$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cb92ecf7-b628-3de1-8e20-cd46e8145783.roa File: cb92ecf7-b628-3de1-8e20-cd46e8145783.roa (raw, json) Hash identifier: Tn7x4QxivxWbdeNOqwJs0ZJOWjE5w+nmJem+WtziZB0= Subject key identifier: C5:D5:44:BF:CC:D5:8C:2F:DB:A9:E5:AA:B2:43:DC:A1:70:14:14:49 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A0168943A3B50693B59DC6F00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cb92ecf7-b628-3de1-8e20-cd46e8145783.roa Signing time: Wed 28 May 2025 17:47:17 +0000 ROA not before: Wed 28 May 2025 17:47:17 +0000 ROA not after: Tue 26 Aug 2025 17:47:17 +0000 asID: 275 IP address blocks: 129.250.35.16/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:01:68:94:3a:3b:50:69:3b:59:dc:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 28 17:47:17 2025 GMT Not After : Aug 26 17:47:17 2025 GMT Subject: CN=60b84906-5797-427a-832e-5c01885ebf6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c7:31:5c:05:32:39:6f:3e:e1:73:4b:de:fc: dc:0c:1c:f6:ba:a7:7c:44:22:37:c1:68:c8:80:a8: 8c:95:62:e8:34:1d:86:23:88:7d:9c:d7:33:4c:8c: ac:1e:03:ad:63:2a:f0:6d:ee:55:24:05:10:ec:7a: 67:48:91:04:24:93:6a:b4:eb:6b:2c:00:18:fa:2a: d5:b9:5b:db:ba:5f:c0:3a:5b:20:47:73:e5:4a:a1: c9:f2:48:21:84:90:5a:8e:5e:49:4b:c2:b9:98:37: 9c:ed:bb:35:d3:e9:2f:62:f2:d3:9f:49:eb:c4:5b: 1f:70:23:79:02:20:00:69:8b:ef:9c:61:dd:5f:b0: 21:45:e3:55:ac:2c:54:e2:bd:06:ff:30:4e:e6:64: c0:80:f6:81:61:7c:22:0d:80:57:7f:a8:51:56:5b: 3e:35:6c:aa:a3:d0:46:89:79:fb:79:6d:9e:55:52: 89:60:be:ae:a8:75:a2:61:39:29:62:51:64:94:6d: 78:cb:8c:d5:9e:9b:13:d9:00:66:e0:ce:8f:3e:94: ae:9e:b2:5e:ec:8b:b3:53:79:87:1c:29:17:c9:84: f2:5a:ad:29:18:3f:00:fa:b1:b6:39:b9:86:7e:0c: f2:64:fd:9b:50:33:6a:2c:5e:7a:4d:f0:6a:11:7f: 54:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D5:44:BF:CC:D5:8C:2F:DB:A9:E5:AA:B2:43:DC:A1:70:14:14:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cb92ecf7-b628-3de1-8e20-cd46e8145783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.16/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ca:e4:c6:7d:af:18:06:03:45:06:b9:45:a3:50:b1:e2:57: 26:76:2e:08:5e:97:2a:c1:64:16:b6:1b:27:43:23:6d:fb:70: 56:c9:9c:75:95:00:a4:18:27:21:eb:cf:99:3d:7c:59:29:c3: a1:2e:9b:81:3c:5d:12:62:89:fc:21:10:9e:a1:3b:ef:d0:c0: 19:7c:ad:67:d7:f5:7d:5f:f1:cc:36:23:68:88:cb:79:1d:d3: 05:e0:fb:5a:66:d2:40:67:3a:5b:6f:01:0a:ee:a2:5a:97:29: 5d:30:aa:bc:9f:99:12:22:85:af:da:fd:bc:b8:e4:2e:1d:d0: e7:e6:e2:e1:fc:4b:e6:a6:0e:1a:e3:bd:10:49:e3:04:a9:ab: 06:b0:77:e3:13:a5:42:18:a5:78:55:34:e3:ab:e0:7f:b9:ef: 62:a7:dc:65:5c:7b:3c:15:e6:11:69:0e:c8:4d:00:a2:cd:09: 61:01:3b:ab:7d:b3:ad:9d:cb:12:df:5f:3b:e5:1e:ec:84:88: 70:ee:40:b2:61:91:bd:78:75:5f:18:bc:eb:cc:97:e6:2b:c3: 5e:f5:6c:c1:e0:62:69:88:8b:7e:26:58:30:d9:be:ec:4d:2f: f3:92:c8:5a:7f:99:4f:ec:30:63:10:63:73:50:30:f7:72:18: 59:90:c3:ed -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoBaJQ6O1BpO1ncbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyODE3NDcxN1oXDTI1MDgyNjE3NDcxN1owLzEtMCsGA1UEAxMk NjBiODQ5MDYtNTc5Ny00MjdhLTgzMmUtNWMwMTg4NWViZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqscxXAUyOW8+4XNL3vzcDBz2uqd8RCI3wWjI gKiMlWLoNB2GI4h9nNczTIysHgOtYyrwbe5VJAUQ7HpnSJEEJJNqtOtrLAAY+irV uVvbul/AOlsgR3PlSqHJ8kghhJBajl5JS8K5mDec7bs10+kvYvLTn0nrxFsfcCN5 AiAAaYvvnGHdX7AhReNVrCxU4r0G/zBO5mTAgPaBYXwiDYBXf6hRVls+NWyqo9BG iXn7eW2eVVKJYL6uqHWiYTkpYlFklG14y4zVnpsT2QBm4M6PPpSunrJe7IuzU3mH HCkXyYTyWq0pGD8A+rG2ObmGfgzyZP2bUDNqLF56TfBqEX9UkQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMXVRL/M1Ywv26nlqrJD3KFwFBRJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2I5MmVjZjctYjYyOC0z ZGUxLThlMjAtY2Q0NmU4MTQ1NzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfojEDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAVyuTGfa8YBgNFBrlFo1Cx4lcmdi4IXpcqwWQWthsnQyNt+3BWyZx1 lQCkGCch68+ZPXxZKcOhLpuBPF0SYon8IRCeoTvv0MAZfK1n1/V9X/HMNiNoiMt5 HdMF4PtaZtJAZzpbbwEK7qJalyldMKq8n5kSIoWv2v28uOQuHdDn5uLh/Evmpg4a 470QSeMEqasGsHfjE6VCGKV4VTTjq+B/ue9ip9xlXHs8FeYRaQ7ITQCizQlhATur fbOtncsS31875R7shIhw7kCyYZG9eHVfGLzrzJfmK8Ne9WzB4GJpiIt+Jlgw2b7s TS/zkshaf5lP7DBjEGNzUDD3chhZkMPt -----END CERTIFICATE-----Generated at Mon Jun 9 00:04:52 2025 by rpki-client