$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa File: 4347f76d-c74a-3942-9dc0-3e3301512261.roa (raw, json) Hash identifier: k3BDqSpj/WHhw7S0S3sXFc6OyF+fD8Igxeoy65YF2+4= Subject key identifier: D7:00:07:70:39:DF:D7:F5:56:25:5C:58:4F:D2:F5:72:8E:EF:F4:37 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A374ACA197E5F56C6BA4D4740 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 16509 IP address blocks: 129.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:ca:19:7e:5f:56:c6:ba:4d:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=cf6ed0c1-7d54-4d1c-b45c-6fc6f6fa6864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:61:dd:c1:50:80:75:5e:ff:6c:ea:78:61:d0: 6a:83:3b:cd:7f:56:75:6c:9d:c0:c8:2f:f9:b8:1e: aa:8e:0d:d5:79:fa:10:d2:50:97:fa:f0:50:b4:24: d3:61:b4:1c:b4:f9:9e:81:e4:c9:ee:cd:61:51:15: e1:fe:dc:60:90:02:5b:95:c0:7c:a5:0d:6d:88:2f: 00:dd:a6:f5:80:c2:62:63:51:c6:dd:32:26:48:8a: a6:04:e3:ba:0e:fb:7e:c9:7a:2a:b3:d4:0a:6a:98: cf:1f:7d:65:78:8f:c2:d6:06:e1:4d:75:66:38:b7: 8b:1a:fe:7c:b6:46:be:fe:8c:d0:ce:14:2e:3c:0d: 24:88:93:f5:b8:28:14:a5:55:85:de:0b:11:23:24: 90:4f:24:12:5d:b9:9a:22:3e:80:d2:bc:14:d0:dc: 91:35:e1:db:32:62:54:14:ff:d8:2c:d0:f6:b4:79: a1:9c:c0:94:1b:8d:44:e2:42:fd:84:f4:6a:16:66: 6c:2d:84:dc:fd:6f:ec:61:94:57:a4:09:2d:8d:43: d5:69:0b:94:95:89:6d:03:89:57:99:78:ba:a5:a5: 2f:8c:a9:7c:16:de:14:db:f3:74:6c:d5:f4:6a:81: b5:7d:6e:cf:67:6f:0b:e9:20:3b:26:a5:bd:42:39: 7f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:00:07:70:39:DF:D7:F5:56:25:5C:58:4F:D2:F5:72:8E:EF:F4:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:0f:ca:c5:8c:79:d6:60:b5:4c:65:12:79:df:b6:fc:d8:ca: 18:cb:37:e2:bc:b2:a8:49:49:20:7d:69:3f:4e:3a:34:18:55: b3:48:5e:ce:8f:10:3f:82:a2:99:37:2d:27:f8:ce:d4:63:92: d6:6b:fe:b7:5d:84:dc:ef:1e:af:37:aa:7e:b0:94:2b:21:6c: bd:3a:20:c2:66:f9:81:4e:89:55:1b:37:30:50:b3:4f:a5:65: c2:1e:85:ff:50:a4:14:5c:4f:5e:52:8d:6c:3b:7a:b5:c6:44: d1:73:13:ab:f4:f9:55:54:73:3d:5a:ff:fc:e5:38:7f:f5:47: 26:0d:45:c0:31:fa:20:25:07:bf:1c:67:dc:2e:11:b0:08:6b: 62:ce:93:0a:e8:78:fb:78:1a:af:dc:19:9d:2a:19:74:de:b9: 6a:49:68:59:7e:e8:30:66:b1:6d:fb:d5:ad:04:0c:6d:58:fe: 3d:c4:90:54:27:07:8a:c4:7a:8f:5a:77:0a:0f:00:6e:a6:3f: 33:3f:b9:ff:aa:b4:57:e2:99:81:e2:e1:c3:d9:57:1e:7b:9b: 0d:c8:8b:9c:38:ba:f4:a9:b8:5e:8b:e5:a5:94:af:ef:5b:36: 3c:c5:45:ac:35:96:21:ca:90:b1:4d:c4:2f:4e:58:a2:31:df: b6:fe:7b:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SsoZfl9WxrpNR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk Y2Y2ZWQwYzEtN2Q1NC00ZDFjLWI0NWMtNmZjNmY2ZmE2ODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGHdwVCAdV7/bOp4YdBqgzvNf1Z1bJ3AyC/5 uB6qjg3VefoQ0lCX+vBQtCTTYbQctPmegeTJ7s1hURXh/txgkAJblcB8pQ1tiC8A 3ab1gMJiY1HG3TImSIqmBOO6Dvt+yXoqs9QKapjPH31leI/C1gbhTXVmOLeLGv58 tka+/ozQzhQuPA0kiJP1uCgUpVWF3gsRIySQTyQSXbmaIj6A0rwU0NyRNeHbMmJU FP/YLND2tHmhnMCUG41E4kL9hPRqFmZsLYTc/W/sYZRXpAktjUPVaQuUlYltA4lX mXi6paUvjKl8Ft4U2/N0bNX0aoG1fW7PZ28L6SA7JqW9Qjl/EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcAB3A539f1ViVcWE/S9XKO7/Q3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNDM0N2Y3NmQtYzc0YS0z OTQyLTlkYzAtM2UzMzAxNTEyMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYPysWMedZgtUxlEnnftvzYyhjLN+K8sqhJSSB9aT9OOjQYVbNIXs6P ED+Copk3LSf4ztRjktZr/rddhNzvHq83qn6wlCshbL06IMJm+YFOiVUbNzBQs0+l ZcIehf9QpBRcT15SjWw7erXGRNFzE6v0+VVUcz1a//zlOH/1RyYNRcAx+iAlB78c Z9wuEbAIa2LOkwroePt4Gq/cGZ0qGXTeuWpJaFl+6DBmsW371a0EDG1Y/j3EkFQn B4rEeo9adwoPAG6mPzM/uf+qtFfimYHi4cPZVx57mw3Ii5w4uvSpuF6L5aWUr+9b NjzFRaw1liHKkLFNxC9OWKIx37b+ezE= -----END CERTIFICATE-----Generated at Sun Jun 29 09:04:59 2025 by rpki-client