$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7d1f371c-4962-34cf-867f-a9bfff3014a0.roa File: 7d1f371c-4962-34cf-867f-a9bfff3014a0.roa (raw, json) Hash identifier: pz1SM4AeYbBzUBsAMOFi8VBc27gnQ53WGifKwKsbqas= Subject key identifier: D8:00:99:1B:BE:5A:98:DC:C1:7A:6D:78:29:35:E3:29:5D:E8:2F:39 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285848A9962CB0CA973E143FB99FC0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7d1f371c-4962-34cf-867f-a9bfff3014a0.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 3949 IP address blocks: 131.103.23.128/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:2c:b0:ca:97:3e:14:3f:b9:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=1a278655-f64e-49e2-b02e-bb0b8ac00176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:50:dd:23:90:b2:28:43:8d:a0:10:09:51:21: e9:b9:a8:d7:ec:e0:56:a6:74:28:03:ec:28:b5:66: c3:0d:37:9e:97:c2:74:49:6b:f3:1c:e0:12:ca:28: b1:6d:0c:9f:1e:65:64:c5:26:69:34:e0:f3:e1:7e: 9b:77:17:1d:a6:b2:ec:5f:6e:43:d8:06:ed:27:f8: 86:25:97:a6:88:56:9b:41:18:13:1e:65:34:0c:24: a3:4e:11:88:0d:ba:95:5e:ee:80:7f:32:d5:3f:5b: 04:d5:2e:5f:a9:f7:ef:43:44:c9:41:97:e0:a8:ec: e0:d8:73:3b:f0:3b:69:00:37:81:d3:cd:a8:3f:1f: 4d:22:df:ac:99:86:16:a3:0d:26:e9:ce:08:58:44: ac:9e:f3:6a:ee:d1:78:9a:72:b4:4d:92:ae:73:49: 18:f0:ac:eb:0d:ad:86:46:bb:f0:57:80:5c:6e:a5: 83:c9:8e:31:d6:42:a5:11:55:d4:98:d3:88:28:82: 50:ac:b7:cf:32:a4:75:30:cc:98:a0:d0:4a:18:66: 3d:84:8c:ed:7e:da:77:cb:d1:b5:91:c8:1a:f0:0f: 11:d3:ff:fc:72:f0:c9:ca:88:6b:52:a2:38:c3:ae: 09:b1:79:a4:ca:07:10:7f:44:ea:cf:6e:a3:e2:c6: 80:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:00:99:1B:BE:5A:98:DC:C1:7A:6D:78:29:35:E3:29:5D:E8:2F:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7d1f371c-4962-34cf-867f-a9bfff3014a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 131.103.23.128/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:b5:fb:be:ee:99:d8:ef:a7:a4:09:f7:e9:2a:71:01:a8:b3: 5a:82:2d:cc:f3:a0:a1:30:c1:d0:86:3b:7b:f0:2c:29:ac:65: df:89:97:75:f1:36:18:da:0c:63:34:a2:45:eb:f4:27:41:d5: 85:36:90:a3:5b:5f:a4:f2:44:05:d4:32:2c:c3:99:2e:19:03: b1:d0:50:06:c2:15:95:60:ef:c4:03:6c:c6:1a:7a:dd:44:34: 5e:02:c6:77:0f:ce:aa:84:be:b0:d8:bb:08:4d:1d:97:16:b4: f2:49:60:60:59:7c:2a:a0:03:e1:89:f8:ef:3b:20:99:ce:09: e7:d6:e0:3e:d4:1a:1c:5b:2a:4a:c2:3e:35:5c:65:38:a7:4d: ff:0b:b2:01:05:b6:3f:52:b6:37:5a:e3:62:75:ad:4e:b9:e5: 72:16:b0:df:d4:44:c1:2f:a1:08:9a:db:26:91:e9:a5:72:bc: f8:70:a8:ee:ee:90:fa:aa:51:c8:b6:b7:a2:c0:bb:ae:01:03: 5d:d8:67:64:ef:b1:cd:14:64:73:a6:72:2d:40:19:7a:8f:27: df:12:fd:b3:ad:1c:b3:86:fb:a4:2b:e8:90:64:36:81:32:6e: 37:a3:88:44:9c:1f:c5:5b:4a:49:aa:52:c5:0a:3e:22:5f:ff: 5a:d2:2d:1c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEipliywypc+FD+5n8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MWEyNzg2NTUtZjY0ZS00OWUyLWIwMmUtYmIwYjhhYzAwMTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlDdI5CyKEONoBAJUSHpuajX7OBWpnQoA+wo tWbDDTeel8J0SWvzHOASyiixbQyfHmVkxSZpNODz4X6bdxcdprLsX25D2AbtJ/iG JZemiFabQRgTHmU0DCSjThGIDbqVXu6AfzLVP1sE1S5fqffvQ0TJQZfgqOzg2HM7 8DtpADeB082oPx9NIt+smYYWow0m6c4IWESsnvNq7tF4mnK0TZKuc0kY8KzrDa2G RrvwV4BcbqWDyY4x1kKlEVXUmNOIKIJQrLfPMqR1MMyYoNBKGGY9hIztftp3y9G1 kcga8A8R0//8cvDJyohrUqI4w64JsXmkygcQf0Tqz26j4saA1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNgAmRu+WpjcwXpteCk14yld6C85MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvN2QxZjM3MWMtNDk2Mi0z NGNmLTg2N2YtYTliZmZmMzAxNGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGg2cXgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCntfu+7pnY76ekCffpKnEBqLNagi3M86ChMMHQhjt78CwprGXfiZd1 8TYY2gxjNKJF6/QnQdWFNpCjW1+k8kQF1DIsw5kuGQOx0FAGwhWVYO/EA2zGGnrd RDReAsZ3D86qhL6w2LsITR2XFrTySWBgWXwqoAPhifjvOyCZzgnn1uA+1BocWypK wj41XGU4p03/C7IBBbY/UrY3WuNida1OueVyFrDf1ETBL6EImtsmkemlcrz4cKju 7pD6qlHItreiwLuuAQNd2Gdk77HNFGRzpnItQBl6jyffEv2zrRyzhvukK+iQZDaB Mm43o4hEnB/FW0pJqlLFCj4iX/9a0i0c -----END CERTIFICATE-----Generated at Fri Apr 4 17:23:48 2025 by rpki-client