$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/c031494b-b640-34ed-acb0-5dd20f5c3374.roa File: c031494b-b640-34ed-acb0-5dd20f5c3374.roa (raw, json) Hash identifier: NXg+KpIPKKuONiXwCF8S7/i/mT2Z+dCe6oZX4f5yOh8= Subject key identifier: 61:95:55:8E:2A:13:56:8F:C9:0E:13:DB:FD:E6:59:5F:4B:A9:B5:40 Certificate issuer: /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf Certificate serial: 010D0C9F43285849C20A1B5FC5A901EA580A1100 Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/c031494b-b640-34ed-acb0-5dd20f5c3374.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 397041 IP address blocks: 134.195.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:1b:5f:c5:a9:01:ea:58:0a:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=5a4b7b4d-9c03-4b20-a0ed-d1c617aa68b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a3:6c:f8:50:7e:98:77:e2:62:35:4f:6c:5a: 68:9f:4a:30:22:c2:4e:ac:c7:4d:c3:ae:5c:62:60: ab:b7:04:66:09:03:b2:eb:b8:f3:cd:c8:92:82:8a: 65:69:3c:57:3e:7d:b4:90:54:d1:8e:9c:af:7a:fd: a5:99:3f:aa:a5:f3:8d:49:2d:dd:be:17:b1:29:b0: 03:d4:53:a4:d3:6b:e0:54:0a:2b:90:0f:74:24:7e: b4:e4:91:34:ae:af:cd:eb:a3:07:f4:b9:a6:3d:62: 46:87:1f:7b:0c:3e:90:60:fb:8d:d3:1f:42:d7:e6: a7:8d:4e:17:e3:20:02:3c:39:69:aa:91:b8:29:ce: ee:71:66:d6:10:59:8f:f1:07:ce:d8:0f:3b:30:7b: 98:0b:21:4b:0d:ac:7d:3e:cc:c4:9c:92:e1:b4:f6: 63:3e:02:7e:a1:4a:92:7c:f4:1b:ce:e9:c3:69:23: 21:c1:0f:bf:2e:76:12:87:f5:2f:c9:e5:01:80:de: bf:ce:d7:05:8d:36:67:b4:af:70:84:91:63:f1:d5: 38:87:9b:a8:7b:a9:36:df:b3:12:c4:fd:f2:db:3c: 52:84:a0:4b:03:94:5f:9c:bd:c4:74:6d:64:25:c7: 51:51:9c:56:9b:47:09:a1:a4:df:9b:87:00:b6:72: b3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:95:55:8E:2A:13:56:8F:C9:0E:13:DB:FD:E6:59:5F:4B:A9:B5:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/c031494b-b640-34ed-acb0-5dd20f5c3374.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl X509v3 Authority Key Identifier: keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer sbgp-ipAddrBlock: critical IPv4: 134.195.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:73:9a:83:cd:db:2d:a0:15:d0:96:01:d6:1a:83:ee:68:d1: 71:a3:7c:a8:3e:f8:54:0a:03:22:48:61:96:eb:e1:e4:eb:99: 07:2a:a8:52:11:b7:7d:f7:c4:c8:79:dd:1b:6e:e9:2e:bb:77: ab:24:bf:10:b9:14:39:30:58:1e:80:20:d5:d0:8c:36:44:db: e1:1b:13:18:40:66:20:31:16:04:2e:23:18:61:c1:57:1a:29: d9:72:b6:63:b8:20:9e:c4:d0:df:46:dc:50:67:52:31:2d:a5: f1:53:f2:ea:a5:4b:06:1d:cb:4c:e6:dd:4a:c5:a4:27:65:d8: 6a:a3:15:be:7b:28:81:e0:4a:42:25:0e:f8:7c:2e:81:52:06: 5c:68:b8:c9:0e:88:65:2e:3a:bd:3a:13:ab:e1:b5:88:a3:95: 45:ea:f3:6e:34:e4:9d:d1:d7:6c:64:1f:09:31:e3:c2:e5:0c: 4a:96:cb:6c:85:e9:08:26:07:60:e3:b7:13:7d:64:28:8b:2d: 50:ad:29:2f:98:ee:20:33:10:6b:e5:40:b6:c9:70:18:f2:74: f5:2c:63:1d:2d:c3:21:c7:33:be:09:5d:5b:5d:0b:ec:44:19: 24:d5:72:cb:43:05:01:c2:23:3a:c7:6b:f0:59:c7:ba:b7:b5: 85:99:ce:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCChtfxakB6lgKEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJiNzllYzAtZGMzYi00YWUwLWFjOWEtYmU1ZTQ0MGNm M2JmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NWE0YjdiNGQtOWMwMy00YjIwLWEwZWQtZDFjNjE3YWE2OGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKNs+FB+mHfiYjVPbFpon0owIsJOrMdNw65c YmCrtwRmCQOy67jzzciSgoplaTxXPn20kFTRjpyvev2lmT+qpfONSS3dvhexKbAD 1FOk02vgVAorkA90JH605JE0rq/N66MH9LmmPWJGhx97DD6QYPuN0x9C1+anjU4X 4yACPDlpqpG4Kc7ucWbWEFmP8QfO2A87MHuYCyFLDax9PszEnJLhtPZjPgJ+oUqS fPQbzunDaSMhwQ+/LnYSh/UvyeUBgN6/ztcFjTZntK9whJFj8dU4h5uoe6k237MS xP3y2zxShKBLA5RfnL3EdG1kJcdRUZxWm0cJoaTfm4cAtnKzxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGVVY4qE1aPyQ4T2/3mWV9LqbVAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMmI3 OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVlNDQwY2YzYmYvYzAzMTQ5NGItYjY0MC0z NGVkLWFjYjAtNWRkMjBmNWMzMzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTJiNzllYzAtZGMzYi00YWUwLWFj OWEtYmU1ZTQ0MGNmM2JmLzEyYjc5ZWMwLWRjM2ItNGFlMC1hYzlhLWJlNWU0NDBj ZjNiZi5jcmwwHwYDVR0jBBgwFoAUCSgDghQhqZyoQ+WjADdHhNEkZ1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMmI3OWVjMC1kYzNiLTRhZTAtYWM5YS1iZTVl NDQwY2YzYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsPhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpzmoPN2y2gFdCWAdYag+5o0XGjfKg++FQKAyJIYZbr4eTrmQcqqFIR t333xMh53Rtu6S67d6skvxC5FDkwWB6AINXQjDZE2+EbExhAZiAxFgQuIxhhwVca KdlytmO4IJ7E0N9G3FBnUjEtpfFT8uqlSwYdy0zm3UrFpCdl2GqjFb57KIHgSkIl Dvh8LoFSBlxouMkOiGUuOr06E6vhtYijlUXq82405J3R12xkHwkx48LlDEqWy2yF 6QgmB2DjtxN9ZCiLLVCtKS+Y7iAzEGvlQLbJcBjydPUsYx0twyHHM74JXVtdC+xE GSTVcstDBQHCIzrHa/BZx7q3tYWZzlc= -----END CERTIFICATE-----Generated at Sun May 11 09:05:14 2025 by rpki-client