$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa File: 4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa (raw, json) Hash identifier: 6QzFofiESI70vM6yndL+Zvw34dP+6CZ8kKhy+A/hgVQ= Subject key identifier: C7:2A:3E:C5:4A:8C:8A:09:2B:F0:DC:99:37:4F:AE:10:0E:31:1D:A5 Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F43285849D594F28903708EC16E3EB430 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 399381 IP address blocks: 131.201.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f2:89:03:70:8e:c1:6e:3e:b4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=2ef0b682-d8fa-4912-ae02-388f1a83aabd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:11:21:f2:22:10:0b:14:2b:3f:e6:e1:29:2b: 96:6c:2c:a4:b6:78:4f:08:52:f6:46:d5:ef:78:9f: 88:c7:be:b1:20:78:6d:7e:30:08:90:3d:aa:ba:80: 40:af:5f:af:bb:16:3d:25:5e:bc:73:39:2d:26:8f: 8c:03:ec:82:6c:ba:72:c6:18:a5:b8:50:7f:36:11: 14:a9:b3:7e:e4:7a:08:0d:b5:53:51:4a:da:38:9f: 3f:99:e8:33:03:ca:92:dd:b8:80:b4:98:4e:45:26: 89:9e:f9:8d:d1:88:cc:d9:30:a8:07:7d:a0:b8:37: 18:75:c8:5b:00:f4:e5:2c:1d:59:a6:26:a9:2c:fa: bc:e7:e1:fe:3e:44:3d:77:89:28:3d:9e:23:6e:b4: 17:ed:5d:93:73:77:eb:59:46:14:22:30:7c:00:b7: 96:8d:78:ee:71:f3:3d:a8:cb:0a:3d:66:a2:08:77: a9:05:5a:8f:be:ce:63:f9:11:5a:e4:5c:28:51:16: 47:02:b2:a0:96:29:6f:cf:4a:6f:af:3e:0d:55:e8: 4c:7e:9a:1f:9b:cb:d8:49:85:2f:36:c5:99:f6:e1: 41:fa:6d:56:1d:d8:78:96:2e:e9:c6:2a:e9:0e:d4: a5:61:ba:46:91:45:45:79:6e:b1:ec:fb:74:2c:bc: 58:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2A:3E:C5:4A:8C:8A:09:2B:F0:DC:99:37:4F:AE:10:0E:31:1D:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c8:4d:2f:ae:06:5c:59:b4:ae:38:f2:c6:24:2f:f0:05:71: d3:97:b1:a8:52:5d:d3:52:e1:d6:6c:3c:1e:3a:2e:b8:46:9b: 84:3c:31:9c:6e:0e:97:fe:c4:ef:ae:df:ef:5f:cb:32:8e:da: 1b:b4:b1:79:ed:f0:32:bc:2f:e8:fb:2e:52:6d:89:47:49:02: 8e:01:6a:11:f3:64:64:47:5f:10:ed:cb:bb:f1:27:29:81:a5: cf:07:e2:e4:c7:3c:ba:e1:76:54:6d:7b:b6:85:80:5a:ca:26: 05:3c:4c:12:e5:59:bf:71:a4:ba:46:a5:07:61:7b:27:52:69: 25:6b:92:06:4c:bb:38:3c:e6:0e:1a:20:40:dd:ce:fc:ef:3b: dd:91:17:ce:65:17:dd:b9:38:4c:fd:b4:82:2d:87:4b:79:13: 9b:0d:61:59:ef:65:40:47:fc:1a:87:a0:25:be:d0:e6:06:fd: e0:71:c4:32:9a:56:91:8e:e4:98:06:f3:a7:42:29:ab:a6:1c: 36:59:bf:03:2f:fa:78:ec:76:19:9a:c7:bd:60:00:7d:71:15: 3c:3c:fb:45:5c:d0:0a:3f:0e:98:76:ff:eb:89:f1:aa:f9:d2: 84:7e:28:10:40:71:2a:e7:0c:6c:f0:78:f6:22:e1:19:4a:15: 86:1a:64:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlPKJA3COwW4+tDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk MmVmMGI2ODItZDhmYS00OTEyLWFlMDItMzg4ZjFhODNhYWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBEh8iIQCxQrP+bhKSuWbCyktnhPCFL2RtXv eJ+Ix76xIHhtfjAIkD2quoBAr1+vuxY9JV68czktJo+MA+yCbLpyxhiluFB/NhEU qbN+5HoIDbVTUUraOJ8/megzA8qS3biAtJhORSaJnvmN0YjM2TCoB32guDcYdchb APTlLB1ZpiapLPq85+H+PkQ9d4koPZ4jbrQX7V2Tc3frWUYUIjB8ALeWjXjucfM9 qMsKPWaiCHepBVqPvs5j+RFa5FwoURZHArKglilvz0pvrz4NVehMfpofm8vYSYUv NsWZ9uFB+m1WHdh4li7pxirpDtSlYbpGkUVFeW6x7Pt0LLxYMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcqPsVKjIoJK/DcmTdPrhAOMR2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvNGQ2MWY1ZDEtY2UzZi0z NzNkLWExNzYtMTJlOGNlZDE4NmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8kBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjITS+uBlxZtK448sYkL/AFcdOXsahSXdNS4dZsPB46LrhGm4Q8MZxu Dpf+xO+u3+9fyzKO2hu0sXnt8DK8L+j7LlJtiUdJAo4BahHzZGRHXxDty7vxJymB pc8H4uTHPLrhdlRte7aFgFrKJgU8TBLlWb9xpLpGpQdheydSaSVrkgZMuzg85g4a IEDdzvzvO92RF85lF925OEz9tIIth0t5E5sNYVnvZUBH/BqHoCW+0OYG/eBxxDKa VpGO5JgG86dCKaumHDZZvwMv+njsdhmax71gAH1xFTw8+0Vc0Ao/Dph2/+uJ8ar5 0oR+KBBAcSrnDGzwePYi4RlKFYYaZKE= -----END CERTIFICATE-----Generated at Sun Jun 15 17:55:24 2025 by rpki-client