$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa File: cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa (raw, json) Hash identifier: YHJ63/NROXgf9x45ke5PaGlkfxXkeU0ARBHD2NaABAI= Subject key identifier: 1D:1E:32:41:5F:79:96:02:B5:A0:B8:CA:86:B6:87:D1:E7:60:D8:F8 Certificate issuer: /CN=31009a8b-537b-4076-8ee6-38c45e51e37a Certificate serial: 010D0C9F43285849D85FA3B4B6AEBA65390F2760 Authority key identifier: C8:BF:58:A3:E8:E0:F7:27:B6:F8:1F:EB:CA:30:1F:A0:B7:44:91:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 14618 IP address blocks: 63.133.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:a3:b4:b6:ae:ba:65:39:0f:27:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31009a8b-537b-4076-8ee6-38c45e51e37a Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=2a39b211-1b1c-4ae2-8abe-4045f483b16d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:53:d3:30:a5:71:3f:14:44:eb:8f:96:5c:af: c1:42:97:57:e7:69:7a:a8:71:62:6c:12:b0:66:af: 1c:81:17:91:c5:06:06:30:03:4f:bb:73:66:57:87: 88:fa:e4:e4:50:9c:f2:97:53:79:70:a9:12:52:29: 1f:2d:0a:7e:69:2f:7a:66:5e:f6:37:d9:e1:45:fe: 67:af:df:4d:d0:72:07:81:a2:91:33:5d:0e:e5:4e: 6c:8f:6c:0f:fb:56:85:f4:d8:31:81:82:32:aa:99: 83:7c:f1:6f:55:a5:d6:6b:f1:38:23:c6:56:d6:21: f3:fa:f1:6d:43:f7:1d:74:5f:f7:2a:b3:e2:80:af: 62:34:cb:25:69:9b:fe:db:e7:96:9a:4c:d4:50:10: e0:39:fb:4c:bd:40:f8:9a:92:5a:da:03:83:32:17: 78:96:a6:47:b6:6e:17:05:53:da:a9:00:f9:8d:37: 31:8b:fd:a2:e2:ee:be:c9:51:fc:7e:41:76:08:53: 0d:ab:6c:54:14:ee:e9:6b:93:6d:63:92:17:1d:08: dd:cd:55:d4:55:b7:79:2f:87:e4:97:16:a6:1e:0e: 2e:db:eb:47:e3:a6:d6:8d:8f:af:01:0c:81:81:1e: e9:16:1d:1f:e3:1f:d5:d1:47:22:98:2d:09:38:99: f8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1E:32:41:5F:79:96:02:B5:A0:B8:CA:86:B6:87:D1:E7:60:D8:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.crl X509v3 Authority Key Identifier: keyid:C8:BF:58:A3:E8:E0:F7:27:B6:F8:1F:EB:CA:30:1F:A0:B7:44:91:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer sbgp-ipAddrBlock: critical IPv4: 63.133.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:85:18:3f:e5:ad:96:9c:3e:d9:02:8b:81:59:d8:34:76:98: 3d:40:6f:df:25:cd:e0:7c:38:41:50:43:9f:8f:80:95:91:6b: 0a:b1:08:14:17:16:6e:5a:e3:d5:4d:37:32:20:2c:25:f4:b7: fa:70:aa:1d:20:dc:c3:bf:2d:7a:b6:55:6b:9d:df:0b:df:e3: 50:56:a9:1f:ac:0b:59:b3:76:35:e4:c3:6f:39:07:44:22:c4: 4b:d7:1b:6b:8d:2f:5f:58:46:18:c5:78:a3:f0:16:56:db:9f: 9c:01:91:91:1a:24:ee:1f:52:15:1a:43:c0:3d:9d:26:58:8a: e1:a2:b0:79:33:2d:63:24:a6:bf:39:aa:06:66:27:8e:5c:96: d3:da:9e:01:3a:74:5a:b7:16:f2:fb:db:a4:54:bf:a4:45:6b: 92:73:d8:cf:89:cc:a6:ca:b4:5c:27:61:70:7b:30:b1:ff:db: 9f:3e:29:dd:e5:52:1b:00:a1:3a:5f:87:49:66:f3:92:12:72: f1:0c:52:5f:26:a9:81:14:2c:bc:f5:4c:6e:ee:41:28:96:4c: f8:96:84:7f:43:ba:3d:cf:7c:61:d3:69:04:ab:33:48:ad:06: 6f:4e:5a:c6:0b:a0:91:a3:2f:46:78:32:8e:7a:95:65:84:c3: 9d:dc:4a:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6O0tq66ZTkPJ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwMDlhOGItNTM3Yi00MDc2LThlZTYtMzhjNDVlNTFl MzdhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MmEzOWIyMTEtMWIxYy00YWUyLThhYmUtNDA0NWY0ODNiMTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlPTMKVxPxRE64+WXK/BQpdX52l6qHFibBKw Zq8cgReRxQYGMANPu3NmV4eI+uTkUJzyl1N5cKkSUikfLQp+aS96Zl72N9nhRf5n r99N0HIHgaKRM10O5U5sj2wP+1aF9NgxgYIyqpmDfPFvVaXWa/E4I8ZW1iHz+vFt Q/cddF/3KrPigK9iNMslaZv+2+eWmkzUUBDgOftMvUD4mpJa2gODMhd4lqZHtm4X BVPaqQD5jTcxi/2i4u6+yVH8fkF2CFMNq2xUFO7pa5NtY5IXHQjdzVXUVbd5L4fk lxamHg4u2+tH46bWjY+vAQyBgR7pFh0f4x/V0UcimC0JOJn49wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0eMkFfeZYCtaC4yoa2h9HnYNj4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMTAw OWE4Yi01MzdiLTQwNzYtOGVlNi0zOGM0NWU1MWUzN2EvY2RjZjFlM2MtYjBmNC0z OGQyLTlhYTEtMmFlNjZhNDI1ZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzEwMDlhOGItNTM3Yi00MDc2LThl ZTYtMzhjNDVlNTFlMzdhLzMxMDA5YThiLTUzN2ItNDA3Ni04ZWU2LTM4YzQ1ZTUx ZTM3YS5jcmwwHwYDVR0jBBgwFoAUyL9Yo+jg9ye2+B/ryjAfoLdEkTEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zMTAwOWE4Yi01MzdiLTQwNzYtOGVlNi0zOGM0 NWU1MWUzN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4XXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmFGD/lrZacPtkCi4FZ2DR2mD1Ab98lzeB8OEFQQ5+PgJWRawqxCBQX Fm5a49VNNzIgLCX0t/pwqh0g3MO/LXq2VWud3wvf41BWqR+sC1mzdjXkw285B0Qi xEvXG2uNL19YRhjFeKPwFlbbn5wBkZEaJO4fUhUaQ8A9nSZYiuGisHkzLWMkpr85 qgZmJ45cltPangE6dFq3FvL726RUv6RFa5Jz2M+JzKbKtFwnYXB7MLH/258+Kd3l UhsAoTpfh0lm85IScvEMUl8mqYEULLz1TG7uQSiWTPiWhH9Duj3PfGHTaQSrM0it Bm9OWsYLoJGjL0Z4Mo56lWWEw53cSnQ= -----END CERTIFICATE-----Generated at Sun Jun 15 00:00:40 2025 by rpki-client