$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa File: f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa (raw, json) Hash identifier: iiiphEksFjFpWehjsjSalkSVHJESaxP8wLHLmCS4NAg= Subject key identifier: 7E:F3:18:F5:3E:AF:BE:17:1F:33:C6:40:6A:81:E2:DB:F0:81:49:A5 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F43285849F7150C6994DB4AA5AF837E80 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 22742 IP address blocks: 129.133.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:0c:69:94:db:4a:a5:af:83:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=475a03b8-9ede-4f73-8bb3-170409cadf2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:dd:b2:2b:95:1e:a2:6a:bc:32:f3:e8:b8: 28:74:cf:21:91:64:f8:75:ee:c4:4e:0a:db:f9:2d: a0:89:c1:25:26:01:64:64:c1:aa:48:8b:ab:de:7d: 7c:37:c0:93:d3:da:6c:65:1a:3c:42:ac:89:77:f9: 26:7b:21:e1:7c:e7:df:cb:31:bf:6c:29:7c:13:a9: d2:2d:a8:a5:ec:c3:8e:8d:9c:d8:7a:44:94:fd:1f: bf:0e:df:04:80:1c:7a:4f:6a:f6:62:89:97:af:bd: a8:4d:fa:ee:0a:8e:09:be:eb:5e:fb:13:33:00:16: 43:56:28:ed:44:e5:cd:46:0f:5c:ba:16:5d:81:02: e6:db:9f:cd:f1:ec:ab:aa:7e:2f:fe:3e:ec:e5:5b: cf:2b:82:bb:c6:fa:af:05:cb:fd:02:ec:9e:93:b3: 0b:27:1b:9a:fb:b6:96:f8:72:11:35:f2:e1:d4:2b: f1:de:1a:c3:95:bd:a9:8e:f9:dc:69:a1:bf:db:c8: 1b:d7:51:59:33:67:42:9c:67:25:93:fc:e0:46:e6: b0:37:35:80:3a:66:97:33:17:7f:bc:8e:bf:e5:b2: 8e:31:91:75:a9:69:dd:3b:59:72:3d:d0:16:86:96: 49:b4:37:66:62:be:20:c1:dd:f8:f6:4f:27:a7:6e: 7e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F3:18:F5:3E:AF:BE:17:1F:33:C6:40:6A:81:E2:DB:F0:81:49:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 129.133.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:13:91:6a:95:4e:ad:92:a5:39:7b:89:70:a1:f3:e8:92:46: b1:32:8f:f7:b4:1a:22:bd:8c:65:d4:34:e8:70:ef:7f:96:fd: 6a:d7:1f:c9:53:6a:c7:97:81:c6:c8:11:d8:b0:9d:f6:23:b7: 77:32:52:8a:5e:a9:07:0d:70:eb:7e:2d:8a:df:23:f9:27:dc: 2b:a9:77:e4:b2:df:de:64:3b:17:29:a4:9d:79:55:24:0b:af: 5d:16:f2:4b:3e:7c:9d:b2:14:fd:73:f6:93:6e:37:6d:1d:de: 48:f0:66:33:80:3f:4f:b0:d3:65:f8:02:a4:fa:ac:e4:61:ad: 7a:32:38:50:88:2b:9c:f6:60:ae:ff:71:a2:a9:c2:03:0a:aa: 23:9e:d9:3a:09:0d:54:27:b0:92:28:f7:4c:37:aa:d7:d4:54: ff:ff:16:d0:c2:63:cf:f1:eb:46:c8:26:8d:0e:65:52:a7:cc: 55:af:f2:fa:95:4b:59:aa:b2:f6:2a:a9:40:60:a5:e6:25:fd: f1:b6:0c:d1:0c:b8:f6:a3:f1:d0:95:34:1f:9a:13:66:d8:96: d9:d1:02:cb:a4:17:85:2d:4e:fe:6c:18:af:67:aa:ec:75:ce: b7:32:71:4f:67:c7:7e:d0:42:08:dc:b9:7a:1b:b5:4f:24:9d: de:da:70:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FQxplNtKpa+DfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk NDc1YTAzYjgtOWVkZS00ZjczLThiYjMtMTcwNDA5Y2FkZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUDdsiuVHqJqvDLz6LgodM8hkWT4de7ETgrb +S2gicElJgFkZMGqSIur3n18N8CT09psZRo8QqyJd/kmeyHhfOffyzG/bCl8E6nS Lail7MOOjZzYekSU/R+/Dt8EgBx6T2r2YomXr72oTfruCo4Jvute+xMzABZDVijt ROXNRg9cuhZdgQLm25/N8eyrqn4v/j7s5VvPK4K7xvqvBcv9Auyek7MLJxua+7aW +HIRNfLh1Cvx3hrDlb2pjvncaaG/28gb11FZM2dCnGclk/zgRuawNzWAOmaXMxd/ vI6/5bKOMZF1qWndO1lyPdAWhpZJtDdmYr4gwd349k8np25+QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7zGPU+r74XHzPGQGqB4tvwgUmlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvZjAwOWFhYTctZDVjNy0z ZDBmLWE0NjktNTk0MjFmMjdjOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgYXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4TkWqVTq2SpTl7iXCh8+iSRrEyj/e0GiK9jGXUNOhw73+W/WrXH8lT aseXgcbIEdiwnfYjt3cyUopeqQcNcOt+LYrfI/kn3Cupd+Sy395kOxcppJ15VSQL r10W8ks+fJ2yFP1z9pNuN20d3kjwZjOAP0+w02X4AqT6rORhrXoyOFCIK5z2YK7/ caKpwgMKqiOe2ToJDVQnsJIo90w3qtfUVP//FtDCY8/x60bIJo0OZVKnzFWv8vqV S1mqsvYqqUBgpeYl/fG2DNEMuPaj8dCVNB+aE2bYltnRAsukF4UtTv5sGK9nqux1 zrcycU9nx37QQgjcuXobtU8knd7acBw= -----END CERTIFICATE-----Generated at Sun Jun 8 10:20:45 2025 by rpki-client