$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a942301d-5541-36c8-9342-911968d44a92.roa File: a942301d-5541-36c8-9342-911968d44a92.roa (raw, json) Hash identifier: DFOIQv9YfE6GMP4WvI1bFX7M/5e1K5/0dwsMTgQAxh8= Subject key identifier: 74:8E:14:B7:D2:C9:30:4D:67:C4:AC:6C:83:25:C7:7C:4D:81:93:22 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584965E97B977B2D2C4F7A01E094 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a942301d-5541-36c8-9342-911968d44a92.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 22742 IP address blocks: 129.133.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:7b:97:7b:2d:2c:4f:7a:01:e0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=f169cfe6-f18b-4cb5-9311-7f7acfa389f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ce:e4:ab:06:b2:f8:06:06:a9:41:92:cf:0b: e0:7d:18:7e:5b:2b:43:46:36:1e:71:7c:5f:55:2b: a0:99:38:9a:f2:be:6e:72:e5:f8:88:4b:c9:2f:41: 88:56:bd:e6:ac:a1:3f:06:3a:23:d8:59:66:84:ab: f1:8f:a1:d4:af:06:a8:f8:fa:82:c3:44:69:2c:82: 14:cf:24:a8:d3:a4:84:bd:24:2d:c9:d5:7c:f0:a9: 8b:6e:fd:b1:ff:98:c9:6f:ef:86:69:55:b9:c8:72: 3e:65:84:ba:51:e8:8f:c9:0a:f4:18:a5:f2:76:d2: b7:0c:36:48:91:ad:0d:96:ca:db:45:e1:4a:91:e7: 3f:e5:01:19:d3:81:40:4b:10:7c:5a:e5:1f:4d:3f: c2:d2:ee:5c:e0:3a:e6:c8:d7:97:50:ef:ae:82:22: ea:54:b5:32:08:b8:bf:c0:4d:0d:d1:20:a9:4e:f6: 32:93:59:70:20:cf:04:4b:04:a1:98:82:87:60:d9: 98:f0:33:ed:fe:99:db:eb:42:bc:90:d5:dc:fc:00: bc:65:97:89:63:bd:5a:3b:f7:68:5d:91:99:17:54: 22:72:48:f6:3e:a5:d7:d5:50:d7:8c:75:bd:65:32: b8:34:57:d5:f7:31:ae:76:ff:8d:8c:06:7e:a3:e2: 2b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8E:14:B7:D2:C9:30:4D:67:C4:AC:6C:83:25:C7:7C:4D:81:93:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a942301d-5541-36c8-9342-911968d44a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 129.133.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:8c:17:68:f0:54:03:a5:9c:1a:02:e1:b4:83:17:f8:fc:70: db:7b:3f:80:39:0a:b6:9d:6d:6a:a7:04:1c:32:37:b4:8a:c6: 26:9d:bf:07:9d:a1:03:e5:37:c2:4a:96:ff:81:d6:29:da:c8: c5:01:11:d3:00:12:0c:17:09:a4:60:06:e5:1a:be:88:61:63: 62:7e:df:e5:00:38:46:0d:99:1e:f8:2b:1f:e7:4c:d6:4c:61: c3:1e:37:7f:53:8d:6e:0b:33:06:44:4a:e5:5e:5f:62:71:a1: 33:03:54:dd:d1:d2:9f:d3:a4:4b:8a:85:44:99:59:80:04:68: 66:cc:a4:dd:66:dc:09:6b:96:3a:16:85:71:c2:b5:4c:31:d6: 52:85:9a:51:ab:a5:2b:3f:4e:97:fa:c3:87:af:d9:9a:2c:39: 53:01:bb:6c:4c:4d:25:81:b4:cc:69:ef:33:55:23:09:5a:3b: 66:bb:3a:70:b1:54:eb:10:ff:8b:4c:23:d9:6b:99:83:89:3d: 16:7f:0c:e2:58:41:cd:f8:3f:e3:6f:e3:44:91:9f:14:1e:01: 5b:18:8b:c6:66:7d:dc:6e:9e:c7:eb:7f:ca:db:1b:60:f6:0f: a1:a2:3c:4b:8e:30:bf:96:b8:fc:5a:91:ab:22:80:8b:42:86: 95:f6:93:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6XuXey0sT3oB4JQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk ZjE2OWNmZTYtZjE4Yi00Y2I1LTkzMTEtN2Y3YWNmYTM4OWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s7kqway+AYGqUGSzwvgfRh+WytDRjYecXxf VSugmTia8r5ucuX4iEvJL0GIVr3mrKE/Bjoj2FlmhKvxj6HUrwao+PqCw0RpLIIU zySo06SEvSQtydV88KmLbv2x/5jJb++GaVW5yHI+ZYS6UeiPyQr0GKXydtK3DDZI ka0NlsrbReFKkec/5QEZ04FASxB8WuUfTT/C0u5c4DrmyNeXUO+ugiLqVLUyCLi/ wE0N0SCpTvYyk1lwIM8ESwShmIKHYNmY8DPt/pnb60K8kNXc/AC8ZZeJY71aO/do XZGZF1Qickj2PqXX1VDXjHW9ZTK4NFfV9zGudv+NjAZ+o+IrDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSOFLfSyTBNZ8SsbIMlx3xNgZMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvYTk0MjMwMWQtNTU0MS0z NmM4LTkzNDItOTExOTY4ZDQ0YTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgYXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiMF2jwVAOlnBoC4bSDF/j8cNt7P4A5CradbWqnBBwyN7SKxiadvwed oQPlN8JKlv+B1inayMUBEdMAEgwXCaRgBuUavohhY2J+3+UAOEYNmR74Kx/nTNZM YcMeN39TjW4LMwZESuVeX2JxoTMDVN3R0p/TpEuKhUSZWYAEaGbMpN1m3AlrljoW hXHCtUwx1lKFmlGrpSs/Tpf6w4ev2ZosOVMBu2xMTSWBtMxp7zNVIwlaO2a7OnCx VOsQ/4tMI9lrmYOJPRZ/DOJYQc34P+Nv40SRnxQeAVsYi8Zmfdxunsfrf8rbG2D2 D6GiPEuOML+WuPxakasigItChpX2kxU= -----END CERTIFICATE-----Generated at Sat Apr 12 00:26:04 2025 by rpki-client