$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa File: 4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa (raw, json) Hash identifier: KWA6YjivlhG7+0l5kGGpqJPj9qQJKjlcrmBQV8MZPfo= Subject key identifier: 5C:B3:3B:3C:09:2F:C9:54:61:48:8D:6C:C5:5A:F8:6A:E5:98:8D:A0 Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F43285848F65BED2B70F7F1A037D5AE00 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 399381 IP address blocks: 131.201.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ed:2b:70:f7:f1:a0:37:d5:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=c9f8352e-9ecd-4eef-a466-b3355635b3c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a4:f0:73:5f:b6:0d:dc:34:ff:25:1e:12:99: 21:df:ff:b8:2e:42:b2:94:90:30:56:f5:2b:53:d5: 20:71:50:86:aa:a8:5d:f7:bc:90:1e:43:de:89:78: 63:26:2a:16:15:77:f7:51:ce:eb:d8:58:49:6e:4b: 72:d1:22:db:75:7c:18:fa:35:e8:60:64:1e:f7:c1: 65:d8:3e:cd:3a:ac:72:3e:be:18:a2:c8:6d:9c:88: f7:b7:06:17:7b:9b:c0:1a:3e:59:9e:b5:09:ea:ee: 49:d0:be:69:67:bc:47:5f:14:45:1e:57:74:f0:0c: 34:12:df:dd:0a:79:3f:06:85:59:2d:ba:69:d8:e2: 31:38:c6:f5:d3:b0:8b:6f:0c:8b:f5:9d:ad:d1:6b: d8:d5:a6:0a:d7:dc:5c:f1:d9:b7:0d:08:ae:8d:d7: f9:10:8c:a8:6d:ce:9e:16:d6:db:17:1b:b3:03:c7: 56:8c:f4:d2:9c:b7:92:fc:8c:87:cc:5d:5b:76:8c: 3d:1d:44:30:91:2e:50:0b:6c:78:26:2a:1f:92:ee: e2:81:16:6a:f5:e9:e8:56:20:6a:bc:e5:d6:8a:9f: ce:66:d4:d5:91:5f:f1:42:ef:ea:55:a6:b1:49:97: 3a:d2:73:cc:44:44:e5:91:16:9f:2b:eb:dd:06:a0: ad:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B3:3B:3C:09:2F:C9:54:61:48:8D:6C:C5:5A:F8:6A:E5:98:8D:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:09:54:35:57:2a:26:53:c4:1e:4d:f8:43:30:3c:ed:5a:6f: 42:fd:aa:5d:d4:87:f7:8f:c3:9b:e3:15:51:94:7b:53:5c:97: 4b:52:c8:26:a9:27:ba:6f:dc:85:45:60:7c:d9:a9:06:9c:4f: 66:71:1a:ff:e7:91:6c:64:4b:c5:ce:1e:a0:67:c0:19:72:cb: b7:d9:c0:71:f5:be:47:a9:26:69:4a:16:fd:de:b9:b2:80:0a: 70:e8:53:53:ae:0f:d0:47:d4:7b:ed:9b:f3:33:1c:68:ee:30: ce:f0:ef:fe:23:53:6f:fd:0a:90:3d:1c:48:bf:d8:d3:99:92: c9:c7:01:e4:bd:46:1e:2a:d9:5b:e6:f5:b4:58:83:dd:63:e0: 9c:b2:e7:ed:6f:6d:68:be:9f:db:a2:fa:4b:43:0a:3e:01:b0: 1b:4e:11:c5:8d:78:e0:92:1c:23:93:ea:d9:9a:8f:f1:12:97: f7:b8:2a:1e:09:17:dc:0a:40:23:48:c4:40:eb:88:c2:ef:93: e8:f6:72:c0:4a:c2:4e:9e:8c:a6:8a:fc:dc:a9:85:84:cd:e7: eb:4b:f9:c6:a4:de:da:3d:a5:ab:9f:f8:1c:8c:1e:f0:55:88: a6:ba:ef:cf:aa:21:d7:d8:0a:65:8c:04:2a:74:2e:bb:8e:72: 94:98:3c:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+0rcPfxoDfVrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk YzlmODM1MmUtOWVjZC00ZWVmLWE0NjYtYjMzNTU2MzViM2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Twc1+2Ddw0/yUeEpkh3/+4LkKylJAwVvUr U9UgcVCGqqhd97yQHkPeiXhjJioWFXf3Uc7r2FhJbkty0SLbdXwY+jXoYGQe98Fl 2D7NOqxyPr4YoshtnIj3twYXe5vAGj5ZnrUJ6u5J0L5pZ7xHXxRFHld08Aw0Et/d Cnk/BoVZLbpp2OIxOMb107CLbwyL9Z2t0WvY1aYK19xc8dm3DQiujdf5EIyobc6e FtbbFxuzA8dWjPTSnLeS/IyHzF1bdow9HUQwkS5QC2x4Jiofku7igRZq9enoViBq vOXWip/OZtTVkV/xQu/qVaaxSZc60nPMRETlkRafK+vdBqCtYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyzOzwJL8lUYUiNbMVa+GrlmI2gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvNGQ2MWY1ZDEtY2UzZi0z NzNkLWExNzYtMTJlOGNlZDE4NmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8kBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkJVDVXKiZTxB5N+EMwPO1ab0L9ql3Uh/ePw5vjFVGUe1Ncl0tSyCap J7pv3IVFYHzZqQacT2ZxGv/nkWxkS8XOHqBnwBlyy7fZwHH1vkepJmlKFv3eubKA CnDoU1OuD9BH1Hvtm/MzHGjuMM7w7/4jU2/9CpA9HEi/2NOZksnHAeS9Rh4q2Vvm 9bRYg91j4Jyy5+1vbWi+n9ui+ktDCj4BsBtOEcWNeOCSHCOT6tmaj/ESl/e4Kh4J F9wKQCNIxEDriMLvk+j2csBKwk6ejKaK/NyphYTN5+tL+cak3to9pauf+ByMHvBV iKa678+qIdfYCmWMBCp0LruOcpSYPAA= -----END CERTIFICATE-----Generated at Sat May 10 12:37:27 2025 by rpki-client