$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ccb508de-80a2-3971-9195-18a03a904fc6.roa File: ccb508de-80a2-3971-9195-18a03a904fc6.roa (raw, json) Hash identifier: B0Pe7t4kpJJGjTRxn8bCGZ7zVX9kKQgoFIACKMxQI8I= Subject key identifier: 89:F8:72:E0:02:28:EF:2A:F8:C4:EE:FE:26:A2:38:E9:16:52:79:46 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F432858498C61A2833E1D2D5D75F736C0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ccb508de-80a2-3971-9195-18a03a904fc6.roa Signing time: Wed 16 Apr 2025 19:43:43 +0000 ROA not before: Wed 16 Apr 2025 19:43:43 +0000 ROA not after: Tue 15 Jul 2025 19:43:43 +0000 asID: 203724 IP address blocks: 131.229.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:61:a2:83:3e:1d:2d:5d:75:f7:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Apr 16 19:43:43 2025 GMT Not After : Jul 15 19:43:43 2025 GMT Subject: CN=c5ebb8f1-11e8-4d84-929a-167b49bdfb72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ba:c2:47:68:a5:18:67:bc:30:af:78:9a:13: 2d:57:59:44:fd:3e:09:58:3c:22:cf:b6:a7:b9:c4: a5:0e:a2:57:77:79:18:c3:84:67:cd:ca:0e:f4:df: b8:65:a4:e2:89:ef:f9:0d:57:43:72:88:08:0d:e2: e9:1e:1d:cf:d9:18:75:34:e4:c0:08:6b:37:38:65: b8:37:87:79:de:d5:6d:dc:e2:d0:a9:8d:64:ed:68: a2:f4:d2:6b:f1:a9:f3:31:f0:c4:0e:2e:9a:89:d9: b3:e3:be:98:fb:5b:a6:3a:0a:00:4c:3d:71:0d:b8: e6:09:c2:75:28:ff:a6:7b:4b:51:56:2b:05:c8:57: f6:cd:d4:14:9b:b1:8b:46:bf:ec:25:e0:e1:e3:75: e0:f3:d9:52:d5:c0:3f:9b:78:e6:20:dc:30:a3:e9: c6:4a:46:2b:8b:ec:e9:91:54:e3:51:2d:41:b9:a2: b2:c3:22:64:cf:a0:b2:29:6d:54:59:5d:11:47:ff: 79:05:49:12:a2:93:2e:ec:80:a4:61:54:3d:0f:13: 59:2f:79:3e:01:1e:5f:76:88:45:cc:b4:4d:6b:1d: 85:6c:48:54:6d:13:f7:87:98:69:da:fe:89:86:91: 43:8c:e8:6c:b1:61:3a:cd:68:a6:b0:4c:49:ce:64: 14:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F8:72:E0:02:28:EF:2A:F8:C4:EE:FE:26:A2:38:E9:16:52:79:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ccb508de-80a2-3971-9195-18a03a904fc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:e9:9f:48:1f:3c:c6:5d:7b:09:d7:5d:4a:a0:63:d1:34:ef: 2d:5e:b7:68:73:46:0d:e6:b0:0c:54:72:2a:e5:60:fb:8d:35: b3:34:2e:09:ec:75:d4:6a:77:7f:75:b0:c0:0d:23:aa:57:ce: db:69:c2:eb:11:ea:db:b5:db:52:b1:2f:47:d6:8e:ed:12:10: 2c:4a:d6:42:ac:d9:59:fd:ab:7a:8d:1b:54:aa:44:ed:9b:c7: e3:4a:69:ea:bb:d6:ac:21:5b:e5:78:90:f5:ee:eb:2f:80:3f: 78:f8:da:7b:91:ed:fe:48:16:44:cb:d3:51:81:b1:1d:d2:24: e4:0d:38:9b:12:57:34:f3:27:39:1d:f5:9b:6a:4e:23:d7:bb: b1:c4:6c:c4:63:00:3c:27:98:41:aa:ea:20:09:7d:d0:17:66: 3d:aa:5f:14:16:9a:c3:ab:3f:7c:2c:3a:45:69:1b:53:52:7c: b5:dc:12:83:96:48:59:0f:3c:8d:96:62:71:61:2e:87:cb:c7: a0:c3:7a:7c:66:2b:cf:b6:d6:cc:5f:46:17:18:9c:dd:85:10: 42:31:14:c8:f8:e7:a2:6f:5c:b8:d5:f9:c9:3f:78:a8:88:a4: 8b:91:24:5d:03:60:24:6c:b5:33:ce:5f:29:b3:ce:a3:f9:5d: 87:17:6b:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmMYaKDPh0tXXX3NsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDQxNjE5NDM0M1oXDTI1MDcxNTE5NDM0M1owLzEtMCsGA1UEAxMk YzVlYmI4ZjEtMTFlOC00ZDg0LTkyOWEtMTY3YjQ5YmRmYjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrrCR2ilGGe8MK94mhMtV1lE/T4JWDwiz7an ucSlDqJXd3kYw4RnzcoO9N+4ZaTiie/5DVdDcogIDeLpHh3P2Rh1NOTACGs3OGW4 N4d53tVt3OLQqY1k7Wii9NJr8anzMfDEDi6aidmz476Y+1umOgoATD1xDbjmCcJ1 KP+me0tRVisFyFf2zdQUm7GLRr/sJeDh43Xg89lS1cA/m3jmINwwo+nGSkYri+zp kVTjUS1BuaKywyJkz6CyKW1UWV0RR/95BUkSopMu7ICkYVQ9DxNZL3k+AR5fdohF zLRNax2FbEhUbRP3h5hp2v6JhpFDjOhssWE6zWimsExJzmQUKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIn4cuACKO8q+MTu/iaiOOkWUnlGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvY2NiNTA4ZGUtODBhMi0z OTcxLTkxOTUtMThhMDNhOTA0ZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTpn0gfPMZdewnXXUqgY9E07y1et2hzRg3msAxUcirlYPuNNbM0Lgns ddRqd391sMANI6pXzttpwusR6tu121KxL0fWju0SECxK1kKs2Vn9q3qNG1SqRO2b x+NKaeq71qwhW+V4kPXu6y+AP3j42nuR7f5IFkTL01GBsR3SJOQNOJsSVzTzJzkd 9ZtqTiPXu7HEbMRjADwnmEGq6iAJfdAXZj2qXxQWmsOrP3wsOkVpG1NSfLXcEoOW SFkPPI2WYnFhLofLx6DDenxmK8+21sxfRhcYnN2FEEIxFMj456JvXLjV+ck/eKiI pIuRJF0DYCRstTPOXymzzqP5XYcXa6I= -----END CERTIFICATE-----Generated at Sun Apr 27 10:26:59 2025 by rpki-client