$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/494e73dd-7440-3e35-96e4-fe4c12732c15.roa File: 494e73dd-7440-3e35-96e4-fe4c12732c15.roa (raw, json) Hash identifier: MtrWx40YUJduCV+Lluf+gp05evW0+BPfi3Um5fxWMC4= Subject key identifier: 59:C2:51:E0:20:3E:32:D1:A6:C0:2A:41:52:AF:71:B7:EB:8A:6B:79 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584A1F904A634F442B67684F3280 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/494e73dd-7440-3e35-96e4-fe4c12732c15.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 63293 IP address blocks: 129.134.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:4a:63:4f:44:2b:67:68:4f:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=fd6ef75d-8d8b-4c02-a01d-f28101949c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7f:db:92:6b:98:75:28:04:cf:d1:51:2c:61: 58:91:70:8a:3b:59:b6:0e:5d:60:fa:c0:88:c8:f5: cb:ec:14:ea:57:d5:9a:34:f6:e6:74:47:f0:9a:49: 0a:18:72:f2:ea:5e:92:c2:09:cf:c6:19:7e:01:8f: ae:67:1a:98:a7:73:b7:8e:1f:8b:a4:aa:8b:85:6e: ee:4f:84:5d:c2:17:ba:86:69:e2:da:99:0d:f9:53: 8a:1a:6a:ef:1c:69:04:96:df:60:e7:80:2b:cb:29: 79:67:04:32:f0:ef:a2:d9:d6:7f:f2:00:fb:2d:2c: 1e:62:97:62:79:36:ba:eb:00:b9:4c:10:8c:7d:7c: 66:57:29:f2:7d:b4:f7:c9:44:85:8f:27:c1:82:eb: 15:f6:25:08:35:1c:4d:15:78:e7:b6:a9:cf:d5:2c: b7:c8:5d:1d:5d:3d:d7:d8:8a:14:5b:0c:75:73:a5: fa:e0:5b:30:23:19:c0:03:26:5a:87:4c:5a:76:b4: fd:cc:41:a0:c3:de:be:60:be:67:e6:2c:5f:2e:ec: 1b:93:18:35:cb:85:7c:09:02:35:f1:ad:ed:5c:c3: e4:66:aa:62:38:05:de:7b:f4:ac:97:77:c2:df:86: 85:33:0f:ce:88:28:87:7b:c4:42:8e:2a:08:7b:a2: 92:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C2:51:E0:20:3E:32:D1:A6:C0:2A:41:52:AF:71:B7:EB:8A:6B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/494e73dd-7440-3e35-96e4-fe4c12732c15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 129.134.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:44:ef:19:35:af:cc:3d:35:8e:53:0e:99:cc:bd:bc:86:49: d2:af:84:28:f6:b4:67:11:33:9d:77:59:84:95:99:6b:97:d7: ed:c9:48:64:d0:b1:67:41:30:9e:98:56:2f:6a:84:5c:de:bb: 7e:12:05:2d:69:8e:ec:32:6f:84:45:fd:f2:71:e8:b9:b0:5c: 50:c9:99:9e:ec:f3:4a:1b:99:20:ee:58:30:54:46:34:a5:f3: ad:a8:76:5b:28:3d:fa:53:38:2e:97:8d:56:52:54:fc:be:89: 35:c2:31:db:2b:f4:7a:67:f5:5c:50:e5:af:a1:d2:09:c4:78: 0c:04:32:cc:68:03:0c:19:49:68:94:c5:11:65:bd:a1:9c:05: c9:d4:96:a4:bd:4b:04:67:16:e7:78:e0:7d:58:22:92:c2:a8: 0e:3b:92:0f:4e:fc:2d:51:54:90:38:fa:6f:8c:54:98:a5:55: 11:1c:00:4f:df:6b:71:7e:4f:92:33:03:7e:90:be:74:1f:db: 73:6a:5d:6b:d4:c9:55:c9:71:d6:53:58:49:90:a7:c8:9e:df: 91:ac:f1:76:57:cd:b0:20:12:af:f3:e0:3e:fa:5e:ec:27:a0: bf:05:6c:ec:e8:32:6a:0b:f2:31:e3:5b:d8:28:55:6b:90:31: b0:51:77:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkEpjT0QrZ2hPMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk ZmQ2ZWY3NWQtOGQ4Yi00YzAyLWEwMWQtZjI4MTAxOTQ5YzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn/bkmuYdSgEz9FRLGFYkXCKO1m2Dl1g+sCI yPXL7BTqV9WaNPbmdEfwmkkKGHLy6l6SwgnPxhl+AY+uZxqYp3O3jh+LpKqLhW7u T4Rdwhe6hmni2pkN+VOKGmrvHGkElt9g54Aryyl5ZwQy8O+i2dZ/8gD7LSweYpdi eTa66wC5TBCMfXxmVynyfbT3yUSFjyfBgusV9iUINRxNFXjntqnP1Sy3yF0dXT3X 2IoUWwx1c6X64FswIxnAAyZah0xadrT9zEGgw96+YL5n5ixfLuwbkxg1y4V8CQI1 8a3tXMPkZqpiOAXee/Ssl3fC34aFMw/OiCiHe8RCjioIe6KScwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnCUeAgPjLRpsAqQVKvcbfrimt5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvNDk0ZTczZGQtNzQ0MC0z ZTM1LTk2ZTQtZmU0YzEyNzMyYzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgYa8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtE7xk1r8w9NY5TDpnMvbyGSdKvhCj2tGcRM513WYSVmWuX1+3JSGTQ sWdBMJ6YVi9qhFzeu34SBS1pjuwyb4RF/fJx6LmwXFDJmZ7s80obmSDuWDBURjSl 862odlsoPfpTOC6XjVZSVPy+iTXCMdsr9Hpn9VxQ5a+h0gnEeAwEMsxoAwwZSWiU xRFlvaGcBcnUlqS9SwRnFud44H1YIpLCqA47kg9O/C1RVJA4+m+MVJilVREcAE/f a3F+T5IzA36QvnQf23NqXWvUyVXJcdZTWEmQp8ie35Gs8XZXzbAgEq/z4D76Xuwn oL8FbOzoMmoL8jHjW9goVWuQMbBRdyA= -----END CERTIFICATE-----Generated at Mon Jun 16 14:08:05 2025 by rpki-client