$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/c0d47dc4-769b-3ebb-bc78-f3b6986b2133.roa File: c0d47dc4-769b-3ebb-bc78-f3b6986b2133.roa (raw, json) Hash identifier: gsIeVo2ILD9Md9MOt+P8M2ppzJWDx9dznvtV3OvzhPs= Subject key identifier: 8F:66:C6:E1:61:F5:6C:B4:25:B9:DF:58:74:47:49:F8:61:E7:45:26 Certificate issuer: /CN=dc49520f-d0a0-4d00-a42f-35a1023569ac Certificate serial: 010D0C9F43285849350E8584205F29B708365B00 Authority key identifier: 63:AE:BC:ED:8F:0F:D5:D0:67:C4:92:B1:34:6E:29:97:B7:82:A3:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/c0d47dc4-769b-3ebb-bc78-f3b6986b2133.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 25776 IP address blocks: 129.15.0.0/16 maxlen: 24 192.35.96.0/24 maxlen: 24 192.35.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:85:84:20:5f:29:b7:08:36:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc49520f-d0a0-4d00-a42f-35a1023569ac Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=df263387-542f-44cf-8a87-fc3ded9a9eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:92:4d:74:fd:8b:cd:92:9f:9c:34:2c:f4: d7:60:c2:72:01:93:5e:7f:42:7d:9a:01:05:9b:54: 9d:21:44:4e:16:f1:b5:24:2e:24:77:50:0c:ff:7e: 96:20:71:b9:44:a6:b4:3d:a8:79:b4:2b:e4:a6:4c: 7a:81:18:ed:1b:64:f4:5f:b3:27:34:91:05:f1:8d: 1b:7d:4e:e5:ba:c4:dc:44:af:20:09:47:0c:52:de: b5:47:96:36:ed:b5:3a:ae:31:19:fe:56:55:46:c4: 06:67:2e:9e:6a:8a:d7:39:72:47:74:ce:43:1b:86: 55:fa:ee:44:28:ad:e6:51:81:e1:dc:6d:0a:79:00: 3a:d5:f6:e6:38:fe:a1:54:5e:e5:52:fc:bf:ef:88: 7f:d2:d8:a1:ab:df:2b:75:fe:b4:40:84:08:95:2d: c7:06:10:fc:66:d1:e2:94:77:44:c4:f2:8a:ca:34: 98:c9:50:4e:bd:d9:ac:bd:0c:82:50:1e:3a:c1:01: 69:b4:e9:e5:d8:3f:7d:d6:32:32:78:fc:ba:78:69: de:e1:3c:9b:2d:2a:3e:a2:9f:c4:46:af:41:9c:24: 36:4f:71:ea:65:dd:2e:dd:d8:70:7b:4f:6f:b6:f4: 11:dc:b4:14:64:83:a3:40:39:40:6e:42:e7:5c:35: 88:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:66:C6:E1:61:F5:6C:B4:25:B9:DF:58:74:47:49:F8:61:E7:45:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/c0d47dc4-769b-3ebb-bc78-f3b6986b2133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.crl X509v3 Authority Key Identifier: keyid:63:AE:BC:ED:8F:0F:D5:D0:67:C4:92:B1:34:6E:29:97:B7:82:A3:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer sbgp-ipAddrBlock: critical IPv4: 129.15.0.0/16 192.35.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a4:e7:5d:21:0c:77:df:7c:58:e3:85:e4:21:68:02:7b:af: 6b:a3:40:29:83:cb:d4:6e:25:20:e0:16:23:86:c4:2c:fb:ea: a4:f6:e4:23:0a:be:f6:74:ef:a3:3b:f9:2f:7c:e2:ce:9a:6a: f4:47:13:67:b7:19:a8:b9:92:23:cf:30:a9:d0:4d:79:de:f7: 0f:f6:50:ea:5f:0b:48:36:05:26:17:fc:3b:50:1b:79:98:5a: 19:d1:bc:03:d5:dd:aa:fa:c6:3e:b6:26:a6:c9:f2:91:ec:05: 61:85:ed:75:55:d4:ed:a8:8c:b9:4a:62:50:b6:dc:3f:1c:0e: b2:e2:72:a1:0e:0e:9f:d9:c9:42:aa:ad:f2:fb:43:ec:06:ec: 50:22:ab:62:1c:11:db:5a:f7:40:a8:60:f0:93:80:80:2f:97: 31:db:11:d7:e1:00:f3:0c:57:be:d8:13:6a:11:48:3c:91:a8: ef:72:a0:9c:fe:15:c2:af:de:81:ca:b2:ab:e9:9a:de:ed:f6: 62:5f:6b:f1:b2:8f:d3:6b:36:96:52:7a:ed:a8:44:47:47:9c: 57:20:6e:ca:0b:e0:a0:c0:f6:0a:b2:b0:34:b8:7e:b2:b9:19: 6a:10:7f:92:16:d4:e0:6e:ff:80:72:67:01:f3:aa:ac:dd:83: ca:72:ec:d1 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEk1DoWEIF8ptwg2WwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0OTUyMGYtZDBhMC00ZDAwLWE0MmYtMzVhMTAyMzU2 OWFjMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZGYyNjMzODctNTQyZi00NGNmLThhODctZmMzZGVkOWE5ZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwWSTXT9i82Sn5w0LPTXYMJyAZNef0J9mgEF m1SdIUROFvG1JC4kd1AM/36WIHG5RKa0Pah5tCvkpkx6gRjtG2T0X7MnNJEF8Y0b fU7lusTcRK8gCUcMUt61R5Y27bU6rjEZ/lZVRsQGZy6eaorXOXJHdM5DG4ZV+u5E KK3mUYHh3G0KeQA61fbmOP6hVF7lUvy/74h/0tihq98rdf60QIQIlS3HBhD8ZtHi lHdExPKKyjSYyVBOvdmsvQyCUB46wQFptOnl2D991jIyePy6eGne4TybLSo+op/E Rq9BnCQ2T3HqZd0u3dhwe09vtvQR3LQUZIOjQDlAbkLnXDWIvwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFI9mxuFh9Wy0JbnfWHRHSfhh50UmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYzQ5 NTIwZi1kMGEwLTRkMDAtYTQyZi0zNWExMDIzNTY5YWMvYzBkNDdkYzQtNzY5Yi0z ZWJiLWJjNzgtZjNiNjk4NmIyMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGM0OTUyMGYtZDBhMC00ZDAwLWE0 MmYtMzVhMTAyMzU2OWFjL2RjNDk1MjBmLWQwYTAtNGQwMC1hNDJmLTM1YTEwMjM1 NjlhYy5jcmwwHwYDVR0jBBgwFoAUY6687Y8P1dBnxJKxNG4pl7eCo1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYzQ5NTIwZi1kMGEwLTRkMDAtYTQyZi0zNWEx MDIzNTY5YWMuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAgQ8DBAHA I2AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEADaTnXSEMd998WOOF5CFoAnuva6NAKYPL1G4lIOAWI4bELPvq pPbkIwq+9nTvozv5L3zizppq9EcTZ7cZqLmSI88wqdBNed73D/ZQ6l8LSDYFJhf8 O1AbeZhaGdG8A9XdqvrGPrYmpsnykewFYYXtdVXU7aiMuUpiULbcPxwOsuJyoQ4O n9nJQqqt8vtD7AbsUCKrYhwR21r3QKhg8JOAgC+XMdsR1+EA8wxXvtgTahFIPJGo 73KgnP4Vwq/egcqyq+ma3u32Yl9r8bKP02s2llJ67ahER0ecVyBuygvgoMD2CrKw NLh+srkZahB/khbU4G7/gHJnAfOqrN2DynLs0Q== -----END CERTIFICATE-----Generated at Sat Apr 12 01:17:17 2025 by rpki-client