$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa File: 0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa (raw, json) Hash identifier: +2TYNNhYpLCEglrKueBTtqvJxbOXlYLAWCgpinVONGQ= Subject key identifier: D3:34:46:92:6C:78:AB:FE:5A:10:AF:A1:96:C6:23:71:13:E5:6B:05 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584917DC369D2DCC089771777250 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 1225 IP address blocks: 129.250.35.248/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:36:9d:2d:cc:08:97:71:77:72:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=10b91e72-5bbd-4538-a344-469566b836c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1f:8a:6d:cb:02:d8:d1:4e:4d:bd:07:14:ed: 34:6c:7e:63:40:a4:ba:b5:33:ae:34:b3:c1:de:c0: ac:47:f1:60:b3:15:a3:8d:35:17:ce:3e:06:44:54: e0:aa:ee:3f:e8:f9:03:27:ff:65:24:89:eb:19:0b: 74:cb:c2:db:35:82:61:99:18:54:79:bd:28:31:2f: e6:2c:bc:0c:bf:4e:9d:18:e5:54:21:75:60:fc:d6: 92:36:5c:a4:68:e9:e0:85:9d:78:7b:af:b6:e6:8d: 4e:f9:5d:46:24:40:2c:56:30:5f:44:f9:72:8c:0f: 8e:d4:17:06:11:35:41:00:3c:c3:67:0f:a2:8a:2b: 45:d3:2d:89:4e:60:fc:55:8b:f1:c5:39:ec:b8:51: dc:3e:76:b8:b9:c6:97:c2:aa:83:bb:c2:a4:93:36: ee:bd:96:c9:cf:94:37:72:d4:b2:ac:54:e1:bd:7b: e8:d2:81:26:b4:2f:0d:ff:f5:47:0d:f5:1d:91:42: 4d:07:5f:79:14:80:8a:5b:76:0c:ba:67:96:46:15: 78:95:6d:d1:89:76:c3:85:84:35:1d:33:31:8c:96: 55:d9:9a:30:57:c2:8b:54:6f:0a:61:38:fd:08:b6: 1d:b4:e6:9c:36:be:50:4d:f3:f0:9f:b5:14:2c:1b: 9c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:34:46:92:6C:78:AB:FE:5A:10:AF:A1:96:C6:23:71:13:E5:6B:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0cbf70aa-7bb9-3d73-b12e-f02a73f0814f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.248/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6e:3d:1a:f8:4b:96:d1:e4:d3:5c:58:f2:7c:b9:d9:00:a9: c7:62:f6:a8:11:5a:91:ce:c4:52:ba:f6:b1:d0:e3:e0:46:21: 4a:91:9b:4f:76:4a:2b:53:13:7f:99:99:84:3d:43:62:4c:17: 0b:44:c2:a3:5d:c0:96:68:e4:71:f3:83:2b:ad:0e:d2:fb:1a: c5:5c:bf:62:27:4a:dc:42:ec:b8:5d:9e:5f:5c:70:43:bd:de: b2:98:25:8b:7b:e7:e0:62:b1:74:b8:c3:d4:47:92:8b:a0:22: 6c:c6:fb:71:cc:ca:55:d3:7b:d9:36:d8:8a:4c:02:12:77:1d: 77:3f:ef:8f:60:0b:4c:f6:66:e9:71:66:4c:5f:5b:09:a7:8c: 37:0e:65:b1:71:0d:41:06:ba:20:ce:a4:73:50:47:e7:e6:a8: 07:10:8b:3d:52:2c:ff:2b:4b:07:11:ab:17:22:09:98:ff:78: a4:75:4d:da:c4:dd:d8:2d:89:6c:99:c4:1f:53:bb:f3:4b:a3: ae:8f:43:90:b0:f2:29:c9:e9:10:70:af:2c:2c:9f:e1:50:cf: 38:01:f8:f2:ca:20:e9:ea:d3:c3:0b:2e:9e:75:3b:60:f9:ee: ec:cd:b9:bc:bb:51:12:8a:5b:95:3f:2e:c8:f2:f7:c9:6d:40: de:0f:90:2b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkX3DadLcwIl3F3clAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MTBiOTFlNzItNWJiZC00NTM4LWEzNDQtNDY5NTY2YjgzNmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB+KbcsC2NFOTb0HFO00bH5jQKS6tTOuNLPB 3sCsR/FgsxWjjTUXzj4GRFTgqu4/6PkDJ/9lJInrGQt0y8LbNYJhmRhUeb0oMS/m LLwMv06dGOVUIXVg/NaSNlykaOnghZ14e6+25o1O+V1GJEAsVjBfRPlyjA+O1BcG ETVBADzDZw+iiitF0y2JTmD8VYvxxTnsuFHcPna4ucaXwqqDu8KkkzbuvZbJz5Q3 ctSyrFThvXvo0oEmtC8N//VHDfUdkUJNB195FICKW3YMumeWRhV4lW3RiXbDhYQ1 HTMxjJZV2ZowV8KLVG8KYTj9CLYdtOacNr5QTfPwn7UULBucBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNM0RpJseKv+WhCvoZbGI3ET5WsFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGNiZjcwYWEtN2JiOS0z ZDczLWIxMmUtZjAyYTczZjA4MTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDgfoj+DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgbj0a+EuW0eTTXFjyfLnZAKnHYvaoEVqRzsRSuvax0OPgRiFKkZtP dkorUxN/mZmEPUNiTBcLRMKjXcCWaORx84MrrQ7S+xrFXL9iJ0rcQuy4XZ5fXHBD vd6ymCWLe+fgYrF0uMPUR5KLoCJsxvtxzMpV03vZNtiKTAISdx13P++PYAtM9mbp cWZMX1sJp4w3DmWxcQ1BBrogzqRzUEfn5qgHEIs9Uiz/K0sHEasXIgmY/3ikdU3a xN3YLYlsmcQfU7vzS6Ouj0OQsPIpyekQcK8sLJ/hUM84AfjyyiDp6tPDCy6edTtg +e7szbm8u1ESiluVPy7I8vfJbUDeD5Ar -----END CERTIFICATE-----Generated at Fri Apr 4 17:20:07 2025 by rpki-client