$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/9e36dbde-e8f5-3c42-96ea-d2139c65ec98.roa File: 9e36dbde-e8f5-3c42-96ea-d2139c65ec98.roa (raw, json) Hash identifier: /jFZX6E/3Nn0/N7gHEnuu7vsMhMoURuR+SJ9tWJ6LZw= Subject key identifier: 27:DE:55:82:4F:E2:8F:3C:B2:32:10:81:E2:86:6E:42:FD:D6:6E:C8 Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F4328584950F96772B05CD9313E9F0500 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/9e36dbde-e8f5-3c42-96ea-d2139c65ec98.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 396948 IP address blocks: 43.231.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:67:72:b0:5c:d9:31:3e:9f:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=549ed2bb-9c13-483f-8408-b40eb7db412a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:33:db:b9:6c:ca:12:06:cc:39:8b:66:61:ba: 54:dc:69:2c:82:91:21:b6:9b:01:3b:0a:1e:cc:5d: 91:b3:ee:07:9a:ea:5e:8f:14:e3:07:f8:51:74:d6: 43:16:96:05:2a:aa:93:57:cc:de:80:47:21:04:9e: 4e:94:f8:de:3a:5c:56:c3:99:e1:3d:95:21:40:ae: 42:0f:13:38:65:62:b6:02:f5:0e:4c:ba:5d:3c:32: 6b:d3:d5:7f:91:fc:e1:e1:e2:5c:11:d0:61:eb:e9: d4:58:6d:de:69:69:06:c7:f4:e7:b0:fc:15:63:b3: 70:d9:ef:d8:11:a3:9e:ae:0b:e6:a2:f7:10:ea:a6: 6b:64:32:85:b4:77:d0:03:e6:3c:ec:85:de:49:4f: 99:14:63:3e:d1:b7:e9:83:04:85:e5:f9:fc:72:7f: 5e:67:3e:64:1d:f4:76:e9:cd:b6:89:ee:36:56:15: f1:8d:9c:69:4d:f0:85:6a:20:c1:60:a7:1a:7b:ea: d8:f0:36:3a:2c:2e:5a:c3:d7:14:83:aa:f7:16:a0: 9c:1b:7a:0d:4f:64:93:00:7b:47:11:c4:1b:fd:87: 8a:3d:d6:be:c8:de:4b:6c:fd:06:56:80:e1:7a:58: e6:37:7c:b3:7b:2f:eb:d8:ac:9e:62:a1:fd:46:f9: 44:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DE:55:82:4F:E2:8F:3C:B2:32:10:81:E2:86:6E:42:FD:D6:6E:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/9e36dbde-e8f5-3c42-96ea-d2139c65ec98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv4: 43.231.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:de:61:b1:eb:41:30:65:8e:92:4d:40:d7:40:94:b3:4f:ef: 3c:7c:b6:fb:56:5c:e9:e7:40:2e:9c:42:ca:77:28:ca:cf:0f: be:97:3a:6d:35:03:ae:e0:cf:17:f9:0f:e5:ec:e6:c7:2b:f0: 49:ca:8c:f6:90:03:c7:3d:5c:49:c6:52:b1:c9:3b:ba:71:9a: 1a:8c:ef:10:8e:f6:dd:7d:22:07:b2:2d:62:96:7a:d7:de:12: 73:12:fc:da:87:50:2c:03:fe:61:ba:6f:76:ac:73:90:2f:43: 1d:97:91:08:5f:f6:a2:53:29:88:31:52:f5:fd:39:d2:6f:ed: 21:62:9d:ba:b3:a0:f2:c1:4e:a0:fd:de:df:45:7c:24:1f:a7: be:c5:97:cf:1e:bb:93:f8:d8:04:57:e4:ff:d8:b4:c8:f2:2d: 7a:36:05:6f:97:35:1b:88:65:1e:30:53:97:21:e8:f1:ef:ac: 18:0d:c9:31:ce:15:87:03:5a:6d:44:65:74:2d:97:1f:d0:94: d0:49:92:5d:c8:a5:92:d6:ca:0f:7e:d8:1e:5d:4e:47:6b:64: 3e:48:83:b5:70:9c:4b:b9:ea:01:0d:27:9e:1f:c1:ee:c6:36: 81:75:12:30:18:35:11:f7:e0:bf:cc:b6:23:6f:ad:bd:22:5a: 71:5b:f5:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+WdysFzZMT6fBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk NTQ5ZWQyYmItOWMxMy00ODNmLTg0MDgtYjQwZWI3ZGI0MTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzPbuWzKEgbMOYtmYbpU3GksgpEhtpsBOwoe zF2Rs+4HmupejxTjB/hRdNZDFpYFKqqTV8zegEchBJ5OlPjeOlxWw5nhPZUhQK5C DxM4ZWK2AvUOTLpdPDJr09V/kfzh4eJcEdBh6+nUWG3eaWkGx/TnsPwVY7Nw2e/Y EaOergvmovcQ6qZrZDKFtHfQA+Y87IXeSU+ZFGM+0bfpgwSF5fn8cn9eZz5kHfR2 6c22ie42VhXxjZxpTfCFaiDBYKcae+rY8DY6LC5aw9cUg6r3FqCcG3oNT2STAHtH EcQb/YeKPda+yN5LbP0GVoDheljmN3yzey/r2KyeYqH9RvlEvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfeVYJP4o88sjIQgeKGbkL91m7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvOWUzNmRiZGUtZThmNS0z YzQyLTk2ZWEtZDIxMzljNjVlYzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+foMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGneYbHrQTBljpJNQNdAlLNP7zx8tvtWXOnnQC6cQsp3KMrPD76XOm01 A67gzxf5D+Xs5scr8EnKjPaQA8c9XEnGUrHJO7pxmhqM7xCO9t19IgeyLWKWetfe EnMS/NqHUCwD/mG6b3asc5AvQx2XkQhf9qJTKYgxUvX9OdJv7SFinbqzoPLBTqD9 3t9FfCQfp77Fl88eu5P42ARX5P/YtMjyLXo2BW+XNRuIZR4wU5ch6PHvrBgNyTHO FYcDWm1EZXQtlx/QlNBJkl3IpZLWyg9+2B5dTkdrZD5Ig7VwnEu56gENJ54fwe7G NoF1EjAYNRH34L/MtiNvrb0iWnFb9bg= -----END CERTIFICATE-----Generated at Tue Apr 29 01:55:22 2025 by rpki-client