$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c602703b-b6a8-3e85-bebc-aaa8f9e4322f.roa File: c602703b-b6a8-3e85-bebc-aaa8f9e4322f.roa (raw, json) Hash identifier: x7GYBixo6hxdo8qqg/Q+jmy+JZu0wNjrQtrRALt4/mg= Subject key identifier: C5:79:4B:C7:27:EC:94:93:E6:DE:63:86:AA:4B:1D:F1:17:E9:AF:38 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F432858498C68EB5D1C167A36746E6E80 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c602703b-b6a8-3e85-bebc-aaa8f9e4322f.roa Signing time: Wed 16 Apr 2025 19:58:24 +0000 ROA not before: Wed 16 Apr 2025 19:58:24 +0000 ROA not after: Tue 15 Jul 2025 19:58:24 +0000 asID: 31898 IP address blocks: 131.229.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:68:eb:5d:1c:16:7a:36:74:6e:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Apr 16 19:58:24 2025 GMT Not After : Jul 15 19:58:24 2025 GMT Subject: CN=d7c3f257-9937-41dc-a6e6-fabc82499bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c6:e8:d6:ea:9a:8d:40:0e:a5:03:8c:ef:6f: 6d:bb:c2:7d:24:07:5f:8a:d2:2e:89:e8:b6:94:13: 3b:ad:8f:38:66:68:1d:1a:81:e6:f1:d2:7b:0e:61: 32:a2:07:50:de:da:4f:f9:dd:36:48:79:04:16:d6: a6:ce:84:44:7a:3a:3c:24:16:b7:cb:06:c3:50:79: f7:9e:24:b8:7e:32:94:b2:54:87:2b:14:83:eb:a9: c3:b2:34:cc:8f:b9:99:5e:47:e6:68:59:6e:fe:61: d0:47:82:75:20:9e:90:5f:5c:f3:7a:4e:4d:50:2d: e2:37:ce:a5:d2:15:f5:0c:f4:e4:d5:51:29:7e:e3: bb:3c:55:e8:c3:b4:8f:89:7e:c8:95:7e:a1:c9:86: c0:77:9b:b2:52:32:55:77:67:38:5a:9b:a5:60:95: 99:9d:ab:c4:a8:05:66:1d:62:cb:44:8a:d5:ff:a4: 5e:bf:90:85:e2:60:13:64:08:cd:82:73:c9:58:ae: 28:2b:73:7c:e3:04:74:d2:7a:32:f1:5d:75:bc:fd: 60:c6:ca:0d:c0:11:e3:cd:69:5e:f1:24:33:2e:70: 48:0f:3f:1a:88:da:66:59:76:24:3a:13:f9:89:b1: 30:6d:32:11:de:02:32:19:35:01:30:86:6c:be:5e: 38:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:79:4B:C7:27:EC:94:93:E6:DE:63:86:AA:4B:1D:F1:17:E9:AF:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c602703b-b6a8-3e85-bebc-aaa8f9e4322f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:58:5b:29:b0:b5:c8:b1:29:db:49:f7:b1:70:c7:7c:be:06: 61:43:83:45:c6:ce:1c:ef:b9:21:46:a7:a5:6b:dd:c1:ad:95: 32:13:1c:63:2c:b3:e6:03:3d:f6:f0:15:4c:3d:6b:5e:ee:70: 83:15:63:b0:f4:45:12:68:90:b0:20:a3:0c:79:5a:cf:6a:fc: 94:91:11:96:e2:66:f4:65:f8:a0:f9:ee:1e:44:36:a7:ac:95: f7:a3:67:09:30:2d:8b:45:c5:f2:e2:ef:d7:78:06:44:9d:34: 57:78:df:4f:08:3f:4f:e4:81:52:d7:d9:cf:ef:ac:b1:2d:2a: a7:96:e6:40:f7:cf:36:c0:ca:44:b5:61:99:28:27:ec:a2:27: cb:91:36:a1:96:54:3e:bd:01:bc:8a:9f:b1:46:7b:8f:ef:e2: 75:21:dc:f4:d9:af:ba:49:e9:01:f5:8a:60:02:ee:a1:dc:6a: fa:10:a2:bd:b5:37:60:c5:81:be:33:98:7a:b2:1a:a2:bd:bc: 81:b6:25:3c:e4:3a:cc:71:4e:c8:fd:4c:ef:3a:d1:53:fd:c1: 4a:40:f7:83:5d:90:51:47:f5:27:50:f4:1d:b2:5a:cd:81:14: b1:98:c3:ac:c7:48:2a:ff:fc:66:73:1b:f7:95:15:2b:66:2f: 41:c9:30:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmMaOtdHBZ6NnRuboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDQxNjE5NTgyNFoXDTI1MDcxNTE5NTgyNFowLzEtMCsGA1UEAxMk ZDdjM2YyNTctOTkzNy00MWRjLWE2ZTYtZmFiYzgyNDk5YmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMbo1uqajUAOpQOM729tu8J9JAdfitIuiei2 lBM7rY84ZmgdGoHm8dJ7DmEyogdQ3tpP+d02SHkEFtamzoREejo8JBa3ywbDUHn3 niS4fjKUslSHKxSD66nDsjTMj7mZXkfmaFlu/mHQR4J1IJ6QX1zzek5NUC3iN86l 0hX1DPTk1VEpfuO7PFXow7SPiX7IlX6hyYbAd5uyUjJVd2c4WpulYJWZnavEqAVm HWLLRIrV/6Rev5CF4mATZAjNgnPJWK4oK3N84wR00noy8V11vP1gxsoNwBHjzWle 8SQzLnBIDz8aiNpmWXYkOhP5ibEwbTIR3gIyGTUBMIZsvl443QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMV5S8cn7JST5t5jhqpLHfEX6a84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYzYwMjcwM2ItYjZhOC0z ZTg1LWJlYmMtYWFhOGY5ZTQzMjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtYWymwtcixKdtJ97Fwx3y+BmFDg0XGzhzvuSFGp6Vr3cGtlTITHGMs s+YDPfbwFUw9a17ucIMVY7D0RRJokLAgowx5Ws9q/JSREZbiZvRl+KD57h5ENqes lfejZwkwLYtFxfLi79d4BkSdNFd4308IP0/kgVLX2c/vrLEtKqeW5kD3zzbAykS1 YZkoJ+yiJ8uRNqGWVD69AbyKn7FGe4/v4nUh3PTZr7pJ6QH1imAC7qHcavoQor21 N2DFgb4zmHqyGqK9vIG2JTzkOsxxTsj9TO860VP9wUpA94NdkFFH9SdQ9B2yWs2B FLGYw6zHSCr//GZzG/eVFStmL0HJMCo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:03:21 2025 by rpki-client