$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/28c78caa-80fe-3ef8-8c9b-c98d713ead13.roa File: 28c78caa-80fe-3ef8-8c9b-c98d713ead13.roa (raw, json) Hash identifier: pgBrSNX3kbjag8lDjx8RWnz/C61hQfXDHVXQoQLWUKE= Subject key identifier: 1E:2A:A9:CE:CC:E0:FE:7B:E0:64:70:05:72:B5:50:10:48:0D:EE:3F Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F43285849C38725E5156F4116A9DA6500 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/28c78caa-80fe-3ef8-8c9b-c98d713ead13.roa Signing time: Tue 06 May 2025 13:48:46 +0000 ROA not before: Tue 06 May 2025 13:48:46 +0000 ROA not after: Mon 04 Aug 2025 13:48:46 +0000 asID: 16509 IP address blocks: 131.229.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:87:25:e5:15:6f:41:16:a9:da:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: May 6 13:48:46 2025 GMT Not After : Aug 4 13:48:46 2025 GMT Subject: CN=3454e42b-122d-49c4-9254-63fcf48e7994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:55:b2:f1:06:90:6c:33:f3:e8:55:45:dd:6f: ad:96:b9:4c:d1:94:64:a5:84:a8:50:85:9a:1e:36: d5:70:3d:34:43:6b:bc:8b:d4:3c:2a:be:92:3d:11: f2:27:54:01:d0:e1:15:8e:db:27:1e:dc:cb:c8:c1: 8e:0a:d5:e0:51:17:08:b4:2e:10:f5:b7:37:50:8e: cd:6b:e2:91:ab:83:78:53:ba:a8:0e:a6:4f:ef:94: 66:de:24:fc:04:e2:e8:96:fe:a9:b3:24:93:04:d1: cc:20:98:ef:ed:63:1a:a6:5a:4a:7d:67:18:9f:45: 2d:55:e2:c1:1a:5d:d2:e7:33:0f:ad:f1:4e:07:86: d9:45:e9:6f:51:e5:ef:b9:69:55:93:3f:21:8d:2a: 4b:71:49:b9:99:e9:ec:58:80:d2:a6:ee:29:51:27: 38:d3:57:e5:19:f4:b0:43:c1:77:3e:4f:d4:3e:e9: 53:74:a4:9a:eb:df:eb:6d:38:98:d9:ce:95:dc:e4: f9:5b:fa:0a:46:13:fc:3f:f3:c1:fa:95:dc:2c:3c: 8c:6d:d4:30:42:d2:f9:1f:0a:34:ec:84:6d:b7:7c: 8c:e6:82:f7:bc:c0:93:b7:ee:a9:6c:a6:3f:45:d7: 62:a6:b5:de:39:09:c5:a9:84:f5:bd:81:1d:72:28: 76:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:2A:A9:CE:CC:E0:FE:7B:E0:64:70:05:72:B5:50:10:48:0D:EE:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/28c78caa-80fe-3ef8-8c9b-c98d713ead13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d2:7c:21:d2:e7:2a:71:36:3e:c1:fb:ab:c4:53:da:e3:1f: 33:6f:2d:07:40:f0:89:53:e3:8b:bd:47:fc:dd:30:cd:80:a7: 1c:cf:15:15:d2:d0:f9:67:9e:83:8f:cc:50:4d:6c:40:82:a7: 2e:e7:ae:de:c6:f2:de:c5:3c:71:5a:cc:47:0a:c3:b6:96:74: 63:b9:00:d1:6d:c0:5e:eb:96:be:cd:b0:44:a4:3c:a1:73:82: 33:7a:c8:f9:4a:12:b2:90:fa:fa:1d:64:94:e5:b6:46:31:57: e9:c2:8a:93:4d:81:5d:07:40:4f:e0:de:61:61:02:16:ce:e6: 05:1a:17:1b:b4:ba:4f:b9:5b:e7:5e:50:06:24:c7:5f:08:32: 9d:c1:db:f1:65:d8:b8:4d:e7:2a:b4:9b:7e:9d:6a:3f:1e:2c: 05:5f:90:41:c7:f3:0b:36:fc:32:bd:b7:7c:bd:b4:14:91:53: 19:40:85:b8:e0:f4:25:27:c0:a6:27:34:ad:e1:0a:81:11:ea: 18:f7:1d:56:6b:88:79:f6:67:48:70:32:b7:56:4d:41:b5:e0: e9:a3:5a:f8:af:91:89:7c:1d:58:5b:8f:77:7c:77:61:60:54: 53:1b:2b:e1:a0:e9:7e:04:98:e3:32:ec:2d:bd:b1:ac:8e:a5: 0c:92:cb:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnDhyXlFW9BFqnaZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDUwNjEzNDg0NloXDTI1MDgwNDEzNDg0NlowLzEtMCsGA1UEAxMk MzQ1NGU0MmItMTIyZC00OWM0LTkyNTQtNjNmY2Y0OGU3OTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVWy8QaQbDPz6FVF3W+tlrlM0ZRkpYSoUIWa HjbVcD00Q2u8i9Q8Kr6SPRHyJ1QB0OEVjtsnHtzLyMGOCtXgURcItC4Q9bc3UI7N a+KRq4N4U7qoDqZP75Rm3iT8BOLolv6psySTBNHMIJjv7WMaplpKfWcYn0UtVeLB Gl3S5zMPrfFOB4bZRelvUeXvuWlVkz8hjSpLcUm5mensWIDSpu4pUSc401flGfSw Q8F3Pk/UPulTdKSa69/rbTiY2c6V3OT5W/oKRhP8P/PB+pXcLDyMbdQwQtL5Hwo0 7IRtt3yM5oL3vMCTt+6pbKY/RddiprXeOQnFqYT1vYEdcih2+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4qqc7M4P574GRwBXK1UBBIDe4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMjhjNzhjYWEtODBmZS0z ZWY4LThjOWItYzk4ZDcxM2VhZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzSfCHS5ypxNj7B+6vEU9rjHzNvLQdA8IlT44u9R/zdMM2ApxzPFRXS 0PlnnoOPzFBNbECCpy7nrt7G8t7FPHFazEcKw7aWdGO5ANFtwF7rlr7NsESkPKFz gjN6yPlKErKQ+vodZJTltkYxV+nCipNNgV0HQE/g3mFhAhbO5gUaFxu0uk+5W+de UAYkx18IMp3B2/Fl2LhN5yq0m36daj8eLAVfkEHH8ws2/DK9t3y9tBSRUxlAhbjg 9CUnwKYnNK3hCoER6hj3HVZriHn2Z0hwMrdWTUG14OmjWvivkYl8HVhbj3d8d2Fg VFMbK+Gg6X4EmOMy7C29sayOpQySyx0= -----END CERTIFICATE-----Generated at Thu May 8 13:44:15 2025 by rpki-client