$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/53d6e1fa-14ac-3c71-a1c2-9f71f5c1984d.roa File: 53d6e1fa-14ac-3c71-a1c2-9f71f5c1984d.roa (raw, json) Hash identifier: Ha3QoHmxCdm5ozuyToywbSOjaLlxrkIt5IqlsGznd2w= Subject key identifier: F9:4F:29:ED:90:89:1C:75:E5:56:0C:39:9D:3A:88:C0:D4:04:02:EC Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F432858498C5F31245653933D113A6300 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/53d6e1fa-14ac-3c71-a1c2-9f71f5c1984d.roa Signing time: Wed 16 Apr 2025 19:38:48 +0000 ROA not before: Wed 16 Apr 2025 19:38:48 +0000 ROA not after: Tue 15 Jul 2025 19:38:48 +0000 asID: 203724 IP address blocks: 131.229.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:5f:31:24:56:53:93:3d:11:3a:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Apr 16 19:38:48 2025 GMT Not After : Jul 15 19:38:48 2025 GMT Subject: CN=abe552ef-57f6-46c0-a699-b6744c2c06a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:39:6a:33:9f:a8:8b:9d:55:ba:cd:e9:38:5e: 1a:a0:52:03:17:fe:4f:08:e4:9c:e7:fc:1b:6f:c8: 54:a8:41:3e:f7:80:52:75:a5:38:e4:6c:cb:01:e8: 63:96:7a:eb:77:e9:9a:9f:d4:ae:85:76:ce:9c:b4: a2:10:99:e5:0b:0d:28:1e:6f:a3:b2:83:cc:70:33: 1c:27:74:49:b9:34:ce:13:2a:91:a4:15:03:f4:75: 3e:99:99:8c:7f:b6:7f:a5:ab:85:20:aa:2c:f1:5e: 4b:db:03:f1:35:f5:45:94:66:66:e0:8e:b8:51:51: 43:bf:4b:f9:74:c6:82:bc:7d:55:4f:52:c5:cc:47: 2b:74:11:67:c1:68:d5:7d:11:80:9b:68:1d:88:bf: a0:32:32:c4:99:a8:8e:2f:33:06:6d:ad:d6:3d:56: fa:5b:1a:63:25:1a:b4:c5:88:47:69:a3:fb:67:98: f5:41:fb:b6:b6:23:76:de:15:55:b3:b2:e7:5b:c4: bb:6f:87:5c:f6:b7:36:61:4f:48:f7:1e:ce:8a:ff: b6:d5:11:e8:da:66:72:89:0e:ba:3f:d9:3b:e4:7b: 04:3e:fc:36:ff:c6:bc:10:c9:26:80:1d:5c:95:e1: 09:b3:66:49:0f:e5:d2:87:ab:dd:4a:91:17:ac:ff: 35:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4F:29:ED:90:89:1C:75:E5:56:0C:39:9D:3A:88:C0:D4:04:02:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/53d6e1fa-14ac-3c71-a1c2-9f71f5c1984d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:f6:73:41:21:64:92:09:18:00:4d:ae:ab:72:a4:0d:85:88: e9:6e:36:e3:9f:38:4b:0c:47:fb:ec:f2:e8:df:81:54:a6:9a: 7b:dd:7e:ff:e4:74:f9:6b:aa:fd:9c:5c:ab:8b:f6:a6:80:be: 60:e5:93:cb:13:9d:4e:f2:62:7b:ea:f8:22:b1:a0:21:0e:d0: 00:c4:55:a0:a1:3d:74:93:28:c3:3f:4d:d0:34:f1:ed:48:9a: ab:c4:dc:84:55:f3:1b:64:d8:28:5a:6e:28:4d:90:7e:ad:13: 8d:8b:1d:80:fd:b3:b0:71:5c:a8:c7:89:e4:26:62:9f:bc:60: a6:4b:fa:eb:16:f5:0f:1d:ea:22:c6:5d:fb:a1:32:41:52:f4: 18:68:30:4b:5e:d3:90:48:6e:1f:d8:49:76:62:86:5c:5c:38: 07:04:5b:6d:54:c7:4c:3a:23:8b:e2:75:07:1f:aa:8b:37:de: 47:e9:34:0b:64:40:dc:43:ed:f7:53:58:20:17:8f:ae:dc:ba: af:b9:b1:4e:bc:6a:03:1b:53:58:32:a0:4e:47:f7:05:61:ba: 51:6b:8a:13:fe:e4:d6:fa:da:cd:3d:c3:89:dc:87:46:2b:01: bc:15:8b:3e:c5:ce:5e:17:ea:c9:8b:bc:13:26:62:4a:77:38: f2:30:09:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmMXzEkVlOTPRE6YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDQxNjE5Mzg0OFoXDTI1MDcxNTE5Mzg0OFowLzEtMCsGA1UEAxMk YWJlNTUyZWYtNTdmNi00NmMwLWE2OTktYjY3NDRjMmMwNmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojlqM5+oi51Vus3pOF4aoFIDF/5PCOSc5/wb b8hUqEE+94BSdaU45GzLAehjlnrrd+man9SuhXbOnLSiEJnlCw0oHm+jsoPMcDMc J3RJuTTOEyqRpBUD9HU+mZmMf7Z/pauFIKos8V5L2wPxNfVFlGZm4I64UVFDv0v5 dMaCvH1VT1LFzEcrdBFnwWjVfRGAm2gdiL+gMjLEmaiOLzMGba3WPVb6WxpjJRq0 xYhHaaP7Z5j1Qfu2tiN23hVVs7LnW8S7b4dc9rc2YU9I9x7Oiv+21RHo2mZyiQ66 P9k75HsEPvw2/8a8EMkmgB1cleEJs2ZJD+XSh6vdSpEXrP81lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlPKe2QiRx15VYMOZ06iMDUBALsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvNTNkNmUxZmEtMTRhYy0z YzcxLWExYzItOWY3MWY1YzE5ODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABv2c0EhZJIJGABNrqtypA2FiOluNuOfOEsMR/vs8ujfgVSmmnvdfv/k dPlrqv2cXKuL9qaAvmDlk8sTnU7yYnvq+CKxoCEO0ADEVaChPXSTKMM/TdA08e1I mqvE3IRV8xtk2ChabihNkH6tE42LHYD9s7BxXKjHieQmYp+8YKZL+usW9Q8d6iLG XfuhMkFS9BhoMEte05BIbh/YSXZihlxcOAcEW21Ux0w6I4vidQcfqos33kfpNAtk QNxD7fdTWCAXj67cuq+5sU68agMbU1gyoE5H9wVhulFrihP+5Nb62s09w4nch0Yr AbwViz7Fzl4X6smLvBMmYkp3OPIwCUs= -----END CERTIFICATE-----Generated at Thu May 8 14:28:27 2025 by rpki-client