$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e4b9ec40-0d8a-37e2-9a01-d236aa7fec36.roa File: e4b9ec40-0d8a-37e2-9a01-d236aa7fec36.roa (raw, json) Hash identifier: BBI/X7/CHwrCe1gcz4NegBbgtlIH5+h4TkkF9ohjjFE= Subject key identifier: 8C:C5:B8:3D:B7:C1:5B:1F:5A:7C:2B:54:03:67:15:F5:68:50:93:2F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584988CF2C6C63ABE84DBEF38900 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e4b9ec40-0d8a-37e2-9a01-d236aa7fec36.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 3949 IP address blocks: 131.103.20.200/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:2c:6c:63:ab:e8:4d:be:f3:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=353d736c-9a3b-4b00-84f8-da1f97ffd55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a4:53:8d:b1:df:15:41:c9:6b:58:25:8e:5d: 7d:a1:f3:fa:0c:42:9d:4b:11:b6:f1:cf:00:61:78: b8:d6:b4:aa:bc:fc:8c:73:cf:3a:db:ba:a0:2e:55: 2a:e4:7a:d7:d0:8d:ad:8a:82:d6:ba:6f:52:9f:5f: 79:1b:6d:2e:47:65:94:f5:c4:7a:e1:0c:16:8e:68: fd:33:82:92:29:31:8e:87:b4:83:0a:39:b0:eb:70: b7:48:56:2a:3b:f0:3b:c0:ae:af:9d:49:3f:3a:01: 44:ef:a3:2d:94:0e:02:99:2b:7f:ee:43:36:af:e0: 64:42:98:e3:fe:1f:2a:ce:51:57:46:a2:78:90:55: 0f:bb:45:66:ac:7d:a7:10:81:b0:14:9d:51:a6:d1: 79:c9:42:6c:8f:54:d8:d9:9d:05:f9:a1:20:41:4c: 7e:29:00:ae:03:36:cb:10:e3:7b:5e:ab:65:67:fe: 59:19:56:5f:61:d1:9d:49:1b:bb:b9:c7:25:77:16: 25:33:73:18:76:a8:c8:4b:82:13:1e:e2:b7:08:01: de:1b:24:2c:0e:4c:5b:53:cb:23:b9:f0:5b:ef:61: 96:2f:8f:81:15:cb:9a:06:81:09:b6:fb:07:bc:80: b1:3d:43:e1:6f:dc:e1:fd:59:9f:b1:48:ec:62:4b: 33:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C5:B8:3D:B7:C1:5B:1F:5A:7C:2B:54:03:67:15:F5:68:50:93:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e4b9ec40-0d8a-37e2-9a01-d236aa7fec36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 131.103.20.200/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:cc:0c:06:5c:58:d3:da:3f:80:b2:5e:42:a1:87:7e:49:57: 2a:74:52:ba:cd:c6:6b:a5:69:ea:50:c2:ce:0a:4f:2b:04:66: 8e:41:3d:24:87:ef:6c:9e:ca:aa:1d:ab:45:5c:57:3d:22:4a: 5f:ab:cd:f5:21:0f:4e:60:d6:07:d9:0f:b4:8c:a6:0d:b3:de: b4:0f:4e:9a:85:d1:4a:aa:3b:84:09:41:a2:78:ef:09:97:aa: 83:7d:cc:4f:a2:0f:10:80:28:16:f4:a1:2b:ba:c6:fb:4b:c9: e8:91:71:c5:21:ff:42:74:0c:91:36:3d:00:6c:ce:23:47:34: ae:f4:82:f8:f3:ff:ca:e7:0a:48:c2:6e:17:c6:6c:d3:a2:93: e8:33:9b:82:83:90:70:38:bf:9c:92:00:d5:b2:fd:a1:91:16: a1:80:d2:2f:94:f2:0d:46:cb:7a:90:06:cc:06:43:97:c3:33: f3:fa:c5:5d:e9:6c:83:7c:1f:3e:af:42:f5:97:01:87:54:06: 03:24:c3:e9:f2:ab:ff:41:5d:e0:1a:e5:70:65:f3:de:54:8f: 47:c7:23:46:40:25:36:3d:8f:c6:ce:71:f8:1a:43:f4:8b:e0: b6:59:d2:93:c0:8b:40:fa:6f:2f:cb:0b:a4:92:55:73:b1:5d: 42:af:f6:97 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmIzyxsY6voTb7ziQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MzUzZDczNmMtOWEzYi00YjAwLTg0ZjgtZGExZjk3ZmZkNTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96RTjbHfFUHJa1gljl19ofP6DEKdSxG28c8A YXi41rSqvPyMc88627qgLlUq5HrX0I2tioLWum9Sn195G20uR2WU9cR64QwWjmj9 M4KSKTGOh7SDCjmw63C3SFYqO/A7wK6vnUk/OgFE76MtlA4CmSt/7kM2r+BkQpjj /h8qzlFXRqJ4kFUPu0VmrH2nEIGwFJ1RptF5yUJsj1TY2Z0F+aEgQUx+KQCuAzbL EON7XqtlZ/5ZGVZfYdGdSRu7uccldxYlM3MYdqjIS4ITHuK3CAHeGyQsDkxbU8sj ufBb72GWL4+BFcuaBoEJtvsHvICxPUPhb9zh/VmfsUjsYkszcQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIzFuD23wVsfWnwrVANnFfVoUJMvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZTRiOWVjNDAtMGQ4YS0z N2UyLTlhMDEtZDIzNmFhN2ZlYzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDg2cUyDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCVzAwGXFjT2j+Asl5CoYd+SVcqdFK6zcZrpWnqUMLOCk8rBGaOQT0k h+9snsqqHatFXFc9Ikpfq831IQ9OYNYH2Q+0jKYNs960D06ahdFKqjuECUGieO8J l6qDfcxPog8QgCgW9KErusb7S8nokXHFIf9CdAyRNj0AbM4jRzSu9IL48//K5wpI wm4XxmzTopPoM5uCg5BwOL+ckgDVsv2hkRahgNIvlPINRst6kAbMBkOXwzPz+sVd 6WyDfB8+r0L1lwGHVAYDJMPp8qv/QV3gGuVwZfPeVI9HxyNGQCU2PY/GznH4GkP0 i+C2WdKTwItA+m8vywukklVzsV1Cr/aX -----END CERTIFICATE-----Generated at Sat Apr 26 14:49:30 2025 by rpki-client