$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa File: f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa (raw, json) Hash identifier: hFgCy6rdgXXntU7l6MAE273ZvWRdo5oNYmbkfW/F6DM= Subject key identifier: 5D:3E:32:69:1B:94:0F:4D:63:12:77:FA:41:1A:50:46:85:90:8B:F2 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584AD7D108AA60C192CB15932680 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 22742 IP address blocks: 129.133.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:08:aa:60:c1:92:cb:15:93:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=34a244ea-c116-490c-838d-578c2598eb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:40:a4:7c:1b:3b:cf:81:11:df:85:45:28:3d: 7b:46:08:55:16:8b:e7:bd:ee:b9:33:fc:17:1f:19: 1d:e3:5a:2a:bc:7e:2f:18:4a:02:c3:af:40:90:47: 97:4e:23:e3:ca:8a:52:b0:a8:0b:4a:95:ab:77:71: 2c:cf:34:40:f0:8e:35:56:b9:40:2a:12:b3:5b:20: 6c:30:8a:85:24:cc:9c:d7:48:48:d2:8e:5a:33:3f: 5b:33:9b:c0:16:51:83:38:64:e5:bf:f4:ab:7b:b1: cb:11:82:70:10:54:34:89:04:6c:55:f4:95:3a:fd: 10:d6:0b:42:25:56:97:97:40:64:b4:4f:fd:8c:5e: 89:a9:40:2e:ae:68:b2:6e:77:dd:b2:c5:7b:9b:7b: 3a:87:99:64:3f:59:83:33:e4:27:61:39:e5:f2:b9: 05:5a:b0:17:c6:4c:6b:11:91:6c:f7:0d:24:06:13: fd:e7:4a:17:ec:7b:23:d2:6d:83:16:a5:96:49:89: 2c:d9:05:ca:e4:f1:07:04:12:ac:84:29:86:da:79: c1:85:bd:55:54:0f:ae:de:a0:ab:bc:c8:f6:d9:a0: b1:c5:3a:07:3f:42:47:cb:c9:44:6e:53:46:af:1a: 76:c0:58:4e:15:63:8e:77:24:15:b2:32:af:45:2c: dd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3E:32:69:1B:94:0F:4D:63:12:77:FA:41:1A:50:46:85:90:8B:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/f009aaa7-d5c7-3d0f-a469-59421f27c99d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 129.133.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:cc:1b:da:ba:dc:b8:db:8c:78:dd:ee:49:8f:da:53:e3:d0: 41:82:a6:93:be:be:40:5e:a8:a7:49:3a:64:01:1e:2b:f0:0a: f9:61:57:63:cc:92:a3:cb:bb:d9:60:c9:5b:5f:00:78:df:21: ff:79:e4:af:99:eb:db:13:4d:25:97:dc:48:16:2e:b1:f3:05: 05:f1:c4:78:77:a5:8c:b9:b6:46:a6:4f:ee:fd:66:37:ea:65: 9c:58:88:09:77:a2:2b:01:3b:4f:1d:26:0c:38:e3:63:be:71: 85:a5:d1:4b:f0:6d:a1:18:45:d1:f6:8f:af:e4:df:0b:73:31: 09:1b:d7:8f:6f:a9:ae:aa:97:f8:41:08:63:90:4c:40:c5:77: c2:24:13:83:7e:3b:7f:14:72:b0:8c:8a:fc:b7:fb:f5:b6:3d: 8d:ec:b3:ed:e8:a8:13:b0:d7:a2:ae:4b:0f:95:de:60:52:82: 9d:31:6a:06:65:55:d8:ce:f8:63:6a:0b:fe:a5:ba:80:3b:db: f6:3e:28:f0:2f:a7:11:b5:a2:93:38:ac:a4:65:ce:61:ec:6f: 68:4b:40:8e:e0:08:d6:8d:28:cd:4d:81:1b:bc:fb:ed:83:9b: 33:7b:95:9d:7e:07:a0:61:5c:03:2d:5b:80:3b:d0:34:b3:7c: f5:02:72:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0QiqYMGSyxWTJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MzRhMjQ0ZWEtYzExNi00OTBjLTgzOGQtNTc4YzI1OThlYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUCkfBs7z4ER34VFKD17RghVFovnve65M/wX Hxkd41oqvH4vGEoCw69AkEeXTiPjyopSsKgLSpWrd3EszzRA8I41VrlAKhKzWyBs MIqFJMyc10hI0o5aMz9bM5vAFlGDOGTlv/Sre7HLEYJwEFQ0iQRsVfSVOv0Q1gtC JVaXl0BktE/9jF6JqUAurmiybnfdssV7m3s6h5lkP1mDM+QnYTnl8rkFWrAXxkxr EZFs9w0kBhP950oX7Hsj0m2DFqWWSYks2QXK5PEHBBKshCmG2nnBhb1VVA+u3qCr vMj22aCxxToHP0JHy8lEblNGrxp2wFhOFWOOdyQVsjKvRSzdBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0+MmkblA9NYxJ3+kEaUEaFkIvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvZjAwOWFhYTctZDVjNy0z ZDBmLWE0NjktNTk0MjFmMjdjOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgYXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnMG9q63LjbjHjd7kmP2lPj0EGCppO+vkBeqKdJOmQBHivwCvlhV2PM kqPLu9lgyVtfAHjfIf955K+Z69sTTSWX3EgWLrHzBQXxxHh3pYy5tkamT+79Zjfq ZZxYiAl3oisBO08dJgw442O+cYWl0UvwbaEYRdH2j6/k3wtzMQkb149vqa6ql/hB CGOQTEDFd8IkE4N+O38UcrCMivy3+/W2PY3ss+3oqBOw16KuSw+V3mBSgp0xagZl VdjO+GNqC/6luoA72/Y+KPAvpxG1opM4rKRlzmHsb2hLQI7gCNaNKM1NgRu8++2D mzN7lZ1+B6BhXAMtW4A70DSzfPUCcqI= -----END CERTIFICATE-----Generated at Sat Aug 23 21:48:15 2025 by rpki-client