$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/37e2125b-0513-38b8-b530-2d308d41fbfe.roa File: 37e2125b-0513-38b8-b530-2d308d41fbfe.roa (raw, json) Hash identifier: oCoUstiR9aYFhDz7oZrEeQwkINF7lXLnajYUbUOx/TE= Subject key identifier: 5A:E8:61:23:F0:5E:3B:77:CE:7B:F3:0B:8A:E4:F9:EB:08:FA:17:A0 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A0C055ED73ECE9584AED57A00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/37e2125b-0513-38b8-b530-2d308d41fbfe.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 2914 IP address blocks: 129.250.161.128/27 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:5e:d7:3e:ce:95:84:ae:d5:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=87dd4d1b-4420-4c94-b5c1-66de309f92ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:da:b5:d1:c2:b0:2e:c4:3b:a8:d0:14:26:f1: 2e:78:55:34:c6:5a:94:5a:dd:24:d1:9a:a4:d8:b3: a5:c1:cd:51:57:8d:93:a4:16:99:95:2d:7a:fd:76: c0:32:ad:67:fa:c6:83:4b:96:9a:06:54:db:9c:e8: 2b:73:fc:99:33:8e:fe:57:3a:a1:47:0d:96:7e:df: fc:07:b9:37:21:8b:d7:4e:d0:3a:bb:77:8b:28:f6: 12:0c:3c:bb:90:a8:86:57:80:e3:5e:ae:5d:73:80: db:ab:69:13:44:ea:5f:a6:d6:80:35:4f:09:88:03: 84:24:f2:10:4a:aa:6e:b0:c4:6b:4f:65:ca:04:a0: 74:4e:07:49:ca:56:88:27:78:8e:82:ca:8a:55:f5: c5:26:03:9a:18:e2:7d:d6:0f:2d:02:ad:7e:89:ea: f1:29:11:79:92:c8:48:6d:d2:b6:8b:91:49:26:82: 29:37:3d:7d:84:03:ab:4e:ca:a2:de:95:d0:18:53: 18:06:87:39:22:87:30:30:33:96:12:97:58:88:13: a8:da:34:2f:00:45:5b:16:be:d0:1d:38:4f:6d:97: 19:0f:1b:91:3d:21:f4:ca:b3:77:9d:00:66:0f:b3: 31:bf:da:2f:fd:94:90:9c:2e:1b:b3:f1:97:6e:da: 6f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E8:61:23:F0:5E:3B:77:CE:7B:F3:0B:8A:E4:F9:EB:08:FA:17:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/37e2125b-0513-38b8-b530-2d308d41fbfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.161.128/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e4:c7:07:5b:2a:c0:7b:8a:10:cb:b8:cb:dd:3b:5b:e6:77: 59:86:b0:f3:e3:54:d6:34:de:9d:b6:e3:50:b7:61:62:5c:45: 6d:db:2d:fc:f7:44:1c:23:b0:2f:7f:d5:3d:01:a3:0e:dc:39: 5c:58:1d:3f:06:28:aa:ae:35:84:f1:26:a2:eb:8c:e3:00:0e: de:0d:85:4d:e5:65:28:ac:f7:00:1a:ba:83:ac:0b:c8:2d:84: 0c:4b:b5:b5:88:27:3c:24:39:3a:19:e0:12:17:b0:71:c9:07: a0:33:ea:55:89:cb:a8:36:d6:32:d9:6a:84:0c:ce:b9:4c:38: 01:67:68:3b:6e:4c:e2:47:b0:52:87:b2:8a:f5:75:ec:1e:8c: 2b:6b:42:28:02:4e:72:d4:b8:ae:00:55:7d:f3:ef:b9:05:15: cd:5a:3b:fb:6a:d3:5b:a9:ba:43:8b:3c:22:f4:65:d7:44:bf: 91:7a:dd:42:2b:63:f7:05:9e:98:b8:95:74:55:1e:3e:6d:17: a6:17:2e:a9:0f:f8:d5:33:27:89:3e:74:bf:49:8d:a0:91:e5: b4:60:e6:28:b4:e2:ef:95:7d:48:26:c0:28:3d:dd:61:f6:bd: df:15:d4:7f:e2:07:69:78:a6:f1:43:e5:f3:5d:0e:73:86:59: dd:b0:ff:08 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoMBV7XPs6VhK7VegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ODdkZDRkMWItNDQyMC00Yzk0LWI1YzEtNjZkZTMwOWY5MmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNq10cKwLsQ7qNAUJvEueFU0xlqUWt0k0Zqk 2LOlwc1RV42TpBaZlS16/XbAMq1n+saDS5aaBlTbnOgrc/yZM47+VzqhRw2Wft/8 B7k3IYvXTtA6u3eLKPYSDDy7kKiGV4DjXq5dc4Dbq2kTROpfptaANU8JiAOEJPIQ SqpusMRrT2XKBKB0TgdJylaIJ3iOgsqKVfXFJgOaGOJ91g8tAq1+ierxKRF5kshI bdK2i5FJJoIpNz19hAOrTsqi3pXQGFMYBoc5IocwMDOWEpdYiBOo2jQvAEVbFr7Q HThPbZcZDxuRPSH0yrN3nQBmD7Mxv9ov/ZSQnC4bs/GXbtpvrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFroYSPwXjt3znvzC4rk+esI+hegMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzdlMjEyNWItMDUxMy0z OGI4LWI1MzAtMmQzMDhkNDFmYmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFgfqhgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBb5McHWyrAe4oQy7jL3Ttb5ndZhrDz41TWNN6dtuNQt2FiXEVt2y38 90QcI7Avf9U9AaMO3DlcWB0/BiiqrjWE8Sai64zjAA7eDYVN5WUorPcAGrqDrAvI LYQMS7W1iCc8JDk6GeASF7BxyQegM+pVicuoNtYy2WqEDM65TDgBZ2g7bkziR7BS h7KK9XXsHowra0IoAk5y1LiuAFV98++5BRXNWjv7atNbqbpDizwi9GXXRL+Ret1C K2P3BZ6YuJV0VR4+bRemFy6pD/jVMyeJPnS/SY2gkeW0YOYotOLvlX1IJsAoPd1h 9r3fFdR/4gdpeKbxQ+XzXQ5zhlndsP8I -----END CERTIFICATE-----Generated at Sun Jun 29 20:54:08 2025 by rpki-client