$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa File: 0250530e-60f1-3b41-aba9-e6d0f26b8737.roa (raw, json) Hash identifier: j8q0y07jPEWV9d7kQyeGd5uK1bCv3F+VwrxR1KBExyc= Subject key identifier: 43:93:60:21:E4:8B:B5:CF:46:E0:E7:42:C7:CA:82:B5:FF:41:66:66 Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F43285849CE9A58B5606A7C98771EE420 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 36136 IP address blocks: 131.201.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:58:b5:60:6a:7c:98:77:1e:e4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=d5885c27-4445-4b98-8517-2ee62356752d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0e:e8:11:a8:4d:dd:50:2b:eb:8f:38:6e:28: d3:71:e8:8a:00:0b:8e:fb:c1:92:ab:b9:87:2e:0f: f3:38:68:49:43:7a:d3:48:37:7a:2e:1c:35:8f:34: 63:db:d7:d8:2e:70:8a:48:5d:4f:0c:76:b9:f6:04: 7c:e5:df:e1:dd:e0:98:95:33:be:73:e1:5e:aa:53: e8:fe:fb:81:b1:91:1a:57:af:44:59:80:e5:e2:99: 33:03:cf:07:12:2b:d1:51:6e:47:de:2b:b5:38:00: da:4c:cf:cd:53:2d:1a:cc:bc:19:4b:b2:0d:d3:c5: 79:9a:4b:e2:f9:40:01:54:50:2d:24:bb:b6:a7:d8: 36:32:59:05:4c:72:e6:eb:89:16:d0:9e:8b:82:07: bf:fa:de:75:e5:50:3e:80:d7:1d:60:14:76:a0:7c: cc:b2:f6:47:4b:fe:e6:a9:b8:60:72:27:5a:5c:50: 59:46:cc:bc:1e:bd:ce:7e:3c:52:24:33:24:1c:42: 5b:c6:3b:b2:ee:eb:7e:96:a5:e1:b3:36:dc:7d:b4: 65:0b:41:fe:12:37:8f:7e:7b:70:6f:13:93:48:6d: 12:1e:62:28:76:09:b0:18:b5:37:3b:12:81:d6:b4: 50:b8:03:02:7b:b2:50:d4:c7:77:5b:47:fc:e6:20: f6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:93:60:21:E4:8B:B5:CF:46:E0:E7:42:C7:CA:82:B5:FF:41:66:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:9a:3e:80:ce:3c:cd:36:ea:9d:c2:8a:72:70:a3:ee:fd:03: 89:8b:50:2b:ef:84:b1:c1:29:ef:d6:b5:9e:ca:95:1a:b6:f1: ff:ee:bf:8d:8a:0d:35:45:67:81:ed:ac:b5:6b:19:a2:fe:15: 3a:08:0a:5e:fd:b2:bd:3e:9b:8d:74:ef:92:90:4a:ab:00:cc: 54:f0:db:2a:f3:44:ac:e5:97:27:6f:eb:c8:d5:f4:a8:66:bf: e5:e3:c2:40:df:e9:65:e3:4c:db:13:14:fe:64:80:63:db:55: 91:0a:49:41:eb:6e:61:ed:0b:9c:1d:bf:01:93:49:64:02:b0: 7e:b1:cc:fd:67:59:45:a2:f9:02:bc:e2:91:7a:db:6b:d3:aa: 8e:83:88:87:55:97:90:b3:be:a9:84:6d:bc:71:87:0f:1e:99: a3:9b:be:96:f8:90:bf:be:54:a5:aa:cc:0f:5c:fb:47:48:ff: d2:45:5a:3c:30:99:ba:e8:04:bb:f1:96:f9:20:ed:23:d0:e6: b3:03:e6:d1:09:5e:ef:c0:0d:b0:49:c9:5e:15:d3:14:fe:60: 87:91:86:bc:72:dd:0a:6f:10:3b:99:74:25:aa:96:0f:6e:aa: 89:10:b1:d6:e2:ea:93:ac:76:38:c9:46:3d:32:45:e7:5a:d1: d7:3a:4e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmli1YGp8mHce5CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZDU4ODVjMjctNDQ0NS00Yjk4LTg1MTctMmVlNjIzNTY3NTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg7oEahN3VAr6484bijTceiKAAuO+8GSq7mH Lg/zOGhJQ3rTSDd6Lhw1jzRj29fYLnCKSF1PDHa59gR85d/h3eCYlTO+c+FeqlPo /vuBsZEaV69EWYDl4pkzA88HEivRUW5H3iu1OADaTM/NUy0azLwZS7IN08V5mkvi +UABVFAtJLu2p9g2MlkFTHLm64kW0J6Lgge/+t515VA+gNcdYBR2oHzMsvZHS/7m qbhgcidaXFBZRsy8Hr3OfjxSJDMkHEJbxjuy7ut+lqXhszbcfbRlC0H+EjePfntw bxOTSG0SHmIodgmwGLU3OxKB1rRQuAMCe7JQ1Md3W0f85iD2vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOTYCHki7XPRuDnQsfKgrX/QWZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvMDI1MDUzMGUtNjBmMS0z YjQxLWFiYTktZTZkMGYyNmI4NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8nsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWaPoDOPM026p3CinJwo+79A4mLUCvvhLHBKe/WtZ7KlRq28f/uv42K DTVFZ4HtrLVrGaL+FToICl79sr0+m41075KQSqsAzFTw2yrzRKzllydv68jV9Khm v+XjwkDf6WXjTNsTFP5kgGPbVZEKSUHrbmHtC5wdvwGTSWQCsH6xzP1nWUWi+QK8 4pF622vTqo6DiIdVl5CzvqmEbbxxhw8emaObvpb4kL++VKWqzA9c+0dI/9JFWjww mbroBLvxlvkg7SPQ5rMD5tEJXu/ADbBJyV4V0xT+YIeRhrxy3QpvEDuZdCWqlg9u qokQsdbi6pOsdjjJRj0yReda0dc6Tkc= -----END CERTIFICATE-----Generated at Sun Jun 15 15:59:30 2025 by rpki-client