$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a942301d-5541-36c8-9342-911968d44a92.roa File: a942301d-5541-36c8-9342-911968d44a92.roa (raw, json) Hash identifier: UY70ik08LvXgrYvuQvhSAb/wl7k+suUr7YjzEnwA98Q= Subject key identifier: 0D:55:26:C8:9A:BD:C2:66:17:A3:A5:49:57:42:6F:3F:1C:83:DB:82 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584B25FC3E4550B95AEC13305080 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a942301d-5541-36c8-9342-911968d44a92.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 22742 IP address blocks: 129.133.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:3e:45:50:b9:5a:ec:13:30:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=6e419860-d2b8-4b28-a9a3-3b2edac65962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ec:e0:a6:54:9e:c1:f6:a4:49:4a:77:17:cd: 12:fe:12:ec:75:81:c3:08:98:ed:13:6c:2d:c8:70: 47:11:26:f8:a1:95:49:9f:30:d0:e6:e7:36:d8:ee: 46:82:ff:89:39:dc:c2:e1:bf:26:52:13:e7:e7:42: c5:e1:5f:55:69:1c:b7:ed:fa:e2:fa:08:80:ef:b0: e8:0b:5f:b5:00:90:d3:1a:dc:49:40:6b:c8:5b:60: 42:31:5f:a2:2b:94:a2:d0:b5:1f:3c:ed:37:ba:7d: ca:81:da:63:f4:1b:25:e0:84:fa:d0:78:ea:bf:47: 95:98:45:a9:ad:c2:74:c7:5b:37:2c:52:d1:e4:90: 94:dc:89:07:e2:52:93:60:18:10:50:4e:b1:ec:c4: cb:34:b2:79:75:39:b3:56:74:d0:98:16:81:23:5e: f9:ee:c9:e6:1d:ec:62:e2:af:ef:37:bd:00:84:40: 1f:38:63:30:3a:64:01:fe:67:45:bf:fd:8a:2f:8b: af:14:9f:80:e8:aa:9b:df:eb:67:07:87:24:81:57: d5:8b:70:19:5a:eb:9d:ef:e2:e7:d9:f6:db:b8:af: c5:d0:d4:4b:cc:5b:39:c8:f4:cd:d5:da:2c:9d:9a: 2f:a6:08:bc:92:62:a8:4b:3b:1b:e9:36:83:3c:96: d6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:55:26:C8:9A:BD:C2:66:17:A3:A5:49:57:42:6F:3F:1C:83:DB:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a942301d-5541-36c8-9342-911968d44a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 129.133.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:1a:bb:a9:d0:d1:c4:35:e4:93:1a:c0:00:9e:51:01:1f:c0: 24:f2:3e:48:ec:00:95:64:e7:44:76:2d:f5:12:5c:21:d7:b6: 78:26:e7:eb:6e:d4:65:93:dd:cd:25:4c:aa:4d:cd:ed:c4:0a: 59:49:00:dc:75:3d:e0:f0:e5:40:99:42:f5:fe:c5:02:bf:26: 7c:86:ad:d5:f6:d7:01:92:ba:82:aa:35:d1:f4:4e:e9:78:8a: 2e:05:43:e3:5f:7a:b4:72:44:59:2e:2c:cb:52:99:0b:47:d5: 29:74:40:11:a0:f0:11:91:1b:9a:06:23:7f:0a:45:78:40:cd: c2:8d:b3:16:88:b4:74:e9:a0:db:ef:fc:2e:47:b5:c4:37:ef: ea:6a:ed:1c:42:76:14:7a:83:1c:60:4a:5e:cf:82:86:b3:15: 0e:ec:10:f5:4e:c7:e8:f4:b6:5d:a8:cd:36:3c:75:ed:72:cb: 22:c0:68:37:ff:16:66:86:78:7c:c3:50:57:c0:6e:a2:97:49: 92:d0:44:da:cb:60:5e:cf:ff:9d:f9:4f:f0:4f:aa:b4:fd:1b: 83:f7:49:d1:3a:54:32:8c:3d:32:c6:ed:3f:04:71:17:bd:4c: 3a:3c:ca:15:9c:e7:c3:60:ad:91:08:fa:52:a3:52:59:e7:58: c3:29:35:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/D5FULla7BMwUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk NmU0MTk4NjAtZDJiOC00YjI4LWE5YTMtM2IyZWRhYzY1OTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOzgplSewfakSUp3F80S/hLsdYHDCJjtE2wt yHBHESb4oZVJnzDQ5uc22O5Ggv+JOdzC4b8mUhPn50LF4V9VaRy37fri+giA77Do C1+1AJDTGtxJQGvIW2BCMV+iK5Si0LUfPO03un3Kgdpj9Bsl4IT60Hjqv0eVmEWp rcJ0x1s3LFLR5JCU3IkH4lKTYBgQUE6x7MTLNLJ5dTmzVnTQmBaBI1757snmHexi 4q/vN70AhEAfOGMwOmQB/mdFv/2KL4uvFJ+A6Kqb3+tnB4ckgVfVi3AZWuud7+Ln 2fbbuK/F0NRLzFs5yPTN1dosnZovpgi8kmKoSzsb6TaDPJbWnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1VJsiavcJmF6OlSVdCbz8cg9uCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvYTk0MjMwMWQtNTU0MS0z NmM4LTkzNDItOTExOTY4ZDQ0YTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgYXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcau6nQ0cQ15JMawACeUQEfwCTyPkjsAJVk50R2LfUSXCHXtngm5+tu 1GWT3c0lTKpNze3ECllJANx1PeDw5UCZQvX+xQK/JnyGrdX21wGSuoKqNdH0Tul4 ii4FQ+NferRyRFkuLMtSmQtH1Sl0QBGg8BGRG5oGI38KRXhAzcKNsxaItHTpoNvv /C5HtcQ37+pq7RxCdhR6gxxgSl7PgoazFQ7sEPVOx+j0tl2ozTY8de1yyyLAaDf/ FmaGeHzDUFfAbqKXSZLQRNrLYF7P/535T/BPqrT9G4P3SdE6VDKMPTLG7T8EcRe9 TDo8yhWc58NgrZEI+lKjUlnnWMMpNYQ= -----END CERTIFICATE-----Generated at Tue Sep 16 00:26:19 2025 by rpki-client