$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa File: 822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa (raw, json) Hash identifier: whoM1x10Tg+oWaLIyOi/T04y2//AaQ1l1evGk0+jJMU= Subject key identifier: 3A:64:3C:6A:BB:BD:97:5D:F5:9A:3C:DE:F4:F3:5B:F2:4D:FB:04:1E Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F4328584A0C055D02DCB1D01283983080 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 611 IP address blocks: 131.202.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:5d:02:dc:b1:d0:12:83:98:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=8ec12a43-5355-46b1-a9db-8b607c24cc63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:42:12:5a:77:c5:ba:5b:2e:67:58:d2:ff:bc: 1e:f9:0c:42:1e:ab:13:fa:1e:7d:cc:b1:ee:ed:7c: 17:61:63:9c:fd:1a:6a:1a:bd:18:7f:4f:cb:26:81: cf:19:8a:d5:51:f5:7b:7b:9f:cf:da:2f:fd:09:71: 2c:b4:44:a2:72:d7:82:d5:19:1f:bb:25:d8:37:03: 7e:9f:d8:ee:c7:5d:a6:27:9c:8d:0c:77:72:72:67: 84:a7:df:df:3e:cd:d3:12:8b:7d:74:2d:76:a4:32: 49:a8:08:fb:2c:69:fc:f8:18:e5:75:53:2e:5f:93: ee:bf:79:89:e0:08:6d:e3:65:8a:60:9f:c2:9c:0c: a6:80:88:48:df:39:c4:c1:e3:69:f1:5e:10:14:91: 66:43:50:d7:b8:fe:a1:1b:ff:ac:e6:9a:96:4c:55: a5:e1:f6:9e:62:9c:99:60:be:ee:c0:4d:ff:05:7b: c6:54:c3:28:30:d3:7e:24:f8:bc:cc:24:a6:17:85: e2:a3:dc:60:91:a7:9d:6c:e1:c1:1a:ac:c8:77:1a: fd:ba:81:79:f1:15:03:da:d5:5d:10:75:bc:d3:02: 40:2b:1d:8a:10:48:8a:54:26:8e:b7:d2:28:3f:7a: 2f:4e:70:87:ae:92:8e:91:c9:3c:b9:5d:e4:c5:69: 82:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:64:3C:6A:BB:BD:97:5D:F5:9A:3C:DE:F4:F3:5B:F2:4D:FB:04:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 131.202.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:e8:8b:7f:14:01:f0:91:26:28:3d:4c:6a:39:25:77:5b:b0: f1:3e:86:d1:0b:25:be:d9:88:10:e5:d5:63:d1:5b:fc:03:7b: f6:40:51:41:64:be:fd:ff:00:cb:65:9c:44:ba:7b:fd:ed:39: 97:e9:19:c5:b7:4c:5c:4c:d1:63:f0:03:fe:3c:9d:6b:3b:a9: bc:15:14:b7:87:d0:15:dd:d8:00:da:66:31:91:a6:fd:77:7e: 97:1d:9f:e0:8d:b3:7c:d9:1f:c1:a4:e5:50:51:df:c0:63:31: d0:ab:51:95:38:d6:30:d3:5d:87:b3:42:d3:57:5d:8b:69:bf: 63:ba:8a:a5:69:e6:a9:ea:be:1e:53:17:9a:40:f7:7e:2e:fc: 84:9b:a8:77:f6:38:10:4a:d7:ac:68:92:9a:cc:df:80:a6:40: 30:3d:da:88:a5:aa:1b:7c:ad:a8:d9:96:8e:c1:8f:7c:fe:37: 35:2b:30:cf:c7:29:bb:11:b0:de:3c:17:c4:6e:27:16:48:8d: 2c:55:b6:1f:7a:bf:7a:68:1b:f1:6a:1c:97:e4:ff:fb:fe:d6: 4c:78:a4:1c:20:70:8b:b1:4e:29:3a:ca:55:97:9f:c5:9e:a6: 61:f3:66:43:42:81:f3:1b:66:74:af:5c:e6:c2:b1:42:76:1b: 65:f3:90:aa -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoMBV0C3LHQEoOYMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OGVjMTJhNDMtNTM1NS00NmIxLWE5ZGItOGI2MDdjMjRjYzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUISWnfFulsuZ1jS/7we+QxCHqsT+h59zLHu 7XwXYWOc/RpqGr0Yf0/LJoHPGYrVUfV7e5/P2i/9CXEstESicteC1RkfuyXYNwN+ n9jux12mJ5yNDHdycmeEp9/fPs3TEot9dC12pDJJqAj7LGn8+BjldVMuX5Puv3mJ 4Aht42WKYJ/CnAymgIhI3znEweNp8V4QFJFmQ1DXuP6hG/+s5pqWTFWl4faeYpyZ YL7uwE3/BXvGVMMoMNN+JPi8zCSmF4Xio9xgkaedbOHBGqzIdxr9uoF58RUD2tVd EHW80wJAKx2KEEiKVCaOt9IoP3ovTnCHrpKOkck8uV3kxWmCrwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDpkPGq7vZdd9Zo83vTzW/JN+wQeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvODIyNzAwZTItMzljNC0z NzBkLWEyZDYtM2U1YjRhYzA2ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg8owVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAnOiLfxQB8JEmKD1Majkld1uw8T6G0QslvtmIEOXVY9Fb/AN79kBRQWS+ /f8Ay2WcRLp7/e05l+kZxbdMXEzRY/AD/jydazupvBUUt4fQFd3YANpmMZGm/Xd+ lx2f4I2zfNkfwaTlUFHfwGMx0KtRlTjWMNNdh7NC01ddi2m/Y7qKpWnmqeq+HlMX mkD3fi78hJuod/Y4EErXrGiSmszfgKZAMD3aiKWqG3ytqNmWjsGPfP43NSswz8cp uxGw3jwXxG4nFkiNLFW2H3q/emgb8Wocl+T/+/7WTHikHCBwi7FOKTrKVZefxZ6m YfNmQ0KB8xtmdK9c5sKxQnYbZfOQqg== -----END CERTIFICATE-----Generated at Mon Jun 16 13:38:40 2025 by rpki-client