$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/71c737cf-e37e-3b72-88ca-56c9984a18b8.roa File: 71c737cf-e37e-3b72-88ca-56c9984a18b8.roa (raw, json) Hash identifier: tEopR5uAbE7lHPXRqUQkCmOaTt1ZCGu+r0uZgYrVoP0= Subject key identifier: 10:CE:6E:7B:AA:E1:00:57:98:16:0A:CA:D5:1D:13:55:9A:C3:E7:74 Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F43285849203C15045D2F65FB2D5A9F40 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/71c737cf-e37e-3b72-88ca-56c9984a18b8.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 399381 IP address blocks: 131.201.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:15:04:5d:2f:65:fb:2d:5a:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=46f5e84b-1f0d-463b-b51a-200ba6a2e489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:60:99:9b:67:e9:e4:88:8e:68:b9:47:5f:c7: 2e:63:46:a6:d2:d9:ce:81:88:31:c6:c6:29:78:b0: 26:26:60:25:67:9c:87:a1:7f:d0:58:22:8b:37:c5: f6:3f:06:8d:5d:b7:c8:4b:d3:42:8e:82:ec:73:23: 24:6e:3f:56:19:26:57:e5:ad:8c:0a:73:4d:89:f4: 09:20:b9:1b:38:b5:46:67:b5:97:f6:f5:5a:a6:d8: 25:9c:f9:db:ad:d3:1f:24:6b:f0:a7:99:c3:54:c0: 68:35:68:d8:9b:ea:54:f8:9f:40:86:dc:26:9b:b6: b3:81:fe:5c:7a:54:b5:81:54:73:f1:10:71:21:72: 0a:d2:51:20:e4:65:e0:4a:1b:3e:07:2d:5c:7e:d9: 7f:0b:1c:73:4a:b2:90:85:51:34:d9:8b:0a:11:8b: f8:b0:ba:2c:d2:c5:02:70:54:8c:68:76:6f:47:7a: 25:f6:bc:84:34:14:44:a2:3e:a5:a9:d5:b2:87:7f: d6:a2:04:42:21:63:98:ef:a7:28:2a:c4:b1:41:b5: d3:6c:22:bc:43:55:80:85:8f:0f:7c:af:0e:cb:74: c5:e9:65:08:dd:61:85:07:51:d1:09:a9:c0:18:5e: 94:72:b9:d2:c0:f7:53:16:18:29:e9:14:35:c1:94: e9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CE:6E:7B:AA:E1:00:57:98:16:0A:CA:D5:1D:13:55:9A:C3:E7:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/71c737cf-e37e-3b72-88ca-56c9984a18b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ff:8b:54:10:23:23:42:7a:f2:25:e6:52:ef:36:67:4f:fe: 4f:1c:3b:4a:b3:b3:44:15:9c:e0:63:a2:98:00:7e:60:6f:4b: ae:64:a6:8b:2b:cd:86:97:60:19:7e:53:62:46:8c:ca:84:64: 0c:b6:3f:92:22:5c:02:86:73:49:ba:c5:dc:51:0b:93:85:09: 2d:d5:e2:01:4e:37:6e:62:bf:8d:c6:76:ef:42:3a:fe:1f:67: 74:2a:30:0a:f3:43:16:66:6f:e6:62:ac:36:50:4c:01:b9:01: 7c:b2:ac:38:d7:66:c7:3c:60:cb:e3:26:46:58:5f:be:c9:b4: bb:a2:ad:11:00:88:e6:a8:f7:7e:19:56:c1:28:70:2a:c3:05: 40:95:32:13:a3:cf:b4:0d:34:20:bc:51:98:7d:38:47:80:3c: 17:26:22:f4:d1:aa:a8:03:5b:ae:9a:c3:33:de:5c:13:c6:47: 83:82:4d:68:4e:c8:09:9b:b8:a3:a3:65:51:e3:73:43:4c:ef: 91:a9:16:00:72:21:5a:94:e4:9b:0f:ca:ee:ba:c2:94:21:ca: fa:63:58:08:a5:91:6a:34:89:0a:3f:91:4a:ea:c1:85:fd:85: c9:ce:b1:ff:92:3e:a2:35:a8:3e:02:1d:17:d3:fd:7d:84:79: 01:ec:a0:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPBUEXS9l+y1an0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk NDZmNWU4NGItMWYwZC00NjNiLWI1MWEtMjAwYmE2YTJlNDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGCZm2fp5IiOaLlHX8cuY0am0tnOgYgxxsYp eLAmJmAlZ5yHoX/QWCKLN8X2PwaNXbfIS9NCjoLscyMkbj9WGSZX5a2MCnNNifQJ ILkbOLVGZ7WX9vVaptglnPnbrdMfJGvwp5nDVMBoNWjYm+pU+J9Ahtwmm7azgf5c elS1gVRz8RBxIXIK0lEg5GXgShs+By1cftl/CxxzSrKQhVE02YsKEYv4sLos0sUC cFSMaHZvR3ol9ryENBREoj6lqdWyh3/WogRCIWOY76coKsSxQbXTbCK8Q1WAhY8P fK8Oy3TF6WUI3WGFB1HRCanAGF6UcrnSwPdTFhgp6RQ1wZTpVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDObnuq4QBXmBYKytUdE1Waw+d0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvNzFjNzM3Y2YtZTM3ZS0z YjcyLTg4Y2EtNTZjOTk4NGExOGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8kNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL/i1QQIyNCevIl5lLvNmdP/k8cO0qzs0QVnOBjopgAfmBvS65kposr zYaXYBl+U2JGjMqEZAy2P5IiXAKGc0m6xdxRC5OFCS3V4gFON25iv43Gdu9COv4f Z3QqMArzQxZmb+ZirDZQTAG5AXyyrDjXZsc8YMvjJkZYX77JtLuirREAiOao934Z VsEocCrDBUCVMhOjz7QNNCC8UZh9OEeAPBcmIvTRqqgDW66awzPeXBPGR4OCTWhO yAmbuKOjZVHjc0NM75GpFgByIVqU5JsPyu66wpQhyvpjWAilkWo0iQo/kUrqwYX9 hcnOsf+SPqI1qD4CHRfT/X2EeQHsoC4= -----END CERTIFICATE-----Generated at Sat May 10 14:39:08 2025 by rpki-client