$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/c0d47dc4-769b-3ebb-bc78-f3b6986b2133.roa File: c0d47dc4-769b-3ebb-bc78-f3b6986b2133.roa (raw, json) Hash identifier: E2L1TKZC19CCo3wMdirosRXY9cK/TYC9tF44l7v5ynQ= Subject key identifier: 05:3F:E8:AD:C4:C5:0A:CB:DB:46:70:3C:9F:8C:A7:07:56:33:9C:50 Certificate issuer: /CN=dc49520f-d0a0-4d00-a42f-35a1023569ac Certificate serial: 010D0C9F4328584A14655A599451C2106021A480 Authority key identifier: 63:AE:BC:ED:8F:0F:D5:D0:67:C4:92:B1:34:6E:29:97:B7:82:A3:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/c0d47dc4-769b-3ebb-bc78-f3b6986b2133.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 25776 IP address blocks: 129.15.0.0/16 maxlen: 24 192.35.96.0/24 maxlen: 24 192.35.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:5a:59:94:51:c2:10:60:21:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc49520f-d0a0-4d00-a42f-35a1023569ac Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=582d3bb0-84b4-47f3-b284-af8c40707cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:88:0b:6a:87:80:2c:95:1c:7e:3a:36:06: 6b:6a:7a:35:26:4b:43:81:10:d4:a5:2a:c7:9b:dd: 04:c5:9d:b3:7e:41:f8:bb:44:d0:0f:88:f7:37:6c: 12:ac:8b:45:97:cd:44:e1:69:92:34:db:31:f1:d2: 72:87:27:5d:f1:c2:bf:af:ca:29:80:8c:06:f5:d2: 59:89:e3:88:93:f1:56:fc:98:e0:87:6a:44:55:c1: 95:2a:f8:61:fc:d2:a2:8a:49:43:46:0b:1e:1f:25: 6a:74:b3:5e:fc:84:be:df:91:b1:8e:00:78:a9:a8: 7a:09:87:2c:1d:c1:af:d1:69:dd:64:00:15:0f:81: 69:13:3a:6b:d5:b7:ef:d1:d4:db:f7:2a:dd:07:43: 09:45:8a:f9:77:da:e8:cd:c5:fc:b6:05:97:ce:b6: 2b:90:aa:75:f3:1e:e5:52:9e:93:8f:c5:9a:c7:3f: 95:b1:4f:e8:61:ec:d4:43:bf:d9:2f:8f:91:5c:d8: 42:cc:45:72:4c:7f:8e:06:9f:49:54:39:6c:53:a4: 5f:99:16:76:da:9d:1b:2f:88:c6:9b:09:39:13:bb: 93:cf:c3:34:d6:cc:91:82:6b:41:5c:c1:84:7f:2a: d1:35:77:16:b3:56:8d:d6:84:29:ed:7f:d8:0c:40: 95:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3F:E8:AD:C4:C5:0A:CB:DB:46:70:3C:9F:8C:A7:07:56:33:9C:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/c0d47dc4-769b-3ebb-bc78-f3b6986b2133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.crl X509v3 Authority Key Identifier: keyid:63:AE:BC:ED:8F:0F:D5:D0:67:C4:92:B1:34:6E:29:97:B7:82:A3:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer sbgp-ipAddrBlock: critical IPv4: 129.15.0.0/16 192.35.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:dd:05:02:91:2e:6d:17:dc:46:e4:ff:46:51:89:4c:ed:f4: 27:77:f6:18:7e:b9:8e:b1:c4:6d:66:70:16:86:a2:7c:00:b1: dd:36:9b:72:cd:0e:67:ab:e4:bd:e1:94:c9:e4:f2:85:e1:92: 2d:f8:54:39:23:b1:d4:6c:de:37:7f:37:62:dc:3c:ed:46:6d: cc:bf:d1:87:f0:82:90:f4:d5:df:e7:2f:bb:32:3d:3b:af:c4: ef:07:fa:60:01:21:fc:8f:11:63:e8:f5:67:dc:15:bd:7a:46: 8a:ca:f3:87:a9:d5:31:72:26:2b:a9:86:d1:a5:16:53:59:27: 83:82:c8:16:10:d8:f0:3d:7d:c9:78:08:6a:1e:d7:c8:b7:a0: c0:5b:16:40:b1:e1:b6:89:10:60:82:f1:f6:e0:aa:da:ef:4a: b5:fa:af:51:50:3f:30:31:a9:b9:c9:fa:a0:62:8a:f0:d0:ec: 91:79:9f:b1:7f:98:58:5d:64:d4:0f:4e:a7:1f:65:f0:f7:af: a9:cb:a4:5d:47:7d:9e:b3:d7:aa:ab:cc:bf:54:36:4f:4c:56: b9:c9:83:a6:2a:52:2c:bf:e1:09:ee:45:04:e0:15:48:d7:bd: 88:15:fe:bc:c3:2e:94:8b:bf:45:85:e8:71:f2:a6:06:f4:cf: b5:43:0a:18 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEoUZVpZlFHCEGAhpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0OTUyMGYtZDBhMC00ZDAwLWE0MmYtMzVhMTAyMzU2 OWFjMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk NTgyZDNiYjAtODRiNC00N2YzLWIyODQtYWY4YzQwNzA3Y2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJOIC2qHgCyVHH46NgZrano1JktDgRDUpSrH m90ExZ2zfkH4u0TQD4j3N2wSrItFl81E4WmSNNsx8dJyhydd8cK/r8opgIwG9dJZ ieOIk/FW/Jjgh2pEVcGVKvhh/NKiiklDRgseHyVqdLNe/IS+35GxjgB4qah6CYcs HcGv0WndZAAVD4FpEzpr1bfv0dTb9yrdB0MJRYr5d9rozcX8tgWXzrYrkKp18x7l Up6Tj8Waxz+VsU/oYezUQ7/ZL4+RXNhCzEVyTH+OBp9JVDlsU6RfmRZ22p0bL4jG mwk5E7uTz8M01syRgmtBXMGEfyrRNXcWs1aN1oQp7X/YDECVFwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFAU/6K3ExQrL20ZwPJ+MpwdWM5xQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYzQ5 NTIwZi1kMGEwLTRkMDAtYTQyZi0zNWExMDIzNTY5YWMvYzBkNDdkYzQtNzY5Yi0z ZWJiLWJjNzgtZjNiNjk4NmIyMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGM0OTUyMGYtZDBhMC00ZDAwLWE0 MmYtMzVhMTAyMzU2OWFjL2RjNDk1MjBmLWQwYTAtNGQwMC1hNDJmLTM1YTEwMjM1 NjlhYy5jcmwwHwYDVR0jBBgwFoAUY6687Y8P1dBnxJKxNG4pl7eCo1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYzQ5NTIwZi1kMGEwLTRkMDAtYTQyZi0zNWEx MDIzNTY5YWMuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAgQ8DBAHA I2AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAK90FApEubRfcRuT/RlGJTO30J3f2GH65jrHEbWZwFoaifACx 3Tabcs0OZ6vkveGUyeTyheGSLfhUOSOx1GzeN383Ytw87UZtzL/Rh/CCkPTV3+cv uzI9O6/E7wf6YAEh/I8RY+j1Z9wVvXpGisrzh6nVMXImK6mG0aUWU1kng4LIFhDY 8D19yXgIah7XyLegwFsWQLHhtokQYILx9uCq2u9KtfqvUVA/MDGpucn6oGKK8NDs kXmfsX+YWF1k1A9Opx9l8PevqcukXUd9nrPXqqvMv1Q2T0xWucmDpipSLL/hCe5F BOAVSNe9iBX+vMMulIu/RYXocfKmBvTPtUMKGA== -----END CERTIFICATE-----Generated at Tue Jul 1 16:01:00 2025 by rpki-client