$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa File: 8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa (raw, json) Hash identifier: h8kKFmchcnU39gBSYLETjyyXpuMeN4YwrSaIfBp0Pw4= Subject key identifier: BD:18:9C:9F:9A:3D:CF:5E:7C:58:FC:BD:46:C5:15:1D:3F:FF:01:31 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584A65666D6A0816076472F6FEC0 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa Signing time: Thu 03 Jul 2025 13:23:47 +0000 ROA not before: Thu 03 Jul 2025 13:23:47 +0000 ROA not after: Wed 01 Oct 2025 13:23:47 +0000 asID: 14618 IP address blocks: 129.41.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:65:66:6d:6a:08:16:07:64:72:f6:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Jul 3 13:23:47 2025 GMT Not After : Oct 1 13:23:47 2025 GMT Subject: CN=cdd1fb0a-8b61-43d6-af08-6bddd00f1263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:e1:bd:1f:c3:18:2a:7f:3b:69:cf:37:28: d0:65:e8:a2:d8:9c:25:75:68:78:0e:2f:6e:c2:6f: 5a:be:ea:50:57:c9:2d:fb:d2:5d:15:86:66:c6:a9: 87:1e:4f:b9:44:39:ab:b9:93:80:24:ac:27:b1:d5: 76:82:ac:27:98:e3:39:73:53:db:ed:15:51:f7:1b: 04:39:94:e8:eb:73:4b:ab:e2:92:34:df:ef:05:e3: 50:97:68:4f:7d:d2:82:7a:05:b2:8b:59:42:36:cc: e1:6f:cb:63:b9:cc:bd:dd:11:79:60:fd:0e:c9:57: f5:30:f1:e0:a9:c9:20:14:6b:aa:ba:49:4c:74:41: 7d:06:7c:af:d7:ed:74:92:e6:84:a0:75:77:a0:cc: 47:79:b3:d3:70:ec:97:51:c9:fd:48:21:53:44:67: 1c:72:e5:25:f0:e3:e5:8f:7b:9c:ea:0d:7e:39:05: a7:7e:a8:21:35:ef:83:ca:15:31:7e:26:c3:7b:04: 14:8e:38:c4:ce:48:5d:dc:9c:ae:ae:48:a0:06:f5: 40:46:e9:64:f7:75:59:e1:64:ad:b8:8e:d3:27:e5: ef:7e:4f:ff:7e:b0:27:17:79:db:06:79:65:87:3e: 57:49:4d:8b:3e:98:49:22:5c:c4:14:3d:a8:d4:08: dc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:18:9C:9F:9A:3D:CF:5E:7C:58:FC:BD:46:C5:15:1D:3F:FF:01:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/8f9ace52-706b-3d0d-b909-d2ab34b1a981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 129.41.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c5:2f:b1:6f:fd:61:5b:6a:9c:0f:9a:53:f5:52:75:00:15: c0:19:27:be:1f:dc:72:fa:28:8e:aa:b3:db:61:0a:f5:30:f3: 8d:c7:78:67:b3:0d:da:e6:d9:3a:96:0e:92:46:0e:ce:a0:c6: 78:13:41:9b:f4:a6:3c:cf:1b:85:b0:b9:55:3d:7c:e4:ac:de: 73:3a:ee:76:d0:35:d8:13:8b:60:a4:25:ba:f9:42:8a:fc:4a: f9:15:70:b3:0e:81:ae:19:bf:ea:bb:c5:53:b9:dc:1c:18:56: 40:37:ad:e8:c2:75:5c:25:d6:4b:af:3f:58:10:b7:03:14:ae: 2d:2b:4f:e1:25:4a:a4:63:5a:57:5f:b4:42:24:0f:26:5a:e6: 31:6f:6c:e2:28:f6:2a:f7:b7:6a:c9:32:5c:b8:b8:e4:92:0e: 85:b7:af:7b:9a:39:ff:16:c9:7d:c6:89:ae:01:2f:b2:da:4f: 8e:2d:d0:71:f1:cb:05:c4:92:a4:8a:74:78:e6:16:dd:ba:c1: 65:5f:35:50:75:fe:7b:4b:d9:3d:4c:b4:9d:9a:63:e6:90:95: e9:00:d4:84:a3:95:01:e6:75:9b:a0:dd:85:de:e1:90:b4:aa: 9a:cb:0f:0f:42:47:bd:c3:8b:a6:9f:b4:58:00:03:bd:7a:56: 73:1d:7e:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEplZm1qCBYHZHL2/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDcwMzEzMjM0N1oXDTI1MTAwMTEzMjM0N1owLzEtMCsGA1UEAxMk Y2RkMWZiMGEtOGI2MS00M2Q2LWFmMDgtNmJkZGQwMGYxMjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbHhvR/DGCp/O2nPNyjQZeii2JwldWh4Di9u wm9avupQV8kt+9JdFYZmxqmHHk+5RDmruZOAJKwnsdV2gqwnmOM5c1Pb7RVR9xsE OZTo63NLq+KSNN/vBeNQl2hPfdKCegWyi1lCNszhb8tjucy93RF5YP0OyVf1MPHg qckgFGuquklMdEF9Bnyv1+10kuaEoHV3oMxHebPTcOyXUcn9SCFTRGcccuUl8OPl j3uc6g1+OQWnfqghNe+DyhUxfibDewQUjjjEzkhd3JyurkigBvVARulk93VZ4WSt uI7TJ+Xvfk//frAnF3nbBnllhz5XSU2LPphJIlzEFD2o1Ajc0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0YnJ+aPc9efFj8vUbFFR0//wExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvOGY5YWNlNTItNzA2Yi0z ZDBkLWI5MDktZDJhYjM0YjFhOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXFL7Fv/WFbapwPmlP1UnUAFcAZJ74f3HL6KI6qs9thCvUw843HeGez Ddrm2TqWDpJGDs6gxngTQZv0pjzPG4WwuVU9fOSs3nM67nbQNdgTi2CkJbr5Qor8 SvkVcLMOga4Zv+q7xVO53BwYVkA3rejCdVwl1kuvP1gQtwMUri0rT+ElSqRjWldf tEIkDyZa5jFvbOIo9ir3t2rJMly4uOSSDoW3r3uaOf8WyX3Gia4BL7LaT44t0HHx ywXEkqSKdHjmFt26wWVfNVB1/ntL2T1MtJ2aY+aQlekA1ISjlQHmdZug3YXe4ZC0 qprLDw9CR73Di6aftFgAA716VnMdfrY= -----END CERTIFICATE-----Generated at Sat Jul 12 01:03:28 2025 by rpki-client