$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/309067d6-1a89-34de-a1d8-8e9e8f2136ae.roa File: 309067d6-1a89-34de-a1d8-8e9e8f2136ae.roa (raw, json) Hash identifier: OssEXLCbTkhlXL5rpZJG3Ln4xpa1Qn4xWVKBY6wh8tE= Subject key identifier: 2A:2A:43:B1:DB:C9:86:BD:58:01:19:1D:5C:E6:18:23:4E:86:68:D5 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F43285849E9F1288D63931F31087F7D00 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/309067d6-1a89-34de-a1d8-8e9e8f2136ae.roa Signing time: Tue 20 May 2025 08:03:04 +0000 ROA not before: Tue 20 May 2025 08:03:04 +0000 ROA not after: Mon 18 Aug 2025 08:03:04 +0000 asID: 203724 IP address blocks: 131.229.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:f1:28:8d:63:93:1f:31:08:7f:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: May 20 08:03:04 2025 GMT Not After : Aug 18 08:03:04 2025 GMT Subject: CN=ffcf1a3e-9dce-4df9-ba02-8b41068403b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ac:89:82:9b:c9:6b:df:75:cb:73:4a:66:2f: 61:1c:00:35:bd:d2:0a:09:04:9d:80:c9:69:e8:04: 30:b1:58:5a:46:1a:48:e4:f7:48:a6:d4:83:ba:df: 04:04:2e:e9:ec:1c:1d:73:d7:c1:8e:89:b5:8d:56: cd:d5:0a:d9:fe:0a:ff:a3:cd:64:f4:56:f6:86:1a: 3c:36:9f:c0:0b:b9:8e:5c:e2:17:85:b2:35:cf:84: 71:1e:30:01:38:b3:12:fb:df:b7:8a:8e:ec:03:02: f9:55:61:80:e4:41:7e:db:25:36:e1:ec:95:77:51: 3e:c4:dc:36:a0:07:53:0e:20:ca:c4:94:61:39:25: ab:6c:6f:a4:11:d0:34:a2:13:5e:04:19:4f:ba:2e: 99:f0:6b:2f:50:27:09:df:f9:a5:99:3b:a9:57:d8: 01:0c:7e:3c:ce:ae:d2:a7:73:ab:80:61:0f:f0:65: d3:73:01:ed:67:5e:5b:00:f1:3a:56:49:55:12:fa: b0:6c:cd:d6:03:ae:ce:d9:bf:3a:a3:ef:a6:c9:aa: 94:ee:ad:35:15:47:96:d3:fc:b1:92:83:97:71:82: e0:bb:6c:6e:8e:7f:30:d5:4f:93:bd:5c:e9:07:4a: 72:aa:ff:17:8f:8e:59:8a:ad:3e:bd:14:42:97:7f: 5a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2A:43:B1:DB:C9:86:BD:58:01:19:1D:5C:E6:18:23:4E:86:68:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/309067d6-1a89-34de-a1d8-8e9e8f2136ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:6f:1f:0b:84:21:7c:87:79:4e:88:1f:80:80:7b:bb:ce:70: 78:09:52:10:6f:9a:fb:c7:72:43:d8:d3:38:30:0f:45:9a:df: 65:69:2e:db:44:5e:78:af:13:ac:3b:0a:49:b3:f5:15:31:d2: 60:db:68:61:4a:bf:17:18:94:14:8c:4e:b8:8d:d4:5c:a1:98: 0d:5a:a4:8a:90:a2:92:a4:53:2f:03:d9:24:8c:66:c9:76:76: b9:ec:3d:c0:bb:bb:b0:7f:4d:c9:b5:2d:2d:12:58:e0:93:97: 17:64:5c:20:16:02:66:57:41:8f:74:19:26:09:8d:b8:47:f7: ce:83:29:ed:2e:8c:b1:0f:e6:b7:b9:63:69:bd:5f:ce:53:ee: a3:1d:83:c7:7b:16:2a:ae:89:a7:ab:21:5b:33:22:d1:7d:37: fa:ec:3c:19:73:3b:f9:dd:d0:b8:02:46:70:59:b9:40:2c:af: 57:e4:d6:37:25:21:88:55:67:2a:8b:5b:f6:e9:10:9b:c2:e1: 81:cd:ee:d4:3b:80:7a:19:80:e1:65:38:63:75:49:6a:ad:21: 4b:ae:1d:5e:46:53:ad:12:0a:26:dc:ab:3c:b3:43:bf:9c:f0: fa:e7:9f:97:31:75:f5:48:85:36:bb:25:82:c2:e9:d8:8c:bd: 49:ca:86:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnp8SiNY5MfMQh/fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDUyMDA4MDMwNFoXDTI1MDgxODA4MDMwNFowLzEtMCsGA1UEAxMk ZmZjZjFhM2UtOWRjZS00ZGY5LWJhMDItOGI0MTA2ODQwM2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qyJgpvJa991y3NKZi9hHAA1vdIKCQSdgMlp 6AQwsVhaRhpI5PdIptSDut8EBC7p7Bwdc9fBjom1jVbN1QrZ/gr/o81k9Fb2hho8 Np/AC7mOXOIXhbI1z4RxHjABOLMS+9+3io7sAwL5VWGA5EF+2yU24eyVd1E+xNw2 oAdTDiDKxJRhOSWrbG+kEdA0ohNeBBlPui6Z8GsvUCcJ3/mlmTupV9gBDH48zq7S p3OrgGEP8GXTcwHtZ15bAPE6VklVEvqwbM3WA67O2b86o++myaqU7q01FUeW0/yx koOXcYLgu2xujn8w1U+TvVzpB0pyqv8Xj45Ziq0+vRRCl39apwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoqQ7HbyYa9WAEZHVzmGCNOhmjVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMzA5MDY3ZDYtMWE4OS0z NGRlLWExZDgtOGU5ZThmMjEzNmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9vHwuEIXyHeU6IH4CAe7vOcHgJUhBvmvvHckPY0zgwD0Wa32VpLttE XnivE6w7Ckmz9RUx0mDbaGFKvxcYlBSMTriN1FyhmA1apIqQopKkUy8D2SSMZsl2 drnsPcC7u7B/Tcm1LS0SWOCTlxdkXCAWAmZXQY90GSYJjbhH986DKe0ujLEP5re5 Y2m9X85T7qMdg8d7FiquiaerIVszItF9N/rsPBlzO/nd0LgCRnBZuUAsr1fk1jcl IYhVZyqLW/bpEJvC4YHN7tQ7gHoZgOFlOGN1SWqtIUuuHV5GU60SCibcqzyzQ7+c 8Prnn5cxdfVIhTa7JYLC6diMvUnKhqI= -----END CERTIFICATE-----Generated at Sun Jun 15 06:30:21 2025 by rpki-client