$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa File: fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa (raw, json) Hash identifier: zuGPA9AZkF8bRi/fVawhWqCEGJDEXdDq2WafV44s8dQ= Subject key identifier: 2C:61:36:4D:96:57:78:B9:16:8B:E7:8A:4B:F6:C1:B1:E2:AB:B7:65 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D124C85EBDB98A5B29BB20 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 1225 IP address blocks: 129.250.35.224/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:24:c8:5e:bd:b9:8a:5b:29:bb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=61b5801f-5430-4f58-8608-7df4953fcd38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:66:1c:b9:06:ef:03:6a:31:31:25:f7:b8:1f: c1:43:71:3f:63:2d:3b:06:48:8e:e1:ef:59:0e:f6: a1:a8:9a:27:7e:93:86:02:d9:0f:97:b6:75:b3:5c: 0a:19:33:fc:b0:31:63:01:41:63:60:35:bf:30:81: 88:2c:e8:a8:ae:ea:24:87:68:75:a5:7d:f5:ae:59: e7:89:7c:59:5e:54:6a:df:1c:dd:3f:cf:19:5c:56: bb:7d:a6:0c:b1:a4:a9:e1:2b:d5:0d:a2:7d:6b:65: ab:d5:37:e6:0b:8d:72:f0:fc:34:95:c1:a2:3b:0e: 3e:51:3f:3c:d1:94:c9:e8:0c:f6:ca:24:ee:a5:1c: ea:85:dd:f5:3b:78:84:e9:24:77:c4:fb:4c:fd:5a: bb:08:fd:47:d0:b3:b6:24:7e:31:8e:5c:12:11:97: eb:97:e1:32:95:c2:4e:e9:84:d5:2d:27:5b:da:b4: 77:d7:03:12:c3:4d:85:38:0e:cf:df:06:c5:34:68: 66:c7:d1:bf:64:4d:9b:f7:5c:80:d7:25:b9:09:4f: a8:38:bd:e5:0b:3b:d1:e3:17:55:9d:af:68:50:26: 3a:d2:8d:01:7c:01:37:06:7d:14:28:a6:20:34:8b: 72:1c:d3:cd:69:2a:9f:f3:5e:72:87:37:17:e3:c0: b8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:61:36:4D:96:57:78:B9:16:8B:E7:8A:4B:F6:C1:B1:E2:AB:B7:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fb4b94d1-37a1-3c11-a86f-67c1cf1954a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.35.224/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:23:2e:0b:3d:ee:01:96:39:fc:6f:ff:0d:76:14:f2:b1:00: ad:5e:55:43:d3:33:0c:52:24:4c:65:8a:14:ba:06:7e:5e:f9: 96:ca:98:95:a6:e6:b4:44:84:70:af:b1:a3:60:bf:57:ed:b4: 45:ea:aa:98:3b:99:10:5d:74:c1:44:d7:60:7a:38:a0:2e:d6: b3:e5:b9:82:d2:2d:ec:a4:4b:17:e0:31:87:4a:09:85:bb:cb: 09:58:e5:15:b3:31:96:e3:27:88:35:38:b9:bd:10:52:fd:d5: 25:a5:78:cc:b2:8b:94:d3:05:b6:55:ad:9b:b7:57:8a:46:6d: ea:2d:f5:3d:b9:b2:26:eb:c6:58:52:a5:7e:58:8d:ba:a1:3b: e2:20:5f:96:89:7f:ed:b2:5e:2d:5f:3c:57:2a:fc:b9:b2:67: 5c:b5:0a:ec:db:9a:f5:19:64:1d:2c:87:b7:6c:ea:3f:1e:ea: 26:cd:96:de:b0:db:9b:f2:f6:3f:0c:05:c9:93:bb:a3:87:c6: 08:d2:78:25:d1:20:af:4c:8b:a8:99:9e:b5:ab:23:0a:39:59: 8a:9a:49:6c:c3:2b:d1:37:65:c4:66:91:37:79:c9:99:4f:39: 3a:12:5b:54:b6:19:cf:61:93:c0:c1:9d:70:40:89:79:7e:11: 2f:52:ff:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErX0STIXr25ilspuyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NjFiNTgwMWYtNTQzMC00ZjU4LTg2MDgtN2RmNDk1M2ZjZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWYcuQbvA2oxMSX3uB/BQ3E/Yy07BkiO4e9Z DvahqJonfpOGAtkPl7Z1s1wKGTP8sDFjAUFjYDW/MIGILOioruokh2h1pX31rlnn iXxZXlRq3xzdP88ZXFa7faYMsaSp4SvVDaJ9a2Wr1TfmC41y8Pw0lcGiOw4+UT88 0ZTJ6Az2yiTupRzqhd31O3iE6SR3xPtM/Vq7CP1H0LO2JH4xjlwSEZfrl+EylcJO 6YTVLSdb2rR31wMSw02FOA7P3wbFNGhmx9G/ZE2b91yA1yW5CU+oOL3lCzvR4xdV na9oUCY60o0BfAE3Bn0UKKYgNItyHNPNaSqf815yhzcX48C4cQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCxhNk2WV3i5Fovnikv2wbHiq7dlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmI0Yjk0ZDEtMzdhMS0z YzExLWE4NmYtNjdjMWNmMTk1NGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfoj4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCXIy4LPe4Bljn8b/8NdhTysQCtXlVD0zMMUiRMZYoUugZ+XvmWypiV pua0RIRwr7GjYL9X7bRF6qqYO5kQXXTBRNdgejigLtaz5bmC0i3spEsX4DGHSgmF u8sJWOUVszGW4yeINTi5vRBS/dUlpXjMsouU0wW2Va2bt1eKRm3qLfU9ubIm68ZY UqV+WI26oTviIF+WiX/tsl4tXzxXKvy5smdctQrs25r1GWQdLIe3bOo/HuomzZbe sNub8vY/DAXJk7ujh8YI0ngl0SCvTIuomZ61qyMKOVmKmklswyvRN2XEZpE3ecmZ Tzk6EltUthnPYZPAwZ1wQIl5fhEvUv81 -----END CERTIFICATE-----Generated at Sat Aug 23 15:04:29 2025 by rpki-client