$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/48cd498a-afe4-3005-9f7f-800683d44765.roa File: 48cd498a-afe4-3005-9f7f-800683d44765.roa (raw, json) Hash identifier: wXePNIssU5c3ZdWlRFw0Gf6FmTDhPwr+XulYm5V9KHs= Subject key identifier: 0E:C9:EC:3E:3C:74:90:EC:F3:41:09:63:D6:A3:93:3B:64:A3:2A:1C Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F43285849F03F744A020740AB29A77000 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/48cd498a-afe4-3005-9f7f-800683d44765.roa Signing time: Thu 22 May 2025 14:15:41 +0000 ROA not before: Thu 22 May 2025 14:15:41 +0000 ROA not after: Wed 20 Aug 2025 14:15:41 +0000 asID: 203724 IP address blocks: 131.229.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:3f:74:4a:02:07:40:ab:29:a7:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: May 22 14:15:41 2025 GMT Not After : Aug 20 14:15:41 2025 GMT Subject: CN=c8400bc0-ca76-44cb-ae92-177950df86ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a4:1e:87:8e:50:6b:08:22:af:04:dd:27:a7: eb:e7:8d:38:80:22:10:ea:02:0b:72:bb:f3:b0:eb: 75:8a:f0:d6:43:c6:50:95:07:d5:10:6b:dc:e0:89: 6a:24:ab:40:a2:40:48:19:04:a8:ec:33:96:d2:a8: 9e:cf:a2:9f:01:3e:2f:e6:0a:46:b4:b9:91:ce:2f: 29:0e:e0:4f:86:9a:3b:1d:4b:0a:77:d8:cf:c2:cb: dc:52:dc:b1:d1:0a:b2:c4:e6:a3:74:dd:ce:9d:e6: a7:35:0d:02:23:bd:24:c4:7b:09:6f:85:1d:b6:1c: 45:04:81:80:05:f7:44:39:14:74:9f:2f:95:7c:e4: 97:65:aa:b3:f8:41:ad:f0:5d:d7:44:67:93:84:ca: 97:98:72:29:62:0f:6f:fc:39:88:e7:7e:bb:dd:38: 7f:56:6d:7f:ab:5c:07:dd:70:20:50:e8:52:92:84: b7:20:4a:35:4b:7e:0d:bf:d1:ce:a2:ed:14:69:56: 51:d6:54:57:2b:7b:78:b3:bf:fa:74:f3:f3:4e:9c: 9f:17:20:64:15:84:cd:4d:9d:1e:b6:4e:d8:7c:c9: 01:bb:76:e4:a1:f2:87:2d:09:6e:48:ed:44:a6:d0: 01:c5:33:49:5d:1b:66:69:ef:f5:93:7f:5a:6a:83: b1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C9:EC:3E:3C:74:90:EC:F3:41:09:63:D6:A3:93:3B:64:A3:2A:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/48cd498a-afe4-3005-9f7f-800683d44765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:8e:44:9f:f3:cf:0b:60:d2:7b:5d:3e:41:c3:c6:f9:f2:85: ff:c6:b1:d5:41:4a:cd:c4:ee:4b:76:3a:f1:dd:9d:f4:ec:c1: c9:c3:ac:04:fc:eb:a3:27:48:fe:45:91:8a:21:e4:7e:45:cf: 19:7c:d5:a3:0d:eb:c3:a6:a2:b4:23:f6:3b:b7:92:c9:e6:e6: 59:95:e0:24:b3:01:ab:a7:29:6d:04:82:48:51:ce:40:30:8c: 1f:56:3d:d7:97:27:86:60:5e:29:fb:ff:a4:4c:e8:68:43:c2: 12:7a:f3:22:3f:d5:f1:99:1f:a3:93:67:00:3d:f0:05:7c:63: e2:2f:4c:fd:55:25:16:9d:64:11:60:be:1f:3e:f2:a2:27:fd: 7c:05:cf:b5:51:19:61:d5:b0:54:ba:62:ac:d3:95:a5:0c:91: d4:d1:01:60:4a:ce:1a:74:b1:2b:98:8a:b7:c4:da:28:af:19: 37:f2:c1:6a:48:ca:4f:f4:03:e2:89:74:75:4a:81:51:9b:2c: 68:2f:6e:3d:75:bf:06:20:6e:2f:e0:a7:12:f4:2d:26:eb:79: 9e:e3:8e:01:04:14:43:c9:d1:3a:03:5b:2d:26:ce:c2:d1:de: 45:4a:d5:da:69:3b:9a:f9:7e:d6:cd:68:ee:89:69:8a:49:58: 02:64:27:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwP3RKAgdAqymncAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDUyMjE0MTU0MVoXDTI1MDgyMDE0MTU0MVowLzEtMCsGA1UEAxMk Yzg0MDBiYzAtY2E3Ni00NGNiLWFlOTItMTc3OTUwZGY4NmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKQeh45QawgirwTdJ6fr5404gCIQ6gILcrvz sOt1ivDWQ8ZQlQfVEGvc4IlqJKtAokBIGQSo7DOW0qiez6KfAT4v5gpGtLmRzi8p DuBPhpo7HUsKd9jPwsvcUtyx0QqyxOajdN3OneanNQ0CI70kxHsJb4UdthxFBIGA BfdEORR0ny+VfOSXZaqz+EGt8F3XRGeThMqXmHIpYg9v/DmI53673Th/Vm1/q1wH 3XAgUOhSkoS3IEo1S34Nv9HOou0UaVZR1lRXK3t4s7/6dPPzTpyfFyBkFYTNTZ0e tk7YfMkBu3bkofKHLQluSO1EptABxTNJXRtmae/1k39aaoOxHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7J7D48dJDs80EJY9ajkztkoyocMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvNDhjZDQ5OGEtYWZlNC0z MDA1LTlmN2YtODAwNjgzZDQ0NzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+W8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaORJ/zzwtg0ntdPkHDxvnyhf/GsdVBSs3E7kt2OvHdnfTswcnDrAT8 66MnSP5FkYoh5H5Fzxl81aMN68OmorQj9ju3ksnm5lmV4CSzAaunKW0EgkhRzkAw jB9WPdeXJ4ZgXin7/6RM6GhDwhJ68yI/1fGZH6OTZwA98AV8Y+IvTP1VJRadZBFg vh8+8qIn/XwFz7VRGWHVsFS6YqzTlaUMkdTRAWBKzhp0sSuYirfE2iivGTfywWpI yk/0A+KJdHVKgVGbLGgvbj11vwYgbi/gpxL0LSbreZ7jjgEEFEPJ0ToDWy0mzsLR 3kVK1dppO5r5ftbNaO6JaYpJWAJkJzo= -----END CERTIFICATE-----Generated at Sun Jun 15 17:29:38 2025 by rpki-client