$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa File: 53ccae06-4eac-3309-8de2-24f62624fcd6.roa (raw, json) Hash identifier: VRuxNuawFIHYSNNAAC+P6gktGie8avrvxuKFazoZP2Q= Subject key identifier: F0:97:9B:42:98:37:51:0F:04:72:97:F1:5D:8C:BE:DE:4A:F7:05:09 Certificate issuer: /CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Certificate serial: 010D0C9F4328584A2C200F168B4B13ACE219C180 Authority key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 26258 IP address blocks: 144.29.0.0/16 maxlen: 24 144.29.0.0/17 maxlen: 24 144.29.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:0f:16:8b:4b:13:ac:e2:19:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=a13c376e-941c-41df-aa57-805cb7d8f8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b0:93:91:0b:61:99:86:0f:2e:f9:9e:2b:dc: 43:e4:15:9f:b6:f6:b6:db:13:4a:af:3e:97:c2:dd: d2:07:24:7e:81:69:2c:e2:d4:1a:86:90:56:71:42: 62:d5:64:ee:76:f5:6f:a7:b5:eb:f3:8b:4d:89:01: 45:02:ce:5d:d4:bd:82:dc:35:68:8b:e6:fd:63:2b: 48:10:96:b6:17:7c:4b:0e:f1:08:48:96:ff:72:b2: 95:80:fd:56:14:51:35:08:ce:35:9e:99:a4:2d:cb: d3:02:cf:f5:fa:db:7b:5b:99:b7:e6:3d:d8:18:c4: 2b:b2:fe:f7:cc:cc:25:3c:6d:97:9c:f0:e4:ef:65: e1:f9:87:b1:17:13:26:c2:be:2e:b3:47:ed:7a:e1: 7f:f5:8a:ad:b0:e6:ee:98:10:f4:5a:d0:d0:40:c0: f7:e9:f4:02:9d:56:f9:ec:fb:45:d1:3e:66:25:9e: 2f:2d:48:e5:44:e1:45:1a:fc:9b:49:7d:68:15:ac: ca:1d:bf:91:67:e2:fc:74:8d:bf:d0:22:ec:2a:39: da:6f:fc:d1:0e:3d:3a:86:7f:20:76:d3:cf:ef:fe: 90:89:4c:4f:04:ce:3d:39:bc:df:9d:92:c2:06:40: ee:b8:ee:e7:75:ca:66:85:fa:66:8c:d2:22:33:9c: 64:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:97:9B:42:98:37:51:0F:04:72:97:F1:5D:8C:BE:DE:4A:F7:05:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/53ccae06-4eac-3309-8de2-24f62624fcd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.crl X509v3 Authority Key Identifier: keyid:9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer sbgp-ipAddrBlock: critical IPv4: 144.29.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:84:0b:5d:d0:37:05:a5:4f:07:e9:ce:bc:87:51:08:8e:d3: ae:8d:c6:d5:bd:48:19:36:fd:4d:04:f0:a7:e1:79:1b:49:6a: 05:91:b5:2f:37:d3:c7:b0:0f:fd:4e:52:02:e4:1d:f6:40:59: 1d:01:dd:9f:f0:2c:db:47:29:f0:02:dd:89:38:56:1a:81:11: ce:6b:7a:55:a5:11:a0:55:b3:5a:17:7b:84:d6:4a:51:19:ef: 1f:8b:38:4a:36:dc:d7:4b:2f:41:67:0a:d2:db:86:0e:b3:b4: 66:fc:9f:61:42:74:71:ad:3c:96:97:1a:68:b3:b8:a2:fb:c3: af:88:c5:8a:67:b9:1f:f0:ba:23:ef:46:e9:47:2a:67:90:ef: 5d:e6:cb:d7:dc:57:e5:1a:3b:b2:e4:6f:df:ea:93:38:a1:90: 48:82:c4:e2:60:30:20:bb:29:ba:f5:7f:d1:f2:9d:c0:d5:d2: 3c:3c:39:93:51:c1:ff:fd:76:91:10:40:42:85:96:4e:92:38: e8:3e:2a:ff:37:08:e1:79:e8:5c:37:36:8c:68:98:39:ad:e3: 9b:ff:71:90:20:34:92:93:1f:9b:53:75:03:de:1e:63:92:83: 0b:80:8a:98:22:2d:2e:0b:37:7d:48:80:fb:70:2f:e3:12:e6: 37:e2:4d:41 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEosIA8Wi0sTrOIZwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5YTRjMzUtNTRjMS00MjdjLThmNmUtZWYxYjE2NDRm ODllMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk YTEzYzM3NmUtOTQxYy00MWRmLWFhNTctODA1Y2I3ZDhmOGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bCTkQthmYYPLvmeK9xD5BWftva22xNKrz6X wt3SByR+gWks4tQahpBWcUJi1WTudvVvp7Xr84tNiQFFAs5d1L2C3DVoi+b9YytI EJa2F3xLDvEISJb/crKVgP1WFFE1CM41npmkLcvTAs/1+tt7W5m35j3YGMQrsv73 zMwlPG2XnPDk72Xh+YexFxMmwr4us0fteuF/9YqtsObumBD0WtDQQMD36fQCnVb5 7PtF0T5mJZ4vLUjlROFFGvybSX1oFazKHb+RZ+L8dI2/0CLsKjnab/zRDj06hn8g dtPP7/6QiUxPBM49ObzfnZLCBkDuuO7ndcpmhfpmjNIiM5xkwQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPCXm0KYN1EPBHKX8V2Mvt5K9wUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlh NGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0NGY4OWUvNTNjY2FlMDYtNGVhYy0z MzA5LThkZTItMjRmNjI2MjRmY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2Q5YTRjMzUtNTRjMS00MjdjLThm NmUtZWYxYjE2NDRmODllLzNkOWE0YzM1LTU0YzEtNDI3Yy04ZjZlLWVmMWIxNjQ0 Zjg5ZS5jcmwwHwYDVR0jBBgwFoAUn0bW0R1K0GvS1x9acstvqb+KqLowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFi MTY0NGY4OWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkB0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAj4QLXdA3BaVPB+nOvIdRCI7Tro3G1b1IGTb9TQTwp+F5G0lqBZG1LzfT x7AP/U5SAuQd9kBZHQHdn/As20cp8ALdiThWGoERzmt6VaURoFWzWhd7hNZKURnv H4s4Sjbc10svQWcK0tuGDrO0ZvyfYUJ0ca08lpcaaLO4ovvDr4jFime5H/C6I+9G 6UcqZ5DvXebL19xX5Ro7suRv3+qTOKGQSILE4mAwILspuvV/0fKdwNXSPDw5k1HB //12kRBAQoWWTpI46D4q/zcI4XnoXDc2jGiYOa3jm/9xkCA0kpMfm1N1A94eY5KD C4CKmCItLgs3fUiA+3Av4xLmN+JNQQ== -----END CERTIFICATE-----Generated at Sat Jul 5 01:21:11 2025 by rpki-client