$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/dc04b1c3-67b4-3531-afdf-7c1d39073812.roa File: dc04b1c3-67b4-3531-afdf-7c1d39073812.roa (raw, json) Hash identifier: /EPkBi9Rd4/ApVU0vBH75Zc8f/zUhcWnf1ba6g1zg1Y= Subject key identifier: 53:A0:FD:BC:FA:A9:66:FF:37:19:E1:91:04:F3:14:AE:C4:FF:71:6D Certificate issuer: /CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71 Certificate serial: 010D0C9F4328584A10354B8FFDE814324C980DE0 Authority key identifier: 6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/dc04b1c3-67b4-3531-afdf-7c1d39073812.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 10490 IP address blocks: 128.61.0.0/16 maxlen: 24 130.207.0.0/16 maxlen: 24 143.215.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:4b:8f:fd:e8:14:32:4c:98:0d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=35710516-433e-4821-b781-840dc39118d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c8:ab:38:54:7a:ee:14:9a:e3:a5:6b:d0:63: e5:b3:a6:5d:5e:69:4d:ee:78:d1:79:3b:23:49:17: 19:02:31:82:10:a9:45:11:68:f3:6b:01:58:94:18: 92:51:b3:ff:ff:9b:6d:05:3b:4d:f0:f6:8e:ed:92: cf:ee:c2:73:eb:0e:6b:bf:b1:ad:d0:e6:91:15:5f: a0:aa:06:be:3f:da:ef:5f:c7:e7:d2:8a:db:a7:81: 3e:e7:c8:61:7c:57:6a:c9:0c:ae:76:11:44:6a:72: d2:ba:fd:71:f6:8e:c2:cc:e7:32:75:24:d4:fb:d9: 24:52:75:64:5c:b7:a4:8b:15:3f:72:73:ef:8b:e8: 5b:2f:c6:72:0f:82:73:ed:2a:ec:91:11:82:23:2b: 1f:12:5a:96:f8:1d:87:ba:7a:6c:ad:9d:35:4e:2e: 5b:15:22:a7:50:6b:6f:f2:e6:5d:5a:5f:1e:96:b3: 4c:cc:99:42:f6:0d:6e:89:23:fd:7b:8e:0b:75:a7: 73:91:76:6a:ab:e9:1d:7d:9d:cd:3b:92:a8:c4:74: 49:51:c9:26:61:ab:34:47:cc:21:af:01:c9:bb:3e: 97:6d:6f:23:ab:fe:e5:c1:ef:ff:a0:6d:12:0b:ba: 57:da:87:21:92:73:a2:41:c6:25:da:15:22:0f:ef: a7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A0:FD:BC:FA:A9:66:FF:37:19:E1:91:04:F3:14:AE:C4:FF:71:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/dc04b1c3-67b4-3531-afdf-7c1d39073812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.crl X509v3 Authority Key Identifier: keyid:6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer sbgp-ipAddrBlock: critical IPv4: 128.61.0.0/16 130.207.0.0/16 143.215.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f7:f7:e5:8f:11:82:5d:24:d9:39:96:9d:a6:06:c9:d3:23: 82:90:67:bb:e5:d9:93:f0:89:5e:ca:bb:0d:0e:bd:23:fa:aa: 71:bc:b8:62:8c:59:3e:09:8b:c1:3f:20:8a:e5:a3:b4:98:c1: 7d:0b:d1:c7:a4:71:21:d4:b8:5d:b9:1e:ac:1c:cc:29:37:2e: 55:ae:a3:18:32:9b:14:be:6c:7c:72:df:17:db:12:ec:14:53: f9:dd:b8:b0:33:3a:ca:8b:a7:f5:ce:7d:2d:0f:0a:60:81:93: ba:8e:19:e0:ac:9a:2b:fa:40:59:cb:3a:6c:01:bf:1a:db:64: d2:01:f9:13:ff:1d:3d:45:2d:73:1a:eb:75:41:bb:92:0a:73: 3b:1f:31:f9:37:87:66:be:11:cd:54:93:ca:03:bc:e5:f2:2c: 43:91:0a:8b:1f:c2:0a:c5:b8:13:5d:53:59:61:fe:88:8c:ac: 35:fc:c7:0f:a5:d2:e3:c3:94:e1:e5:53:75:57:3f:ff:66:e5: 7d:54:59:e3:61:bd:cb:b1:f5:10:04:13:9c:14:5d:6a:d6:99: d2:f1:18:ca:1b:c3:03:58:96:33:6e:a3:99:32:2c:7e:9a:1a: 43:82:72:ef:36:7e:1c:b6:16:07:a4:32:fc:c4:6e:c4:d5:e2: 0e:d8:01:c9 -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgIUAQ0Mn0MoWEoQNUuP/egUMkyYDeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTMxYmE3YjktNzBhNS00ZTdlLWJiYTQtMWE1YzIwNDg4 YzcxMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk MzU3MTA1MTYtNDMzZS00ODIxLWI3ODEtODQwZGMzOTExOGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMirOFR67hSa46Vr0GPls6ZdXmlN7njReTsj SRcZAjGCEKlFEWjzawFYlBiSUbP//5ttBTtN8PaO7ZLP7sJz6w5rv7Gt0OaRFV+g qga+P9rvX8fn0orbp4E+58hhfFdqyQyudhFEanLSuv1x9o7CzOcydSTU+9kkUnVk XLekixU/cnPvi+hbL8ZyD4Jz7SrskRGCIysfElqW+B2HunpsrZ01Ti5bFSKnUGtv 8uZdWl8elrNMzJlC9g1uiSP9e44LdadzkXZqq+kdfZ3NO5KoxHRJUckmYas0R8wh rwHJuz6XbW8jq/7lwe//oG0SC7pX2ochknOiQcYl2hUiD++nyQIDAQABo4IDXjCC A1owHQYDVR0OBBYEFFOg/bz6qWb/NxnhkQTzFK7E/3FtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMzFi YTdiOS03MGE1LTRlN2UtYmJhNC0xYTVjMjA0ODhjNzEvZGMwNGIxYzMtNjdiNC0z NTMxLWFmZGYtN2MxZDM5MDczODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTMxYmE3YjktNzBhNS00ZTdlLWJi YTQtMWE1YzIwNDg4YzcxLzEzMWJhN2I5LTcwYTUtNGU3ZS1iYmE0LTFhNWMyMDQ4 OGM3MS5jcmwwHwYDVR0jBBgwFoAUawYQaOFd4AD9aYEVHHxDxPlGoJIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMzFiYTdiOS03MGE1LTRlN2UtYmJhNC0xYTVj MjA0ODhjNzEuY2VyMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAATAPAwMAgD0DAwCC zwMDAI/XMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAE739+WPEYJdJNk5lp2mBsnTI4KQZ7vl2ZPwiV7Kuw0O vSP6qnG8uGKMWT4Ji8E/IIrlo7SYwX0L0cekcSHUuF25HqwczCk3LlWuoxgymxS+ bHxy3xfbEuwUU/nduLAzOsqLp/XOfS0PCmCBk7qOGeCsmiv6QFnLOmwBvxrbZNIB +RP/HT1FLXMa63VBu5IKczsfMfk3h2a+Ec1Uk8oDvOXyLEORCosfwgrFuBNdU1lh /oiMrDX8xw+l0uPDlOHlU3VXP/9m5X1UWeNhvcux9RAEE5wUXWrWmdLxGMobwwNY ljNuo5kyLH6aGkOCcu82fhy2FgekMvzEbsTV4g7YAck= -----END CERTIFICATE-----Generated at Sun Jun 8 08:56:04 2025 by rpki-client