 45:63:75:0a:03:14:78:8f:38:62:a9:f7:97:0e:b5: ca:a8:25:53:89:a5:a0:2e:d9:fa:a6:d4:d5:6a:fb: 00:ab:45:85:12:55:21:cf:6c:bb:5c:57:7d:0d:37: 44:da:42:74:d8:e0:e2:bd:1c:af:d1:3b:85:60:17: 7d:32:fe:74:0c:3c:9a:0b:23:4f:98:eb:95:60:96: 2e:c5:2e:00:08:9e:d8:03:c6:fc:cc:d7:be:f5:7c: 8a:cd:c1:6a:88:e2:a8:bf:da:ef:e2:4a:a1:0b:29: 9a:21:d2:df:53:85:90:31:c9:da:4e:dd:73:d4:c7: 9c:24:fb:83:b3:10:4b:97:20:46:76:22:6b:2b:e0: 6d:cb:41:7b:b6:71:59:dd:60:c1:2e:4f:8c:b8:2b: ae:8c:a2:b6:d9:33:11:95:5c:d9:8c:16:e4:c3:94: 9d:7f:97:ef:39:ee:29:48:c3:bf:10:dc:bd:6e:0e: 3c:9c:ab:90:78:10:0e:eb:04:f9:f0:a5:d8:6d:7e: bd:1b:ea:8f:1b:69:80:9e:1c:7e:91:7c:db:ee:58: 5d:f1:cf:5c:5d:af:52:df:82:4b:10:cc:cb:b6:0f: 03:9a:49:71:fd:9d:ac:47:9d:4c:77:72:bb:8d:3c: 23:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:52:55:65:4D:05:BF:9E:BA:F8:8A:C5:05:05:CC:E3:87:7E:CB:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2ef77872-7d74-3cc0-ad82-83a97b8beb59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 129.134.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:9a:ea:4f:9e:9f:a3:b9:2c:45:78:73:68:6d:4a:72:70:49: 73:eb:5d:3c:f5:84:2b:0c:21:a7:26:ac:49:b2:41:b7:cf:30: 4b:f8:b1:4b:a3:72:67:29:02:5b:7a:a5:70:c2:e3:95:60:3e: 2d:0e:e0:45:68:fb:50:e7:14:2a:cc:81:5d:78:20:57:ae:0c: 74:5a:0a:99:95:78:5a:4f:4e:02:cc:b8:b5:e9:1d:56:ca:5a: a0:08:7e:f4:25:b1:e3:a6:25:db:81:ad:5f:7a:1f:00:fa:6d: 50:8f:64:16:27:1d:08:17:5c:72:25:95:ee:fc:e8:0c:37:90: 18:e7:b0:30:3a:a8:f8:37:41:67:36:be:17:2f:bb:66:25:c0: 8c:fb:7c:21:36:7b:27:40:05:85:db:78:12:05:30:e4:6e:dc: 69:fa:56:c4:99:d3:80:17:e8:f3:d9:2a:19:8f:01:53:6f:83: d5:d6:ea:12:48:e6:af:88:b0:f7:e4:3f:c3:2b:70:a2:a2:b6: de:a0:2a:4f:60:d1:46:b2:09:3c:72:b4:db:d4:d8:2c:7b:70: 88:49:71:ad:17:79:0b:d7:99:10:5b:70:49:91:62:a5:1a:9a: 53:75:b2:28:4d:44:50:41:d1:de:8e:a4:bc:d7:3d:b3:16:71: 41:ba:c3:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPRideLnvVki0WgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YmZhYTVlMTUtOTEwZC00YjAwLWFkYmMtNjg4Nzk2ODIwNDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6XY9Ln9ENkQfZD5PI5FY3UKAxR4jzhiqfeX DrXKqCVTiaWgLtn6ptTVavsAq0WFElUhz2y7XFd9DTdE2kJ02ODivRyv0TuFYBd9 Mv50DDyaCyNPmOuVYJYuxS4ACJ7YA8b8zNe+9XyKzcFqiOKov9rv4kqhCymaIdLf U4WQMcnaTt1z1MecJPuDsxBLlyBGdiJrK+Bty0F7tnFZ3WDBLk+MuCuujKK22TMR lVzZjBbkw5Sdf5fvOe4pSMO/ENy9bg48nKuQeBAO6wT58KXYbX69G+qPG2mAnhx+ kXzb7lhd8c9cXa9S34JLEMzLtg8Dmklx/Z2sR51Md3K7jTwj/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJSVWVNBb+euviKxQUFzOOHfsvIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMmVmNzc4NzItN2Q3NC0z Y2MwLWFkODItODNhOTdiOGJlYjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgYYeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADma6k+en6O5LEV4c2htSnJwSXPrXTz1hCsMIacmrEmyQbfPMEv4sUuj cmcpAlt6pXDC45VgPi0O4EVo+1DnFCrMgV14IFeuDHRaCpmVeFpPTgLMuLXpHVbK WqAIfvQlseOmJduBrV96HwD6bVCPZBYnHQgXXHIlle786Aw3kBjnsDA6qPg3QWc2 vhcvu2YlwIz7fCE2eydABYXbeBIFMORu3Gn6VsSZ04AX6PPZKhmPAVNvg9XW6hJI 5q+IsPfkP8MrcKKitt6gKk9g0UayCTxytNvU2Cx7cIhJca0XeQvXmRBbcEmRYqUa mlN1sihNRFBB0d6OpLzXPbMWcUG6w4M= -----END CERTIFICATE-----Generated at Wed Aug 6 04:15:19 2025 by rpki-client