$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/7d755d1b-8015-34fd-8b4b-f19fe2c847b5.roa File: 7d755d1b-8015-34fd-8b4b-f19fe2c847b5.roa (raw, json) Hash identifier: W9DT4OQt9JiEUQOkajW2zjkvjhWJPE0ozW1vZkLkaTg= Subject key identifier: 00:42:A6:55:DE:B2:7E:11:99:4F:E3:D9:02:0E:4A:B8:CF:33:92:FF Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F43285848F65BED1C43CC438652139300 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/7d755d1b-8015-34fd-8b4b-f19fe2c847b5.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 399381 IP address blocks: 131.201.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ed:1c:43:cc:43:86:52:13:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=1ee18482-50ca-45d5-8acd-ee03840be825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:96:45:63:a8:2d:24:53:d3:fc:3a:2b:37: 8d:32:fc:42:f2:23:68:1b:88:0d:d9:fa:bf:2c:56: 60:01:a9:9a:99:9f:0d:ba:f4:4d:13:ba:7b:89:80: c0:d7:5b:2c:b3:d2:d8:b5:02:d4:f0:32:da:07:8e: 77:e1:39:eb:dd:b7:4f:10:67:02:1b:f4:0b:c3:82: 5f:c2:0b:09:ed:4e:77:5e:47:b8:ac:da:e1:9b:15: 3a:0e:ef:f6:bf:90:24:e1:20:5c:58:52:e8:f1:33: 1c:7c:49:86:07:dd:a9:75:85:2f:f7:c0:e0:b4:6c: 0b:21:36:62:f2:0e:14:51:71:3d:c1:b5:78:aa:66: e5:1a:3d:b7:79:b1:15:f4:0c:30:5c:46:18:de:2e: 1c:bb:d6:49:ab:47:7f:ad:d9:06:18:a9:52:ca:1f: 30:ea:3b:a9:ed:80:27:22:de:e1:e7:51:19:dc:dc: 74:b8:d9:49:95:6b:e0:10:8d:b1:9c:96:7f:11:2d: a4:ac:58:ba:0c:bc:0e:fa:25:5a:4b:51:db:20:c6: 12:2e:fd:24:4e:34:f6:34:24:70:89:ff:1d:99:bb: 34:df:7a:05:53:93:22:ee:f4:3e:4b:77:ef:bd:9e: 14:2d:f2:e2:ee:f5:ef:71:70:3c:5f:97:08:fa:3d: 76:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:42:A6:55:DE:B2:7E:11:99:4F:E3:D9:02:0E:4A:B8:CF:33:92:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/7d755d1b-8015-34fd-8b4b-f19fe2c847b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:6d:0e:86:c3:18:e3:ec:b2:c3:aa:50:70:a4:72:35:13:18: 9b:ac:b7:d0:f7:c9:9e:ce:a8:d0:04:9f:21:00:94:fa:ba:06: 8f:12:e5:cd:76:0f:8e:24:0d:1a:cb:55:b7:16:22:2e:53:26: a2:23:3c:82:dd:23:ea:b5:a8:a8:cc:61:9c:b6:c5:57:38:2a: 98:f5:9a:2c:86:bb:05:40:4f:2f:93:37:76:c2:b0:3f:fe:5a: 1f:04:6c:c5:8e:cb:36:78:17:39:7d:6c:00:ed:5d:11:00:01: 7f:87:45:c0:7c:61:4b:b2:a1:d3:9e:97:e4:e5:2f:52:61:ee: 4b:03:f9:47:4b:77:52:a9:47:8b:4b:a7:f2:da:ed:96:11:28: 08:e1:eb:0b:ee:a1:0d:25:f0:68:17:7a:5c:f9:79:8c:b9:b0: 0b:cf:73:b4:56:81:67:fb:1c:9e:2c:be:56:59:11:b8:f7:be: ee:2e:46:b8:6e:33:19:46:d3:2c:5f:73:02:2e:64:77:a1:66: f4:54:6b:23:fd:46:15:ac:e2:05:6e:09:7f:d3:89:28:8d:a8: 26:16:90:51:72:39:05:ac:9f:ab:37:04:8d:b7:f5:46:83:f1: aa:a0:c1:15:64:4f:02:d7:1c:a3:b6:e7:5f:fd:88:2c:7d:af: a7:5f:ac:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+0cQ8xDhlITkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk MWVlMTg0ODItNTBjYS00NWQ1LThhY2QtZWUwMzg0MGJlODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy+WRWOoLSRT0/w6KzeNMvxC8iNoG4gN2fq/ LFZgAamamZ8NuvRNE7p7iYDA11sss9LYtQLU8DLaB4534Tnr3bdPEGcCG/QLw4Jf wgsJ7U53Xke4rNrhmxU6Du/2v5Ak4SBcWFLo8TMcfEmGB92pdYUv98DgtGwLITZi 8g4UUXE9wbV4qmblGj23ebEV9AwwXEYY3i4cu9ZJq0d/rdkGGKlSyh8w6jup7YAn It7h51EZ3Nx0uNlJlWvgEI2xnJZ/ES2krFi6DLwO+iVaS1HbIMYSLv0kTjT2NCRw if8dmbs033oFU5Mi7vQ+S3fvvZ4ULfLi7vXvcXA8X5cI+j120QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABCplXesn4RmU/j2QIOSrjPM5L/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvN2Q3NTVkMWItODAxNS0z NGZkLThiNGItZjE5ZmUyYzg0N2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJtDobDGOPsssOqUHCkcjUTGJust9D3yZ7OqNAEnyEAlPq6Bo8S5c12 D44kDRrLVbcWIi5TJqIjPILdI+q1qKjMYZy2xVc4Kpj1miyGuwVATy+TN3bCsD/+ Wh8EbMWOyzZ4Fzl9bADtXREAAX+HRcB8YUuyodOel+TlL1Jh7ksD+UdLd1KpR4tL p/La7ZYRKAjh6wvuoQ0l8GgXelz5eYy5sAvPc7RWgWf7HJ4svlZZEbj3vu4uRrhu MxlG0yxfcwIuZHehZvRUayP9RhWs4gVuCX/TiSiNqCYWkFFyOQWsn6s3BI239UaD 8aqgwRVkTwLXHKO251/9iCx9r6dfrNk= -----END CERTIFICATE-----Generated at Mon Apr 28 14:31:38 2025 by rpki-client