$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa File: 822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa (raw, json) Hash identifier: n/CSDkar9Q8EM5bDxIDyWmoEa7YawtqIB2I/GUn0yUc= Subject key identifier: 9E:B4:EF:3F:E2:A2:0A:81:99:45:55:A1:BB:3B:B9:F8:8F:65:01:EF Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d Certificate serial: 010D0C9F432858492CB21222DDD1DFFA56BB6400 Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 611 IP address blocks: 131.202.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:12:22:dd:d1:df:fa:56:bb:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=553857d5-009e-45f7-9b12-6e5bcd5695f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:16:65:51:7c:79:29:5f:e2:a0:70:07:9d:5c: 24:9f:c5:df:93:6f:ba:96:7b:ca:c3:f4:a0:50:4d: cb:04:1d:0c:6e:f6:1f:e4:82:91:43:8d:f5:92:6d: 2e:d3:88:00:50:9c:09:f4:ce:a6:f6:04:d9:8e:fd: 97:92:2b:c6:d9:fb:85:b8:ef:5d:39:12:1e:2f:b9: 68:7e:87:1b:e9:aa:9e:16:8a:df:d0:31:13:29:1d: a2:ce:85:cb:a3:e3:15:c2:87:b4:41:23:6c:ef:c9: 6f:18:08:69:b8:d7:1c:c3:29:72:fd:00:d2:35:bf: 50:8d:4d:36:a4:5d:de:e3:88:65:6b:69:1b:54:96: 76:05:28:e1:4c:31:ce:ec:be:ef:6c:f9:8c:5b:32: ca:57:33:fb:71:21:c8:7d:cd:a5:4d:bd:3a:da:40: 44:c4:bc:df:d8:a5:30:e9:a6:0d:56:0b:7e:2b:90: dd:5b:ec:e4:87:ba:3d:f1:00:f9:89:5f:8a:bf:ff: 42:35:b5:73:ed:da:58:a6:c8:9c:d4:42:36:8c:f2: b7:cc:50:a8:33:a6:e0:c4:5c:9c:3d:c0:d3:a9:e2: 7b:03:0b:be:dc:b0:2b:35:7b:14:9c:de:ed:b4:3d: 35:fd:86:78:74:c4:65:cf:96:1a:66:da:6c:55:54: 61:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B4:EF:3F:E2:A2:0A:81:99:45:55:A1:BB:3B:B9:F8:8F:65:01:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl X509v3 Authority Key Identifier: keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer sbgp-ipAddrBlock: critical IPv4: 131.202.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:3d:30:2a:c2:68:02:c6:e2:a5:7f:91:01:43:34:63:18:1a: 2b:4d:15:fe:8c:13:7b:25:8d:67:7d:65:fe:29:0f:ac:82:6f: 32:c8:5f:3c:9e:e3:f2:d2:5f:09:f5:7f:c4:5b:a2:95:8e:69: bf:7d:39:0b:a0:a9:67:13:38:d7:4f:14:b2:dd:45:0c:c2:ba: 13:c4:19:6c:79:dd:d9:7e:3a:72:56:a8:71:ab:0b:75:fe:52: 00:12:c8:2f:13:51:7b:77:3f:66:90:a2:64:78:46:3c:1b:b1: 2b:46:99:f2:3a:cb:35:6d:af:5e:b7:13:70:a4:1c:db:cf:a3: 05:3c:a1:e7:30:02:76:5d:d4:13:eb:32:1a:a8:58:86:9f:8e: 9f:1d:df:6c:1b:bd:80:07:e1:5c:4d:e2:46:f7:7f:d8:51:70: 14:87:eb:13:b0:0e:cb:23:5b:b3:bc:3d:80:23:6d:48:44:b8: 5c:14:eb:bd:2b:7a:3b:7e:22:8d:30:92:4e:cc:01:bd:71:3a: 86:a2:66:52:d7:1f:ee:d4:34:97:d7:54:d7:b8:4a:8e:5a:20: 3d:ba:c9:e0:9f:fb:ef:b1:56:e6:6a:6d:71:d6:9a:33:99:1a: ec:61:41:3b:4c:0d:42:f3:18:db:6a:5b:f4:0f:7c:70:b9:a3: 13:00:79:2e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEksshIi3dHf+la7ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5Njg4OWMtNjFhZi00YzYxLTgxNTctNGI3ZjJmZGU2 OTBkMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NTUzODU3ZDUtMDA5ZS00NWY3LTliMTItNmU1YmNkNTY5NWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshZlUXx5KV/ioHAHnVwkn8Xfk2+6lnvKw/Sg UE3LBB0MbvYf5IKRQ431km0u04gAUJwJ9M6m9gTZjv2XkivG2fuFuO9dORIeL7lo focb6aqeForf0DETKR2izoXLo+MVwoe0QSNs78lvGAhpuNccwyly/QDSNb9QjU02 pF3e44hla2kbVJZ2BSjhTDHO7L7vbPmMWzLKVzP7cSHIfc2lTb062kBExLzf2KUw 6aYNVgt+K5DdW+zkh7o98QD5iV+Kv/9CNbVz7dpYpsic1EI2jPK3zFCoM6bgxFyc PcDTqeJ7Awu+3LArNXsUnN7ttD01/YZ4dMRlz5YaZtpsVVRhdQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ607z/iogqBmUVVobs7ufiPZQHvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2 ODg5Yy02MWFmLTRjNjEtODE1Ny00YjdmMmZkZTY5MGQvODIyNzAwZTItMzljNC0z NzBkLWEyZDYtM2U1YjRhYzA2ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQ5Njg4OWMtNjFhZi00YzYxLTgx NTctNGI3ZjJmZGU2OTBkLzc0OTY4ODljLTYxYWYtNGM2MS04MTU3LTRiN2YyZmRl NjkwZC5jcmwwHwYDVR0jBBgwFoAUWYrA5l80WnZOjSAYuX0BnNESuY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDk2ODg5Yy02MWFmLTRjNjEtODE1Ny00Yjdm MmZkZTY5MGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg8owVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYT0wKsJoAsbipX+RAUM0YxgaK00V/owTeyWNZ31l/ikPrIJvMshfPJ7j 8tJfCfV/xFuilY5pv305C6CpZxM4108Ust1FDMK6E8QZbHnd2X46claocasLdf5S ABLILxNRe3c/ZpCiZHhGPBuxK0aZ8jrLNW2vXrcTcKQc28+jBTyh5zACdl3UE+sy GqhYhp+Onx3fbBu9gAfhXE3iRvd/2FFwFIfrE7AOyyNbs7w9gCNtSES4XBTrvSt6 O34ijTCSTswBvXE6hqJmUtcf7tQ0l9dU17hKjlogPbrJ4J/777FW5mptcdaaM5ka 7GFBO0wNQvMY22pb9A98cLmjEwB5Lg== -----END CERTIFICATE-----Generated at Sat Apr 12 00:52:42 2025 by rpki-client