$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/14034d5f-38c4-3b08-a6a5-f260e6949ae5.roa File: 14034d5f-38c4-3b08-a6a5-f260e6949ae5.roa (raw, json) Hash identifier: 3l4+nYSPkyWehBQJET2zubKbsF6poSY8omYj8fyHR/k= Subject key identifier: FB:32:02:08:25:02:52:6B:81:63:39:7E:7D:A8:09:4C:F1:5D:18:98 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F43285849EFF654837F9CA60D252D7EE0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/14034d5f-38c4-3b08-a6a5-f260e6949ae5.roa Signing time: Thu 22 May 2025 11:48:21 +0000 ROA not before: Thu 22 May 2025 11:48:21 +0000 ROA not after: Wed 20 Aug 2025 11:48:21 +0000 asID: 203724 IP address blocks: 131.229.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ef:f6:54:83:7f:9c:a6:0d:25:2d:7e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: May 22 11:48:21 2025 GMT Not After : Aug 20 11:48:21 2025 GMT Subject: CN=498b1ecb-2806-4cb9-8da3-16dfbe7550f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:ee:04:6f:9c:6e:8e:1e:ba:63:a1:81:35: 30:14:2a:a4:cf:53:51:38:dc:cc:a5:b4:c0:51:e6: 42:00:8d:d6:10:77:9f:e1:e5:80:8b:d3:ea:e7:5c: 9b:bf:e9:1f:2b:2c:7d:2e:ea:84:ec:46:b4:d0:33: 1b:08:21:c4:b9:d0:26:75:13:c0:ec:df:f7:8a:95: 07:e1:85:82:c4:b7:2a:4d:86:e3:bb:d8:be:d6:9b: 42:96:71:82:aa:ea:5e:e0:c5:16:c5:53:a1:54:c1: 69:57:59:a2:94:d4:a5:7a:24:0d:fe:f4:16:cd:90: 2b:2b:a7:fa:0c:32:a5:b0:b5:b6:05:59:16:9f:2e: 88:bd:48:e7:2b:f4:43:34:28:5a:d1:bf:a7:4a:45: dd:b4:df:ac:d5:96:f5:2f:e0:1c:02:32:9e:2c:f5: 76:b1:61:48:d8:ac:97:55:aa:0b:e1:3a:84:90:e7: 36:93:d5:f9:4b:10:9e:a0:c4:cc:5b:6f:87:1b:66: 8f:4a:f5:84:f2:75:0e:2a:7e:8d:5f:dc:a6:44:dc: ff:62:0d:0d:af:63:fb:3c:8c:75:6e:6b:f8:34:b6: 9a:81:bc:d0:c3:b7:c2:21:9e:bd:e8:0d:c1:42:ff: 11:d3:f4:69:be:a8:0f:6f:8a:7a:a1:de:5b:b7:1d: 32:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:32:02:08:25:02:52:6B:81:63:39:7E:7D:A8:09:4C:F1:5D:18:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/14034d5f-38c4-3b08-a6a5-f260e6949ae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:27:80:d5:1d:d8:08:6d:5c:5d:17:3d:d5:af:0d:2d:0f:3e: 97:71:4c:f2:8b:31:9c:20:14:c5:25:36:8a:32:3f:2f:74:bf: 02:00:18:da:f6:89:13:81:17:a4:9e:91:d2:55:4a:be:f1:dd: 3e:7b:61:bf:52:00:a1:19:ab:99:e2:8e:26:7d:ef:c7:a0:ed: 7f:62:e1:5f:49:4f:0c:8a:53:19:87:68:c0:26:3f:c8:f7:2f: e3:15:4c:8b:27:8c:e9:1f:3a:b6:31:99:84:b9:f3:ae:42:e6: bc:ab:38:35:25:ed:af:00:53:9d:1c:03:43:bc:08:16:32:6e: 8c:03:9e:fd:9e:c4:cf:2f:10:2e:b9:c5:bd:1f:bd:c6:8b:af: dd:39:86:70:b0:0a:d5:72:cb:a4:b8:72:c9:19:bd:56:2d:7a: 99:75:4e:00:9a:08:aa:9a:a9:d2:1a:18:4e:d6:7c:51:83:0f: 56:d2:39:8f:07:68:eb:08:6a:de:56:3f:60:24:8f:d2:da:3c: cb:52:e7:d6:17:d1:32:b6:08:a2:64:88:0f:ac:61:51:ea:34: ab:3e:39:0e:66:0e:01:90:97:15:73:df:c3:22:01:9b:c7:b6: 06:91:d8:34:eb:9b:11:9a:96:4b:b2:3d:52:44:56:ca:d2:7c: 94:f1:9b:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnv9lSDf5ymDSUtfuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDUyMjExNDgyMVoXDTI1MDgyMDExNDgyMVowLzEtMCsGA1UEAxMk NDk4YjFlY2ItMjgwNi00Y2I5LThkYTMtMTZkZmJlNzU1MGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/zuBG+cbo4eumOhgTUwFCqkz1NRONzMpbTA UeZCAI3WEHef4eWAi9Pq51ybv+kfKyx9LuqE7Ea00DMbCCHEudAmdRPA7N/3ipUH 4YWCxLcqTYbju9i+1ptClnGCqupe4MUWxVOhVMFpV1milNSleiQN/vQWzZArK6f6 DDKlsLW2BVkWny6IvUjnK/RDNCha0b+nSkXdtN+s1Zb1L+AcAjKeLPV2sWFI2KyX VaoL4TqEkOc2k9X5SxCeoMTMW2+HG2aPSvWE8nUOKn6NX9ymRNz/Yg0Nr2P7PIx1 bmv4NLaagbzQw7fCIZ696A3BQv8R0/RpvqgPb4p6od5btx0ydwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsyAgglAlJrgWM5fn2oCUzxXRiYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMTQwMzRkNWYtMzhjNC0z YjA4LWE2YTUtZjI2MGU2OTQ5YWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4ngNUd2AhtXF0XPdWvDS0PPpdxTPKLMZwgFMUlNooyPy90vwIAGNr2 iROBF6SekdJVSr7x3T57Yb9SAKEZq5nijiZ978eg7X9i4V9JTwyKUxmHaMAmP8j3 L+MVTIsnjOkfOrYxmYS5865C5ryrODUl7a8AU50cA0O8CBYybowDnv2exM8vEC65 xb0fvcaLr905hnCwCtVyy6S4cskZvVYtepl1TgCaCKqaqdIaGE7WfFGDD1bSOY8H aOsIat5WP2Akj9LaPMtS59YX0TK2CKJkiA+sYVHqNKs+OQ5mDgGQlxVz38MiAZvH tgaR2DTrmxGalkuyPVJEVsrSfJTxm0w= -----END CERTIFICATE-----Generated at Sun Jun 15 21:38:34 2025 by rpki-client