$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/dab4f573-bf8a-3738-9694-b55138019840.roa File: dab4f573-bf8a-3738-9694-b55138019840.roa (raw, json) Hash identifier: dK9fvlbKJFst5BtZZq5JbXXehZEDaz4LMl3bUHMrHE4= Subject key identifier: D8:3A:43:FA:EF:A1:82:AC:70:E9:51:31:AC:25:D7:6E:97:4B:A0:BB Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584A65661AB165D05AD2CE5C5880 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/dab4f573-bf8a-3738-9694-b55138019840.roa Signing time: Thu 03 Jul 2025 13:23:08 +0000 ROA not before: Thu 03 Jul 2025 13:23:08 +0000 ROA not after: Wed 01 Oct 2025 13:23:08 +0000 asID: 14618 IP address blocks: 129.41.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:65:66:1a:b1:65:d0:5a:d2:ce:5c:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Jul 3 13:23:08 2025 GMT Not After : Oct 1 13:23:08 2025 GMT Subject: CN=aef63045-89c1-4921-971a-0a71b1ac403b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:90:f4:44:41:a8:83:03:56:7b:96:84:3f:8f: 40:5a:ec:e3:80:b7:e9:b9:e2:b7:50:44:34:1a:fa: 53:ac:ac:81:00:16:6b:25:d8:b1:f0:21:11:39:ba: 1e:4e:f4:aa:61:ed:ce:5e:17:36:98:5f:27:a2:e1: 08:0f:86:07:dc:31:27:bb:b5:09:3d:da:bf:c5:ce: e6:fe:99:84:e9:19:a9:10:15:26:a6:ed:be:56:63: 27:1a:d4:08:21:8d:a9:5f:d2:e4:b7:71:1c:6f:9b: cb:8c:46:20:0d:c2:a9:75:6f:28:3f:fa:28:9b:be: 2a:07:52:80:f3:92:d5:66:35:58:d3:db:ed:82:ef: 08:76:93:81:b7:a9:4c:a4:7d:09:57:27:f5:75:21: b1:a4:52:5a:d9:8a:1f:a3:2a:ce:4d:0a:49:4a:2e: 65:ea:71:62:1d:d8:71:ac:18:55:d5:5b:a2:fe:c4: d4:9c:68:44:37:e1:af:46:d0:85:d5:52:98:c6:2b: b3:1e:a3:13:76:42:c3:2f:e1:e2:20:b8:dc:8b:97: 71:50:38:cf:72:a5:36:1a:85:bc:9f:f8:0e:3a:92: 79:96:0e:f4:e9:6a:21:0f:cf:31:4c:11:dd:66:29: ae:cb:72:d3:2a:7c:15:c5:5a:29:c8:ae:d3:54:1b: 00:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3A:43:FA:EF:A1:82:AC:70:E9:51:31:AC:25:D7:6E:97:4B:A0:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/dab4f573-bf8a-3738-9694-b55138019840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 129.41.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:04:b1:b2:d4:e0:41:27:fc:0a:fc:d5:c9:57:ad:6d:fe:5a: 0e:10:41:ca:3e:23:e6:1c:ee:ad:e6:58:aa:90:9a:2b:2b:67: 81:a5:44:75:8b:32:08:76:40:f0:56:01:72:15:92:5c:a8:03: 95:0b:19:45:a1:62:c1:f6:84:de:28:a1:9f:1a:69:69:c1:df: 41:02:74:15:df:93:af:ff:c7:3e:18:f2:0e:1d:0d:74:4d:62: 34:33:4f:f5:7c:87:56:75:a2:8a:4f:c5:3b:4c:a7:98:91:59: b6:49:1f:7d:60:50:0b:63:dd:c5:9a:02:95:f3:22:36:67:67: aa:cd:b3:18:35:5c:11:7f:9a:3e:5f:97:a1:53:07:fa:4f:0c: f8:3f:3e:02:1c:53:2d:a0:10:33:ad:11:24:58:5e:1c:8f:69: fb:d1:2b:bc:78:46:09:2a:57:73:77:74:f7:f3:f7:eb:8e:ef: a2:ef:6f:96:40:e3:fa:e4:b5:70:31:8f:9a:13:7f:a7:ad:2d: 9e:42:d7:e0:49:31:ae:9c:9d:98:59:7b:c7:80:98:82:e8:3d: 93:37:d2:9e:1f:90:20:7d:fb:09:15:4d:ce:10:2c:59:b3:3f: da:c2:96:94:9e:95:23:9a:89:35:e6:10:86:b6:d0:77:aa:fb: d8:63:39:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEplZhqxZdBa0s5cWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDcwMzEzMjMwOFoXDTI1MTAwMTEzMjMwOFowLzEtMCsGA1UEAxMk YWVmNjMwNDUtODljMS00OTIxLTk3MWEtMGE3MWIxYWM0MDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5D0REGogwNWe5aEP49AWuzjgLfpueK3UEQ0 GvpTrKyBABZrJdix8CEROboeTvSqYe3OXhc2mF8nouEID4YH3DEnu7UJPdq/xc7m /pmE6RmpEBUmpu2+VmMnGtQIIY2pX9Lkt3Ecb5vLjEYgDcKpdW8oP/oom74qB1KA 85LVZjVY09vtgu8IdpOBt6lMpH0JVyf1dSGxpFJa2YofoyrOTQpJSi5l6nFiHdhx rBhV1Vui/sTUnGhEN+GvRtCF1VKYxiuzHqMTdkLDL+HiILjci5dxUDjPcqU2GoW8 n/gOOpJ5lg706WohD88xTBHdZimuy3LTKnwVxVopyK7TVBsArQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNg6Q/rvoYKscOlRMawl126XS6C7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvZGFiNGY1NzMtYmY4YS0z NzM4LTk2OTQtYjU1MTM4MDE5ODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQEsbLU4EEn/Ar81clXrW3+Wg4QQco+I+Yc7q3mWKqQmisrZ4GlRHWL Mgh2QPBWAXIVklyoA5ULGUWhYsH2hN4ooZ8aaWnB30ECdBXfk6//xz4Y8g4dDXRN YjQzT/V8h1Z1oopPxTtMp5iRWbZJH31gUAtj3cWaApXzIjZnZ6rNsxg1XBF/mj5f l6FTB/pPDPg/PgIcUy2gEDOtESRYXhyPafvRK7x4RgkqV3N3dPfz9+uO76Lvb5ZA 4/rktXAxj5oTf6etLZ5C1+BJMa6cnZhZe8eAmILoPZM30p4fkCB9+wkVTc4QLFmz P9rClpSelSOaiTXmEIa20Heq+9hjOco= -----END CERTIFICATE-----Generated at Sat Jul 12 01:20:02 2025 by rpki-client