$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e528276f-2a51-359b-9930-15059a3eeb28.roa File: e528276f-2a51-359b-9930-15059a3eeb28.roa (raw, json) Hash identifier: mYhBvmRWB5ht0NUPxO61MI3rUeATgP2A5kNB66DJH6E= Subject key identifier: 91:91:68:30:F0:88:8B:F4:CB:A2:E0:35:E8:3B:F6:04:03:64:66:4D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F43285849A784C0FC2227388627F7F640 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e528276f-2a51-359b-9930-15059a3eeb28.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 8075 IP address blocks: 131.145.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c0:fc:22:27:38:86:27:f7:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=c07a526d-903b-4c44-b7e4-0f4ce08399f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e2:bd:d2:46:66:24:fb:b2:f1:f2:ac:b7:8f: 21:13:a5:e4:b4:0d:31:b0:5f:39:4e:2d:ea:64:e2: 49:60:5b:26:79:b6:72:50:8c:20:d5:40:ed:73:54: 94:62:72:f3:6f:ab:3a:58:e7:d5:a5:a3:e8:2b:1f: bf:f0:16:26:a3:ac:53:47:26:2f:fb:87:aa:65:4c: ec:b2:2b:c3:03:5b:b1:26:bb:d8:1b:4a:2a:e8:89: 10:2a:1c:26:46:f4:39:6a:e5:05:90:43:3d:16:fb: a4:a7:13:e2:14:4d:c4:f6:bb:f8:47:36:64:02:31: 12:55:01:04:07:0e:c8:87:dd:d9:3c:4e:9d:cc:98: aa:2e:28:a4:13:3a:1b:c7:e6:53:d1:40:13:7a:91: ca:f9:a7:07:86:a1:f7:6b:bc:b9:7b:5b:29:80:dd: 91:2c:36:b4:d3:5c:7a:b5:60:29:31:08:16:7c:12: 85:04:dd:8c:7d:75:ba:f9:84:ee:eb:58:9c:6b:54: bf:17:a7:46:ee:36:ba:aa:d1:55:a0:22:6d:be:84: 2d:28:4d:9d:3c:f1:56:19:9b:6b:08:db:88:37:d6: e7:5e:59:2a:d7:3a:ca:f2:a3:1c:4d:d0:c6:0f:c0: 18:7e:fb:f7:3e:c1:5d:8d:8a:9a:54:84:09:79:06: 1c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:91:68:30:F0:88:8B:F4:CB:A2:E0:35:E8:3B:F6:04:03:64:66:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e528276f-2a51-359b-9930-15059a3eeb28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 131.145.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d7:8d:03:70:27:f1:4e:4e:5e:cb:37:10:83:4b:0f:17:27: b6:59:60:3a:d9:72:d9:4f:ab:44:68:1c:e6:ce:de:ec:53:a2: c8:6b:f1:b4:56:07:c2:6d:2b:eb:6a:17:00:c8:c8:f0:ef:6a: 48:0b:41:1e:a0:b9:6e:04:0f:f4:eb:32:84:eb:8d:7d:ac:1c: f1:15:48:54:52:fb:66:8d:fb:18:eb:38:7e:73:a0:54:20:a8: 5a:7d:99:a5:e8:59:85:38:41:95:6d:7d:cd:41:43:b0:71:c5: 0b:3d:1a:cb:e4:a0:10:2a:d5:66:20:db:be:5f:44:93:f8:5c: f9:86:96:13:de:5d:7b:ca:df:d4:51:e8:34:e1:e5:27:28:a4: cc:45:ce:07:2d:9c:b7:dd:d9:9c:dd:b8:16:94:5e:78:ab:ee: cf:c9:31:88:00:8d:d8:d4:30:92:29:0a:1a:84:b1:27:2b:cb: 8b:ea:1d:af:e2:70:ea:40:d5:5f:aa:1e:78:3b:8d:18:11:e9: e8:35:58:a3:77:21:8f:f4:8f:75:60:31:bf:86:42:fd:f6:86: 76:64:5b:77:a4:f4:8c:67:86:66:27:3b:4f:3e:be:b4:99:0c: 38:42:e9:3a:59:79:1d:98:92:13:95:5a:de:ea:1b:37:11:b7: d8:02:9d:b5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmnhMD8Iic4hif39kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk YzA3YTUyNmQtOTAzYi00YzQ0LWI3ZTQtMGY0Y2UwODM5OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+K90kZmJPuy8fKst48hE6XktA0xsF85Ti3q ZOJJYFsmebZyUIwg1UDtc1SUYnLzb6s6WOfVpaPoKx+/8BYmo6xTRyYv+4eqZUzs sivDA1uxJrvYG0oq6IkQKhwmRvQ5auUFkEM9FvukpxPiFE3E9rv4RzZkAjESVQEE Bw7Ih93ZPE6dzJiqLiikEzobx+ZT0UATepHK+acHhqH3a7y5e1spgN2RLDa001x6 tWApMQgWfBKFBN2MfXW6+YTu61ica1S/F6dG7ja6qtFVoCJtvoQtKE2dPPFWGZtr CNuIN9bnXlkq1zrK8qMcTdDGD8AYfvv3PsFdjYqaVIQJeQYciQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJGRaDDwiIv0y6LgNeg79gQDZGZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTUyODI3NmYtMmE1MS0z NTliLTk5MzAtMTUwNTlhM2VlYjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg5EwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACNeNA3An8U5OXss3EINLDxcntllgOtly2U+rRGgc5s7e7FOiyGvxtFYH wm0r62oXAMjI8O9qSAtBHqC5bgQP9OsyhOuNfawc8RVIVFL7Zo37GOs4fnOgVCCo Wn2ZpehZhThBlW19zUFDsHHFCz0ay+SgECrVZiDbvl9Ek/hc+YaWE95de8rf1FHo NOHlJyikzEXOBy2ct93ZnN24FpReeKvuz8kxiACN2NQwkikKGoSxJyvLi+odr+Jw 6kDVX6oeeDuNGBHp6DVYo3chj/SPdWAxv4ZC/faGdmRbd6T0jGeGZic7Tz6+tJkM OELpOll5HZiSE5Va3uobNxG32AKdtQ== -----END CERTIFICATE-----Generated at Sun Apr 27 10:36:20 2025 by rpki-client