$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7af865f2-4504-3b1d-9084-2d5383aad8ec.roa File: 7af865f2-4504-3b1d-9084-2d5383aad8ec.roa (raw, json) Hash identifier: +y3oGLbqnS8FuNsNR3X1ZFQQkppY+FE9gBEcdYO+BNQ= Subject key identifier: C3:00:DC:C4:08:C5:1B:44:86:E5:5A:77:AB:A9:2D:C1:5D:A5:7B:6A Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F43285849C66BDABED38563D6D064136C Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7af865f2-4504-3b1d-9084-2d5383aad8ec.roa Signing time: Wed 07 May 2025 14:41:11 +0000 ROA not before: Wed 07 May 2025 14:41:11 +0000 ROA not after: Tue 05 Aug 2025 14:41:11 +0000 asID: 16509 IP address blocks: 131.229.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:6b:da:be:d3:85:63:d6:d0:64:13:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: May 7 14:41:11 2025 GMT Not After : Aug 5 14:41:11 2025 GMT Subject: CN=71bfb24c-de50-416b-ae67-7bf535503022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1c:45:b6:ad:36:07:c3:c1:7b:12:b6:90:c6: 64:98:a1:3e:e5:bd:60:c8:9f:a4:cb:a1:c0:69:7a: c0:77:c7:10:c2:35:ca:37:7a:c1:f4:61:0b:53:47: 3f:b4:e2:1c:e3:97:45:c7:b3:1c:08:69:3a:9e:16: 36:82:23:4e:34:26:20:4c:83:11:fe:35:20:98:f0: 5a:cd:43:06:c0:38:f8:b8:8e:2d:95:28:72:c4:9b: 92:ea:14:d4:3b:a1:3f:5e:40:97:f4:eb:c3:a4:36: ab:90:98:22:4c:ed:06:27:53:d0:34:71:b9:62:3d: ee:43:c0:f6:78:c4:b3:17:a9:7e:60:62:9a:3a:4e: e8:64:f1:36:c1:bd:f6:76:ec:e3:7d:c4:82:5c:27: 0d:89:0a:56:98:b5:65:2e:9a:7c:c8:be:4a:b6:8c: 6d:c4:b6:b9:0e:dc:3e:f1:0b:7f:ef:54:c2:79:86: 30:e8:58:d4:7a:c5:ae:bc:26:41:2e:d1:e8:d9:8e: 43:f6:dc:21:3e:c7:e4:f0:02:fc:2e:ec:bb:88:cf: 6b:79:33:25:16:cc:26:81:5e:b3:30:ca:ae:23:a3: b0:65:b3:67:13:d3:9d:e8:1e:b0:26:e8:fa:f9:25: 22:09:11:be:b7:33:b4:91:a2:1c:8e:47:bb:d6:5c: 59:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:00:DC:C4:08:C5:1B:44:86:E5:5A:77:AB:A9:2D:C1:5D:A5:7B:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7af865f2-4504-3b1d-9084-2d5383aad8ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:00:8b:bf:77:fa:96:3d:74:ba:50:48:c6:8a:e4:12:d6:76: 9d:d4:23:ae:a6:d2:b9:49:6a:f0:0c:97:29:8a:ee:03:26:8f: 7b:45:4e:a5:a0:ac:c4:e6:47:d8:c1:1a:d9:93:a1:ff:ef:1a: df:27:a3:2d:21:70:62:52:30:03:46:be:f2:7d:66:df:f8:f7: 3f:91:88:25:9e:ac:37:f1:f0:a1:60:65:ce:30:71:a4:e1:43: 29:dd:4c:71:38:aa:7e:56:2a:4a:20:9e:1b:a8:75:83:27:4b: 9b:50:2b:e7:0f:b1:59:ce:1d:d9:1b:3e:69:e6:4f:6b:7b:91: 76:91:db:10:86:80:f3:75:4f:67:77:79:0a:33:02:58:5f:e1: 4c:0c:c8:3d:43:c6:50:b2:b8:d7:5a:91:49:8f:9a:5b:74:f9: 66:37:db:c2:8b:5d:2f:27:22:1b:c3:43:00:aa:0e:11:7c:a1: 36:fd:5f:ae:99:20:d0:b9:43:3e:75:4d:be:58:d8:26:68:ce: 03:1c:15:1c:8e:fb:a9:75:42:d8:e9:7f:fa:d4:3b:84:16:99: be:7f:21:2f:65:39:c1:b1:98:ce:31:ff:58:87:a6:04:3b:37: 8f:6e:77:ee:18:70:dc:41:30:f4:06:4b:4e:b9:8a:a0:d1:26: f0:03:a9:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnGa9q+04Vj1tBkE2wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDUwNzE0NDExMVoXDTI1MDgwNTE0NDExMVowLzEtMCsGA1UEAxMk NzFiZmIyNGMtZGU1MC00MTZiLWFlNjctN2JmNTM1NTAzMDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRxFtq02B8PBexK2kMZkmKE+5b1gyJ+ky6HA aXrAd8cQwjXKN3rB9GELU0c/tOIc45dFx7McCGk6nhY2giNONCYgTIMR/jUgmPBa zUMGwDj4uI4tlShyxJuS6hTUO6E/XkCX9OvDpDarkJgiTO0GJ1PQNHG5Yj3uQ8D2 eMSzF6l+YGKaOk7oZPE2wb32duzjfcSCXCcNiQpWmLVlLpp8yL5KtoxtxLa5Dtw+ 8Qt/71TCeYYw6FjUesWuvCZBLtHo2Y5D9twhPsfk8AL8Luy7iM9reTMlFswmgV6z MMquI6OwZbNnE9Od6B6wJuj6+SUiCRG+tzO0kaIcjke71lxZMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMA3MQIxRtEhuVad6upLcFdpXtqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvN2FmODY1ZjItNDUwNC0z YjFkLTkwODQtMmQ1MzgzYWFkOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoAi793+pY9dLpQSMaK5BLWdp3UI66m0rlJavAMlymK7gMmj3tFTqWg rMTmR9jBGtmTof/vGt8noy0hcGJSMANGvvJ9Zt/49z+RiCWerDfx8KFgZc4wcaTh QyndTHE4qn5WKkognhuodYMnS5tQK+cPsVnOHdkbPmnmT2t7kXaR2xCGgPN1T2d3 eQozAlhf4UwMyD1DxlCyuNdakUmPmlt0+WY328KLXS8nIhvDQwCqDhF8oTb9X66Z INC5Qz51Tb5Y2CZozgMcFRyO+6l1Qtjpf/rUO4QWmb5/IS9lOcGxmM4x/1iHpgQ7 N49ud+4YcNxBMPQGS065iqDRJvADqbA= -----END CERTIFICATE-----Generated at Thu May 8 14:16:31 2025 by rpki-client