$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf476e00-d8fa-36b2-99cc-2e20ec0ac24e.roa File: cf476e00-d8fa-36b2-99cc-2e20ec0ac24e.roa (raw, json) Hash identifier: iYgE/0bi2v5F0pBwy4DjuVmGNeUxr3aBVTEr8iKPTl0= Subject key identifier: AA:44:13:6A:A8:92:2C:B5:73:9B:5A:F4:79:A2:56:BA:22:69:94:26 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F432858490E16C35093B6FB57CEBBEE00 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf476e00-d8fa-36b2-99cc-2e20ec0ac24e.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 11055 IP address blocks: 129.101.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:c3:50:93:b6:fb:57:ce:bb:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=2af27486-0f3a-4f95-8a3e-107b0ac52bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bb:51:7c:18:64:62:e7:a0:66:98:73:d4:ad: 47:99:31:a6:5f:29:f1:31:a1:28:0f:2c:0c:84:69: 78:38:fb:a5:d6:f9:c9:f0:fc:60:f4:84:1a:d5:2d: 20:5a:33:4d:eb:15:98:b2:10:ad:1c:07:59:1e:c6: 10:ed:69:53:05:07:7d:37:ea:e9:4b:43:d5:1a:fd: ca:3f:bb:52:c9:15:90:69:a2:9a:dc:fd:b7:96:f6: 4d:29:9a:71:80:60:6d:f2:f9:b5:ea:01:ae:a2:28: a9:fc:b5:1b:81:e9:84:1a:58:aa:10:da:83:1a:55: 27:11:21:f0:7d:83:1f:26:a6:57:27:4c:00:04:72: 72:08:88:6d:c0:84:b1:d2:42:5f:45:bc:a2:b5:5f: cd:71:c5:39:5a:4d:e6:11:94:a4:95:20:91:e7:98: e8:ea:1e:44:21:6a:7b:ab:87:ca:a2:dd:2b:23:2c: 83:56:3c:3f:da:ec:3d:1c:ba:c0:01:de:c3:15:83: bb:67:96:73:fb:f9:fe:16:98:62:38:99:6e:00:90: 0d:be:0a:76:b7:0e:5e:56:1a:26:de:58:83:ab:93: d4:f9:b8:5d:c3:49:77:2a:5d:7f:b8:92:9b:c8:e3: e0:8c:3c:62:52:77:f2:c4:84:23:86:df:a0:6c:42: 1c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:44:13:6A:A8:92:2C:B5:73:9B:5A:F4:79:A2:56:BA:22:69:94:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf476e00-d8fa-36b2-99cc-2e20ec0ac24e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 129.101.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:97:87:15:8e:e8:1b:34:74:d6:09:46:e8:34:d0:b0:fa:2e: 16:33:89:a9:34:a3:d0:2d:84:3a:22:ca:88:e4:2b:b3:ea:6c: de:20:82:ea:86:a3:b9:e5:ad:a4:01:f9:f8:49:84:21:60:61: 20:b5:c0:58:80:db:c3:fb:a1:c1:69:eb:02:82:b9:bb:bb:30: 20:ff:4b:bd:bb:b1:10:80:8e:81:98:76:d2:e9:21:a8:03:fb: c7:d8:a7:31:63:2d:d4:a8:69:41:30:62:03:83:f3:68:f6:72: 76:f3:d1:f1:d3:8f:9a:4a:3e:a4:21:33:f0:d9:28:00:84:a4: 2f:cb:50:80:09:d5:17:22:73:53:11:5d:6d:74:d5:e5:07:00: 73:79:d2:fc:d2:68:0b:e7:f0:5b:f0:7b:50:d1:a0:f2:40:24: 9d:24:d7:57:c2:05:3c:1f:9a:94:45:ea:fa:cc:d0:63:be:bb: ba:54:e7:a2:0f:4f:38:76:66:68:8c:8e:02:50:63:0d:c5:8e: a4:85:44:90:ef:d6:8b:9b:b6:73:96:ad:de:c0:75:09:11:f8: 21:d1:a0:ee:3d:66:a9:ed:85:97:05:8a:a6:bb:ef:d8:ac:33: b1:b7:bd:71:fe:30:16:35:ed:08:37:f7:70:f8:d1:bb:84:a9: bc:50:67:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFsNQk7b7V8677gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk MmFmMjc0ODYtMGYzYS00Zjk1LThhM2UtMTA3YjBhYzUyYmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbtRfBhkYuegZphz1K1HmTGmXynxMaEoDywM hGl4OPul1vnJ8Pxg9IQa1S0gWjNN6xWYshCtHAdZHsYQ7WlTBQd9N+rpS0PVGv3K P7tSyRWQaaKa3P23lvZNKZpxgGBt8vm16gGuoiip/LUbgemEGliqENqDGlUnESHw fYMfJqZXJ0wABHJyCIhtwISx0kJfRbyitV/NccU5Wk3mEZSklSCR55jo6h5EIWp7 q4fKot0rIyyDVjw/2uw9HLrAAd7DFYO7Z5Zz+/n+FphiOJluAJANvgp2tw5eVhom 3liDq5PU+bhdw0l3Kl1/uJKbyOPgjDxiUnfyxIQjht+gbEIcswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpEE2qokiy1c5ta9HmiVroiaZQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvY2Y0NzZlMDAtZDhmYS0z NmIyLTk5Y2MtMmUyMGVjMGFjMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgWU/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeXhxWO6Bs0dNYJRug00LD6LhYziak0o9AthDoiyojkK7PqbN4gguqG o7nlraQB+fhJhCFgYSC1wFiA28P7ocFp6wKCubu7MCD/S727sRCAjoGYdtLpIagD +8fYpzFjLdSoaUEwYgOD82j2cnbz0fHTj5pKPqQhM/DZKACEpC/LUIAJ1Rcic1MR XW101eUHAHN50vzSaAvn8Fvwe1DRoPJAJJ0k11fCBTwfmpRF6vrM0GO+u7pU56IP Tzh2ZmiMjgJQYw3FjqSFRJDv1oubtnOWrd7AdQkR+CHRoO49ZqnthZcFiqa779is M7G3vXH+MBY17Qg393D40buEqbxQZ2c= -----END CERTIFICATE-----Generated at Tue May 13 06:35:11 2025 by rpki-client