$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d17d5ae8-be36-35af-ac50-557daa251272.roa File: d17d5ae8-be36-35af-ac50-557daa251272.roa (raw, json) Hash identifier: 0n5k2r5Wr3TlI8EkCBvd7ISMahynL2O5XzXZR7kDtuQ= Subject key identifier: A3:D5:22:B1:10:EB:23:95:86:D4:84:DF:86:03:32:73:A8:AF:EF:A1 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F432858498C4EEB8179A494CEAC7B18C0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d17d5ae8-be36-35af-ac50-557daa251272.roa Signing time: Wed 16 Apr 2025 19:06:00 +0000 ROA not before: Wed 16 Apr 2025 19:06:00 +0000 ROA not after: Tue 15 Jul 2025 19:06:00 +0000 asID: 31898 IP address blocks: 131.229.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:4e:eb:81:79:a4:94:ce:ac:7b:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Apr 16 19:06:00 2025 GMT Not After : Jul 15 19:06:00 2025 GMT Subject: CN=1ed3e809-3919-48de-9c86-b336f517abd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2f:45:78:55:66:93:2b:dc:e0:61:1c:89:28: 73:1c:bb:07:23:cc:bb:1b:07:e3:55:a1:36:51:b2: 59:68:18:5f:02:7b:90:b9:24:0a:e3:fc:f5:fb:09: f0:b5:56:9e:4c:67:15:8d:24:e7:84:91:1b:88:21: 8e:d5:f4:51:66:d8:63:b0:0a:de:ec:1e:b7:72:60: 7c:0c:11:e5:26:6a:9c:06:b1:20:b8:4e:9e:79:a7: 39:2a:50:5f:89:45:73:8d:39:59:aa:fe:d8:43:58: ac:70:ab:37:91:67:ca:15:e8:63:c6:38:be:a7:5e: e1:c7:a2:bc:0e:50:52:25:6e:80:ee:45:3e:26:c2: 6d:51:d3:7b:ba:39:fb:7c:49:1e:9c:19:2a:6c:08: 3b:9b:63:d4:20:b4:83:b2:ee:c7:dc:96:f6:d7:23: 41:06:b3:af:27:98:c8:93:95:aa:aa:42:e0:59:e2: f7:63:a2:6c:4d:fd:2c:2a:ec:ac:c7:76:49:ce:26: d6:79:4a:f4:e4:fc:88:9c:0e:2b:9c:7e:27:a7:5b: 37:b8:8d:ed:a8:ac:22:ef:d8:c1:e0:6d:b0:e2:21: d0:3e:d7:b1:f8:f6:bc:94:e8:65:bd:8f:b3:77:27: fc:69:93:e3:63:4c:e0:6d:d4:dd:d3:98:aa:77:71: 90:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D5:22:B1:10:EB:23:95:86:D4:84:DF:86:03:32:73:A8:AF:EF:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/d17d5ae8-be36-35af-ac50-557daa251272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:24:30:2e:3f:81:e2:1b:cc:e7:f5:73:62:a6:9e:35:e4:3f: 08:90:5a:8e:c6:52:ed:39:0a:94:10:17:17:fe:77:f1:a6:09: fc:13:7f:4b:79:27:c1:a7:18:91:2f:1e:a7:27:b6:1d:e9:70: 68:73:c5:86:22:04:5e:bb:33:ce:a5:c5:83:c8:8e:7e:04:61: bf:7a:aa:45:43:0f:d3:66:b4:43:57:48:c8:46:a5:63:ea:57: 60:bf:07:35:cd:58:7e:f2:10:2d:9a:55:49:c4:4d:d4:6b:b8: fa:04:57:a3:85:be:56:10:a2:0f:5c:91:2a:7e:18:4b:5e:7c: 9e:6a:6b:40:18:cd:f7:40:91:ee:ce:f2:df:08:29:b9:9c:a9: aa:18:37:54:5e:05:ab:3d:19:ff:48:13:d9:f3:3d:50:38:e3: 8c:d0:63:1b:00:19:55:85:45:cf:89:24:e2:d7:5c:75:f0:7a: a8:75:dd:76:b5:21:99:d9:be:cf:f6:13:1d:fd:7a:92:65:36: 43:58:30:95:36:e4:b5:f9:f5:04:e1:fa:21:45:be:4a:66:cb: e6:33:6c:81:aa:4d:cc:83:1a:41:7b:c6:e1:e8:b5:ab:a4:78: 96:73:57:59:49:9e:c7:13:72:3f:3f:87:5c:95:5e:9f:d6:c6: f2:40:d1:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmMTuuBeaSUzqx7GMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDQxNjE5MDYwMFoXDTI1MDcxNTE5MDYwMFowLzEtMCsGA1UEAxMk MWVkM2U4MDktMzkxOS00OGRlLTljODYtYjMzNmY1MTdhYmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy9FeFVmkyvc4GEciShzHLsHI8y7GwfjVaE2 UbJZaBhfAnuQuSQK4/z1+wnwtVaeTGcVjSTnhJEbiCGO1fRRZthjsAre7B63cmB8 DBHlJmqcBrEguE6eeac5KlBfiUVzjTlZqv7YQ1iscKs3kWfKFehjxji+p17hx6K8 DlBSJW6A7kU+JsJtUdN7ujn7fEkenBkqbAg7m2PUILSDsu7H3Jb21yNBBrOvJ5jI k5WqqkLgWeL3Y6JsTf0sKuysx3ZJzibWeUr05PyInA4rnH4np1s3uI3tqKwi79jB 4G2w4iHQPtex+Pa8lOhlvY+zdyf8aZPjY0zgbdTd05iqd3GQ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPVIrEQ6yOVhtSE34YDMnOor++hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZDE3ZDVhZTgtYmUzNi0z NWFmLWFjNTAtNTU3ZGFhMjUxMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkkMC4/geIbzOf1c2KmnjXkPwiQWo7GUu05CpQQFxf+d/GmCfwTf0t5 J8GnGJEvHqcnth3pcGhzxYYiBF67M86lxYPIjn4EYb96qkVDD9NmtENXSMhGpWPq V2C/BzXNWH7yEC2aVUnETdRruPoEV6OFvlYQog9ckSp+GEtefJ5qa0AYzfdAke7O 8t8IKbmcqaoYN1ReBas9Gf9IE9nzPVA444zQYxsAGVWFRc+JJOLXXHXweqh13Xa1 IZnZvs/2Ex39epJlNkNYMJU25LX59QTh+iFFvkpmy+YzbIGqTcyDGkF7xuHotauk eJZzV1lJnscTcj8/h1yVXp/WxvJA0eU= -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:43 2025 by rpki-client