$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ce8144b7-b5c9-3b37-bb93-aa14d409ea5f.roa File: ce8144b7-b5c9-3b37-bb93-aa14d409ea5f.roa (raw, json) Hash identifier: 4ju8PgfdYjCpkMtrU+C2rj3/g+pK6wfZiou1db9Hbos= Subject key identifier: 6D:D9:C4:A3:00:D1:3F:30:EB:6B:BB:47:A6:1A:AA:5F:65:EF:79:E4 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F43285849E2251977C99FA67B3B105000 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ce8144b7-b5c9-3b37-bb93-aa14d409ea5f.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 14618 IP address blocks: 129.33.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:19:77:c9:9f:a6:7b:3b:10:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=9ca27acf-cfea-4ec7-8361-a1f0019dc31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:63:f2:63:e1:80:43:05:cc:45:e3:fb:8b:11: ce:e8:2b:d3:d2:b3:90:8c:f9:de:cb:6a:e8:8b:a2: 14:e3:65:7a:fb:8b:de:2b:71:a7:86:54:33:6c:cc: d8:4c:f2:05:9d:e3:a6:dc:fa:54:81:5f:8b:71:9b: 9f:bd:55:b3:be:07:66:0d:0c:73:bc:f6:58:da:93: 55:c0:c8:6a:6e:b0:93:bc:d3:be:24:a3:bb:ef:3e: 5b:66:eb:52:7c:46:03:ac:c2:dd:a3:ae:ac:19:02: ee:0b:19:02:01:ff:4b:8c:94:1b:cd:7d:0c:2d:1d: 33:58:ca:2a:2d:41:96:56:bc:7b:96:8d:15:2a:cc: e5:00:6f:92:f4:ec:d9:12:b5:2c:cb:e4:1d:7d:d0: 78:d3:b1:cc:96:7f:d2:9d:59:e7:dd:c3:9b:0c:c6: 5b:a7:4b:e7:51:a1:94:79:e2:cc:52:ae:3c:96:df: 3d:94:06:7c:92:ca:5f:e7:03:9f:80:77:c4:f8:03: 62:58:d0:eb:4b:3c:0a:53:95:c1:77:ce:6c:2d:25: c0:45:e4:cd:69:8b:86:07:f3:29:e2:69:f7:f4:3a: 17:ea:91:f2:65:81:be:97:b4:14:d9:25:0b:1a:d7: 57:d7:79:51:f3:16:71:a8:a9:e6:4d:60:c4:a0:9e: 84:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D9:C4:A3:00:D1:3F:30:EB:6B:BB:47:A6:1A:AA:5F:65:EF:79:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ce8144b7-b5c9-3b37-bb93-aa14d409ea5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:8e:35:2c:08:6b:9e:e3:77:eb:7c:8f:f0:1f:62:bd:2f:b4: 1b:56:f4:2d:98:ac:19:ce:4e:08:85:68:06:d6:91:6a:d2:f3: 98:96:09:47:46:f5:31:07:2d:0d:6f:38:72:81:66:79:44:1e: fd:29:b2:19:f5:a5:7a:75:15:2e:0a:04:02:08:ca:7e:1b:63: 24:9a:83:c9:28:98:2e:56:76:ef:46:a3:87:d5:1c:53:e4:cf: a5:eb:1d:8b:60:6e:01:29:8c:39:30:69:a9:2a:24:14:14:c9: c7:7a:54:4b:16:7b:bd:92:45:f5:39:ce:c0:52:52:2e:db:ae: 24:b3:c3:51:45:19:b9:53:6b:af:80:3c:cd:b3:a2:b1:da:85: c9:da:e7:62:37:ad:dc:34:be:21:8b:88:c6:dd:df:95:96:03: 47:d1:36:6c:be:ee:a1:ee:f2:75:c7:f4:52:06:be:02:56:52: 4c:07:8f:b5:8c:52:d0:8b:3e:36:e0:a2:61:02:e4:87:68:b4: 8e:2c:55:ed:59:07:66:e2:5f:24:06:ff:b4:5b:e8:f4:1e:75: b0:22:e6:a9:f2:ea:3e:3c:3b:89:3c:7f:6b:c6:0f:75:ac:e9: dd:07:80:d6:c0:39:30:4a:c8:0e:23:4b:12:69:2c:cf:bb:db: 7f:7f:c4:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJRl3yZ+mezsQUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk OWNhMjdhY2YtY2ZlYS00ZWM3LTgzNjEtYTFmMDAxOWRjMzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2PyY+GAQwXMReP7ixHO6CvT0rOQjPney2ro i6IU42V6+4veK3GnhlQzbMzYTPIFneOm3PpUgV+LcZufvVWzvgdmDQxzvPZY2pNV wMhqbrCTvNO+JKO77z5bZutSfEYDrMLdo66sGQLuCxkCAf9LjJQbzX0MLR0zWMoq LUGWVrx7lo0VKszlAG+S9OzZErUsy+QdfdB407HMln/SnVnn3cObDMZbp0vnUaGU eeLMUq48lt89lAZ8kspf5wOfgHfE+ANiWNDrSzwKU5XBd85sLSXAReTNaYuGB/Mp 4mn39DoX6pHyZYG+l7QU2SULGtdX13lR8xZxqKnmTWDEoJ6EiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3ZxKMA0T8w62u7R6Yaql9l73nkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvY2U4MTQ0YjctYjVjOS0z YjM3LWJiOTMtYWExNGQ0MDllYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgSGKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyONSwIa57jd+t8j/AfYr0vtBtW9C2YrBnOTgiFaAbWkWrS85iWCUdG 9TEHLQ1vOHKBZnlEHv0pshn1pXp1FS4KBAIIyn4bYySag8komC5Wdu9Go4fVHFPk z6XrHYtgbgEpjDkwaakqJBQUycd6VEsWe72SRfU5zsBSUi7briSzw1FFGblTa6+A PM2zorHahcna52I3rdw0viGLiMbd35WWA0fRNmy+7qHu8nXH9FIGvgJWUkwHj7WM UtCLPjbgomEC5IdotI4sVe1ZB2biXyQG/7Rb6PQedbAi5qny6j48O4k8f2vGD3Ws 6d0HgNbAOTBKyA4jSxJpLM+7239/xLg= -----END CERTIFICATE-----Generated at Sun Jun 29 06:19:04 2025 by rpki-client