$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa File: 3cc38345-6550-34c7-91a9-c41099c6e187.roa (raw, json) Hash identifier: TyyaLufPFDBFwsTqSFQjmp6Yu3f/0v4atNG/EK1/+5k= Subject key identifier: C8:0E:90:D0:2A:24:DE:01:DA:28:23:AA:47:84:99:BE:8D:27:5F:42 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D124B3CFBFD65A2CED4880 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 1225 IP address blocks: 129.250.35.96/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:24:b3:cf:bf:d6:5a:2c:ed:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=e7f4146b-9a1b-4847-8fb7-2d17b9c44cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:56:fb:da:75:cd:2f:6e:c4:8d:7e:46:c0:a9: 8d:3a:f7:bb:24:ed:20:2c:9a:bf:61:37:19:f9:da: 88:ef:62:fc:cc:9c:7f:09:d9:2c:f7:b6:9c:b6:94: 4c:07:29:44:27:dc:15:04:7d:ef:8e:85:e9:2f:73: 2d:9d:45:c1:77:52:e3:fe:9c:d4:f1:d7:08:19:a9: be:f6:a1:95:4a:f7:62:79:b2:61:17:77:b6:31:11: ce:e3:1c:59:3e:ad:d3:1d:dc:8b:65:69:b9:a5:9f: 32:2c:09:eb:85:0f:04:f6:d8:8f:b5:95:86:18:1e: ef:f9:32:95:73:a9:7a:9a:ed:4d:98:55:34:d9:68: c8:f6:66:e3:ac:cb:56:cf:a6:19:32:16:90:14:e2: b6:95:27:cc:d0:40:78:be:44:49:92:85:7a:07:7a: bf:f5:b2:4d:ae:83:c6:87:98:e9:4c:9a:ae:bc:06: fd:22:08:70:53:0f:64:8a:ce:72:05:d6:00:d4:ed: 02:0b:62:eb:38:f3:1a:a7:f8:3b:7a:74:66:2e:f0: ab:73:68:39:3f:65:a3:d1:33:08:04:e3:58:b2:01: 21:d2:0e:7c:60:f7:ad:c9:d2:e7:49:8c:7c:f0:52: 83:3c:36:08:79:d5:99:54:57:3a:12:6e:dc:9f:e7: 02:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0E:90:D0:2A:24:DE:01:DA:28:23:AA:47:84:99:BE:8D:27:5F:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3cc38345-6550-34c7-91a9-c41099c6e187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.96/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:da:a4:d9:75:03:e6:51:9f:e3:d0:cd:8d:b5:4b:1c:6b:4d: 8e:42:61:9d:58:0b:e2:27:95:c8:59:7c:78:60:ba:d8:4c:93: 1e:2d:7f:51:e3:67:cd:9f:6b:c9:cc:16:34:83:49:a7:68:44: d2:1b:10:a4:13:98:5b:ae:82:0d:16:10:df:be:6f:2a:6f:1f: de:f6:fc:1c:31:1c:9c:10:2a:11:02:79:c5:ca:d6:cc:f3:4d: aa:64:f7:7c:58:27:a1:9d:ca:43:c9:13:4e:59:3c:f1:12:84: 2f:04:a4:cc:19:95:52:cb:fa:7f:a2:c0:e8:f6:23:0a:09:de: d8:f2:0d:d7:22:d3:00:ec:ec:8b:98:eb:87:60:06:ff:bb:f2: 5a:ee:36:c4:b8:0e:0b:05:52:3f:1e:2f:3d:9e:e7:b6:fd:29: 80:44:1e:5b:a8:57:f8:03:39:13:14:8b:a4:3d:9a:e3:6c:3b: c4:4b:a9:5c:e2:b6:77:18:ac:18:ac:c9:aa:1d:a3:a9:18:28: 76:6b:bc:84:b8:5a:e8:e5:e2:06:77:19:3c:57:b9:11:06:6f: bc:96:7a:71:c5:a9:ea:ed:22:b0:fe:74:42:00:06:31:3d:d7: 24:e4:20:7f:5d:e5:74:04:f5:34:07:54:ab:2f:d2:dd:65:d1: de:c8:bf:5e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErX0SSzz7/WWiztSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZTdmNDE0NmItOWExYi00ODQ3LThmYjctMmQxN2I5YzQ0Y2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFb72nXNL27EjX5GwKmNOve7JO0gLJq/YTcZ +dqI72L8zJx/Cdks97actpRMBylEJ9wVBH3vjoXpL3MtnUXBd1Lj/pzU8dcIGam+ 9qGVSvdiebJhF3e2MRHO4xxZPq3THdyLZWm5pZ8yLAnrhQ8E9tiPtZWGGB7v+TKV c6l6mu1NmFU02WjI9mbjrMtWz6YZMhaQFOK2lSfM0EB4vkRJkoV6B3q/9bJNroPG h5jpTJquvAb9IghwUw9kis5yBdYA1O0CC2LrOPMap/g7enRmLvCrc2g5P2Wj0TMI BONYsgEh0g58YPetydLnSYx88FKDPDYIedWZVFc6Em7cn+cCDwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMgOkNAqJN4B2igjqkeEmb6NJ19CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2NjMzgzNDUtNjU1MC0z NGM3LTkxYTktYzQxMDk5YzZlMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfojYDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBU2qTZdQPmUZ/j0M2NtUsca02OQmGdWAviJ5XIWXx4YLrYTJMeLX9R 42fNn2vJzBY0g0mnaETSGxCkE5hbroINFhDfvm8qbx/e9vwcMRycECoRAnnFytbM 802qZPd8WCehncpDyRNOWTzxEoQvBKTMGZVSy/p/osDo9iMKCd7Y8g3XItMA7OyL mOuHYAb/u/Ja7jbEuA4LBVI/Hi89nue2/SmARB5bqFf4AzkTFIukPZrjbDvES6lc 4rZ3GKwYrMmqHaOpGCh2a7yEuFro5eIGdxk8V7kRBm+8lnpxxanq7SKw/nRCAAYx Pdck5CB/XeV0BPU0B1SrL9LdZdHeyL9e -----END CERTIFICATE-----Generated at Sat Aug 23 13:10:51 2025 by rpki-client