$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a9d63830-af6c-3450-85d9-b6a575a21f7e.roa File: a9d63830-af6c-3450-85d9-b6a575a21f7e.roa (raw, json) Hash identifier: s3DYhFQCag+S59GOSXx1wl4Cfv97GFcIjqEBdPZ8fgw= Subject key identifier: D3:4F:3A:D8:B7:70:C2:DE:7E:8B:F5:10:55:BE:A6:05:F5:CD:E5:8F Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A374AC9E82F84844324450A00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a9d63830-af6c-3450-85d9-b6a575a21f7e.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 16509 IP address blocks: 129.33.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:c9:e8:2f:84:84:43:24:45:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=0752d2c5-88c9-4fa8-9336-831f641a1df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8b:89:d6:c5:6d:4b:ea:6f:e6:ce:4f:f9:d7: 40:dd:fc:9f:f7:7d:58:d5:22:b5:2c:cf:cb:20:6d: 9f:f8:66:c7:82:65:ec:35:61:dc:b3:de:06:c1:7e: 08:6c:e0:ff:fa:53:b8:ff:a2:df:e4:9b:ec:99:97: b2:b7:ba:18:8c:bc:24:8b:53:4a:e0:7b:90:3c:7b: b4:67:dc:a8:55:a5:81:1d:55:b6:79:85:76:99:ee: 83:e8:05:09:c0:53:0c:6c:56:cf:d7:87:79:17:5a: c8:59:0a:a5:51:00:f3:0a:33:56:45:a8:55:01:cb: 12:ec:59:7e:78:16:1a:76:6e:76:27:d2:15:32:0b: 1d:fa:42:7b:20:9e:30:ed:b4:b3:06:c4:e1:f4:10: b6:66:1e:ab:72:77:a0:b5:c5:78:4a:e2:3b:e8:b4: 11:f4:1d:bd:8e:fc:60:fd:94:16:00:4d:b6:14:e7: a3:e9:6d:d6:d9:ff:2b:5f:40:a5:75:22:77:e3:4a: e9:b6:8e:50:6d:be:27:6d:2d:f0:13:20:55:53:b1: 41:8b:09:53:98:d6:51:f8:f9:61:12:aa:e7:a5:1b: 92:dc:27:5d:d9:a7:39:18:39:1a:d1:1a:e9:d3:d2: 73:28:02:e4:0e:f4:02:0f:34:83:eb:12:21:c2:86: 2b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4F:3A:D8:B7:70:C2:DE:7E:8B:F5:10:55:BE:A6:05:F5:CD:E5:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a9d63830-af6c-3450-85d9-b6a575a21f7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:2f:6c:07:79:68:ed:a1:bf:34:ce:fb:4d:81:57:0c:bb:24: 41:8f:c7:6a:c2:8a:60:8d:5c:e4:68:68:fc:e1:b4:14:08:d8: 33:6a:b0:e4:75:2d:f2:65:9b:fd:7a:a5:04:98:b0:f4:17:96: fe:b1:ec:49:c0:6e:1e:35:db:fe:33:cd:41:75:48:4d:02:8f: 27:76:1d:66:1d:83:9c:aa:27:06:e0:27:53:34:c3:f2:48:5e: 9b:da:e8:68:67:ef:53:4a:81:42:96:eb:e5:c5:25:ff:3f:e9: e9:ba:9a:02:68:ab:1c:e8:b5:36:6d:27:6a:43:ce:39:30:89: 5e:1c:a0:fe:8a:0a:4b:16:6c:96:8c:d8:2f:b7:f9:92:12:b7: ef:3e:8b:5a:1f:28:52:e7:79:66:75:70:ff:c8:f4:0d:d9:a6: 51:96:be:fa:2c:7f:e3:99:e7:a8:37:2c:e7:57:d8:20:81:c1: 9d:65:f0:b8:bd:0d:be:39:bc:1e:44:ac:d9:18:4b:c6:17:8d: be:58:00:56:c1:d7:e6:5f:9d:38:4f:f6:cb:e4:33:7d:78:7a: 0f:70:66:9f:ec:6f:9f:b5:ac:af:cc:05:a9:55:67:d2:a5:36: b9:14:f4:e7:bb:d2:06:12:8f:57:6a:11:a5:32:d5:b6:a9:42: 81:d3:af:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SsnoL4SEQyRFCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk MDc1MmQyYzUtODhjOS00ZmE4LTkzMzYtODMxZjY0MWExZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIuJ1sVtS+pv5s5P+ddA3fyf931Y1SK1LM/L IG2f+GbHgmXsNWHcs94GwX4IbOD/+lO4/6Lf5JvsmZeyt7oYjLwki1NK4HuQPHu0 Z9yoVaWBHVW2eYV2me6D6AUJwFMMbFbP14d5F1rIWQqlUQDzCjNWRahVAcsS7Fl+ eBYadm52J9IVMgsd+kJ7IJ4w7bSzBsTh9BC2Zh6rcnegtcV4SuI76LQR9B29jvxg /ZQWAE22FOej6W3W2f8rX0CldSJ340rpto5Qbb4nbS3wEyBVU7FBiwlTmNZR+Plh EqrnpRuS3Cdd2ac5GDka0Rrp09JzKALkDvQCDzSD6xIhwoYrrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNPOti3cMLefov1EFW+pgX1zeWPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYTlkNjM4MzAtYWY2Yy0z NDUwLTg1ZDktYjZhNTc1YTIxZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEvbAd5aO2hvzTO+02BVwy7JEGPx2rCimCNXORoaPzhtBQI2DNqsOR1 LfJlm/16pQSYsPQXlv6x7EnAbh412/4zzUF1SE0Cjyd2HWYdg5yqJwbgJ1M0w/JI Xpva6Ghn71NKgUKW6+XFJf8/6em6mgJoqxzotTZtJ2pDzjkwiV4coP6KCksWbJaM 2C+3+ZISt+8+i1ofKFLneWZ1cP/I9A3ZplGWvvosf+OZ56g3LOdX2CCBwZ1l8Li9 Db45vB5ErNkYS8YXjb5YAFbB1+ZfnThP9svkM314eg9wZp/sb5+1rK/MBalVZ9Kl NrkU9Oe70gYSj1dqEaUy1bapQoHTr18= -----END CERTIFICATE-----Generated at Sun Jun 29 04:30:35 2025 by rpki-client