$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27f91211-b4f1-3e7f-8965-9d2c4feba02e.roa File: 27f91211-b4f1-3e7f-8965-9d2c4feba02e.roa (raw, json) Hash identifier: BVOJWf5+pzdWjdw4bewXqQ++moq5v2ltOermMOHx078= Subject key identifier: 94:C1:24:E3:27:4F:D5:FC:30:BB:34:8D:64:21:A5:0F:B1:E3:48:E5 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858491D717CB832B65F9578FA4D80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27f91211-b4f1-3e7f-8965-9d2c4feba02e.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 2914 IP address blocks: 129.250.15.0/24 maxlen: 30 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:7c:b8:32:b6:5f:95:78:fa:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=86ba4727-b766-4111-86e9-0a386945ef64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:00:c2:90:e1:70:2f:7b:1c:44:bc:c3:00: dd:fe:62:09:02:1e:a9:36:3f:69:bc:45:31:a2:97: fb:5e:ea:96:c1:05:0b:e4:a8:19:08:5b:05:ee:79: 09:27:57:fe:3f:e1:8e:0d:7f:86:90:ef:82:4e:aa: 7e:21:be:f3:31:bc:72:44:d0:a3:c6:b8:31:43:c3: 2a:fc:7b:de:c1:f8:84:fa:9f:94:5b:f8:c5:37:e5: 84:c3:14:f1:9a:d6:45:53:c4:b2:12:b5:a8:15:5b: 64:88:34:f8:98:06:b5:6f:56:2d:64:55:c7:36:e7: dd:68:f2:a3:e4:b7:27:65:71:28:ab:69:38:52:1f: 26:28:24:15:3c:8d:7b:12:5e:97:ae:76:52:7c:80: 22:4b:46:eb:5e:8a:88:69:a9:2a:c4:ac:ad:41:70: 02:9d:00:54:c7:eb:a0:e7:f4:f8:49:8b:93:06:95: 4c:cd:bd:22:47:0f:b2:0f:0b:4f:08:f3:fc:3a:8b: 47:eb:19:f3:56:b8:3f:d3:d5:33:24:d7:d2:7c:86: da:51:50:4f:be:a7:47:0a:b3:5a:a9:d5:88:da:cb: ed:ec:83:78:d9:e7:00:dd:42:74:5d:fa:ff:b1:52: e6:0c:9d:3a:c6:ce:32:d4:38:2b:cd:99:28:e3:3d: c2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C1:24:E3:27:4F:D5:FC:30:BB:34:8D:64:21:A5:0F:B1:E3:48:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/27f91211-b4f1-3e7f-8965-9d2c4feba02e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:0e:51:29:37:c6:93:44:0f:6b:61:2f:be:0f:a6:75:28:a5: e1:6a:eb:d5:5d:18:75:51:9b:18:db:18:00:0c:15:e5:19:24: ab:2b:80:26:5a:c1:e1:b6:62:1f:4b:e6:c9:37:48:98:79:a6: 8e:4d:32:a9:3b:42:c7:fc:4b:67:77:4f:6c:bd:fd:01:aa:a0: 54:45:76:dc:51:b0:ec:d7:c3:49:89:7c:96:cc:2a:7a:ed:13: 70:2a:15:0d:8f:dd:b3:f8:7d:22:85:a4:9c:ba:9f:74:09:fe: 55:eb:d4:74:96:9e:68:3b:f7:93:1f:11:8a:5e:c4:86:4c:47: bc:0a:9d:1f:c9:2e:1b:30:fa:99:fd:77:d7:d5:43:66:73:b8: 31:89:03:91:25:32:e8:a4:9d:65:a8:0b:2e:11:bc:23:44:a6: 49:76:8b:16:2b:f3:1f:04:b7:7d:db:a4:7a:70:c1:82:8e:36: e9:71:14:ef:f4:06:30:df:45:2c:f1:df:c9:ef:f9:60:aa:4b: d8:6a:21:c8:ca:1c:b5:72:1a:d7:43:72:f6:05:6c:73:41:7f: 32:d1:4a:e4:46:06:db:1b:6b:53:69:82:98:83:fa:c2:e7:da: 62:c1:ec:7c:05:fb:96:89:b8:d4:07:ad:7c:26:63:5d:36:c4: 48:31:31:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXy4MrZflXj6TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ODZiYTQ3MjctYjc2Ni00MTExLTg2ZTktMGEzODY5NDVlZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt00AwpDhcC97HES8wwDd/mIJAh6pNj9pvEUx opf7XuqWwQUL5KgZCFsF7nkJJ1f+P+GODX+GkO+CTqp+Ib7zMbxyRNCjxrgxQ8Mq /HvewfiE+p+UW/jFN+WEwxTxmtZFU8SyErWoFVtkiDT4mAa1b1YtZFXHNufdaPKj 5LcnZXEoq2k4Uh8mKCQVPI17El6XrnZSfIAiS0brXoqIaakqxKytQXACnQBUx+ug 5/T4SYuTBpVMzb0iRw+yDwtPCPP8OotH6xnzVrg/09UzJNfSfIbaUVBPvqdHCrNa qdWI2svt7IN42ecA3UJ0Xfr/sVLmDJ06xs4y1DgrzZko4z3CfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTBJOMnT9X8MLs0jWQhpQ+x40jlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMjdmOTEyMTEtYjRmMS0z ZTdmLTg5NjUtOWQyYzRmZWJhMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgfoPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL0OUSk3xpNED2thL74PpnUopeFq69VdGHVRmxjbGAAMFeUZJKsrgCZa weG2Yh9L5sk3SJh5po5NMqk7Qsf8S2d3T2y9/QGqoFRFdtxRsOzXw0mJfJbMKnrt E3AqFQ2P3bP4fSKFpJy6n3QJ/lXr1HSWnmg795MfEYpexIZMR7wKnR/JLhsw+pn9 d9fVQ2ZzuDGJA5ElMuiknWWoCy4RvCNEpkl2ixYr8x8Et33bpHpwwYKONulxFO/0 BjDfRSzx38nv+WCqS9hqIcjKHLVyGtdDcvYFbHNBfzLRSuRGBtsba1NpgpiD+sLn 2mLB7HwF+5aJuNQHrXwmY102xEgxMek= -----END CERTIFICATE-----Generated at Fri Apr 4 17:20:05 2025 by rpki-client