$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/895fff21-ab62-3bfa-989a-a161b089ba1f.roa File: 895fff21-ab62-3bfa-989a-a161b089ba1f.roa (raw, json) Hash identifier: Uh5nw35/+m4E1W1j0GOG5noyqz8sFU+7VMsiP/pPiRA= Subject key identifier: 3D:B0:53:1A:9A:A5:44:69:BE:09:D2:FF:17:19:88:43:6D:0F:C2:9E Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F43285849C37F6854C21F0EBFD2CF7D80 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/895fff21-ab62-3bfa-989a-a161b089ba1f.roa Signing time: Tue 06 May 2025 13:33:10 +0000 ROA not before: Tue 06 May 2025 13:33:10 +0000 ROA not after: Mon 04 Aug 2025 13:33:10 +0000 asID: 16509 IP address blocks: 131.229.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:7f:68:54:c2:1f:0e:bf:d2:cf:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: May 6 13:33:10 2025 GMT Not After : Aug 4 13:33:10 2025 GMT Subject: CN=96c2a629-ce7c-4a52-9eed-f63ecbd664c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c6:6e:1c:63:a5:bc:86:01:3f:d7:d5:33:54: 2e:ce:53:bb:12:09:8f:ee:a2:c9:1f:9d:ad:f4:75: 3b:ac:d2:11:f1:cf:cd:0e:16:91:3e:67:4c:2e:b0: 74:b8:64:11:72:dc:3f:e9:f1:54:f9:9f:18:94:1c: 7a:cb:3c:03:da:52:7a:20:04:93:c8:59:2d:93:37: 84:dc:bd:65:b6:ff:8a:39:74:15:cb:6d:ea:94:74: 2b:09:e3:f3:de:87:22:ee:5c:91:27:84:68:1c:b6: ba:1e:cc:1a:73:f1:52:8d:be:0c:d2:95:f8:11:51: 8c:68:3d:c6:42:39:f0:a1:48:98:be:fa:f0:c5:64: d9:cd:ab:8f:c7:f3:a4:36:6a:a5:83:54:b2:32:91: bf:9a:b2:a0:aa:d6:da:39:12:c4:24:d5:fa:a3:3b: f9:50:0f:33:66:e3:74:57:ea:ec:e4:fc:96:fe:e3: 74:e0:08:50:ba:5e:79:19:1f:89:42:ee:ca:1b:08: 66:66:35:c2:0d:92:f3:9f:a7:88:1e:ec:0b:17:93: 77:1b:ee:b4:bc:b0:3a:e2:c8:ba:03:1f:f4:59:e5: 56:4c:46:a7:e3:63:cb:93:1c:32:8a:08:bf:59:a9: b9:09:d7:5d:a8:ec:40:2b:25:02:62:a6:be:3e:6f: f1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B0:53:1A:9A:A5:44:69:BE:09:D2:FF:17:19:88:43:6D:0F:C2:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/895fff21-ab62-3bfa-989a-a161b089ba1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f2:7b:70:fc:37:6e:f7:d6:02:76:a4:22:24:d6:78:db:f7: 30:60:44:e1:1a:b4:70:9e:9f:c9:ea:1d:9c:f6:44:d2:29:f8: f6:bb:70:59:75:87:1b:c7:55:39:4f:0c:8c:56:46:e4:87:81: 7d:22:9e:27:ff:65:33:73:c1:fd:26:67:a5:70:81:c1:cb:06: e7:8c:0f:34:b0:f4:32:89:3a:5c:09:49:69:0d:04:bb:c0:a5: ab:91:c8:10:83:de:47:3e:7c:b5:43:ab:7e:19:2f:da:15:4c: c8:22:3f:6f:ed:25:23:12:10:bf:e1:84:e5:3c:1c:99:46:b8: 94:57:55:5e:92:1d:c8:ff:fe:0d:91:e1:f1:6a:8f:d1:77:82: 5b:a7:c0:50:14:b1:d1:22:bb:cb:82:25:90:95:a0:ee:76:dd: fb:24:1c:20:df:89:c1:3e:3c:d6:d7:37:8e:e4:17:81:a6:1d: 46:d0:ed:6f:c5:75:bf:03:8f:c8:a7:5a:c1:97:8d:22:45:b6: 1e:f1:df:8e:b3:0b:3c:d4:aa:e5:62:43:d2:48:de:d6:22:00: 5d:4f:e2:76:6e:78:48:20:f1:1a:44:7b:af:fe:cd:43:86:b1: d1:90:6e:b2:21:3b:d4:86:77:bd:0a:4e:f4:43:0b:26:93:2f: c0:30:e1:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnDf2hUwh8Ov9LPfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDUwNjEzMzMxMFoXDTI1MDgwNDEzMzMxMFowLzEtMCsGA1UEAxMk OTZjMmE2MjktY2U3Yy00YTUyLTllZWQtZjYzZWNiZDY2NGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcZuHGOlvIYBP9fVM1QuzlO7EgmP7qLJH52t 9HU7rNIR8c/NDhaRPmdMLrB0uGQRctw/6fFU+Z8YlBx6yzwD2lJ6IASTyFktkzeE 3L1ltv+KOXQVy23qlHQrCePz3oci7lyRJ4RoHLa6Hswac/FSjb4M0pX4EVGMaD3G QjnwoUiYvvrwxWTZzauPx/OkNmqlg1SyMpG/mrKgqtbaORLEJNX6ozv5UA8zZuN0 V+rs5PyW/uN04AhQul55GR+JQu7KGwhmZjXCDZLzn6eIHuwLF5N3G+60vLA64si6 Ax/0WeVWTEan42PLkxwyigi/Wam5CdddqOxAKyUCYqa+Pm/x+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2wUxqapURpvgnS/xcZiENtD8KeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvODk1ZmZmMjEtYWI2Mi0z YmZhLTk4OWEtYTE2MWIwODliYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+XLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbye3D8N2731gJ2pCIk1njb9zBgROEatHCen8nqHZz2RNIp+Pa7cFl1 hxvHVTlPDIxWRuSHgX0inif/ZTNzwf0mZ6VwgcHLBueMDzSw9DKJOlwJSWkNBLvA pauRyBCD3kc+fLVDq34ZL9oVTMgiP2/tJSMSEL/hhOU8HJlGuJRXVV6SHcj//g2R 4fFqj9F3glunwFAUsdEiu8uCJZCVoO523fskHCDficE+PNbXN47kF4GmHUbQ7W/F db8Dj8inWsGXjSJFth7x346zCzzUquViQ9JI3tYiAF1P4nZueEgg8RpEe6/+zUOG sdGQbrIhO9SGd70KTvRDCyaTL8Aw4Vw= -----END CERTIFICATE-----Generated at Fri May 9 00:41:44 2025 by rpki-client