$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a942301d-5541-36c8-9342-911968d44a92.roa File: a942301d-5541-36c8-9342-911968d44a92.roa (raw, json) Hash identifier: f1cFBapDUZdFeb6tcm7rXpHbCPFr+lI3GD7VqHfnLDI= Subject key identifier: 78:43:13:81:5F:D4:21:9C:56:CE:89:8B:C2:27:A0:69:26:66:32:49 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584A454040E162BA754A38337320 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a942301d-5541-36c8-9342-911968d44a92.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 22742 IP address blocks: 129.133.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:40:e1:62:ba:75:4a:38:33:73:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=97d6a0a3-2eec-417b-8a58-f53a0f9e3c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e1:a7:d1:1e:e5:12:58:19:f4:e8:e4:55:cc: 3a:7d:01:7b:29:31:8b:a0:3c:0a:2f:c5:21:df:27: 9c:4f:94:c1:d7:13:40:aa:d6:9f:59:47:80:3a:93: 33:a0:1f:4b:09:50:09:75:5c:d9:da:40:af:d4:82: 60:cf:ad:91:fe:35:60:4c:70:fd:a0:70:db:f0:9f: 27:0f:86:03:89:69:c7:b2:0a:ca:23:1b:49:58:53: 90:2f:67:4e:99:0b:09:3d:de:64:03:22:70:9e:af: 81:b7:a9:ff:51:ac:7a:b2:7a:4f:ff:0a:e2:11:71: b0:55:b1:b7:8f:9f:4e:49:b3:f1:5a:b7:ef:dd:68: 4e:f3:8f:dc:d4:d8:86:67:3a:e4:f7:6a:fb:07:04: 35:95:f2:50:65:46:63:2b:66:11:0b:78:b2:5c:e8: 25:da:54:b9:2e:dc:2a:09:23:9b:00:4c:b0:3b:bd: 91:67:7c:d7:f0:85:2c:73:04:25:5d:9b:d9:43:11: f2:5a:58:2c:03:41:94:62:17:b3:88:b8:f3:8c:40: 16:4c:84:6a:84:41:86:e1:92:6e:22:24:31:a6:c7: d0:14:ae:d8:cf:9f:ec:70:fc:1b:7a:6b:b5:49:c7: 42:9b:90:8c:90:be:56:a7:04:0b:db:7a:f0:4e:ad: 4b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:43:13:81:5F:D4:21:9C:56:CE:89:8B:C2:27:A0:69:26:66:32:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/a942301d-5541-36c8-9342-911968d44a92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 129.133.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ef:d6:98:1a:6a:6c:9b:06:fe:b9:7f:5d:e4:0e:f0:34:d0: 4b:64:eb:02:c3:3d:da:80:78:48:72:26:38:9b:81:2a:97:9f: 07:b5:07:d8:08:66:17:4e:b2:e1:ab:8c:a9:e6:10:5a:02:df: 55:cc:f1:dc:36:7f:99:70:80:69:38:17:35:36:e4:d7:6b:9e: 80:38:f5:15:fb:ba:9e:5c:65:fe:85:74:29:20:2a:b3:e0:ff: 65:82:a0:d3:6e:94:33:2a:b6:f6:ce:87:6a:1d:dc:9f:22:d4: a8:3c:b4:bc:e0:3e:14:29:81:af:11:47:4b:f7:cf:1a:0d:66: 9a:1b:2c:83:ed:89:ee:b7:61:a6:94:ba:73:ea:97:8e:6f:a0: e5:1b:71:5c:40:dc:82:c9:82:75:f7:b9:8f:34:90:8e:49:f6: 71:f9:ca:d3:13:b4:74:95:65:fd:8c:ba:8b:9e:ab:06:38:1f: bf:4f:44:31:6d:9c:50:29:8b:e2:ad:c5:ac:5a:aa:a4:2c:a9: 79:65:ac:d6:91:11:aa:0a:f2:72:b2:50:41:ab:2a:6a:0f:ea: dc:36:06:84:61:97:12:0d:2d:8d:48:16:8c:6d:6f:67:af:41: 03:f1:0f:88:0c:0a:db:ce:99:39:18:0f:62:47:09:96:ab:0d: c0:28:38:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQEDhYrp1SjgzcyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk OTdkNmEwYTMtMmVlYy00MTdiLThhNTgtZjUzYTBmOWUzYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguGn0R7lElgZ9OjkVcw6fQF7KTGLoDwKL8Uh 3yecT5TB1xNAqtafWUeAOpMzoB9LCVAJdVzZ2kCv1IJgz62R/jVgTHD9oHDb8J8n D4YDiWnHsgrKIxtJWFOQL2dOmQsJPd5kAyJwnq+Bt6n/Uax6snpP/wriEXGwVbG3 j59OSbPxWrfv3WhO84/c1NiGZzrk92r7BwQ1lfJQZUZjK2YRC3iyXOgl2lS5Ltwq CSObAEywO72RZ3zX8IUscwQlXZvZQxHyWlgsA0GUYheziLjzjEAWTIRqhEGG4ZJu IiQxpsfQFK7Yz5/scPwbemu1ScdCm5CMkL5WpwQL23rwTq1LiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhDE4Ff1CGcVs6Ji8InoGkmZjJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvYTk0MjMwMWQtNTU0MS0z NmM4LTkzNDItOTExOTY4ZDQ0YTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgYXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATv1pgaamybBv65f13kDvA00Etk6wLDPdqAeEhyJjibgSqXnwe1B9gI ZhdOsuGrjKnmEFoC31XM8dw2f5lwgGk4FzU25NdrnoA49RX7up5cZf6FdCkgKrPg /2WCoNNulDMqtvbOh2od3J8i1Kg8tLzgPhQpga8RR0v3zxoNZpobLIPtie63YaaU unPql45voOUbcVxA3ILJgnX3uY80kI5J9nH5ytMTtHSVZf2MuoueqwY4H79PRDFt nFApi+KtxaxaqqQsqXllrNaREaoK8nKyUEGrKmoP6tw2BoRhlxINLY1IFoxtb2ev QQPxD4gMCtvOmTkYD2JHCZarDcAoOIk= -----END CERTIFICATE-----Generated at Mon Jun 30 16:08:51 2025 by rpki-client