$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/71c737cf-e37e-3b72-88ca-56c9984a18b8.roa File: 71c737cf-e37e-3b72-88ca-56c9984a18b8.roa (raw, json) Hash identifier: f3MMtNXzEjvfD/gONlXTQvlzZ9dEkCrMSu1zQlOUh5I= Subject key identifier: BA:0F:E1:13:E5:8D:99:87:26:34:22:50:4B:58:67:F7:98:0A:59:B7 Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F43285849FF75161F3AB4D36D15B25260 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/71c737cf-e37e-3b72-88ca-56c9984a18b8.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 399381 IP address blocks: 131.201.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:16:1f:3a:b4:d3:6d:15:b2:52:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=4d41cd09-21dd-4256-a9dd-8bf72b0fc0b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c3:78:55:f4:f1:62:eb:db:6d:32:21:01:b7: 5d:a5:18:f7:27:7b:fb:d4:a0:9d:82:fb:22:89:12: 8f:31:2e:89:d6:7c:29:1d:0b:74:4c:2b:32:45:99: 5e:64:06:89:55:bf:34:a2:3b:bb:bf:41:48:1b:36: a0:da:ff:2e:52:9b:6c:07:8b:91:99:8c:0b:6e:5d: 0f:a3:34:bb:7b:f0:5f:3e:c5:e7:60:29:2c:a8:11: 61:8a:2f:2b:d9:5a:a8:7b:27:70:9d:c0:15:0b:1b: 76:18:da:f4:af:bf:67:6d:93:c6:21:78:51:c9:40: 85:49:58:0e:db:5a:35:d5:ed:97:e6:01:6c:b1:75: 37:51:56:06:44:84:9d:8f:0a:5c:38:49:77:ec:87: 71:57:d0:5c:d7:60:9d:3e:66:ce:6e:00:53:3d:f8: f1:d9:8f:33:6c:56:d9:6c:d2:db:95:bf:8d:20:56: 7b:70:8b:65:1c:39:f5:1f:75:f6:dd:65:1d:f2:56: a6:19:55:4a:a0:68:00:67:3c:10:60:b1:2f:fa:3b: 84:0b:16:63:df:2f:e3:a4:a9:ba:7e:63:35:ef:0b: d2:f1:64:06:14:22:86:76:96:8b:63:1b:1a:f4:1d: d6:7c:c7:64:9e:d0:68:25:67:27:03:6a:35:74:57: e0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0F:E1:13:E5:8D:99:87:26:34:22:50:4B:58:67:F7:98:0A:59:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/71c737cf-e37e-3b72-88ca-56c9984a18b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:26:7c:b4:4b:a2:21:b3:4a:ab:7a:b1:73:4b:eb:c3:60:5c: 26:99:14:f8:c6:62:b0:cb:7d:96:f7:0a:a9:5d:c9:98:03:f9: 13:4a:8c:be:8d:96:f2:1a:1f:55:6c:f9:3b:99:09:9f:93:17: ef:bc:d9:02:d4:c5:5f:14:3c:f8:67:a6:8f:fa:34:16:22:d6: 98:f7:e2:91:1a:62:ca:a9:e8:8f:eb:50:42:84:b8:c2:76:6f: e3:ce:e5:a5:f6:cf:c6:29:ae:12:87:39:06:c1:0b:a0:fe:05: 67:49:27:7e:d2:fa:af:f4:f1:e4:d8:3f:70:92:1c:16:aa:94: ac:6e:ff:71:a1:9a:d6:b0:2d:1e:a9:36:32:3b:a4:c2:25:e5: ee:b1:8f:f2:15:46:b2:73:9e:c1:31:dc:22:97:63:4e:fe:a9: 3e:d6:2a:55:4b:cc:e5:09:71:5a:78:a0:cc:47:35:33:7c:3e: b1:a7:83:92:1e:13:1b:18:9d:56:79:18:36:12:55:d4:35:5c: ac:13:e4:bc:c2:7f:0d:18:f0:35:68:39:38:d4:9d:ed:5b:07: 76:29:9e:55:d3:be:14:af:48:c6:b4:64:73:fd:8b:74:05:9e: 25:b5:18:30:b4:63:3a:bd:82:de:e7:23:ab:51:1d:99:51:70: 7b:eb:18:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dRYfOrTTbRWyUmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk NGQ0MWNkMDktMjFkZC00MjU2LWE5ZGQtOGJmNzJiMGZjMGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMN4VfTxYuvbbTIhAbddpRj3J3v71KCdgvsi iRKPMS6J1nwpHQt0TCsyRZleZAaJVb80oju7v0FIGzag2v8uUptsB4uRmYwLbl0P ozS7e/BfPsXnYCksqBFhii8r2VqoeydwncAVCxt2GNr0r79nbZPGIXhRyUCFSVgO 21o11e2X5gFssXU3UVYGRISdjwpcOEl37IdxV9Bc12CdPmbObgBTPfjx2Y8zbFbZ bNLblb+NIFZ7cItlHDn1H3X23WUd8lamGVVKoGgAZzwQYLEv+juECxZj3y/jpKm6 fmM17wvS8WQGFCKGdpaLYxsa9B3WfMdkntBoJWcnA2o1dFfgqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoP4RPljZmHJjQiUEtYZ/eYClm3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvNzFjNzM3Y2YtZTM3ZS0z YjcyLTg4Y2EtNTZjOTk4NGExOGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8kNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAmfLRLoiGzSqt6sXNL68NgXCaZFPjGYrDLfZb3CqldyZgD+RNKjL6N lvIaH1Vs+TuZCZ+TF++82QLUxV8UPPhnpo/6NBYi1pj34pEaYsqp6I/rUEKEuMJ2 b+PO5aX2z8YprhKHOQbBC6D+BWdJJ37S+q/08eTYP3CSHBaqlKxu/3GhmtawLR6p NjI7pMIl5e6xj/IVRrJznsEx3CKXY07+qT7WKlVLzOUJcVp4oMxHNTN8PrGng5Ie ExsYnVZ5GDYSVdQ1XKwT5LzCfw0Y8DVoOTjUne1bB3YpnlXTvhSvSMa0ZHP9i3QF niW1GDC0Yzq9gt7nI6tRHZlRcHvrGCQ= -----END CERTIFICATE-----Generated at Sun Jun 15 16:00:22 2025 by rpki-client