$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/494e73dd-7440-3e35-96e4-fe4c12732c15.roa File: 494e73dd-7440-3e35-96e4-fe4c12732c15.roa (raw, json) Hash identifier: beJWgCOHLO0NnJBIIqEpUfV3UwlNTVhv3INXHcXZT7Q= Subject key identifier: F4:D8:C3:EF:94:30:09:77:17:3B:8D:1D:89:E3:57:77:A5:74:9E:34 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F43285849403976BAB5C585ABB950E240 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/494e73dd-7440-3e35-96e4-fe4c12732c15.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 63293 IP address blocks: 129.134.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:76:ba:b5:c5:85:ab:b9:50:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=b0b1fd15-9eeb-4dec-a492-6132086c72f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3a:96:9e:e5:bb:53:36:4e:38:c4:bb:8d:c2: e3:07:d6:55:a0:9d:50:f5:1d:42:23:60:c0:ed:d4: 61:c6:c1:0d:73:af:c4:d4:ab:96:73:d1:c0:4a:a5: 25:28:46:c3:22:bc:64:91:8c:be:13:64:1b:5c:3d: 72:6e:f0:a1:27:e4:a1:45:c6:11:5e:1f:90:0c:9a: 26:2d:46:85:5e:eb:2a:b5:02:86:10:82:c3:60:2f: bf:53:68:8a:95:4a:fc:58:90:56:2a:37:e0:3b:0b: 1a:22:0e:e3:73:05:9a:52:48:bc:f9:61:65:18:dd: df:b8:8d:c2:ac:b5:02:0a:ba:40:b5:53:86:d7:2c: 55:79:71:36:89:4c:38:a9:e4:c2:5a:27:41:7c:06: c7:3a:76:d5:93:20:24:da:36:a6:64:c5:19:fe:e1: fb:f8:a3:1b:dd:94:c0:ec:e8:e5:b5:ab:4c:49:46: 4b:b5:a7:f8:96:80:97:12:d2:f9:89:e5:45:5f:0a: d8:1c:8b:f1:27:4c:5d:a8:18:76:de:76:05:bd:38: 37:f9:97:34:c8:4f:76:a9:13:48:d7:31:9e:f4:56: 4a:78:ea:77:a4:de:62:13:82:98:42:67:f1:09:1a: 86:fa:ec:0f:70:ce:93:eb:d5:78:69:d3:1b:d3:88: cd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D8:C3:EF:94:30:09:77:17:3B:8D:1D:89:E3:57:77:A5:74:9E:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/494e73dd-7440-3e35-96e4-fe4c12732c15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 129.134.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:af:bd:c8:74:53:33:d0:b7:04:32:2e:45:de:36:a3:41:d5: 24:37:80:ad:1a:bd:b5:6f:2d:46:b4:c7:0a:7c:fb:8d:1b:1f: 92:3c:8d:aa:b1:d3:21:85:c9:5e:63:5e:d5:f6:b3:26:53:31: 83:73:e7:cd:f2:17:ef:0a:74:7f:82:4a:64:8c:d2:84:fd:22: 5d:7f:b3:cc:57:d6:a5:5e:63:9a:34:8a:77:b6:a5:75:9c:51: c4:3c:ff:c7:f2:4d:69:f0:34:54:23:8d:06:45:a4:12:5e:4f: c1:40:db:cd:fb:2d:3f:29:0b:28:b2:f7:fc:67:4c:99:66:72: 99:ac:bc:ca:2f:30:6d:d9:c1:df:25:cb:f0:53:3e:f2:f8:cb: 04:58:8b:78:b3:bc:a6:f8:9b:0b:d3:48:d2:fd:1c:05:94:21: 82:ac:89:25:34:62:d3:47:c7:b7:aa:93:03:f6:76:a2:d9:ff: 43:85:e9:a2:d0:97:1f:03:08:0a:44:7e:41:ab:ed:8a:84:81: 2b:99:63:93:39:98:41:fc:d8:50:eb:65:d0:ad:46:2a:d0:a7: 49:7c:4e:bf:c3:f6:e9:f6:c9:87:d5:aa:8d:05:88:d6:44:01: 7e:f1:e1:1b:2d:32:3b:5c:80:ad:70:d0:2d:e0:af:8e:ec:dc: 69:17:cc:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOXa6tcWFq7lQ4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk YjBiMWZkMTUtOWVlYi00ZGVjLWE0OTItNjEzMjA4NmM3MmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDqWnuW7UzZOOMS7jcLjB9ZVoJ1Q9R1CI2DA 7dRhxsENc6/E1KuWc9HASqUlKEbDIrxkkYy+E2QbXD1ybvChJ+ShRcYRXh+QDJom LUaFXusqtQKGEILDYC+/U2iKlUr8WJBWKjfgOwsaIg7jcwWaUki8+WFlGN3fuI3C rLUCCrpAtVOG1yxVeXE2iUw4qeTCWidBfAbHOnbVkyAk2jamZMUZ/uH7+KMb3ZTA 7OjltatMSUZLtaf4loCXEtL5ieVFXwrYHIvxJ0xdqBh23nYFvTg3+Zc0yE92qRNI 1zGe9FZKeOp3pN5iE4KYQmfxCRqG+uwPcM6T69V4adMb04jNmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTYw++UMAl3FzuNHYnjV3eldJ40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvNDk0ZTczZGQtNzQ0MC0z ZTM1LTk2ZTQtZmU0YzEyNzMyYzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgYa8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGvvch0UzPQtwQyLkXeNqNB1SQ3gK0avbVvLUa0xwp8+40bH5I8jaqx 0yGFyV5jXtX2syZTMYNz583yF+8KdH+CSmSM0oT9Il1/s8xX1qVeY5o0ine2pXWc UcQ8/8fyTWnwNFQjjQZFpBJeT8FA2837LT8pCyiy9/xnTJlmcpmsvMovMG3Zwd8l y/BTPvL4ywRYi3izvKb4mwvTSNL9HAWUIYKsiSU0YtNHx7eqkwP2dqLZ/0OF6aLQ lx8DCApEfkGr7YqEgSuZY5M5mEH82FDrZdCtRirQp0l8Tr/D9un2yYfVqo0FiNZE AX7x4RstMjtcgK1w0C3gr47s3GkXzG0= -----END CERTIFICATE-----Generated at Fri Apr 18 03:12:52 2025 by rpki-client