$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/52d47736-96b4-336a-8064-d064e05e3001.roa File: 52d47736-96b4-336a-8064-d064e05e3001.roa (raw, json) Hash identifier: oLzKBR/4dSaFMk7LN2W8DJO3sWpXyvDde+HDUN9ENsM= Subject key identifier: 4F:4F:EF:35:D5:F6:85:E3:2B:59:E1:EC:7F:DE:E3:77:7E:FD:F8:37 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F43285849C350692B9CE0B9BA35CC7DC0 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/52d47736-96b4-336a-8064-d064e05e3001.roa Signing time: Tue 06 May 2025 11:58:28 +0000 ROA not before: Tue 06 May 2025 11:58:28 +0000 ROA not after: Mon 04 Aug 2025 11:58:28 +0000 asID: 16509 IP address blocks: 131.229.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:50:69:2b:9c:e0:b9:ba:35:cc:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: May 6 11:58:28 2025 GMT Not After : Aug 4 11:58:28 2025 GMT Subject: CN=46ca0dba-9bfb-4abd-bcb4-98e50d12c75e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:11:52:e6:2c:4c:3c:d1:96:af:68:65:2b:2d: 2d:73:c5:3c:a8:9e:df:71:f2:51:f2:82:87:91:a4: ce:6a:1d:ba:e6:52:33:c1:df:00:e3:b5:de:ab:6f: a6:2e:86:30:46:2b:75:30:2d:e9:4f:7e:4d:0b:20: 1c:6f:4e:a0:36:cb:eb:1c:9f:b8:32:db:0c:10:b5: ad:a4:9d:ad:9a:8f:fc:bd:51:c4:12:cc:1c:6c:ee: 9a:a1:be:3d:e8:cf:7b:f1:96:c8:df:a9:62:c6:e6: db:15:2d:ee:2e:56:fb:ad:c7:7b:5c:8a:29:e3:0d: 03:0d:3b:d3:f4:be:f2:08:7a:3f:84:34:69:64:f6: d3:3f:d6:7e:50:c0:bb:50:2e:28:dc:e8:85:e0:11: 64:f3:0c:4e:88:f6:a6:96:95:45:0a:8e:df:b2:fd: f7:fa:bf:5c:ad:06:1e:06:c6:ae:65:62:f5:e8:07: 8f:20:e1:9d:6f:d1:48:39:b2:46:dd:2a:07:aa:79: 57:bd:2d:e4:3f:1f:bc:3b:50:05:78:c1:ff:eb:ac: 8d:40:f8:8f:0b:02:63:a3:30:21:39:aa:3b:60:e9: 2b:04:cb:21:84:62:30:64:73:c1:ea:9e:98:a6:56: 5f:28:79:d5:89:e2:38:92:79:35:a2:91:a8:2d:40: 5f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4F:EF:35:D5:F6:85:E3:2B:59:E1:EC:7F:DE:E3:77:7E:FD:F8:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/52d47736-96b4-336a-8064-d064e05e3001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:0f:3b:70:fc:32:7b:52:86:fe:e6:d9:2a:e9:05:79:0e:ef: 42:b1:e9:ae:07:2d:9e:cb:56:e5:ef:bd:c5:0c:37:9f:f7:31: d8:54:69:ba:7b:79:83:6b:34:85:43:2a:1c:af:17:eb:03:66: cf:72:8d:a3:23:64:4d:c2:5a:6f:2f:ac:80:ff:f6:ef:36:8e: 0a:79:2a:67:c8:e4:7e:9b:8b:9a:9a:04:03:c0:fa:ed:66:6a: 8d:71:85:91:48:c8:be:55:bd:d3:0c:ce:8f:d5:73:76:6c:dd: af:ce:01:bc:1d:d9:36:e4:e2:ee:fd:21:c1:c1:64:a0:88:2f: 0f:f5:98:f8:87:06:7b:cf:c1:19:93:a8:53:13:6b:0f:0b:b3: 25:7a:e9:9d:6e:23:97:f2:51:36:e1:40:b1:23:2d:31:14:78: 6f:2c:d1:62:21:64:a1:6a:2b:09:ba:c7:17:57:6a:c7:9f:93: 59:53:d6:6a:b7:8e:6b:09:57:2e:ba:d0:0e:3f:30:ee:76:27: f2:63:b0:48:55:85:a4:53:4c:aa:2e:1f:41:21:ed:f0:f0:58: 9a:0e:fc:f2:6b:5d:3d:97:65:75:97:5c:04:b7:2e:b8:bb:f3: 2b:5f:15:e2:47:9b:c9:81:9c:20:14:e2:f3:ce:d9:ee:d0:d4: 4f:c3:bb:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnDUGkrnOC5ujXMfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDUwNjExNTgyOFoXDTI1MDgwNDExNTgyOFowLzEtMCsGA1UEAxMk NDZjYTBkYmEtOWJmYi00YWJkLWJjYjQtOThlNTBkMTJjNzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xFS5ixMPNGWr2hlKy0tc8U8qJ7fcfJR8oKH kaTOah265lIzwd8A47Xeq2+mLoYwRit1MC3pT35NCyAcb06gNsvrHJ+4MtsMELWt pJ2tmo/8vVHEEswcbO6aob496M978ZbI36lixubbFS3uLlb7rcd7XIop4w0DDTvT 9L7yCHo/hDRpZPbTP9Z+UMC7UC4o3OiF4BFk8wxOiPamlpVFCo7fsv33+r9crQYe BsauZWL16AePIOGdb9FIObJG3SoHqnlXvS3kPx+8O1AFeMH/66yNQPiPCwJjozAh Oao7YOkrBMshhGIwZHPB6p6YplZfKHnVieI4knk1opGoLUBfXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9P7zXV9oXjK1nh7H/e43d+/fg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvNTJkNDc3MzYtOTZiNC0z MzZhLTgwNjQtZDA2NGUwNWUzMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAPO3D8MntShv7m2SrpBXkO70Kx6a4HLZ7LVuXvvcUMN5/3MdhUabp7 eYNrNIVDKhyvF+sDZs9yjaMjZE3CWm8vrID/9u82jgp5KmfI5H6bi5qaBAPA+u1m ao1xhZFIyL5VvdMMzo/Vc3Zs3a/OAbwd2Tbk4u79IcHBZKCILw/1mPiHBnvPwRmT qFMTaw8LsyV66Z1uI5fyUTbhQLEjLTEUeG8s0WIhZKFqKwm6xxdXasefk1lT1mq3 jmsJVy660A4/MO52J/JjsEhVhaRTTKouH0Eh7fDwWJoO/PJrXT2XZXWXXAS3Lri7 8ytfFeJHm8mBnCAU4vPO2e7Q1E/Du6A= -----END CERTIFICATE-----Generated at Fri May 9 03:00:05 2025 by rpki-client