$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/47dcae71-2eb6-3842-8c38-35739e5a28e3.roa File: 47dcae71-2eb6-3842-8c38-35739e5a28e3.roa (raw, json) Hash identifier: lcCc6hwntf9uJkAE7qecJsmzI5rpKbDotXkWiCmw3wk= Subject key identifier: 9F:CB:F8:8D:40:F7:02:9F:96:19:35:F6:9A:6A:72:6E:D6:B8:E6:F6 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F432858498BFBB09418D74B1A41D38400 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/47dcae71-2eb6-3842-8c38-35739e5a28e3.roa Signing time: Wed 16 Apr 2025 16:18:19 +0000 ROA not before: Wed 16 Apr 2025 16:18:19 +0000 ROA not after: Tue 15 Jul 2025 16:18:19 +0000 asID: 31898 IP address blocks: 131.229.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:fb:b0:94:18:d7:4b:1a:41:d3:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Apr 16 16:18:19 2025 GMT Not After : Jul 15 16:18:19 2025 GMT Subject: CN=317979a6-7c78-41ea-bbb9-337b97281a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4f:f4:c3:89:49:14:d7:4e:0d:b8:61:ca:a0: 0b:0b:cd:35:59:18:43:6f:cf:80:d7:6e:61:52:98: 19:24:b1:db:43:ce:de:a1:da:88:68:81:76:bf:99: cb:1f:cc:1a:d2:30:fa:2d:01:41:4e:05:9b:5c:9e: de:9b:e2:90:ac:5f:8a:28:11:52:41:c3:6c:fc:5a: a8:ab:1e:a1:bd:e2:0d:18:91:79:ae:98:6a:a8:20: 3b:41:ea:d7:84:c0:45:5c:55:e8:8f:29:33:e3:ba: 9c:72:6a:9c:11:3c:1b:44:d5:1f:36:1b:c4:f4:4c: 1c:90:72:ac:44:32:90:9b:0a:87:78:8e:cb:21:fe: 94:7f:8b:b8:ea:c5:be:a5:9b:7f:eb:bc:2b:c4:42: 9c:f8:76:1e:7c:33:57:d1:33:94:19:09:9b:8a:e2: 55:ec:49:7d:0a:53:df:7f:82:1a:73:28:ba:96:7a: f0:6a:c3:c5:97:b3:f7:60:45:5f:d3:f2:b4:a8:12: aa:9c:d4:8c:9d:2e:83:96:88:98:0f:17:0d:d5:3f: 9b:8a:40:9f:a8:ce:42:23:52:87:d0:49:70:ae:d4: f1:1a:16:a7:13:91:f0:a4:2f:bb:5a:86:e0:c5:27: 78:4d:76:9d:32:88:60:83:d4:bc:2b:44:c2:43:1d: 26:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CB:F8:8D:40:F7:02:9F:96:19:35:F6:9A:6A:72:6E:D6:B8:E6:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/47dcae71-2eb6-3842-8c38-35739e5a28e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:bb:a6:56:b2:a4:d6:58:e1:0a:3d:c6:f0:0a:ea:2c:ae:db: bd:fa:15:2e:6e:c4:b0:b5:25:4e:26:f9:96:de:7a:7b:7f:82: 81:57:1d:3c:15:ed:79:32:cf:6f:4a:35:a0:7e:2e:72:43:29: d9:ff:1e:b2:b4:23:81:99:04:da:09:2b:48:f8:6a:7c:bb:c2: 30:44:4f:59:18:02:46:e9:06:0b:e2:b1:b2:75:fa:08:64:a0: 59:6b:b4:e4:f2:db:98:90:ac:fc:5e:57:65:fa:0d:36:36:d6: 3e:84:42:4d:72:99:8b:01:d6:11:7a:90:09:33:43:37:d9:01: d7:b0:de:e0:c9:62:98:6c:e3:6a:9b:f5:46:a1:95:09:57:af: 9a:10:99:ab:46:0e:41:5c:45:c3:f0:d0:56:4c:22:03:bd:fc: a3:49:da:cc:99:72:16:9b:f5:cc:8d:10:1a:a6:45:fa:11:cc: f5:8c:8e:77:4b:33:30:40:89:d3:c8:a9:e4:70:99:af:3a:4f: 0e:8f:05:5a:0f:a4:87:25:93:ee:2d:10:c3:30:c2:31:f8:27: 07:f9:f3:7e:5e:f5:56:a9:c0:96:df:3a:03:6b:8f:91:3b:21: f6:21:f9:09:b3:4c:f9:73:ac:d5:db:c5:64:37:52:41:9f:a1: 3f:75:c8:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmL+7CUGNdLGkHThAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDQxNjE2MTgxOVoXDTI1MDcxNTE2MTgxOVowLzEtMCsGA1UEAxMk MzE3OTc5YTYtN2M3OC00MWVhLWJiYjktMzM3Yjk3MjgxYTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk/0w4lJFNdODbhhyqALC801WRhDb8+A125h UpgZJLHbQ87eodqIaIF2v5nLH8wa0jD6LQFBTgWbXJ7em+KQrF+KKBFSQcNs/Fqo qx6hveINGJF5rphqqCA7QerXhMBFXFXojykz47qccmqcETwbRNUfNhvE9EwckHKs RDKQmwqHeI7LIf6Uf4u46sW+pZt/67wrxEKc+HYefDNX0TOUGQmbiuJV7El9ClPf f4Iacyi6lnrwasPFl7P3YEVf0/K0qBKqnNSMnS6DloiYDxcN1T+bikCfqM5CI1KH 0ElwrtTxGhanE5HwpC+7WobgxSd4TXadMohgg9S8K0TCQx0mCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/L+I1A9wKflhk19ppqcm7WuOb2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvNDdkY2FlNzEtMmViNi0z ODQyLThjMzgtMzU3MzllNWEyOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALq7playpNZY4Qo9xvAK6iyu2736FS5uxLC1JU4m+Zbeent/goFXHTwV 7Xkyz29KNaB+LnJDKdn/HrK0I4GZBNoJK0j4any7wjBET1kYAkbpBgvisbJ1+ghk oFlrtOTy25iQrPxeV2X6DTY21j6EQk1ymYsB1hF6kAkzQzfZAdew3uDJYphs42qb 9UahlQlXr5oQmatGDkFcRcPw0FZMIgO9/KNJ2syZchab9cyNEBqmRfoRzPWMjndL MzBAidPIqeRwma86Tw6PBVoPpIclk+4tEMMwwjH4Jwf5835e9VapwJbfOgNrj5E7 IfYh+QmzTPlzrNXbxWQ3UkGfoT91yOU= -----END CERTIFICATE-----Generated at Sat Apr 26 19:19:51 2025 by rpki-client