$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f3d36a31-45ed-3c43-94e2-06fbe7764b47.roa File: f3d36a31-45ed-3c43-94e2-06fbe7764b47.roa (raw, json) Hash identifier: gmEb9CF5luyNtUcmkQUUwhvsURePmEnKLyOGkLEoCrw= Subject key identifier: 5D:F8:FA:15:C4:73:6E:43:8A:11:66:D7:95:00:AA:16:8D:03:78:F4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858491D717CAB2BE86AEB3EA0F0F0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f3d36a31-45ed-3c43-94e2-06fbe7764b47.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 2914 IP address blocks: 129.250.1.252/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:7c:ab:2b:e8:6a:eb:3e:a0:f0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=b6fed6ce-102b-464c-9505-99345f0e0f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d7:2f:53:4a:b9:a1:7d:9e:47:d7:c3:0f:25: 6f:3a:7f:29:e2:6d:36:59:45:2e:de:23:53:b5:1c: 19:bc:5a:22:6c:18:b4:04:f8:4c:dd:3c:21:a4:41: ec:3b:90:f5:e3:42:a5:83:cf:6b:0d:39:68:b9:92: 13:9c:d2:83:70:b8:6c:88:0e:9b:e7:3e:41:ff:82: 15:5e:f8:8f:f6:9d:3a:f5:9e:3f:82:af:a1:6e:b2: 5c:cd:fa:9e:71:11:f3:84:76:44:e4:f2:58:b2:bc: c5:c5:5f:7c:78:52:7d:a2:c0:7c:47:34:dc:47:bb: 26:9a:40:bf:27:72:35:34:71:5a:14:8e:54:93:ae: 61:02:a8:df:83:1c:48:d4:1c:bf:13:91:71:5a:ab: 4c:74:82:ba:90:1b:70:fb:1f:71:05:9a:ee:c7:88: e3:b7:71:de:4c:3d:fc:5c:a5:a1:bd:d2:ab:10:ad: 87:da:fc:e4:9a:0e:14:25:9c:08:4b:91:ac:f5:7a: f3:b4:9a:eb:ee:c9:d2:70:a9:b3:62:d1:3e:5a:19: f5:c8:14:26:c9:f9:d8:ad:b4:ec:f6:0b:b2:a9:08: ef:91:bc:65:14:e0:c6:34:ad:2f:74:0b:76:0b:8d: b3:6b:a2:7a:a1:ac:d5:f6:ef:6f:ea:77:5b:d8:a2: 56:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F8:FA:15:C4:73:6E:43:8A:11:66:D7:95:00:AA:16:8D:03:78:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f3d36a31-45ed-3c43-94e2-06fbe7764b47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.1.252/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4c:73:73:d6:c3:18:a3:d2:97:e1:67:39:da:16:70:6f:9b: 76:61:19:a9:de:45:1a:d4:d1:2d:05:9f:45:7b:dc:92:33:60: 89:b7:a0:a3:33:e7:d3:8e:4f:8d:9a:d1:75:fd:4c:c4:dc:ad: e6:1a:d7:08:3b:33:13:77:9f:15:f1:aa:7f:4d:b3:d2:4a:79: ca:40:06:b8:45:a9:f2:45:1c:30:0a:0d:d8:d1:c8:2b:07:2d: 7d:de:6e:e1:78:0e:cf:f2:6d:71:20:07:61:06:71:e2:f7:83: 28:e9:92:90:db:32:e6:0d:ce:73:66:df:31:d4:4c:a1:03:a4: 7c:62:17:71:34:73:2f:91:f2:94:79:64:e9:7d:08:0e:3d:a1: d1:ef:83:dd:2f:b6:27:f9:b1:b5:c7:67:aa:2f:ad:74:47:59: f2:53:35:ec:6b:76:a0:6f:40:db:f5:93:ef:60:c0:d3:f8:73: 08:62:b1:64:70:60:46:71:7c:8d:23:49:3c:28:66:5b:78:4c: d5:34:d8:8c:c4:42:93:26:cc:65:f8:fd:4e:b5:ec:e4:95:19: 48:df:cc:a1:cf:5a:69:d9:a1:a4:27:8f:11:00:71:fe:97:f8: b8:12:ca:99:22:1f:92:77:9b:8a:e7:4d:35:32:7b:2a:48:d1: 3d:7b:1d:0e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkdcXyrK+hq6z6g8PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk YjZmZWQ2Y2UtMTAyYi00NjRjLTk1MDUtOTkzNDVmMGUwZjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtcvU0q5oX2eR9fDDyVvOn8p4m02WUUu3iNT tRwZvFoibBi0BPhM3TwhpEHsO5D140Klg89rDTlouZITnNKDcLhsiA6b5z5B/4IV XviP9p069Z4/gq+hbrJczfqecRHzhHZE5PJYsrzFxV98eFJ9osB8RzTcR7smmkC/ J3I1NHFaFI5Uk65hAqjfgxxI1By/E5FxWqtMdIK6kBtw+x9xBZrux4jjt3HeTD38 XKWhvdKrEK2H2vzkmg4UJZwIS5Gs9XrztJrr7snScKmzYtE+Whn1yBQmyfnYrbTs 9guyqQjvkbxlFODGNK0vdAt2C42za6J6oazV9u9v6ndb2KJWFQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF34+hXEc25DihFm15UAqhaNA3j0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjNkMzZhMzEtNDVlZC0z YzQzLTk0ZTItMDZmYmU3NzY0YjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAgfoB/DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+THNz1sMYo9KX4Wc52hZwb5t2YRmp3kUa1NEtBZ9Fe9ySM2CJt6Cj M+fTjk+NmtF1/UzE3K3mGtcIOzMTd58V8ap/TbPSSnnKQAa4RanyRRwwCg3Y0cgr By193m7heA7P8m1xIAdhBnHi94Mo6ZKQ2zLmDc5zZt8x1EyhA6R8YhdxNHMvkfKU eWTpfQgOPaHR74PdL7Yn+bG1x2eqL610R1nyUzXsa3agb0Db9ZPvYMDT+HMIYrFk cGBGcXyNI0k8KGZbeEzVNNiMxEKTJsxl+P1OtezklRlI38yhz1pp2aGkJ48RAHH+ l/i4EsqZIh+Sd5uK5001MnsqSNE9ex0O -----END CERTIFICATE-----Generated at Fri Apr 4 17:15:03 2025 by rpki-client