$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b091665b-9f2c-3e1e-abd7-b5073bcef442.roa File: b091665b-9f2c-3e1e-abd7-b5073bcef442.roa (raw, json) Hash identifier: iNP3rO4YbXphLI1IGSntCsE/3Zv9tUS4ziYTkW62dTo= Subject key identifier: 2F:19:FA:79:43:3E:89:AE:23:8E:27:36:3C:D3:F3:DC:0B:B0:EE:14 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F43285849E22519680B6DC60024253690 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b091665b-9f2c-3e1e-abd7-b5073bcef442.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 16509 IP address blocks: 129.33.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:19:68:0b:6d:c6:00:24:25:36:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=a8723dfb-3cc5-4fb3-b031-bfcd255837e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f0:4a:4a:6f:01:24:0e:5a:d1:81:a0:28:42: b3:4f:91:b4:ec:4a:ff:dc:f8:1f:3c:b8:65:2a:e4: 1b:e9:82:dc:41:20:c3:65:75:6d:79:6f:1c:e0:30: ae:ab:07:ac:4f:05:9f:74:3d:d3:03:eb:b0:ad:fc: 2d:f5:c7:8e:fc:d4:12:02:e0:a7:89:7a:55:77:55: bd:be:38:72:aa:f1:f2:47:fa:72:e0:f4:2a:88:d6: 73:29:d3:86:bd:81:da:38:60:e7:de:4d:a3:83:fb: 57:a6:77:b3:98:be:4c:4c:d0:91:df:3c:4d:1f:eb: df:34:d0:d5:95:84:03:2d:33:1d:4c:1c:cd:6a:d2: 7a:4b:25:c8:4d:81:6d:f8:6d:98:02:ad:ea:af:dd: ce:6d:04:99:4a:f5:65:96:09:4e:bc:7a:b3:f6:99: cd:34:50:88:8a:0d:c5:0b:ea:16:4f:d2:50:a7:1e: ce:53:b1:1c:d5:f3:d5:a5:b0:b8:ba:c2:f6:e3:24: ff:09:e7:a3:c9:b6:c5:22:13:28:f2:a8:4c:c1:d5: fb:6f:38:61:d6:58:90:c6:9e:1c:36:75:e7:76:cc: 17:14:99:9b:0f:70:6e:94:a0:3e:3e:90:8d:a0:01: b7:22:33:f8:ab:61:41:00:f0:4a:d9:52:a4:11:a3: 18:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:19:FA:79:43:3E:89:AE:23:8E:27:36:3C:D3:F3:DC:0B:B0:EE:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b091665b-9f2c-3e1e-abd7-b5073bcef442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:f8:e7:54:5f:63:09:29:c3:57:22:ae:06:c5:c9:f8:49:30: b0:1b:40:c8:16:5c:9a:aa:e5:b0:c8:b7:5b:43:c6:fa:3a:0d: 60:f3:19:b3:f7:e6:32:6c:72:c9:50:a9:f9:62:a7:bf:a8:da: 29:9a:59:cb:1f:8d:10:d7:ac:08:3f:30:76:8b:a2:5b:23:bc: 42:6f:db:e2:71:58:e8:f3:2d:96:13:bf:c2:c1:2d:44:12:e3: 00:08:64:51:00:37:8f:8b:de:81:42:14:20:94:be:cb:8c:fc: 3b:e5:aa:cf:17:3e:93:11:ec:5c:ae:b2:b9:da:e7:8a:a9:90: 56:39:7b:e2:e2:93:62:d3:f5:c5:99:88:7a:1b:46:1f:e9:11: e4:2f:1e:e6:ed:03:c1:08:ca:96:ea:92:18:12:56:0b:10:90: 39:60:45:33:17:e0:d1:88:08:df:2e:4b:5f:95:28:50:be:15: de:e3:4b:11:d8:be:30:9d:34:89:98:95:86:88:9d:1f:6a:f6: 03:c2:63:29:b2:b8:63:26:15:1c:69:83:dd:e4:45:76:a5:54: e1:d7:e8:aa:d4:18:ee:98:49:5a:16:46:2f:6b:dc:52:68:c2: 21:d7:25:66:53:bc:36:b8:98:76:06:7d:ac:b0:5c:93:57:3f: f0:77:db:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJRloC23GACQlNpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk YTg3MjNkZmItM2NjNS00ZmIzLWIwMzEtYmZjZDI1NTgzN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfBKSm8BJA5a0YGgKEKzT5G07Er/3PgfPLhl KuQb6YLcQSDDZXVteW8c4DCuqwesTwWfdD3TA+uwrfwt9ceO/NQSAuCniXpVd1W9 vjhyqvHyR/py4PQqiNZzKdOGvYHaOGDn3k2jg/tXpnezmL5MTNCR3zxNH+vfNNDV lYQDLTMdTBzNatJ6SyXITYFt+G2YAq3qr93ObQSZSvVllglOvHqz9pnNNFCIig3F C+oWT9JQpx7OU7Ec1fPVpbC4usL24yT/CeejybbFIhMo8qhMwdX7bzhh1liQxp4c NnXndswXFJmbD3BulKA+PpCNoAG3IjP4q2FBAPBK2VKkEaMYkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8Z+nlDPomuI44nNjzT89wLsO4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYjA5MTY2NWItOWYyYy0z ZTFlLWFiZDctYjUwNzNiY2VmNDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgSGKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr451RfYwkpw1cirgbFyfhJMLAbQMgWXJqq5bDIt1tDxvo6DWDzGbP3 5jJscslQqflip7+o2imaWcsfjRDXrAg/MHaLolsjvEJv2+JxWOjzLZYTv8LBLUQS 4wAIZFEAN4+L3oFCFCCUvsuM/Dvlqs8XPpMR7Fyusrna54qpkFY5e+Lik2LT9cWZ iHobRh/pEeQvHubtA8EIypbqkhgSVgsQkDlgRTMX4NGICN8uS1+VKFC+Fd7jSxHY vjCdNImYlYaInR9q9gPCYymyuGMmFRxpg93kRXalVOHX6KrUGO6YSVoWRi9r3FJo wiHXJWZTvDa4mHYGfaywXJNXP/B324Y= -----END CERTIFICATE-----Generated at Sat Jun 14 06:06:28 2025 by rpki-client