$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa File: f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa (raw, json) Hash identifier: tPHhq9Ng5zp4dHxqcFwQ6kaUBDU0cHDDrwuR+5lGU3E= Subject key identifier: 6E:BC:F0:09:34:04:0A:1E:FB:2A:16:5F:AF:BC:2B:CA:7C:90:87:C7 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584917DC2474AB3E6A24FD663520 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 22742 IP address blocks: 129.133.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:24:74:ab:3e:6a:24:fd:66:35:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=faaf8183-264f-49d9-b82d-d4ec45e8d10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:49:22:72:83:a4:4d:18:7b:25:2b:7b:7a: ab:0d:f8:ad:bf:43:38:b9:14:2a:1c:89:67:f1:89: d6:08:ee:b4:ef:31:0e:05:4f:1c:5a:58:0e:33:9d: 40:e9:ef:03:46:4b:8d:36:26:2d:c4:e4:07:fd:e9: 7a:19:b0:64:84:9d:12:ad:73:e2:f2:27:14:63:f2: 87:f2:fa:db:a0:a1:35:63:59:92:1f:ee:fd:b6:8c: 17:09:a5:83:25:cc:6c:7e:36:9a:34:67:d9:f2:5a: 70:95:22:37:3c:a7:8d:38:05:4c:83:fb:8a:15:14: 45:8f:a2:c3:ca:69:7e:49:48:09:5a:8b:50:5a:98: a0:5e:57:4e:31:e9:c6:6a:87:79:d9:8f:7f:75:f1: e4:2d:cb:aa:3a:7f:3d:75:eb:94:9e:b7:84:f9:a6: 4f:7e:5d:23:82:e2:51:52:c3:e1:10:aa:d1:2a:9d: e2:1d:61:16:a3:83:8b:f5:eb:3c:b9:73:02:2f:e4: b6:88:53:64:0c:16:41:d4:2e:85:e7:96:ee:d0:79: e9:d9:02:28:52:f4:24:97:30:ee:73:47:11:c8:09: 7f:4e:ea:1f:98:2a:89:d7:f6:14:97:d9:d6:ae:f9: 56:ec:ae:56:3f:69:76:14:fc:28:ab:54:ec:67:8f: 86:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BC:F0:09:34:04:0A:1E:FB:2A:16:5F:AF:BC:2B:CA:7C:90:87:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 129.133.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:06:3d:23:87:08:ef:9e:1c:56:30:0c:c3:82:94:fd:d0:bc: 3d:93:8b:fc:ce:87:8f:09:71:c2:67:43:2e:5c:14:93:5f:27: ae:b3:4d:09:99:8c:ae:c6:11:60:07:03:a9:e2:0c:15:fc:da: 7d:5d:ad:f1:d1:d3:d6:aa:2e:52:82:2b:37:a3:b4:22:b6:b5: d7:50:31:0a:0a:ef:0c:00:56:8e:67:e0:6e:70:fc:8f:2f:57: 35:7d:a1:58:60:96:0e:e8:72:92:29:1b:ac:6e:23:8f:f3:28: 9e:5a:2b:60:33:d2:44:65:47:e2:10:2a:59:38:90:d0:e2:71: 87:09:be:2e:ac:07:0d:b2:af:b5:8d:d4:5c:50:a7:1e:4e:72: 1b:29:fc:cf:3a:8c:b7:04:53:2e:48:43:61:03:f8:8e:4e:fd: ab:ca:50:40:fe:5a:67:85:92:c3:e5:fc:64:37:03:da:3b:92: 93:c7:70:43:a5:2a:18:45:b9:3e:86:5c:83:74:4b:db:eb:bb: 7a:45:1f:2f:55:2f:bc:43:7b:c6:23:16:35:9b:30:1c:a8:32: 4d:9e:fa:52:5f:0a:66:2d:1f:ee:4d:a2:26:d3:90:c2:57:c9: 3d:58:7b:c7:e7:17:2d:25:3a:bb:35:ac:67:4d:4a:6f:5b:a1: cd:ef:4a:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CR0qz5qJP1mNSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZmFhZjgxODMtMjY0Zi00OWQ5LWI4MmQtZDRlYzQ1ZThkMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs31JInKDpE0YeyUre3qrDfitv0M4uRQqHIln 8YnWCO607zEOBU8cWlgOM51A6e8DRkuNNiYtxOQH/el6GbBkhJ0SrXPi8icUY/KH 8vrboKE1Y1mSH+79towXCaWDJcxsfjaaNGfZ8lpwlSI3PKeNOAVMg/uKFRRFj6LD yml+SUgJWotQWpigXldOMenGaod52Y9/dfHkLcuqOn89deuUnreE+aZPfl0jguJR UsPhEKrRKp3iHWEWo4OL9es8uXMCL+S2iFNkDBZB1C6F55bu0Hnp2QIoUvQklzDu c0cRyAl/TuofmCqJ1/YUl9nWrvlW7K5WP2l2FPwoq1TsZ4+GJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG688Ak0BAoe+yoWX6+8K8p8kIfHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvZjAwOWFhYTctZDVjNy0z ZDBmLWE0NjktNTk0MjFmMjdjOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgYXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwGPSOHCO+eHFYwDMOClP3QvD2Ti/zOh48JccJnQy5cFJNfJ66zTQmZ jK7GEWAHA6niDBX82n1drfHR09aqLlKCKzejtCK2tddQMQoK7wwAVo5n4G5w/I8v VzV9oVhglg7ocpIpG6xuI4/zKJ5aK2Az0kRlR+IQKlk4kNDicYcJvi6sBw2yr7WN 1FxQpx5Ochsp/M86jLcEUy5IQ2ED+I5O/avKUED+WmeFksPl/GQ3A9o7kpPHcEOl KhhFuT6GXIN0S9vru3pFHy9VL7xDe8YjFjWbMByoMk2e+lJfCmYtH+5NoibTkMJX yT1Ye8fnFy0lOrs1rGdNSm9boc3vSqo= -----END CERTIFICATE-----Generated at Sat Apr 12 01:43:32 2025 by rpki-client