$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/dc04b1c3-67b4-3531-afdf-7c1d39073812.roa File: dc04b1c3-67b4-3531-afdf-7c1d39073812.roa (raw, json) Hash identifier: c6rxXOFlx9srIvpSCi4/3GTn8mHbGOt1Q00SqL1Hv4c= Subject key identifier: 05:8C:2A:87:14:F6:47:FF:E5:FB:44:95:C7:9A:44:09:3D:9D:F5:16 Certificate issuer: /CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71 Certificate serial: 010D0C9F4328584930DE7858BB5E4603620C1100 Authority key identifier: 6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/dc04b1c3-67b4-3531-afdf-7c1d39073812.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 10490 IP address blocks: 128.61.0.0/16 maxlen: 24 130.207.0.0/16 maxlen: 24 143.215.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:78:58:bb:5e:46:03:62:0c:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=8c30985d-6d90-4bea-9287-c4568ca1af38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:81:4c:78:8a:4a:a9:ec:f8:65:c2:85:a6:e7: 97:62:77:8b:0f:59:e1:54:96:c0:db:c1:57:27:58: 51:1d:ec:44:27:3d:3a:09:73:56:b0:72:3c:f7:ad: 9b:f2:46:f0:7a:7a:03:43:b6:3e:3c:a4:19:a9:7f: d5:b9:61:a4:c7:84:92:25:0a:77:ba:d0:21:23:b1: 07:a7:c9:40:39:9f:aa:47:cf:63:4c:9b:de:0e:c4: 15:ac:5f:c7:4d:26:9e:92:53:91:32:86:8c:8f:26: 04:1d:ea:4c:bd:4a:8b:97:1d:fa:4a:6e:f5:4a:37: 7c:11:4f:8e:2e:63:fa:bb:be:73:5e:f3:21:a9:19: 63:b9:76:a9:ec:b8:6a:84:94:ca:38:18:da:1b:5f: 9a:ad:91:9f:4b:2d:c8:7b:14:d6:96:2d:32:86:e5: a0:f6:2a:0e:d0:45:8a:5e:b3:b9:8d:d2:0f:dd:3f: 68:0e:dd:0f:98:4f:5a:af:ac:13:c1:73:ea:5d:78: 6e:b6:eb:e0:ff:6c:32:09:66:cb:61:d6:44:7c:99: ab:22:d8:42:37:77:77:2d:99:65:e4:ef:d3:0b:d0: a5:01:f6:be:88:d9:85:52:19:53:2a:ba:b4:55:6a: f2:17:b0:9b:80:85:61:e5:d5:0c:cd:09:bb:fd:86: 2e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8C:2A:87:14:F6:47:FF:E5:FB:44:95:C7:9A:44:09:3D:9D:F5:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/dc04b1c3-67b4-3531-afdf-7c1d39073812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.crl X509v3 Authority Key Identifier: keyid:6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer sbgp-ipAddrBlock: critical IPv4: 128.61.0.0/16 130.207.0.0/16 143.215.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c9:47:3c:6f:e1:91:29:98:9d:96:dd:40:bf:6e:0f:47:59: 90:68:a6:4e:57:47:90:a5:d5:c0:75:33:89:0d:76:d5:df:65: 8f:83:5c:75:69:8b:0d:f6:00:0c:87:d4:da:a0:16:2b:f0:04: 2c:d7:d9:6a:77:db:e7:94:36:1a:7f:f7:cf:45:5e:dc:aa:2d: 55:cf:15:c5:54:4e:bd:53:e2:f8:dd:7d:70:8a:93:54:59:c8: c0:10:e6:0f:f7:a4:57:c8:94:ab:52:a7:d9:98:6a:21:e9:c3: 72:22:8d:4d:1b:b8:a7:86:ba:34:c1:8a:ac:ac:c6:77:95:ea: a1:7d:e3:85:0b:fd:5e:42:e7:c0:77:dc:cc:c3:16:7e:be:2a: b3:80:2e:6d:e4:70:26:be:9a:58:52:2e:cc:c8:9a:c7:b4:ab: b8:00:ba:73:de:9e:53:f5:32:6a:ce:36:3c:ca:a8:3c:68:e3: 8e:c7:89:34:e6:95:dc:8e:2b:38:7b:cb:46:03:85:80:6e:e5: 3b:95:2e:1b:c9:b7:5f:50:7f:98:a4:2e:16:a9:dc:80:8e:2e: ac:ee:bf:61:db:e2:0e:a8:6b:00:1b:c1:60:13:35:0d:f8:08: cf:b5:65:c5:a1:cc:66:2c:1e:ae:ea:9a:1f:d1:5f:5c:4c:e0: 0d:e9:f5:1d -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgIUAQ0Mn0MoWEkw3nhYu15GA2IMEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTMxYmE3YjktNzBhNS00ZTdlLWJiYTQtMWE1YzIwNDg4 YzcxMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk OGMzMDk4NWQtNmQ5MC00YmVhLTkyODctYzQ1NjhjYTFhZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4FMeIpKqez4ZcKFpueXYneLD1nhVJbA28FX J1hRHexEJz06CXNWsHI8962b8kbwenoDQ7Y+PKQZqX/VuWGkx4SSJQp3utAhI7EH p8lAOZ+qR89jTJveDsQVrF/HTSaeklORMoaMjyYEHepMvUqLlx36Sm71Sjd8EU+O LmP6u75zXvMhqRljuXap7LhqhJTKOBjaG1+arZGfSy3IexTWli0yhuWg9ioO0EWK XrO5jdIP3T9oDt0PmE9ar6wTwXPqXXhutuvg/2wyCWbLYdZEfJmrIthCN3d3LZll 5O/TC9ClAfa+iNmFUhlTKrq0VWryF7CbgIVh5dUMzQm7/YYu/wIDAQABo4IDXjCC A1owHQYDVR0OBBYEFAWMKocU9kf/5ftElceaRAk9nfUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMzFi YTdiOS03MGE1LTRlN2UtYmJhNC0xYTVjMjA0ODhjNzEvZGMwNGIxYzMtNjdiNC0z NTMxLWFmZGYtN2MxZDM5MDczODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTMxYmE3YjktNzBhNS00ZTdlLWJi YTQtMWE1YzIwNDg4YzcxLzEzMWJhN2I5LTcwYTUtNGU3ZS1iYmE0LTFhNWMyMDQ4 OGM3MS5jcmwwHwYDVR0jBBgwFoAUawYQaOFd4AD9aYEVHHxDxPlGoJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMzFiYTdiOS03MGE1LTRlN2UtYmJhNC0xYTVj MjA0ODhjNzEuY2VyMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAATAPAwMAgD0DAwCC zwMDAI/XMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAErJRzxv4ZEpmJ2W3UC/bg9HWZBopk5XR5Cl1cB1M4kN dtXfZY+DXHVpiw32AAyH1NqgFivwBCzX2Wp32+eUNhp/989FXtyqLVXPFcVUTr1T 4vjdfXCKk1RZyMAQ5g/3pFfIlKtSp9mYaiHpw3IijU0buKeGujTBiqysxneV6qF9 44UL/V5C58B33MzDFn6+KrOALm3kcCa+mlhSLszImse0q7gAunPenlP1MmrONjzK qDxo447HiTTmldyOKzh7y0YDhYBu5TuVLhvJt19Qf5ikLhap3ICOLqzuv2Hb4g6o awAbwWATNQ34CM+1ZcWhzGYsHq7qmh/RX1xM4A3p9R0= -----END CERTIFICATE-----Generated at Fri Apr 4 16:06:00 2025 by rpki-client