$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/97a022c5-cd14-3a87-9f4c-3417a0307297.roa File: 97a022c5-cd14-3a87-9f4c-3417a0307297.roa (raw, json) Hash identifier: 0Y2SgO0UdOA+UZNlU8ZyuL5jR8WTYsofMISz757SONg= Subject key identifier: 42:39:19:59:AF:C4:83:94:B1:8B:66:F1:9A:BD:7A:E7:C7:7F:CF:13 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F43285849F046DA002F7F6E6FC15A4B80 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/97a022c5-cd14-3a87-9f4c-3417a0307297.roa Signing time: Thu 22 May 2025 14:30:35 +0000 ROA not before: Thu 22 May 2025 14:30:35 +0000 ROA not after: Wed 20 Aug 2025 14:30:35 +0000 asID: 203724 IP address blocks: 131.229.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:46:da:00:2f:7f:6e:6f:c1:5a:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: May 22 14:30:35 2025 GMT Not After : Aug 20 14:30:35 2025 GMT Subject: CN=5f6f353b-8fc6-4b4f-b093-b087505c2a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0c:53:c4:64:77:ed:b2:ab:17:e8:e9:d9:9c: 87:d0:ef:13:f1:27:89:cb:99:43:a9:1a:c0:10:53: 14:a0:da:57:41:88:82:f8:8f:2a:c2:16:62:20:29: 52:05:6d:88:11:0f:f9:49:aa:50:ab:5a:89:5b:18: 23:d2:d1:9a:23:ce:09:5e:8d:16:b8:48:d2:c2:3a: ca:10:bb:47:a2:10:7e:43:a5:46:93:f2:44:f1:0a: 23:f8:6f:72:fa:0a:f8:47:cb:eb:b3:90:a8:c5:c6: bd:8e:a3:17:47:4c:66:e1:37:61:cf:4a:77:06:ef: f5:00:5b:7f:d3:09:05:2e:8d:6c:68:30:02:ad:35: 14:f4:c3:fa:c4:12:37:e1:17:8d:7c:c2:40:eb:d6: 1b:37:77:43:5c:d9:cb:28:4f:e0:fc:94:e4:a7:7b: b1:71:41:2c:46:36:95:62:1a:ae:ca:11:46:a4:91: 00:26:17:e9:3c:57:c9:b1:d6:e8:b3:a7:47:07:d6: 3b:04:2f:7e:f0:70:3b:a6:93:dc:ed:77:ab:6c:ef: 5d:fa:d6:04:20:22:01:e1:c0:87:93:7d:3e:fc:be: e9:f5:f8:38:d1:3e:4b:b8:eb:b1:43:f2:6c:b9:8b: f4:17:e3:66:82:43:bf:86:df:10:d2:e3:3e:6e:e1: 21:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:39:19:59:AF:C4:83:94:B1:8B:66:F1:9A:BD:7A:E7:C7:7F:CF:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/97a022c5-cd14-3a87-9f4c-3417a0307297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:2a:07:51:c7:3c:4f:4e:50:53:04:a1:de:5f:76:e3:67:7f: 75:79:ca:2e:e0:4c:cd:e0:b7:41:aa:b7:e4:f8:83:3e:c6:21: 14:af:c3:9f:11:96:4f:83:28:26:99:88:a7:49:bc:c1:76:62: c0:b3:d2:87:6b:0d:21:39:47:82:e7:27:16:76:52:5b:da:e4: 56:60:b5:a1:57:2f:fd:86:5f:05:44:62:e1:75:8b:d0:b9:0a: 1f:c1:2f:3c:e3:fe:3e:f8:94:44:42:8a:6c:70:c6:a8:41:1a: f5:bf:d9:e7:b4:4b:19:00:6e:40:1d:b1:34:c3:06:49:cc:53: 23:03:1d:e9:37:17:37:07:20:0e:44:15:e9:a3:dc:c3:06:2e: e9:3c:cd:99:61:e9:51:1c:fa:0a:8e:2b:a4:fc:7f:0f:a8:e0: 37:1e:df:76:02:b3:56:6a:1a:24:4a:fa:8a:be:28:8f:7f:7b: 31:c4:59:3a:3f:5b:33:31:1b:95:ab:40:f2:a6:72:51:bf:f8: 02:be:d9:82:cf:fa:d3:88:d0:ee:56:a2:9f:83:01:9d:03:33: 89:a4:ee:eb:ab:39:86:9a:70:79:78:06:a9:c6:17:c8:07:40: 03:3a:66:bd:20:af:2e:01:f4:11:72:78:db:64:f5:c4:b0:6a: 90:c8:49:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwRtoAL39ub8FaS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDUyMjE0MzAzNVoXDTI1MDgyMDE0MzAzNVowLzEtMCsGA1UEAxMk NWY2ZjM1M2ItOGZjNi00YjRmLWIwOTMtYjA4NzUwNWMyYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAxTxGR37bKrF+jp2ZyH0O8T8SeJy5lDqRrA EFMUoNpXQYiC+I8qwhZiIClSBW2IEQ/5SapQq1qJWxgj0tGaI84JXo0WuEjSwjrK ELtHohB+Q6VGk/JE8Qoj+G9y+gr4R8vrs5Coxca9jqMXR0xm4Tdhz0p3Bu/1AFt/ 0wkFLo1saDACrTUU9MP6xBI34ReNfMJA69YbN3dDXNnLKE/g/JTkp3uxcUEsRjaV YhquyhFGpJEAJhfpPFfJsdbos6dHB9Y7BC9+8HA7ppPc7XerbO9d+tYEICIB4cCH k30+/L7p9fg40T5LuOuxQ/JsuYv0F+NmgkO/ht8Q0uM+buEhGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEI5GVmvxIOUsYtm8Zq9eufHf88TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvOTdhMDIyYzUtY2QxNC0z YTg3LTlmNGMtMzQxN2EwMzA3Mjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMqB1HHPE9OUFMEod5fduNnf3V5yi7gTM3gt0Gqt+T4gz7GIRSvw58R lk+DKCaZiKdJvMF2YsCz0odrDSE5R4LnJxZ2Ulva5FZgtaFXL/2GXwVEYuF1i9C5 Ch/BLzzj/j74lERCimxwxqhBGvW/2ee0SxkAbkAdsTTDBknMUyMDHek3FzcHIA5E Femj3MMGLuk8zZlh6VEc+gqOK6T8fw+o4Dce33YCs1ZqGiRK+oq+KI9/ezHEWTo/ WzMxG5WrQPKmclG/+AK+2YLP+tOI0O5Wop+DAZ0DM4mk7uurOYaacHl4BqnGF8gH QAM6Zr0gry4B9BFyeNtk9cSwapDISSk= -----END CERTIFICATE-----Generated at Sun Jun 15 16:02:04 2025 by rpki-client