$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/2c6ce489-15b4-3a1c-b679-d7fe8f7f94c0.roa File: 2c6ce489-15b4-3a1c-b679-d7fe8f7f94c0.roa (raw, json) Hash identifier: F/BjOJJhAs0SJkrGHAibyqofT9Kbiq8Gl6fNCPo/T7I= Subject key identifier: B5:6E:88:98:94:5F:E5:9E:36:CF:80:B7:CB:EF:6E:F7:E5:4D:0B:A7 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F432858498C6B4EEE0ABC04FC12C9A2D0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/2c6ce489-15b4-3a1c-b679-d7fe8f7f94c0.roa Signing time: Wed 16 Apr 2025 20:03:12 +0000 ROA not before: Wed 16 Apr 2025 20:03:12 +0000 ROA not after: Tue 15 Jul 2025 20:03:12 +0000 asID: 203724 IP address blocks: 131.229.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:6b:4e:ee:0a:bc:04:fc:12:c9:a2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Apr 16 20:03:12 2025 GMT Not After : Jul 15 20:03:12 2025 GMT Subject: CN=bfdd47f9-07c4-4c75-a7e3-d097489e687d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:15:58:de:0a:01:4a:0a:2b:a4:17:a0:75: 22:82:ff:f7:ef:f8:5f:3a:71:c7:05:16:7e:53:e7: 10:1e:56:98:59:15:ee:6e:ec:e9:ef:19:ea:63:fd: 01:a5:83:32:d2:21:40:1b:99:66:ce:83:2f:51:5f: 0c:ff:88:ee:e6:ad:47:e5:51:a4:73:56:dc:f3:20: 1f:b1:6b:da:a7:dc:d1:e0:8a:8f:d4:87:e8:1f:25: 15:50:ff:d5:01:45:6b:33:9b:a4:4a:2f:1d:35:a4: 40:d8:9a:32:30:e5:67:a0:2f:76:a9:0f:c9:13:a2: 5a:f8:8d:c7:ec:d5:0c:3f:bb:4e:db:ca:ff:57:3a: 79:f2:59:60:5d:ad:de:bd:e6:a2:20:07:ae:70:02: c1:29:c7:b4:a1:9a:02:5a:bf:e4:83:ee:a1:fb:91: 99:8f:87:5e:4a:17:25:44:b2:5b:9f:84:1d:3b:6d: ad:e4:48:01:4a:0a:54:8e:f8:1e:17:8c:ad:f5:1f: 52:02:fa:33:05:dc:15:ac:76:80:2d:80:45:b8:3f: 1d:80:bd:69:99:07:1a:ff:5f:6e:41:45:e9:9f:3a: 21:88:89:fd:28:de:17:71:f8:e2:33:3a:8b:d5:17: fd:c3:16:35:54:06:bb:f6:aa:10:62:ca:19:f7:fc: f2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6E:88:98:94:5F:E5:9E:36:CF:80:B7:CB:EF:6E:F7:E5:4D:0B:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/2c6ce489-15b4-3a1c-b679-d7fe8f7f94c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:4b:69:e3:af:ff:18:5d:96:86:cb:02:11:c2:e2:33:3b:0d: 8a:23:da:85:e7:51:64:ae:00:26:71:1b:d4:42:b4:c7:f8:72: c7:2b:16:f2:b8:42:4b:88:d1:94:65:8e:df:93:64:bb:81:46: 1a:01:a4:99:45:00:60:5f:51:5d:eb:d1:03:3a:a9:7f:30:a9: 43:4c:35:c6:9f:0d:ca:0a:fe:54:b6:8d:cf:0d:2f:0f:2d:b9: 36:c6:23:09:32:ca:bf:70:a3:80:49:08:84:e0:2f:18:0b:51: cb:3b:20:a5:c4:60:c3:5a:7d:8a:b5:11:e7:5b:a1:8a:eb:5e: ef:8c:19:c5:bd:d7:e1:73:d5:b5:2b:5f:a0:11:bb:d1:2e:91: 16:f4:7d:26:75:38:c5:a4:0d:08:e2:b2:55:cd:80:fe:69:2e: 21:b5:db:82:55:4e:02:5b:ed:b2:51:ed:b2:90:9c:13:d6:96: d7:db:53:4c:43:1c:f2:8b:0c:e9:a5:3c:d5:81:32:6f:11:d6: 23:1f:c5:52:1c:0e:14:d2:21:f5:a1:05:dd:2a:60:7c:0b:36: cc:e9:e8:06:56:08:f3:db:d5:b6:45:32:06:a5:0c:85:98:02: 54:5c:96:67:03:32:76:55:dd:69:f0:cc:74:40:a9:7b:fa:00: 31:c7:cd:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmMa07uCrwE/BLJotAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDQxNjIwMDMxMloXDTI1MDcxNTIwMDMxMlowLzEtMCsGA1UEAxMk YmZkZDQ3ZjktMDdjNC00Yzc1LWE3ZTMtZDA5NzQ4OWU2ODdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvsVWN4KAUoKK6QXoHUigv/37/hfOnHHBRZ+ U+cQHlaYWRXubuzp7xnqY/0BpYMy0iFAG5lmzoMvUV8M/4ju5q1H5VGkc1bc8yAf sWvap9zR4IqP1IfoHyUVUP/VAUVrM5ukSi8dNaRA2JoyMOVnoC92qQ/JE6Ja+I3H 7NUMP7tO28r/Vzp58llgXa3eveaiIAeucALBKce0oZoCWr/kg+6h+5GZj4deShcl RLJbn4QdO22t5EgBSgpUjvgeF4yt9R9SAvozBdwVrHaALYBFuD8dgL1pmQca/19u QUXpnzohiIn9KN4XcfjiMzqL1Rf9wxY1VAa79qoQYsoZ9/zyGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVuiJiUX+WeNs+At8vvbvflTQunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMmM2Y2U0ODktMTViNC0z YTFjLWI2NzktZDdmZThmN2Y5NGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhLaeOv/xhdlobLAhHC4jM7DYoj2oXnUWSuACZxG9RCtMf4cscrFvK4 QkuI0ZRljt+TZLuBRhoBpJlFAGBfUV3r0QM6qX8wqUNMNcafDcoK/lS2jc8NLw8t uTbGIwkyyr9wo4BJCITgLxgLUcs7IKXEYMNafYq1EedboYrrXu+MGcW91+Fz1bUr X6ARu9EukRb0fSZ1OMWkDQjislXNgP5pLiG124JVTgJb7bJR7bKQnBPWltfbU0xD HPKLDOmlPNWBMm8R1iMfxVIcDhTSIfWhBd0qYHwLNszp6AZWCPPb1bZFMgalDIWY AlRclmcDMnZV3WnwzHRAqXv6ADHHzQk= -----END CERTIFICATE-----Generated at Fri May 9 01:15:21 2025 by rpki-client