$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f491afe6-427d-3ed7-a1ac-57984529ca36.roa File: f491afe6-427d-3ed7-a1ac-57984529ca36.roa (raw, json) Hash identifier: Tu245YPuLGUBFCg/fRiCz11DRsGU8qsv38RosZZ/kpc= Subject key identifier: 77:F4:CB:85:11:06:5F:62:6E:DA:2A:75:95:C1:E2:7A:89:6A:D6:0F Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F43285849C3728DDEE975BE123DC6C400 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f491afe6-427d-3ed7-a1ac-57984529ca36.roa Signing time: Tue 06 May 2025 13:07:16 +0000 ROA not before: Tue 06 May 2025 13:07:16 +0000 ROA not after: Mon 04 Aug 2025 13:07:16 +0000 asID: 16509 IP address blocks: 131.229.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:72:8d:de:e9:75:be:12:3d:c6:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: May 6 13:07:16 2025 GMT Not After : Aug 4 13:07:16 2025 GMT Subject: CN=02f9e179-b1b6-45d7-95a2-c7ee0ac5acba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8d:a8:e0:f0:e1:d1:a6:d2:1a:7f:bb:93:7a: d8:32:dd:fd:0d:ca:de:67:b1:27:f1:57:0a:fd:16: fc:e6:77:c1:2a:e0:41:f4:9b:bf:87:bb:75:e7:be: 5a:67:9a:d5:1d:39:8d:48:3d:8a:32:0c:0b:12:b7: 3b:97:eb:2b:ac:55:39:7c:1e:93:51:7c:44:dd:1d: b8:cc:c9:f9:16:e1:b1:7b:64:9a:d5:3c:58:be:f8: 72:66:27:39:71:4f:4a:d4:9b:27:2c:e4:dc:53:f9: 8b:27:7b:35:31:a4:ca:a7:6f:ce:b5:bc:35:cc:97: b0:c9:4e:7f:d4:79:c2:57:1f:9b:8a:0b:0d:f0:22: 26:48:b1:b9:83:29:2d:5e:9d:17:d4:bd:c4:3a:08: f5:13:61:06:f3:ae:51:39:04:48:fe:14:df:5f:ab: 00:51:48:54:a2:cf:76:db:21:97:04:9b:56:07:ef: b0:f0:b9:55:c3:f3:04:65:e1:d1:b0:08:2d:1d:2a: 4c:23:69:11:37:30:5d:68:95:a1:a1:43:0c:5d:d5: c3:0d:b2:2f:9c:50:8f:f8:f0:9b:be:01:bd:10:1f: 9c:75:b4:d0:28:b4:f5:98:39:fa:a2:87:41:d8:0f: 8f:5b:a3:ff:d3:cc:2d:b6:7e:c8:84:cc:21:b6:07: 36:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F4:CB:85:11:06:5F:62:6E:DA:2A:75:95:C1:E2:7A:89:6A:D6:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f491afe6-427d-3ed7-a1ac-57984529ca36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 131.229.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:38:94:c2:d6:b9:d2:01:17:ef:e7:f6:19:1b:43:fc:52:33: 13:44:c9:6f:46:a5:1a:a7:98:25:71:32:03:5d:1a:2a:48:88: 85:c0:87:9b:0a:b7:9e:4e:5f:e4:5b:cd:eb:0f:c7:c2:67:c2: aa:ba:2d:a7:0e:25:d9:e5:c8:e6:2c:33:5e:b4:7f:10:8c:b5: 26:45:d7:fb:8f:64:26:f9:e9:d7:a5:40:ee:e4:4f:f8:a8:0c: de:5a:3d:1c:7f:3d:64:a3:8c:5a:34:66:7c:71:f0:9b:9c:c5: 9d:94:9f:2a:8b:f6:fd:a2:ae:10:93:d4:d6:5d:e0:ac:9e:a6: 69:24:b3:c0:33:e0:42:69:67:7f:90:1b:b9:b6:5a:46:36:97: 1b:4d:ff:1a:e0:8c:77:10:72:d4:43:ea:7a:a4:90:11:08:69: 20:03:8b:45:26:9e:74:3a:08:8c:6b:30:8f:78:ef:c1:60:46: d6:ea:6b:05:d3:22:d4:c3:b4:5a:17:dd:0b:b3:bd:ca:8b:3b: 5f:5e:f7:64:2e:55:8b:6a:7a:c0:9d:59:ad:38:55:cb:44:12: 52:8a:b6:b1:69:b5:fd:41:12:d2:4f:ce:91:4f:c6:3f:25:e3: 94:e5:09:c1:67:d0:d2:30:f6:b7:c3:4a:bf:49:1c:6d:b2:35: a5:e6:58:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnDco3e6XW+Ej3GxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDUwNjEzMDcxNloXDTI1MDgwNDEzMDcxNlowLzEtMCsGA1UEAxMk MDJmOWUxNzktYjFiNi00NWQ3LTk1YTItYzdlZTBhYzVhY2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY2o4PDh0abSGn+7k3rYMt39DcreZ7En8VcK /Rb85nfBKuBB9Ju/h7t1575aZ5rVHTmNSD2KMgwLErc7l+srrFU5fB6TUXxE3R24 zMn5FuGxe2Sa1TxYvvhyZic5cU9K1JsnLOTcU/mLJ3s1MaTKp2/Otbw1zJewyU5/ 1HnCVx+bigsN8CImSLG5gyktXp0X1L3EOgj1E2EG865ROQRI/hTfX6sAUUhUos92 2yGXBJtWB++w8LlVw/MEZeHRsAgtHSpMI2kRNzBdaJWhoUMMXdXDDbIvnFCP+PCb vgG9EB+cdbTQKLT1mDn6oodB2A+PW6P/08wttn7IhMwhtgc2tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHf0y4URBl9ibtoqdZXB4nqJatYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZjQ5MWFmZTYtNDI3ZC0z ZWQ3LWExYWMtNTc5ODQ1MjljYTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+WpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM4lMLWudIBF+/n9hkbQ/xSMxNEyW9GpRqnmCVxMgNdGipIiIXAh5sK t55OX+RbzesPx8Jnwqq6LacOJdnlyOYsM160fxCMtSZF1/uPZCb56delQO7kT/io DN5aPRx/PWSjjFo0Znxx8JucxZ2UnyqL9v2irhCT1NZd4Kyepmkks8Az4EJpZ3+Q G7m2WkY2lxtN/xrgjHcQctRD6nqkkBEIaSADi0UmnnQ6CIxrMI9478FgRtbqawXT ItTDtFoX3QuzvcqLO19e92QuVYtqesCdWa04VctEElKKtrFptf1BEtJPzpFPxj8l 45TlCcFn0NIw9rfDSr9JHG2yNaXmWIY= -----END CERTIFICATE-----Generated at Sat May 10 02:06:12 2025 by rpki-client