$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a95ba82b-efb4-36e6-acb7-a5ac14dd3ca2.roa File: a95ba82b-efb4-36e6-acb7-a5ac14dd3ca2.roa (raw, json) Hash identifier: wjqjjLJ/KLUDcws4LremlJXpwlYTH4ImjzRbhiJmrgU= Subject key identifier: D0:B9:39:CF:68:27:1C:5A:F2:B0:07:F1:21:CE:50:87:40:EA:BF:DC Certificate issuer: /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Certificate serial: 010D0C9F432858493010099FD25EC42DB742F880 Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a95ba82b-efb4-36e6-acb7-a5ac14dd3ca2.roa Signing time: Fri 14 Mar 2025 18:04:56 +0000 ROA not before: Fri 14 Mar 2025 18:04:56 +0000 ROA not after: Thu 12 Jun 2025 18:04:56 +0000 asID: 15267 IP address blocks: 138.129.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:10:09:9f:d2:5e:c4:2d:b7:42:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338 Validity Not Before: Mar 14 18:04:56 2025 GMT Not After : Jun 12 18:04:56 2025 GMT Subject: CN=b36e6d5a-16b0-4f4a-b6b5-d7a2a6506a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:1e:f4:f8:ae:4e:93:2e:a0:e9:c7:ec:d3: aa:f4:bd:4b:7a:f7:a8:1d:fa:2e:c5:c1:61:d5:82: 30:61:46:67:fd:d9:ec:af:94:06:6b:6a:0d:a1:6c: 52:f0:69:da:17:fb:10:0e:2a:4a:f9:dc:77:ad:9f: e9:59:c8:6b:17:eb:53:b2:ac:3d:5c:4b:b5:e3:01: 2f:43:d0:f1:2f:82:f7:81:ed:85:ed:ec:09:cd:f9: 2e:86:5a:48:97:30:4d:79:03:9b:3d:5c:86:d3:7b: fc:32:e6:24:17:06:b7:8f:20:0d:1c:dc:5a:12:32: 0d:b0:38:69:ee:8a:90:bb:a1:08:b3:e1:37:e2:82: a9:36:97:df:17:46:cb:25:e0:21:51:74:6a:3c:0e: 43:7d:9e:09:7d:86:67:76:41:c7:54:53:a4:82:f3: 21:49:6f:00:91:a9:aa:2b:01:26:40:8c:5f:91:bb: d4:a6:f4:99:93:c4:f3:f0:ad:65:6d:2e:02:e3:3f: 12:b9:03:3c:6c:55:b7:bf:15:c7:26:46:d5:9a:3d: ef:d5:be:bb:8e:ea:f4:fb:90:17:52:88:bd:f6:5e: 44:00:36:d8:d3:47:c4:9a:27:46:ff:4e:68:8d:25: 7c:3a:ea:8c:0b:d7:99:0e:ad:b2:83:1c:5e:fd:26: fb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B9:39:CF:68:27:1C:5A:F2:B0:07:F1:21:CE:50:87:40:EA:BF:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a95ba82b-efb4-36e6-acb7-a5ac14dd3ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl X509v3 Authority Key Identifier: keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer sbgp-ipAddrBlock: critical IPv4: 138.129.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:db:2f:f2:f3:2e:96:c7:60:f4:a1:07:e7:c1:24:e0:c9:80: 19:3e:aa:be:01:99:25:b7:97:9f:d5:d2:fe:ff:2c:c7:4e:f8: aa:32:1a:8b:47:99:71:9e:7e:b5:da:1e:2d:3a:5e:50:8c:11: 68:49:7a:b7:19:64:39:5e:4c:96:ed:75:ed:b9:ee:60:8f:17: 33:c6:b5:ad:8d:52:8c:e6:19:e7:1d:53:2c:ed:1a:bd:a7:f8: fc:57:68:46:2a:bf:cd:14:f5:82:8e:31:36:f2:f1:c8:8d:8c: da:d4:82:08:d5:c4:38:8b:f1:1b:76:5e:ff:19:db:4b:e4:c6: e7:cc:ec:44:2d:52:81:72:c0:f9:0c:6e:57:fe:9a:c5:96:65: ab:38:97:08:fe:1b:71:f0:96:38:ac:11:ac:db:7e:06:94:2b: 9f:5d:f5:b7:c2:38:55:9c:32:a3:fe:53:2a:d2:85:3e:51:48: 5b:eb:ec:32:91:e0:b4:dc:d5:ff:d5:68:d2:fd:27:07:58:00: 68:f9:f3:80:69:26:aa:a1:30:a8:18:9b:17:da:1c:c1:f0:f9: 1f:28:ee:16:65:1b:3b:9e:ed:38:b4:0e:c0:1e:18:3a:2c:a0: c2:01:b3:46:74:2f:87:32:ae:39:a6:be:c4:e6:e8:5a:41:22: b6:cb:03:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkwEAmf0l7ELbdC+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyYWVlZjgtYjM1Yi00Y2E2LWI3YTMtOTNiZTFhMTgx MzM4MB4XDTI1MDMxNDE4MDQ1NloXDTI1MDYxMjE4MDQ1NlowLzEtMCsGA1UEAxMk YjM2ZTZkNWEtMTZiMC00ZjRhLWI2YjUtZDdhMmE2NTA2YTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroce9PiuTpMuoOnH7NOq9L1LeveoHfouxcFh 1YIwYUZn/dnsr5QGa2oNoWxS8GnaF/sQDipK+dx3rZ/pWchrF+tTsqw9XEu14wEv Q9DxL4L3ge2F7ewJzfkuhlpIlzBNeQObPVyG03v8MuYkFwa3jyANHNxaEjINsDhp 7oqQu6EIs+E34oKpNpffF0bLJeAhUXRqPA5DfZ4JfYZndkHHVFOkgvMhSW8Akamq KwEmQIxfkbvUpvSZk8Tz8K1lbS4C4z8SuQM8bFW3vxXHJkbVmj3v1b67jur0+5AX Uoi99l5EADbY00fEmidG/05ojSV8OuqMC9eZDq2ygxxe/Sb7BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNC5Oc9oJxxa8rAH8SHOUIdA6r/cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNjJh ZWVmOC1iMzViLTRjYTYtYjdhMy05M2JlMWExODEzMzgvYTk1YmE4MmItZWZiNC0z NmU2LWFjYjctYTVhYzE0ZGQzY2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTYyYWVlZjgtYjM1Yi00Y2E2LWI3 YTMtOTNiZTFhMTgxMzM4L2E2MmFlZWY4LWIzNWItNGNhNi1iN2EzLTkzYmUxYTE4 MTMzOC5jcmwwHwYDVR0jBBgwFoAUJc5b1tIqbFP5lyX2l2HW+cay6IcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hNjJhZWVmOC1iMzViLTRjYTYtYjdhMy05M2Jl MWExODEzMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFioEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHbL/LzLpbHYPShB+fBJODJgBk+qr4BmSW3l5/V0v7/LMdO+KoyGotH mXGefrXaHi06XlCMEWhJercZZDleTJbtde257mCPFzPGta2NUozmGecdUyztGr2n +PxXaEYqv80U9YKOMTby8ciNjNrUggjVxDiL8Rt2Xv8Z20vkxufM7EQtUoFywPkM blf+msWWZas4lwj+G3HwljisEazbfgaUK59d9bfCOFWcMqP+UyrShT5RSFvr7DKR 4LTc1f/VaNL9JwdYAGj584BpJqqhMKgYmxfaHMHw+R8o7hZlGzue7Ti0DsAeGDos oMIBs0Z0L4cyrjmmvsTm6FpBIrbLA/M= -----END CERTIFICATE-----Generated at Fri Apr 11 21:21:52 2025 by rpki-client