$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/5f16356a-9348-336f-aee4-e4ace7aff025.roa File: 5f16356a-9348-336f-aee4-e4ace7aff025.roa (raw, json) Hash identifier: afU/Awey0x5UR94WZxT61a6rM5DciLKemdcbjChEgOM= Subject key identifier: 1A:09:8C:57:75:45:32:22:72:C2:76:87:5C:97:FF:A7:60:60:EB:47 Certificate issuer: /CN=7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92 Certificate serial: 010D0C9F43285849B6DF5A1B6A1C102DBCA7AA00 Authority key identifier: D9:88:ED:AC:D6:31:9A:84:0D:9A:49:23:C1:1F:E9:03:57:46:2A:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/5f16356a-9348-336f-aee4-e4ace7aff025.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 3851 IP address blocks: 131.216.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:5a:1b:6a:1c:10:2d:bc:a7:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=da189b0b-1cc9-4624-ae34-665488f33767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:46:db:a3:fb:a0:fa:4e:ad:58:fb:b1:b4:ea: e1:6b:84:6d:9a:cf:92:81:5d:90:88:db:9c:50:d3: 7c:97:c4:ce:59:05:fc:28:b6:ab:08:fb:ec:a4:af: 45:cc:7f:0e:10:3d:b6:d2:6b:d4:55:6a:dc:75:12: d8:86:e9:7c:7f:d9:58:6d:13:f4:29:e1:2e:a1:54: 3e:35:4a:02:fc:83:a3:5c:3b:ad:2a:33:6f:8f:96: f2:79:ee:22:0b:33:8e:2a:64:2a:d2:f4:20:e3:7c: cd:58:13:65:12:cb:eb:98:a7:69:a0:81:71:a8:f1: 76:d2:d1:f5:40:30:7b:28:6e:aa:3e:39:89:8b:13: b7:d9:c2:b0:60:ab:b0:dc:54:8b:74:6c:e6:76:20: aa:6c:3a:2f:4b:2a:e8:89:a4:be:c8:52:2c:81:19: 1d:d1:d6:1c:f0:22:16:ec:ff:17:e8:e0:a6:0c:38: 5e:ac:00:ad:c3:5e:7c:bc:69:b8:08:b5:59:e7:2f: 9e:71:fa:7f:1f:67:21:ce:d0:21:8a:00:ba:3f:48: 1e:84:35:a1:aa:c4:a8:8d:e4:89:a0:f5:fc:26:58: 66:97:42:8f:46:12:c1:73:fb:0d:bb:65:f6:78:84: 5c:9e:8d:f5:bc:93:3a:e5:c1:23:74:85:8c:ab:35: 90:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:09:8C:57:75:45:32:22:72:C2:76:87:5C:97:FF:A7:60:60:EB:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/5f16356a-9348-336f-aee4-e4ace7aff025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.crl X509v3 Authority Key Identifier: keyid:D9:88:ED:AC:D6:31:9A:84:0D:9A:49:23:C1:1F:E9:03:57:46:2A:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer sbgp-ipAddrBlock: critical IPv4: 131.216.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:bb:fc:9b:5e:1e:7b:91:a1:06:7b:68:c0:ce:4c:4b:b3:73: d3:bc:35:e0:9e:94:9d:cb:33:14:42:09:b8:b3:e0:53:0d:1b: 0b:db:fa:15:42:a0:2e:44:0b:cc:8e:32:c0:c5:a3:bd:33:aa: f5:68:98:2a:5e:41:b2:4a:05:7c:66:f0:f9:62:25:08:00:1f: 32:e6:1d:52:16:f6:ff:fe:7c:53:dc:d8:dd:19:6e:24:77:1f: 1a:ea:ad:d2:12:35:80:18:aa:5c:e1:b4:4a:fe:2e:a3:97:22: 73:cf:d9:04:da:dd:6c:44:7c:8d:cf:86:88:cd:7d:5d:67:70: 86:af:6d:3a:c6:61:3e:f0:92:9e:51:cf:13:5b:e1:c6:6f:e5: 3e:e5:63:5a:43:9a:83:d1:5d:e2:8b:f5:e7:c4:4f:c6:51:3e: 86:ad:22:ff:ee:d3:b9:d4:c1:49:74:9e:8d:a9:6c:65:67:5c: 44:6d:89:ff:82:c2:b6:a7:25:fc:2f:51:84:f6:0e:88:06:43: fe:53:7b:9f:f8:70:2d:8a:85:0a:c0:2a:83:49:89:86:d3:5c: 0d:d7:59:af:4e:92:d1:0a:1a:d4:ac:78:83:5f:31:cf:a1:ff: d5:f8:a8:6c:54:cf:43:69:6c:0c:99:74:93:9a:71:30:d8:0d: cb:3b:0c:d0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEm231obahwQLbynqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzN2Q1YmItYmQyNi00NjY2LWI5ZDYtYWMyZTBjZGZk ZDkyMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk ZGExODliMGItMWNjOS00NjI0LWFlMzQtNjY1NDg4ZjMzNzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUbbo/ug+k6tWPuxtOrha4Rtms+SgV2QiNuc UNN8l8TOWQX8KLarCPvspK9FzH8OED220mvUVWrcdRLYhul8f9lYbRP0KeEuoVQ+ NUoC/IOjXDutKjNvj5byee4iCzOOKmQq0vQg43zNWBNlEsvrmKdpoIFxqPF20tH1 QDB7KG6qPjmJixO32cKwYKuw3FSLdGzmdiCqbDovSyroiaS+yFIsgRkd0dYc8CIW 7P8X6OCmDDherACtw158vGm4CLVZ5y+ecfp/H2chztAhigC6P0gehDWhqsSojeSJ oPX8Jlhml0KPRhLBc/sNu2X2eIRcno31vJM65cEjdIWMqzWQBQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBoJjFd1RTIicsJ2h1yX/6dgYOtHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83NDM3 ZDViYi1iZDI2LTQ2NjYtYjlkNi1hYzJlMGNkZmRkOTIvNWYxNjM1NmEtOTM0OC0z MzZmLWFlZTQtZTRhY2U3YWZmMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzQzN2Q1YmItYmQyNi00NjY2LWI5 ZDYtYWMyZTBjZGZkZDkyLzc0MzdkNWJiLWJkMjYtNDY2Ni1iOWQ2LWFjMmUwY2Rm ZGQ5Mi5jcmwwHwYDVR0jBBgwFoAU2YjtrNYxmoQNmkkjwR/pA1dGKhIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83NDM3ZDViYi1iZDI2LTQ2NjYtYjlkNi1hYzJl MGNkZmRkOTIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg9gwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAjLv8m14ee5GhBntowM5MS7Nz07w14J6UncszFEIJuLPgUw0bC9v6FUKg LkQLzI4ywMWjvTOq9WiYKl5BskoFfGbw+WIlCAAfMuYdUhb2//58U9zY3RluJHcf Guqt0hI1gBiqXOG0Sv4uo5cic8/ZBNrdbER8jc+GiM19XWdwhq9tOsZhPvCSnlHP E1vhxm/lPuVjWkOag9Fd4ov158RPxlE+hq0i/+7TudTBSXSejalsZWdcRG2J/4LC tqcl/C9RhPYOiAZD/lN7n/hwLYqFCsAqg0mJhtNcDddZr06S0Qoa1Kx4g18xz6H/ 1fiobFTPQ2lsDJl0k5pxMNgNyzsM0A== -----END CERTIFICATE-----Generated at Sat May 10 22:12:53 2025 by rpki-client