$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4078f5b3-c30f-3d52-b15e-a5b3815f270d.roa File: 4078f5b3-c30f-3d52-b15e-a5b3815f270d.roa (raw, json) Hash identifier: oxnKwG+bFYSgXxaWiU4ZhPmkI8d5M/bG2poLzS4kQk8= Subject key identifier: DB:7F:AC:D1:AA:E6:42:41:CE:94:0F:1C:53:B3:A4:5A:F1:87:88:89 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A01690879716A5E0641F37880 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4078f5b3-c30f-3d52-b15e-a5b3815f270d.roa Signing time: Wed 28 May 2025 17:48:12 +0000 ROA not before: Wed 28 May 2025 17:48:12 +0000 ROA not after: Tue 26 Aug 2025 17:48:12 +0000 asID: 3938 IP address blocks: 129.250.35.32/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:01:69:08:79:71:6a:5e:06:41:f3:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 28 17:48:12 2025 GMT Not After : Aug 26 17:48:12 2025 GMT Subject: CN=db31a377-4695-4359-83fb-09ddd98e5923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b5:6a:bd:2c:71:06:ad:bb:3d:b3:70:a0:67: 6b:10:da:c2:ba:70:ad:07:05:6e:62:4b:bb:23:20: 37:5b:1f:93:e6:f1:04:d8:26:06:d6:37:db:7e:cd: e4:e4:0b:0e:c9:b9:ec:c0:d9:51:e2:a4:e9:4e:38: 2b:da:68:9a:26:95:4d:91:76:64:9a:64:c5:c3:92: 11:cc:1d:19:f4:58:af:f9:64:b8:c4:66:8d:5e:05: 80:ec:83:0a:cf:b5:69:56:f7:cd:e4:84:0f:c1:c3: 63:6f:fe:bd:4c:59:2d:cb:55:de:b7:61:24:ae:09: b4:e5:0b:1f:0f:89:3d:96:42:00:0e:80:17:87:3e: a7:25:a6:e9:c5:84:5c:30:ba:94:30:09:47:18:2e: ab:c3:25:51:b5:45:fd:19:40:9f:d8:53:56:b0:1d: 94:d4:aa:16:c1:8b:ae:c4:8b:65:8d:2e:05:dc:b6: 02:a4:7b:dc:03:3d:c7:6f:e7:ab:88:ff:98:f4:ec: b3:f6:97:6f:bd:1d:36:79:47:66:ae:ca:1a:ca:42: c5:86:f5:83:3a:bd:7e:37:55:fa:8f:ab:68:b6:7e: 53:de:06:77:88:b0:8a:1a:fd:0e:2d:d4:7e:d2:8c: 91:a6:e9:79:af:9d:fd:7d:22:ec:bf:7d:b8:1b:2e: 8f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7F:AC:D1:AA:E6:42:41:CE:94:0F:1C:53:B3:A4:5A:F1:87:88:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4078f5b3-c30f-3d52-b15e-a5b3815f270d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.32/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9a:16:04:2b:59:8d:b8:d6:fd:cd:61:bf:fd:4a:58:dd:cb: 3f:48:2c:8b:4f:74:66:c7:de:66:c5:cb:24:44:b4:92:17:df: 3a:98:3d:e5:16:d5:29:cb:b9:02:36:e8:bc:ab:e2:3a:49:d7: ae:36:15:a8:bf:74:59:58:eb:b6:ba:5b:cd:04:af:11:74:ef: d3:da:53:94:ca:b9:81:60:55:a9:53:af:5d:60:40:8c:82:89: 4e:5e:91:d5:42:2a:96:ab:cb:b3:00:f7:12:f4:d5:10:6f:b4: d3:68:cc:42:79:17:74:db:d3:c0:10:84:e4:47:ff:0c:9f:a8: 39:39:5f:99:89:37:af:df:93:7b:2d:c5:88:79:b2:db:d6:ff: dc:f9:f9:d5:2d:5d:50:87:09:4a:bb:51:ab:7a:5b:15:9a:cb: 38:83:a5:dd:6b:5e:40:3d:db:7e:8e:cc:b8:cd:bf:71:d0:e2: b3:f8:7f:d4:b1:dc:2f:9e:ef:ed:ae:88:51:14:22:93:2a:bb: 1d:7d:51:3c:53:65:20:a7:36:78:da:a5:59:6d:e5:95:ac:2c: a3:aa:b0:cc:5e:1e:53:5d:da:7e:8c:72:93:00:a9:06:91:7b: 60:a6:4e:ca:db:d7:2c:87:b5:bc:9c:ad:d1:8d:1a:2e:da:36: f6:9e:9f:b8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoBaQh5cWpeBkHzeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyODE3NDgxMloXDTI1MDgyNjE3NDgxMlowLzEtMCsGA1UEAxMk ZGIzMWEzNzctNDY5NS00MzU5LTgzZmItMDlkZGQ5OGU1OTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbVqvSxxBq27PbNwoGdrENrCunCtBwVuYku7 IyA3Wx+T5vEE2CYG1jfbfs3k5AsOybnswNlR4qTpTjgr2miaJpVNkXZkmmTFw5IR zB0Z9Fiv+WS4xGaNXgWA7IMKz7VpVvfN5IQPwcNjb/69TFkty1Xet2Ekrgm05Qsf D4k9lkIADoAXhz6nJabpxYRcMLqUMAlHGC6rwyVRtUX9GUCf2FNWsB2U1KoWwYuu xItljS4F3LYCpHvcAz3Hb+eriP+Y9Oyz9pdvvR02eUdmrsoaykLFhvWDOr1+N1X6 j6totn5T3gZ3iLCKGv0OLdR+0oyRpul5r539fSLsv324Gy6PewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNt/rNGq5kJBzpQPHFOzpFrxh4iJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNDA3OGY1YjMtYzMwZi0z ZDUyLWIxNWUtYTViMzgxNWYyNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfojIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBamhYEK1mNuNb9zWG//UpY3cs/SCyLT3Rmx95mxcskRLSSF986mD3l FtUpy7kCNui8q+I6SdeuNhWov3RZWOu2ulvNBK8RdO/T2lOUyrmBYFWpU69dYECM golOXpHVQiqWq8uzAPcS9NUQb7TTaMxCeRd029PAEITkR/8Mn6g5OV+ZiTev35N7 LcWIebLb1v/c+fnVLV1QhwlKu1GrelsVmss4g6Xda15APdt+jsy4zb9x0OKz+H/U sdwvnu/trohRFCKTKrsdfVE8U2UgpzZ42qVZbeWVrCyjqrDMXh5TXdp+jHKTAKkG kXtgpk7K29csh7W8nK3RjRou2jb2np+4 -----END CERTIFICATE-----Generated at Sat Jun 7 09:10:10 2025 by rpki-client