$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/8357b082-17dc-3d36-87f1-8e0746d54610.roa File: 8357b082-17dc-3d36-87f1-8e0746d54610.roa (raw, json) Hash identifier: dNVKmICBtfpPP5wGjywF4kprpaszavtKEn0y+Rpt2Yk= Subject key identifier: FA:89:36:F9:06:1F:76:1C:34:E0:C0:05:3F:13:56:69:6E:D1:D9:A2 Certificate issuer: /CN=d9e22f6d-5551-4712-9f95-3008c51223ec Certificate serial: 010D0C9F43285848E59BCE221BABBDAE07000D00 Authority key identifier: 28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/8357b082-17dc-3d36-87f1-8e0746d54610.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 16430 IP address blocks: 131.95.0.0/17 maxlen: 17 131.95.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:ce:22:1b:ab:bd:ae:07:00:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9e22f6d-5551-4712-9f95-3008c51223ec Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=23fc8da7-00dc-430d-9db4-1dfb6e971e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:06:bc:e1:a1:a2:e3:b5:c8:c2:27:cb:3d:06: 38:25:5f:73:75:a6:f9:b8:c4:65:16:17:ce:07:99: 6b:a6:40:61:13:70:40:ac:31:ea:96:a9:b3:7d:17: a6:6e:0e:ff:a3:b6:0c:4c:a2:c0:7c:b3:9a:cb:e6: 05:f6:19:44:49:c2:ab:08:1b:7c:b1:1f:dd:5a:37: f7:f9:cc:11:fa:c8:66:35:67:31:18:f9:8d:cf:34: 2f:43:ac:f6:95:f4:08:43:f5:2d:9d:19:81:f0:e8: ad:d9:f1:54:7a:0e:1e:a9:28:96:52:a2:44:3e:a7: 17:58:3a:fb:82:b2:5d:1d:45:c7:b9:24:80:f4:ed: 0b:d1:2f:12:19:d2:6b:8f:32:4c:66:f7:7d:54:51: 5a:77:d6:a9:8d:ed:8a:77:b7:93:f6:fe:6e:53:1e: f2:e0:4e:17:b4:91:0c:a0:3c:83:fa:e4:aa:bf:ec: c7:38:6b:4f:7c:80:71:a1:a4:0e:a3:0d:66:38:ae: 37:f1:6f:fe:95:31:f4:a4:15:bd:0f:b9:0c:fe:25: 43:9e:14:a2:26:26:4f:ab:8c:78:88:ef:b0:9a:fe: ff:9a:0f:3e:8a:55:13:14:d0:2e:5c:5c:47:4b:a5: 85:bb:0c:a9:6b:6f:72:20:b2:37:b3:f9:47:a7:f7: 0c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:89:36:F9:06:1F:76:1C:34:E0:C0:05:3F:13:56:69:6E:D1:D9:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/8357b082-17dc-3d36-87f1-8e0746d54610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.crl X509v3 Authority Key Identifier: keyid:28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer sbgp-ipAddrBlock: critical IPv4: 131.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:08:2c:e9:33:ff:01:21:a2:ef:8b:b7:57:76:7b:f0:ea:ff: e3:ca:58:92:57:64:41:91:c1:c5:73:8a:94:95:e6:dc:e0:7c: 28:82:af:f6:b5:bd:e6:ea:3d:c1:05:aa:5a:a0:62:7e:86:7e: 47:a4:53:66:0e:34:cf:b5:ad:db:c8:b4:4a:8a:70:71:0f:18: 6f:91:77:60:ac:f2:99:30:bb:32:a1:e4:c9:f2:f4:b5:cd:08: cf:f9:6b:96:52:30:80:08:5c:f4:96:20:16:f4:1c:ea:a8:f5: 0e:e1:57:50:dd:31:0c:9a:78:f7:38:c5:a7:07:18:82:4c:57: 7b:82:8a:d2:ff:82:a3:17:ba:c0:7c:87:48:a4:52:2b:b4:5a: 95:f8:7d:b2:80:08:07:0f:fb:ce:d5:cd:0b:4d:57:50:34:f4: 73:19:16:37:78:e2:ce:5a:9a:3c:49:f5:9a:6c:ba:a9:17:4b: e6:cc:48:68:5b:83:83:0f:47:29:eb:00:84:95:3a:a9:35:e6: ed:3f:e2:dd:b9:f4:95:f2:13:e9:54:be:7b:aa:6c:72:db:d0: c1:1a:f5:0f:84:83:2d:1d:3f:6c:2c:f6:89:54:38:e6:7a:11: 97:cb:87:4c:31:be:93:c0:b8:da:b9:f8:00:c7:96:02:73:c5: f8:92:ec:f7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjlm84iG6u9rgcADQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDllMjJmNmQtNTU1MS00NzEyLTlmOTUtMzAwOGM1MTIy M2VjMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MjNmYzhkYTctMDBkYy00MzBkLTlkYjQtMWRmYjZlOTcxZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAa84aGi47XIwifLPQY4JV9zdab5uMRlFhfO B5lrpkBhE3BArDHqlqmzfRembg7/o7YMTKLAfLOay+YF9hlEScKrCBt8sR/dWjf3 +cwR+shmNWcxGPmNzzQvQ6z2lfQIQ/UtnRmB8Oit2fFUeg4eqSiWUqJEPqcXWDr7 grJdHUXHuSSA9O0L0S8SGdJrjzJMZvd9VFFad9apje2Kd7eT9v5uUx7y4E4XtJEM oDyD+uSqv+zHOGtPfIBxoaQOow1mOK438W/+lTH0pBW9D7kM/iVDnhSiJiZPq4x4 iO+wmv7/mg8+ilUTFNAuXFxHS6WFuwypa29yILI3s/lHp/cMLQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPqJNvkGH3YcNODABT8TVmlu0dmiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWUy MmY2ZC01NTUxLTQ3MTItOWY5NS0zMDA4YzUxMjIzZWMvODM1N2IwODItMTdkYy0z ZDM2LTg3ZjEtOGUwNzQ2ZDU0NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDllMjJmNmQtNTU1MS00NzEyLTlm OTUtMzAwOGM1MTIyM2VjL2Q5ZTIyZjZkLTU1NTEtNDcxMi05Zjk1LTMwMDhjNTEy MjNlYy5jcmwwHwYDVR0jBBgwFoAUKMgwTb3YSsAeO4Ye5UoxZba3l3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWUyMmY2ZC01NTUxLTQ3MTItOWY5NS0zMDA4 YzUxMjIzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg18wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHQgs6TP/ASGi74u3V3Z78Or/48pYkldkQZHBxXOKlJXm3OB8KIKv9rW9 5uo9wQWqWqBifoZ+R6RTZg40z7Wt28i0SopwcQ8Yb5F3YKzymTC7MqHkyfL0tc0I z/lrllIwgAhc9JYgFvQc6qj1DuFXUN0xDJp49zjFpwcYgkxXe4KK0v+Coxe6wHyH SKRSK7Ralfh9soAIBw/7ztXNC01XUDT0cxkWN3jizlqaPEn1mmy6qRdL5sxIaFuD gw9HKesAhJU6qTXm7T/i3bn0lfIT6VS+e6psctvQwRr1D4SDLR0/bCz2iVQ45noR l8uHTDG+k8C42rn4AMeWAnPF+JLs9w== -----END CERTIFICATE-----Generated at Sat May 3 14:13:17 2025 by rpki-client