$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9734e8c8-0f98-30c0-af6b-ab664717c93b.roa File: 9734e8c8-0f98-30c0-af6b-ab664717c93b.roa (raw, json) Hash identifier: 6u4rGfANBeFUPbC/hWYvnoARREpCb7xaBi3BY0HEpxw= Subject key identifier: 71:7B:78:D2:4D:59:5D:B4:9D:A0:39:08:17:AE:55:21:8F:8F:84:44 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F432858498C3AE471E8A460B44C3BC78C Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9734e8c8-0f98-30c0-af6b-ab664717c93b.roa Signing time: Wed 16 Apr 2025 18:25:39 +0000 ROA not before: Wed 16 Apr 2025 18:25:39 +0000 ROA not after: Tue 15 Jul 2025 18:25:39 +0000 asID: 31898 IP address blocks: 131.229.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:3a:e4:71:e8:a4:60:b4:4c:3b:c7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Apr 16 18:25:39 2025 GMT Not After : Jul 15 18:25:39 2025 GMT Subject: CN=b72d0f46-d166-43b2-8a2a-335c1960a2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:40:be:9b:66:48:67:22:f8:05:20:88:e8:f9: d3:4e:f7:af:c8:71:a7:eb:ec:ac:ec:21:0b:98:80: 0b:4d:63:e0:cf:81:10:26:7f:2f:ed:ac:6c:d3:1f: 3d:ce:fd:55:73:e1:2c:f4:7d:13:67:0b:ae:2a:e1: c5:e4:4a:a9:4b:54:6b:19:ab:0d:ae:89:2e:c7:82: 55:3e:fd:12:6a:18:2f:44:a8:7b:81:32:50:23:b4: 20:b8:f5:ef:ec:d0:26:fb:12:34:6d:1d:5b:26:08: 10:49:d0:9b:f9:aa:d0:3d:c2:da:53:22:10:3a:99: d1:c8:c9:a5:c4:e8:13:27:93:7d:5f:9c:ef:53:1c: 06:65:de:2c:ae:51:90:31:b3:2a:2c:15:00:4e:e4: 66:72:8c:3a:a4:30:e6:98:17:73:58:8c:6b:2d:0d: 19:7e:64:e9:be:07:5b:77:10:2d:36:7d:c1:1b:f8: e7:5a:7c:e3:b1:09:b4:c0:f5:00:b2:c9:1d:24:ea: 1c:5d:79:7e:1a:0d:ac:1f:25:16:72:86:0f:c2:10: e9:52:76:50:ba:f9:ce:2b:5b:8a:3e:0a:03:92:78: 2c:78:dd:2b:5f:6d:25:6f:c9:4b:6d:30:42:6f:d2: 98:16:08:3e:3b:67:80:65:17:e0:90:b5:4b:74:e8: d5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7B:78:D2:4D:59:5D:B4:9D:A0:39:08:17:AE:55:21:8F:8F:84:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9734e8c8-0f98-30c0-af6b-ab664717c93b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:71:d1:d1:1f:1c:d1:c1:c0:80:6d:51:2b:72:87:7a:60:eb: 24:55:c4:00:0b:6b:e7:8b:7d:ed:00:35:44:29:0f:d0:f6:b1: 35:a8:f5:c7:ab:fe:85:43:db:ae:3c:21:97:54:8d:38:93:fd: 83:20:08:4c:7d:34:a5:c7:3d:94:eb:12:55:54:40:80:72:a3: 0e:d0:b1:ad:7a:6d:d9:02:e0:b8:e2:cc:b1:ac:67:a5:7b:f2: 33:2f:fc:59:51:09:0e:83:4d:0c:b9:04:7d:f9:65:66:4e:e4: f5:53:6b:79:6a:86:3c:01:d3:ac:e0:49:44:2c:d5:07:20:44: d7:cc:ee:a5:a1:9f:e6:df:2b:66:46:93:85:c8:e6:e7:21:f0: aa:23:75:cd:c1:cb:12:96:da:25:ba:34:a5:74:43:30:e6:00: 62:a5:7a:2e:ec:45:84:4f:a6:2c:2e:02:a0:76:16:fc:b8:2c: 08:75:d7:a7:93:fb:46:5c:31:32:a3:0c:f4:d0:31:7e:f7:33: 81:69:9b:d6:cb:cb:02:f3:7b:89:78:67:17:0a:fd:e6:09:c4: 4b:2a:41:08:be:8f:9e:52:9f:e4:ba:ee:48:ba:d9:08:a6:9c: 70:c8:46:45:e6:e1:a3:17:10:1e:8e:ff:9c:62:2f:bf:92:e0: 1c:76:cf:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmMOuRx6KRgtEw7x4wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDQxNjE4MjUzOVoXDTI1MDcxNTE4MjUzOVowLzEtMCsGA1UEAxMk YjcyZDBmNDYtZDE2Ni00M2IyLThhMmEtMzM1YzE5NjBhMmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkC+m2ZIZyL4BSCI6PnTTvevyHGn6+ys7CEL mIALTWPgz4EQJn8v7axs0x89zv1Vc+Es9H0TZwuuKuHF5EqpS1RrGasNrokux4JV Pv0SahgvRKh7gTJQI7QguPXv7NAm+xI0bR1bJggQSdCb+arQPcLaUyIQOpnRyMml xOgTJ5N9X5zvUxwGZd4srlGQMbMqLBUATuRmcow6pDDmmBdzWIxrLQ0ZfmTpvgdb dxAtNn3BG/jnWnzjsQm0wPUAsskdJOocXXl+Gg2sHyUWcoYPwhDpUnZQuvnOK1uK PgoDkngseN0rX20lb8lLbTBCb9KYFgg+O2eAZRfgkLVLdOjV1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHF7eNJNWV20naA5CBeuVSGPj4REMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvOTczNGU4YzgtMGY5OC0z MGMwLWFmNmItYWI2NjQ3MTdjOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+W/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABx0dEfHNHBwIBtUStyh3pg6yRVxAALa+eLfe0ANUQpD9D2sTWo9cer /oVD2648IZdUjTiT/YMgCEx9NKXHPZTrElVUQIByow7Qsa16bdkC4LjizLGsZ6V7 8jMv/FlRCQ6DTQy5BH35ZWZO5PVTa3lqhjwB06zgSUQs1QcgRNfM7qWhn+bfK2ZG k4XI5uch8Kojdc3ByxKW2iW6NKV0QzDmAGKlei7sRYRPpiwuAqB2Fvy4LAh116eT +0ZcMTKjDPTQMX73M4Fpm9bLywLze4l4ZxcK/eYJxEsqQQi+j55Sn+S67ki62Qim nHDIRkXm4aMXEB6O/5xiL7+S4Bx2zw0= -----END CERTIFICATE-----Generated at Mon Jun 16 03:14:06 2025 by rpki-client