$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2e020565-2650-3731-84b4-b30e83f1cb6a.roa File: 2e020565-2650-3731-84b4-b30e83f1cb6a.roa (raw, json) Hash identifier: +w2CmkWeJVlO9q2jbdCAW//eQ5hWuNsh95RAWvdMKgk= Subject key identifier: D9:D2:38:24:E2:5E:2C:98:B8:A5:9F:76:A4:B6:EA:99:50:2D:CE:4D Certificate issuer: /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Certificate serial: 010D0C9F43285849E4EFC1242BEDB2A9FB0E6380 Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2e020565-2650-3731-84b4-b30e83f1cb6a.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 32145 IP address blocks: 131.109.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:c1:24:2b:ed:b2:a9:fb:0e:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=55d4c8c7-8969-4cf3-9b1a-bf8135bb8abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1a:98:06:ab:93:5a:59:e7:7f:ba:9f:b8:1d: 70:00:ed:cd:94:83:02:46:6b:fb:66:10:01:87:01: 1b:ab:87:aa:99:38:00:cb:72:c2:2e:f0:76:61:2d: 5d:a5:2c:60:54:35:ab:4f:e1:65:1b:3e:8a:5b:5a: 65:6b:4a:aa:06:b8:7b:3f:1c:1f:f4:93:11:54:d9: f0:9b:17:b5:2c:b0:44:9e:38:a3:eb:01:4b:29:26: 53:84:28:86:d6:0e:73:bc:fe:a2:07:e7:17:8c:07: 43:d9:ce:a7:9a:f4:45:ec:75:80:15:59:b6:38:3c: f7:49:d8:58:2e:af:5c:cf:6f:59:c2:09:88:7f:ad: 20:ae:57:6b:b2:34:07:d3:b1:b4:58:b3:7f:70:21: 8e:b7:b3:51:af:db:d8:5b:39:62:86:87:7b:47:5f: 31:b5:3d:b3:b2:e9:75:cc:d1:cc:8f:5c:63:2c:3d: 68:d7:ba:0f:d7:e4:29:3c:d3:33:1f:b9:c9:b8:96: 22:1b:4f:2a:22:12:72:59:f6:b8:d1:74:74:68:a2: 23:55:db:85:86:b9:e9:83:0d:d7:58:4e:12:48:e5: 2d:5d:a8:d9:3a:7e:ec:f1:ac:69:03:21:d8:91:67: c8:c7:c4:a5:89:ad:83:5c:f2:b1:68:db:bb:0f:56: f0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D2:38:24:E2:5E:2C:98:B8:A5:9F:76:A4:B6:EA:99:50:2D:CE:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2e020565-2650-3731-84b4-b30e83f1cb6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl X509v3 Authority Key Identifier: keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer sbgp-ipAddrBlock: critical IPv4: 131.109.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:51:49:46:83:d2:35:85:19:83:5f:ef:33:1b:31:f2:5a:a4: 74:bb:37:df:3e:9c:ef:70:b4:76:66:27:c0:2d:8d:88:35:03: 6e:0e:3d:ef:83:ca:01:de:4f:36:02:99:7e:73:88:d0:1a:2f: 29:cd:64:a8:bf:c5:a2:47:62:bc:5e:02:36:de:3f:4a:a6:94: ff:36:7a:59:19:23:bd:6f:b7:54:65:2d:45:1a:a8:7d:16:cd: d1:19:26:5f:11:f0:a9:37:ff:8e:dd:f0:5b:08:15:31:e3:15: 7f:76:c8:63:5d:cd:93:84:84:b8:1f:ed:ae:f1:4d:e1:a6:2e: bd:b6:bf:44:d9:d1:d6:ed:44:87:d6:da:c3:02:30:9b:4f:fc: 82:8f:0f:9b:b9:19:06:c8:1f:c3:fa:44:ba:b5:11:50:f3:d4: 4e:9e:63:5a:b1:6f:d8:64:24:03:9c:70:60:c7:54:9a:9f:cc: c7:16:30:87:89:18:90:14:42:81:22:56:a1:58:d6:e2:ed:70: af:33:d6:58:bb:2f:9e:2f:a5:80:91:aa:87:ec:2a:3d:db:3f: 98:8b:dc:47:ba:64:2a:30:55:c2:96:a5:db:47:7b:9b:75:4e: 1e:9d:57:29:52:09:58:d0:00:01:1c:fe:62:4e:42:e0:45:1a: b2:5c:2a:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78EkK+2yqfsOY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNlMDk2NzMtNWM2ZS00MzQwLWFkMTEtNGRhOGRmYjhj Nzc3MB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk NTVkNGM4YzctODk2OS00Y2YzLTliMWEtYmY4MTM1YmI4YWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBqYBquTWlnnf7qfuB1wAO3NlIMCRmv7ZhAB hwEbq4eqmTgAy3LCLvB2YS1dpSxgVDWrT+FlGz6KW1pla0qqBrh7Pxwf9JMRVNnw mxe1LLBEnjij6wFLKSZThCiG1g5zvP6iB+cXjAdD2c6nmvRF7HWAFVm2ODz3SdhY Lq9cz29ZwgmIf60grldrsjQH07G0WLN/cCGOt7NRr9vYWzlihod7R18xtT2zsul1 zNHMj1xjLD1o17oP1+QpPNMzH7nJuJYiG08qIhJyWfa40XR0aKIjVduFhrnpgw3X WE4SSOUtXajZOn7s8axpAyHYkWfIx8Slia2DXPKxaNu7D1bwcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnSOCTiXiyYuKWfdqS26plQLc5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mM2Uw OTY3My01YzZlLTQzNDAtYWQxMS00ZGE4ZGZiOGM3NzcvMmUwMjA1NjUtMjY1MC0z NzMxLTg0YjQtYjMwZTgzZjFjYjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjNlMDk2NzMtNWM2ZS00MzQwLWFk MTEtNGRhOGRmYjhjNzc3L2YzZTA5NjczLTVjNmUtNDM0MC1hZDExLTRkYThkZmI4 Yzc3Ny5jcmwwHwYDVR0jBBgwFoAUaz+txng1ZU8YT7uqjnskCN4y2rswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mM2UwOTY3My01YzZlLTQzNDAtYWQxMS00ZGE4 ZGZiOGM3NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg22AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBRSUaD0jWFGYNf7zMbMfJapHS7N98+nO9wtHZmJ8AtjYg1A24OPe+D ygHeTzYCmX5ziNAaLynNZKi/xaJHYrxeAjbeP0qmlP82elkZI71vt1RlLUUaqH0W zdEZJl8R8Kk3/47d8FsIFTHjFX92yGNdzZOEhLgf7a7xTeGmLr22v0TZ0dbtRIfW 2sMCMJtP/IKPD5u5GQbIH8P6RLq1EVDz1E6eY1qxb9hkJAOccGDHVJqfzMcWMIeJ GJAUQoEiVqFY1uLtcK8z1li7L54vpYCRqofsKj3bP5iL3Ee6ZCowVcKWpdtHe5t1 Th6dVylSCVjQAAEc/mJOQuBFGrJcKu0= -----END CERTIFICATE-----Generated at Sun Jun 15 22:02:04 2025 by rpki-client