$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/dcaafa36-cbc9-3741-b66e-6b1039749e40.roa File: dcaafa36-cbc9-3741-b66e-6b1039749e40.roa (raw, json) Hash identifier: v01RbyMpOW2T/P0tzWCV/rvOOfBWL7XG4LcsfW7kJ60= Subject key identifier: D9:00:09:74:5E:75:9E:13:48:0E:97:6C:8F:71:52:DB:EB:E2:B9:71 Certificate issuer: /CN=34f935ff-170a-4b14-b64c-790e52fa9534 Certificate serial: 010D0C9F4328584908816CEF88EB3C4C1496EAE0 Authority key identifier: FB:D8:7A:7D:73:3B:56:9C:59:45:D9:AF:88:BC:6A:21:D6:B2:5D:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/dcaafa36-cbc9-3741-b66e-6b1039749e40.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 8111 IP address blocks: 131.162.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:6c:ef:88:eb:3c:4c:14:96:ea:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f935ff-170a-4b14-b64c-790e52fa9534 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=aade03c5-9956-4281-a2b3-c87434aeb05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:82:95:da:1e:2f:ea:0f:09:79:f6:b5:be:1a: f4:13:b7:18:5c:96:80:43:8b:39:e1:d0:d0:26:d8: be:ee:0a:de:ab:6f:af:cc:74:09:c4:b7:aa:94:3e: 0c:d4:ab:d3:5d:70:64:2f:44:40:be:0f:28:89:79: 58:3c:37:1b:1e:ec:d8:a5:b1:10:d5:c0:1d:e1:19: b0:af:ed:6e:51:dc:5b:a5:9c:26:1c:59:d9:46:f1: ce:0f:58:21:c9:01:a4:b0:40:30:b7:3e:8e:1c:3d: d0:77:38:5b:ff:ce:29:76:0b:88:76:63:71:a3:36: 14:ad:3a:4c:cd:e2:42:9a:c5:10:35:ba:af:64:8c: db:b3:21:ad:85:7c:85:02:86:c5:06:b6:34:1e:84: 6e:60:f9:49:05:f3:d1:ca:e0:2a:9d:7b:a1:46:1d: cc:fa:d6:a1:49:b8:a4:bc:d3:11:2a:7a:9f:48:34: e2:2a:b0:4b:cd:b7:ce:07:7d:cf:b2:47:03:ed:22: e5:58:68:b5:f9:d9:66:9c:6d:48:43:c2:89:7c:08: b5:df:d7:7b:fd:fd:0b:fc:d7:3b:c7:0f:29:5c:6e: 3c:a6:55:19:ff:43:ef:18:23:5e:4b:f6:46:67:a2: 9a:a8:c3:ca:a7:32:28:b7:12:5d:16:f8:0c:e8:e1: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:00:09:74:5E:75:9E:13:48:0E:97:6C:8F:71:52:DB:EB:E2:B9:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/dcaafa36-cbc9-3741-b66e-6b1039749e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.crl X509v3 Authority Key Identifier: keyid:FB:D8:7A:7D:73:3B:56:9C:59:45:D9:AF:88:BC:6A:21:D6:B2:5D:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534.cer sbgp-ipAddrBlock: critical IPv4: 131.162.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:f3:42:bd:1c:36:9c:a0:12:1b:c5:82:66:84:04:9b:95:01: 27:ec:e9:31:ec:2a:be:42:98:7a:f0:21:6c:35:5b:85:76:4d: 0d:bd:2c:cd:b2:f0:e7:9c:d8:d2:80:d1:6c:9e:85:9f:ea:2d: 33:2c:c8:81:72:3c:a3:70:09:96:c4:68:fb:f9:92:cf:55:61: db:09:b0:f7:31:0e:ae:f0:18:5c:ea:cd:94:27:67:9e:72:9f: aa:1c:17:54:0f:f6:ae:5c:19:77:86:d3:01:14:98:db:1b:8e: 1a:79:ca:cc:e8:c0:15:fa:f7:20:29:da:ac:1d:89:a5:96:90: 7b:84:ff:13:5f:50:c5:da:4a:ec:54:f6:f4:6e:18:5d:ee:c8: f1:7b:d6:73:04:c5:63:6b:0e:3f:b7:f7:9f:ab:2b:ee:b8:3c: a7:b5:1d:24:c3:41:23:b4:06:27:98:a2:ec:bd:1d:ff:3e:34: 9e:fb:f8:30:be:97:41:99:d8:5c:37:b5:3d:3e:2f:5d:0d:b9: 10:11:2e:c9:32:f7:a7:d3:c1:e0:40:d0:c1:2b:3d:f2:16:6a: 59:4d:c3:a2:55:9f:e6:dc:8e:f7:c1:a2:43:93:e5:6b:0c:92: ac:de:f9:d0:3a:09:3f:8d:3e:f2:d0:a0:59:6c:d7:c6:eb:c2: 50:d1:aa:3b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkIgWzviOs8TBSW6uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRmOTM1ZmYtMTcwYS00YjE0LWI2NGMtNzkwZTUyZmE5 NTM0MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk YWFkZTAzYzUtOTk1Ni00MjgxLWEyYjMtYzg3NDM0YWViMDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYKV2h4v6g8Jefa1vhr0E7cYXJaAQ4s54dDQ Jti+7greq2+vzHQJxLeqlD4M1KvTXXBkL0RAvg8oiXlYPDcbHuzYpbEQ1cAd4Rmw r+1uUdxbpZwmHFnZRvHOD1ghyQGksEAwtz6OHD3Qdzhb/84pdguIdmNxozYUrTpM zeJCmsUQNbqvZIzbsyGthXyFAobFBrY0HoRuYPlJBfPRyuAqnXuhRh3M+tahSbik vNMRKnqfSDTiKrBLzbfOB33PskcD7SLlWGi1+dlmnG1IQ8KJfAi139d7/f0L/Nc7 xw8pXG48plUZ/0PvGCNeS/ZGZ6KaqMPKpzIotxJdFvgM6OHvIwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNkACXRedZ4TSA6XbI9xUtvr4rlxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNGY5 MzVmZi0xNzBhLTRiMTQtYjY0Yy03OTBlNTJmYTk1MzQvZGNhYWZhMzYtY2JjOS0z NzQxLWI2NmUtNmIxMDM5NzQ5ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzRmOTM1ZmYtMTcwYS00YjE0LWI2 NGMtNzkwZTUyZmE5NTM0LzM0ZjkzNWZmLTE3MGEtNGIxNC1iNjRjLTc5MGU1MmZh OTUzNC5jcmwwHwYDVR0jBBgwFoAU+9h6fXM7VpxZRdmviLxqIdayXY0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNGY5MzVmZi0xNzBhLTRiMTQtYjY0Yy03OTBl NTJmYTk1MzQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg6IwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAg/NCvRw2nKASG8WCZoQEm5UBJ+zpMewqvkKYevAhbDVbhXZNDb0szbLw 55zY0oDRbJ6Fn+otMyzIgXI8o3AJlsRo+/mSz1Vh2wmw9zEOrvAYXOrNlCdnnnKf qhwXVA/2rlwZd4bTARSY2xuOGnnKzOjAFfr3ICnarB2JpZaQe4T/E19QxdpK7FT2 9G4YXe7I8XvWcwTFY2sOP7f3n6sr7rg8p7UdJMNBI7QGJ5ii7L0d/z40nvv4ML6X QZnYXDe1PT4vXQ25EBEuyTL3p9PB4EDQwSs98hZqWU3DolWf5tyO98GiQ5PlawyS rN750DoJP40+8tCgWWzXxuvCUNGqOw== -----END CERTIFICATE-----Generated at Fri Mar 14 11:04:26 2025 by rpki-client