$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa File: 0250530e-60f1-3b41-aba9-e6d0f26b8737.roa (raw, json) Hash identifier: JA9VvIkZXmot1UYE34oEXECSdiIAMYxYnsWZXR+ZhN4= Subject key identifier: 6B:23:E0:8C:A1:69:7A:E9:D4:D9:15:B9:9B:48:F6:98:8B:E0:6B:C5 Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F43285848EF61391D5E85A06EBE39B180 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 36136 IP address blocks: 131.201.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:39:1d:5e:85:a0:6e:be:39:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=ac4a1fce-7fef-4b8f-8c5d-821409508c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:18:dc:c9:1b:dd:e2:4a:04:2b:06:0d:73:d1: bf:6c:06:32:fe:f6:9c:ed:72:2c:3c:3a:fc:61:09: 71:e4:23:a5:2f:ee:a4:6a:8d:42:51:1a:f9:3f:8e: 2e:74:29:de:bb:1e:0b:0d:82:33:5e:ad:c1:66:1f: ab:26:9e:21:7d:f3:f5:bf:b9:3a:9d:a0:51:f3:7b: cc:a6:89:ed:ea:1a:b7:6d:47:27:78:ad:48:a2:e9: 9d:39:3e:94:c1:74:32:00:5e:01:ee:e0:5b:a3:cf: 42:23:80:26:90:14:32:65:a7:98:1a:fd:aa:bc:71: 59:f3:17:b7:15:6c:69:82:18:ac:e0:32:6a:7f:c4: 3e:63:21:4c:a6:3b:63:ca:a6:20:20:66:66:94:2f: 65:3d:96:06:65:84:c2:60:c9:97:f0:8c:09:b4:ec: 4d:85:a6:b1:d2:5a:6d:16:8d:21:51:6a:9f:0b:ae: 03:55:d7:53:a8:f4:c2:10:bf:64:8c:0c:88:e3:08: ac:13:e5:70:9f:47:7b:be:de:e3:00:5d:bf:0b:99: a2:80:f8:65:7c:3e:fe:22:44:97:02:32:33:fd:be: 77:76:02:82:10:9b:b1:74:c7:fb:6b:de:49:62:45: 3d:eb:21:02:66:f3:fd:03:ad:db:9f:e8:58:dc:8b: bc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:23:E0:8C:A1:69:7A:E9:D4:D9:15:B9:9B:48:F6:98:8B:E0:6B:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:1e:df:75:7a:d5:79:85:66:c5:33:ba:42:67:d4:b8:8b:83: c2:87:be:3c:cb:29:bb:a5:1d:72:c0:90:9a:4d:63:d6:ba:06: 5f:ad:92:64:27:d7:6d:b9:24:ea:52:e3:0a:d9:9f:26:a3:9a: f5:6b:6a:83:00:e1:b2:51:a0:6d:f2:82:71:d6:55:d9:ca:07: 5a:c1:6a:dc:8c:08:e3:35:ba:7a:2c:36:f5:d6:19:d5:fd:fd: ed:49:c1:07:a3:b6:3f:2d:43:f8:2d:e0:13:02:43:fa:ed:81: 65:3b:75:48:3f:21:7d:6a:bb:e9:df:e9:98:9a:d9:b1:68:12: 51:e7:a3:94:69:64:f0:f9:14:28:8c:9a:ac:64:ed:69:c6:1b: 91:b9:de:31:78:48:47:e0:b9:a3:0b:13:1f:2a:68:1c:07:c8: 62:7c:7e:8b:b0:b0:40:0d:87:47:ab:28:ae:88:ac:f2:8f:e2: 94:7f:ea:88:dd:72:47:cb:4c:61:09:b3:46:b3:1f:c2:3b:1e: fe:3f:13:fc:0a:3c:3d:6b:5b:b8:8c:a1:42:77:dc:66:fe:a0: 28:d4:41:07:4f:ee:f6:7f:31:15:01:1b:48:6d:8f:45:b6:5d: 17:d2:bc:2f:3f:a4:ae:00:5d:26:0e:3a:79:cf:72:09:cd:16: f4:ac:e9:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTkdXoWgbr45sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YWM0YTFmY2UtN2ZlZi00YjhmLThjNWQtODIxNDA5NTA4YzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxjcyRvd4koEKwYNc9G/bAYy/vac7XIsPDr8 YQlx5COlL+6kao1CURr5P44udCneux4LDYIzXq3BZh+rJp4hffP1v7k6naBR83vM pont6hq3bUcneK1IoumdOT6UwXQyAF4B7uBbo89CI4AmkBQyZaeYGv2qvHFZ8xe3 FWxpghis4DJqf8Q+YyFMpjtjyqYgIGZmlC9lPZYGZYTCYMmX8IwJtOxNhaax0lpt Fo0hUWqfC64DVddTqPTCEL9kjAyI4wisE+Vwn0d7vt7jAF2/C5migPhlfD7+IkSX AjIz/b53dgKCEJuxdMf7a95JYkU96yECZvP9A63bn+hY3Iu8mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsj4IyhaXrp1NkVuZtI9piL4GvFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvMDI1MDUzMGUtNjBmMS0z YjQxLWFiYTktZTZkMGYyNmI4NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8nsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMe33V61XmFZsUzukJn1LiLg8KHvjzLKbulHXLAkJpNY9a6Bl+tkmQn 1225JOpS4wrZnyajmvVraoMA4bJRoG3ygnHWVdnKB1rBatyMCOM1unosNvXWGdX9 /e1JwQejtj8tQ/gt4BMCQ/rtgWU7dUg/IX1qu+nf6Zia2bFoElHno5RpZPD5FCiM mqxk7WnGG5G53jF4SEfguaMLEx8qaBwHyGJ8fouwsEANh0erKK6IrPKP4pR/6ojd ckfLTGEJs0azH8I7Hv4/E/wKPD1rW7iMoUJ33Gb+oCjUQQdP7vZ/MRUBG0htj0W2 XRfSvC8/pK4AXSYOOnnPcgnNFvSs6Tg= -----END CERTIFICATE-----Generated at Mon Apr 28 09:11:25 2025 by rpki-client