$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/3085f03e-128d-39dd-8e5a-150849ab9548.roa File: 3085f03e-128d-39dd-8e5a-150849ab9548.roa (raw, json) Hash identifier: TS4xTqqOCbpsuSPc8JS0fsHRqVgHjg22zuWSeGLXY+o= Subject key identifier: 38:8D:43:C8:84:48:5B:51:E5:0D:19:68:B8:C4:8E:3D:B8:95:20:6E Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584965E97B86AE9A7569777D0500 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/3085f03e-128d-39dd-8e5a-150849ab9548.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 22742 IP address blocks: 129.133.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:7b:86:ae:9a:75:69:77:7d:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=2a58b363-6456-49d3-bf86-800ec5c5f299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:73:94:62:3e:c5:27:dd:6a:9f:c0:04:bf:51: 40:cd:89:ae:8b:a1:a8:88:4c:cf:f0:69:af:79:21: d4:ee:73:c5:3f:16:d6:39:8c:57:b1:68:dd:fa:07: 32:92:05:38:13:e4:dc:6f:bf:b1:ec:50:f9:8e:5e: f4:b9:5c:d0:44:f1:c7:c8:88:0d:91:16:c4:c0:07: 41:f7:c3:6a:bf:58:bc:75:15:4c:2b:10:67:4f:3f: e6:6a:fe:ae:69:71:cc:60:1f:3d:22:6d:be:77:f9: a9:1f:8f:1b:a8:58:c5:6b:1c:f1:3f:ff:8e:a4:38: 30:10:0c:06:be:e6:3c:af:0f:46:a6:49:d1:50:92: 52:fd:3c:3a:46:95:30:7a:80:ce:43:a9:e1:46:81: b8:60:de:77:60:0e:9e:82:68:8e:a0:96:cf:0e:39: 72:65:94:fa:00:ec:da:d0:29:aa:58:b7:71:25:64: 08:a4:f5:6c:b0:72:58:aa:7d:85:55:52:f8:03:d0: 41:ed:cc:23:fa:5d:df:fc:00:95:1e:96:c1:6b:62: 89:da:db:ba:1d:c3:ff:69:82:f7:54:a4:c5:cb:f4: fd:40:26:12:59:68:e2:6b:9b:f9:16:66:e9:c2:d3: 4d:11:58:8f:3f:f3:a9:a8:b1:f7:71:cf:e6:84:9c: de:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8D:43:C8:84:48:5B:51:E5:0D:19:68:B8:C4:8E:3D:B8:95:20:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/3085f03e-128d-39dd-8e5a-150849ab9548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 129.133.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:6b:0d:2d:3b:e3:0a:fe:b9:f0:d9:38:fd:7b:b9:4b:0a:64: b4:6e:d6:37:a1:21:ff:9d:06:64:5d:9d:5f:79:fb:b9:33:58: f2:63:34:9d:71:a2:b4:d6:50:2e:67:d0:81:fc:ad:59:b5:2a: 29:2d:3d:5b:2a:8f:cf:e2:77:70:66:0c:03:d0:a5:fd:c0:50: aa:96:c0:90:d5:d0:86:6d:6b:02:0f:46:7e:72:68:b2:ac:a1: a6:29:c5:fc:ed:f0:46:30:5a:d5:5b:37:17:e3:59:9a:8a:3a: f0:2a:6f:1b:19:2a:1e:59:c9:1f:6d:fd:0c:03:54:c3:f6:e0: 37:37:6b:e2:90:1c:17:3d:2d:47:c4:0c:59:cf:cd:12:ab:be: 8f:72:e1:45:ef:df:e2:8b:ec:3c:5d:72:40:2f:ec:76:8a:ff: b1:89:02:fc:d3:7f:38:83:be:cb:99:23:bf:2e:46:4d:df:e1: 43:92:bb:8e:2d:1e:13:27:a8:b7:52:49:ce:f8:00:cb:f6:51: 08:a8:4b:35:24:73:dd:c5:90:7d:5c:e9:9a:6d:aa:f0:56:52: a7:82:e0:ac:dc:0a:f3:eb:cf:4a:92:7d:98:c9:2f:b6:0f:44: f4:13:df:d1:63:8c:4d:76:9f:6e:5d:51:f0:00:fb:ea:06:7d: 82:f9:dc:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6XuGrpp1aXd9BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk MmE1OGIzNjMtNjQ1Ni00OWQzLWJmODYtODAwZWM1YzVmMjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXOUYj7FJ91qn8AEv1FAzYmui6GoiEzP8Gmv eSHU7nPFPxbWOYxXsWjd+gcykgU4E+Tcb7+x7FD5jl70uVzQRPHHyIgNkRbEwAdB 98Nqv1i8dRVMKxBnTz/mav6uaXHMYB89Im2+d/mpH48bqFjFaxzxP/+OpDgwEAwG vuY8rw9GpknRUJJS/Tw6RpUweoDOQ6nhRoG4YN53YA6egmiOoJbPDjlyZZT6AOza 0CmqWLdxJWQIpPVssHJYqn2FVVL4A9BB7cwj+l3f/ACVHpbBa2KJ2tu6HcP/aYL3 VKTFy/T9QCYSWWjia5v5FmbpwtNNEViPP/OpqLH3cc/mhJzeEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiNQ8iESFtR5Q0ZaLjEjj24lSBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvMzA4NWYwM2UtMTI4ZC0z OWRkLThlNWEtMTUwODQ5YWI5NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgYXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdrDS074wr+ufDZOP17uUsKZLRu1jehIf+dBmRdnV95+7kzWPJjNJ1x orTWUC5n0IH8rVm1KiktPVsqj8/id3BmDAPQpf3AUKqWwJDV0IZtawIPRn5yaLKs oaYpxfzt8EYwWtVbNxfjWZqKOvAqbxsZKh5ZyR9t/QwDVMP24Dc3a+KQHBc9LUfE DFnPzRKrvo9y4UXv3+KL7DxdckAv7HaK/7GJAvzTfziDvsuZI78uRk3f4UOSu44t HhMnqLdSSc74AMv2UQioSzUkc93FkH1c6ZptqvBWUqeC4KzcCvPrz0qSfZjJL7YP RPQT39FjjE12n25dUfAA++oGfYL53E4= -----END CERTIFICATE-----Generated at Sun Apr 27 23:53:10 2025 by rpki-client