$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1a9f8575-e0e4-3a29-b0f0-029b67cdefa2.roa File: 1a9f8575-e0e4-3a29-b0f0-029b67cdefa2.roa (raw, json) Hash identifier: SZuLb/gvbgtWszZyaKF7osHlU9t2v28B23E9Mq3d0vs= Subject key identifier: 6F:39:F0:3E:B9:99:AF:34:94:C1:0D:B0:32:30:A9:2D:32:80:37:61 Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577 Certificate serial: 010D0C9F4328584A5FC5D9EA8C1E81EB2A6FF180 Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1a9f8575-e0e4-3a29-b0f0-029b67cdefa2.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 14593 IP address blocks: 135.129.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:d9:ea:8c:1e:81:eb:2a:6f:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=c7d9ca8f-d0a2-4c1e-a370-999f454de2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1b:f4:92:7b:28:0e:32:0d:e9:88:82:b6:8f: 7b:e6:37:31:1a:da:6a:76:7a:13:e1:13:48:31:5d: a1:00:a0:33:1e:de:08:cf:72:a0:6b:1a:ed:61:1f: a8:55:de:a5:70:26:d7:f9:ff:cb:e0:fe:43:57:03: ac:ce:6c:36:d8:45:27:07:5e:b0:03:fb:43:44:a3: e9:21:5a:af:10:7c:d6:ef:ad:95:2b:ff:a9:2f:88: 72:6b:9a:ee:11:00:b6:05:67:2b:c6:ea:84:45:45: 88:97:5e:ae:6a:d6:55:bd:f9:43:ea:47:26:a4:36: 42:bb:3c:75:67:95:c7:c1:70:86:fa:82:1f:3a:0c: ae:aa:7b:13:d9:00:fb:0c:f5:a2:da:c9:a7:ff:19: fe:eb:da:4e:e0:a2:05:25:d7:7a:fb:1b:e0:84:d6: 6d:b6:57:48:52:f4:7c:b8:08:44:66:c8:ac:f1:cf: c1:51:72:5e:c4:54:13:45:ca:9f:a1:65:30:fc:d9: 3e:5c:33:fb:f5:26:e0:42:89:18:64:d4:dd:f6:c2: 28:94:18:8c:87:97:04:f8:d4:28:bf:67:c3:d0:04: 37:43:6a:99:f5:a8:31:ac:d1:f3:c1:49:98:12:48: 33:9e:26:eb:cb:11:e1:ec:38:24:cc:2f:02:87:fb: 2d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:39:F0:3E:B9:99:AF:34:94:C1:0D:B0:32:30:A9:2D:32:80:37:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1a9f8575-e0e4-3a29-b0f0-029b67cdefa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl X509v3 Authority Key Identifier: keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer sbgp-ipAddrBlock: critical IPv4: 135.129.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:a3:ca:44:1f:c0:00:70:ed:75:86:d2:0c:68:a7:be:26:6a: 8a:f9:b8:ce:c8:0c:e7:60:e3:d5:7d:91:59:fc:ca:b8:bd:7d: 63:76:ce:14:58:bb:ae:7b:19:17:47:76:a9:b9:46:09:81:9d: fa:72:8a:c2:e9:cd:2c:ae:ba:b2:41:c3:15:c4:6c:7c:6f:8d: f2:1a:40:3a:bc:2c:31:5c:be:e3:0e:f5:d6:52:47:60:e4:03: 12:ba:ba:68:fe:11:bb:41:e9:94:6e:4b:f6:a1:fa:2a:a1:e9: ae:b2:74:66:72:79:f0:c7:a1:97:82:90:ac:b0:68:5f:ee:66: 97:d1:d5:b2:80:a3:d6:ab:f7:d3:39:34:63:64:7d:eb:86:c3: 35:2c:39:c9:1b:57:01:8b:f9:e6:65:8b:0d:24:c3:a0:94:1d: d7:7f:44:49:00:16:c7:27:a2:5f:02:f2:c1:86:f3:db:74:a6: 19:87:ad:70:55:e0:3f:f8:68:ce:0d:24:2a:e1:36:ff:a9:3d: ac:9a:3d:c5:72:91:c4:aa:f0:21:cf:3b:8f:65:28:de:a9:ef: a3:4f:43:98:38:14:b1:3b:fe:44:75:b2:68:a4:2a:85:d8:db: 16:8a:d1:1e:a7:99:bc:9c:86:06:54:59:42:4e:3d:03:1e:ea: b8:f1:97:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxdnqjB6B6ypv8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi NTc3MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk YzdkOWNhOGYtZDBhMi00YzFlLWEzNzAtOTk5ZjQ1NGRlMmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBv0knsoDjIN6YiCto975jcxGtpqdnoT4RNI MV2hAKAzHt4Iz3KgaxrtYR+oVd6lcCbX+f/L4P5DVwOszmw22EUnB16wA/tDRKPp IVqvEHzW762VK/+pL4hya5ruEQC2BWcrxuqERUWIl16uatZVvflD6kcmpDZCuzx1 Z5XHwXCG+oIfOgyuqnsT2QD7DPWi2smn/xn+69pO4KIFJdd6+xvghNZttldIUvR8 uAhEZsis8c/BUXJexFQTRcqfoWUw/Nk+XDP79SbgQokYZNTd9sIolBiMh5cE+NQo v2fD0AQ3Q2qZ9agxrNHzwUmYEkgznibryxHh7DgkzC8Ch/stpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG858D65ma80lMENsDIwqS0ygDdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2 OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvMWE5Zjg1NzUtZTBlNC0z YTI5LWIwZjAtMDI5YjY3Y2RlZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5 ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3 YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEh4FwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJujykQfwABw7XWG0gxop74maor5uM7IDOdg49V9kVn8yri9fWN2zhRY u657GRdHdqm5RgmBnfpyisLpzSyuurJBwxXEbHxvjfIaQDq8LDFcvuMO9dZSR2Dk AxK6umj+EbtB6ZRuS/ah+iqh6a6ydGZyefDHoZeCkKywaF/uZpfR1bKAo9ar99M5 NGNkfeuGwzUsOckbVwGL+eZliw0kw6CUHdd/REkAFscnol8C8sGG89t0phmHrXBV 4D/4aM4NJCrhNv+pPayaPcVykcSq8CHPO49lKN6p76NPQ5g4FLE7/kR1smikKoXY 2xaK0R6nmbychgZUWUJOPQMe6rjxl9M= -----END CERTIFICATE-----Generated at Thu Jul 10 05:58:15 2025 by rpki-client