$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/bc7ae3e2-f5df-3d7b-b37b-35bbeca01918.roa File: bc7ae3e2-f5df-3d7b-b37b-35bbeca01918.roa (raw, json) Hash identifier: /jYTu3a4HSAT39yv639a71JAg+4IML7Kbj8H33377Dc= Subject key identifier: 86:04:E9:D5:AA:02:49:3E:EA:27:EF:77:2B:A3:8F:3D:41:AD:0C:07 Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F432858497DA4736CEFDFDFFC8822C180 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/bc7ae3e2-f5df-3d7b-b37b-35bbeca01918.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 36136 IP address blocks: 131.201.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:73:6c:ef:df:df:fc:88:22:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=29ada085-7ff3-4838-8ffa-779b520e02aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:73:5b:85:b9:ff:97:fa:71:ba:06:c4:4d:45: db:ea:3b:64:3d:65:db:11:4e:aa:3a:56:a9:74:01: 3d:b1:1a:61:8e:cd:b0:52:9d:55:cc:7d:ae:36:e4: b9:ee:cf:e6:52:10:e6:90:46:70:82:b6:04:7a:fd: b0:eb:d5:9b:2e:c2:20:51:61:7f:f9:ac:8a:61:ca: 7e:f9:36:4f:e6:92:c9:2f:5f:c8:fb:a7:93:fc:8c: 2a:18:78:52:8e:e6:ab:3b:03:0e:a1:88:4d:2c:88: b3:18:0b:8b:b6:a5:0c:8f:5c:5c:cc:6b:f3:a9:87: 71:b1:aa:16:68:bb:9a:fd:a6:e6:ff:99:47:61:8c: e5:3c:ab:cb:c8:13:8d:ea:76:ba:33:ba:35:1b:9b: 34:b6:30:f9:79:9c:01:ed:65:34:41:fd:63:9a:ef: 8e:c9:8d:2c:39:9e:56:9e:db:ab:13:72:0c:03:ed: ef:eb:e3:de:17:1c:8e:60:63:98:98:f1:68:f3:c8: 35:1f:84:49:2b:92:14:d8:9e:89:ae:04:39:49:f6: ed:9f:d9:2d:8d:bd:54:b2:da:1a:b8:a0:2b:b9:80: 85:f0:89:df:87:1e:ca:cb:0f:dc:d7:a5:11:c3:5c: 15:a4:f4:5a:5f:d5:c1:1b:bf:96:92:a8:8c:96:3d: ca:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:04:E9:D5:AA:02:49:3E:EA:27:EF:77:2B:A3:8F:3D:41:AD:0C:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/bc7ae3e2-f5df-3d7b-b37b-35bbeca01918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a4:14:bf:ee:85:d6:c4:27:c0:d3:c2:b5:e0:e1:47:a6:73: c4:25:0e:1f:1c:fc:43:7f:62:2e:d8:5b:c0:eb:c0:42:a8:16: 02:6c:59:62:ff:50:a7:36:a1:95:3f:90:77:e2:74:a7:ef:3c: c2:47:d2:82:a6:54:7f:70:8d:e9:1d:ae:bf:6c:6e:13:72:dd: 39:85:8f:87:1e:3c:1d:7b:af:99:ac:67:ae:c0:f6:58:38:16: 8f:90:6e:4d:db:83:7a:39:ce:ab:aa:ee:36:9d:05:11:52:b8: f2:80:db:0e:7f:10:be:a1:2a:f9:f6:ef:e3:7a:bb:64:e9:15: 25:f1:c4:49:da:e1:a5:b3:ba:0d:bb:59:28:b1:d3:32:1a:6c: 4b:10:e7:39:85:65:48:d6:44:6f:ac:f5:51:0d:1b:cb:80:5a: c8:63:3b:d9:cd:ed:5a:0a:8a:2a:2c:1d:b7:aa:5c:ca:0b:05: 47:fe:c5:2c:d0:19:e0:08:42:75:0e:d9:a9:8a:55:85:1f:41: d0:b8:38:cf:bb:07:d3:b0:42:b7:e9:21:ae:b0:89:c4:81:eb: 44:16:9a:d0:6a:b1:be:cf:e1:10:d6:7e:ae:e1:c3:3b:b5:f3: f4:3c:1c:74:48:72:a6:28:fa:92:c2:5e:78:28:03:27:66:fd: 74:19:2b:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pHNs79/f/IgiwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MjlhZGEwODUtN2ZmMy00ODM4LThmZmEtNzc5YjUyMGUwMmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXNbhbn/l/pxugbETUXb6jtkPWXbEU6qOlap dAE9sRphjs2wUp1VzH2uNuS57s/mUhDmkEZwgrYEev2w69WbLsIgUWF/+ayKYcp+ +TZP5pLJL1/I+6eT/IwqGHhSjuarOwMOoYhNLIizGAuLtqUMj1xczGvzqYdxsaoW aLua/abm/5lHYYzlPKvLyBON6na6M7o1G5s0tjD5eZwB7WU0Qf1jmu+OyY0sOZ5W nturE3IMA+3v6+PeFxyOYGOYmPFo88g1H4RJK5IU2J6JrgQ5Sfbtn9ktjb1Ustoa uKAruYCF8Infhx7Kyw/c16URw1wVpPRaX9XBG7+WkqiMlj3KWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYE6dWqAkk+6ifvdyujjz1BrQwHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvYmM3YWUzZTItZjVkZi0z ZDdiLWIzN2ItMzViYmVjYTAxOTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8ntMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWkFL/uhdbEJ8DTwrXg4Uemc8QlDh8c/EN/Yi7YW8DrwEKoFgJsWWL/ UKc2oZU/kHfidKfvPMJH0oKmVH9wjekdrr9sbhNy3TmFj4cePB17r5msZ67A9lg4 Fo+Qbk3bg3o5zquq7jadBRFSuPKA2w5/EL6hKvn27+N6u2TpFSXxxEna4aWzug27 WSix0zIabEsQ5zmFZUjWRG+s9VENG8uAWshjO9nN7VoKiiosHbeqXMoLBUf+xSzQ GeAIQnUO2amKVYUfQdC4OM+7B9OwQrfpIa6wicSB60QWmtBqsb7P4RDWfq7hwzu1 8/Q8HHRIcqYo+pLCXngoAydm/XQZK0U= -----END CERTIFICATE-----Generated at Sun Apr 27 22:59:03 2025 by rpki-client