$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/7da0bbf2-854f-312a-a5ff-6ab760be9635.roa File: 7da0bbf2-854f-312a-a5ff-6ab760be9635.roa (raw, json) Hash identifier: /AvIGSjHuJDWRc2U0ME0A7tZDK/O+ujtFJD61gKeUSY= Subject key identifier: 5A:83:0D:20:1C:4D:3A:2A:3C:D7:40:39:C7:D2:D5:FC:37:14:77:C2 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584A612B107136583871929153C0 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/7da0bbf2-854f-312a-a5ff-6ab760be9635.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 25649 IP address blocks: 129.220.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:10:71:36:58:38:71:92:91:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=6a0158e5-9032-4ff4-b3a7-daebe3bfb287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f9:d0:1d:6b:23:f8:ce:60:e3:c0:5c:8d:8c: b0:99:4e:21:aa:05:c8:aa:87:78:77:32:07:85:37: 40:e0:7a:77:17:20:5a:59:a0:38:24:e7:34:a3:45: 6e:e1:c5:84:3c:97:11:93:95:26:15:5d:6a:24:0c: 0b:a8:85:2a:d1:ee:7b:87:b6:ea:56:29:e7:da:5c: b7:44:c7:b5:99:84:dd:54:71:52:77:eb:4c:b5:91: 28:ad:25:18:d2:9a:7e:de:62:ab:c7:da:39:e7:e1: eb:1d:11:90:c0:a9:60:c1:74:09:d4:91:b6:3e:69: 3f:a3:16:c1:fe:19:25:eb:ed:76:4b:6c:b7:c3:8b: e9:d9:eb:67:df:eb:b2:94:7c:fc:50:9d:07:66:75: 63:1e:53:66:f9:c5:7a:05:9e:66:e9:aa:73:20:bd: 78:13:77:f4:a4:b1:df:3e:18:10:ae:db:b2:88:1a: 5d:ac:b5:b4:b4:f2:ce:bc:93:71:26:16:67:46:7e: 66:02:c8:15:ae:4e:32:d1:c8:95:7c:64:6c:0e:46: 45:35:0e:49:78:e3:6f:f9:49:5c:ee:2a:42:0a:22: 87:fd:f8:72:8e:28:0e:32:7c:63:19:b1:26:30:04: 88:a5:ef:13:03:e2:ed:f8:01:00:56:3a:60:92:1a: 7b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:83:0D:20:1C:4D:3A:2A:3C:D7:40:39:C7:D2:D5:FC:37:14:77:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/7da0bbf2-854f-312a-a5ff-6ab760be9635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 129.220.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:06:f4:b1:99:10:9f:60:3f:49:7a:84:70:e2:76:dd:b1:04: 67:69:c4:8c:d4:6a:a6:3d:3e:12:f1:a9:04:3f:07:07:4c:ff: cf:1a:6c:eb:77:d0:15:96:55:10:d1:1c:33:a8:78:f7:88:14: 4a:05:63:b3:7d:b7:06:d3:6f:a1:39:82:11:2e:ed:1e:11:05: 4f:1c:ab:be:89:20:ef:7e:14:3e:a4:68:b6:af:ad:ea:32:43: 85:7e:9d:a1:fd:6e:4a:4d:53:47:68:09:76:bf:94:d9:b3:eb: fc:0e:b6:4d:b5:b3:38:83:3a:38:46:5d:11:9f:dd:99:36:8d: 8f:07:3e:7d:fa:c7:71:aa:c5:35:0d:35:28:b3:cd:81:72:8e: f1:0d:34:dd:f4:39:67:ee:92:aa:96:12:e1:20:5e:f6:7d:fc: a8:4b:b4:50:35:ad:2c:c3:19:f3:58:be:be:4a:00:dc:f2:37: ac:e8:bb:15:bc:5c:12:1d:22:be:bf:b0:44:a1:a7:84:f9:83: e9:eb:ab:8b:ac:7e:4b:3e:dc:21:98:71:d1:18:c9:f5:91:50: 72:89:17:51:7a:aa:e7:12:02:fc:b3:53:20:1d:4b:62:c2:6e: 01:fe:b5:58:1b:f9:df:95:87:9c:31:7b:1b:e5:04:22:a1:31: ee:37:81:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxBxNlg4cZKRU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk NmEwMTU4ZTUtOTAzMi00ZmY0LWIzYTctZGFlYmUzYmZiMjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/nQHWsj+M5g48BcjYywmU4hqgXIqod4dzIH hTdA4Hp3FyBaWaA4JOc0o0Vu4cWEPJcRk5UmFV1qJAwLqIUq0e57h7bqVinn2ly3 RMe1mYTdVHFSd+tMtZEorSUY0pp+3mKrx9o55+HrHRGQwKlgwXQJ1JG2Pmk/oxbB /hkl6+12S2y3w4vp2etn3+uylHz8UJ0HZnVjHlNm+cV6BZ5m6apzIL14E3f0pLHf PhgQrtuyiBpdrLW0tPLOvJNxJhZnRn5mAsgVrk4y0ciVfGRsDkZFNQ5JeONv+Ulc 7ipCCiKH/fhyjigOMnxjGbEmMASIpe8TA+Lt+AEAVjpgkhp7ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqDDSAcTToqPNdAOcfS1fw3FHfCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvN2RhMGJiZjItODU0Zi0z MTJhLWE1ZmYtNmFiNzYwYmU5NjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgdzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsG9LGZEJ9gP0l6hHDidt2xBGdpxIzUaqY9PhLxqQQ/BwdM/88abOt3 0BWWVRDRHDOoePeIFEoFY7N9twbTb6E5ghEu7R4RBU8cq76JIO9+FD6kaLavreoy Q4V+naH9bkpNU0doCXa/lNmz6/wOtk21sziDOjhGXRGf3Zk2jY8HPn36x3GqxTUN NSizzYFyjvENNN30OWfukqqWEuEgXvZ9/KhLtFA1rSzDGfNYvr5KANzyN6zouxW8 XBIdIr6/sEShp4T5g+nrq4usfks+3CGYcdEYyfWRUHKJF1F6qucSAvyzUyAdS2LC bgH+tVgb+d+Vh5wxexvlBCKhMe43gYI= -----END CERTIFICATE-----Generated at Wed Jul 9 15:30:23 2025 by rpki-client