$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/33cfc89a-77af-32ce-967f-624f38d50607.roa File: 33cfc89a-77af-32ce-967f-624f38d50607.roa (raw, json) Hash identifier: rEIRDMdn4IxRiWvPwHQ2zrS4J7DEAWKXV8/447tuM/g= Subject key identifier: BE:9D:18:99:19:16:B2:EA:97:8A:DE:84:68:BC:8A:72:A3:C9:3A:F0 Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F43285848F65BED390805CE8A0C23B780 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/33cfc89a-77af-32ce-967f-624f38d50607.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 399381 IP address blocks: 131.201.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:ed:39:08:05:ce:8a:0c:23:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=615a44bf-298a-4d40-92e8-d1442af67227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5b:b9:b1:e2:12:e7:3c:9d:29:65:b8:22:59: 49:7c:4a:b2:3a:bc:ce:b1:d0:a9:4e:be:47:4d:b7: 6e:52:fe:06:da:d9:f5:b3:9a:73:21:30:aa:ee:8d: de:75:e6:07:62:e3:ac:c3:49:cd:7c:0d:d6:49:99: a4:35:8c:94:d1:04:83:d5:b4:20:4c:89:32:a8:ba: e3:36:80:f7:53:79:98:60:0b:b6:07:a8:64:24:50: 6f:fc:cb:36:b2:ea:33:34:ed:fb:a8:58:72:f4:22: 57:8a:1b:50:33:df:49:4f:96:41:0c:1d:65:6d:ab: 95:e3:c0:c2:23:48:87:d1:1b:7b:77:a0:68:81:67: b8:4e:62:ec:58:af:41:54:10:3f:5c:bf:3e:23:43: ed:9d:91:cd:47:16:69:21:38:f8:b0:2b:95:4e:6f: 43:c1:9f:63:6f:4d:f4:95:4f:31:bb:f3:ff:97:49: db:b3:9e:1b:04:b5:8a:4e:45:25:52:d1:8a:de:7d: cb:8a:76:d9:15:f6:db:50:96:2a:30:5f:3c:e4:14: fa:b3:c1:fc:89:21:00:13:8c:2e:82:6b:23:43:77: 4f:83:bb:48:c8:c6:31:a2:02:3f:8b:6c:44:97:f0: a5:1e:fc:f5:b4:a8:58:18:04:fd:af:52:d0:b8:45: a4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9D:18:99:19:16:B2:EA:97:8A:DE:84:68:BC:8A:72:A3:C9:3A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/33cfc89a-77af-32ce-967f-624f38d50607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:4f:6e:a6:a4:7e:f6:1b:e6:18:41:6f:b6:95:43:72:c8:91: 3a:bd:7b:02:0b:1f:84:38:c0:ba:f4:a5:19:05:e1:ce:02:a5: 60:39:54:8b:78:4e:86:c3:84:cb:d0:24:b6:fc:94:57:88:1f: fe:80:5b:10:bf:aa:7b:2c:7e:73:a9:c0:24:2f:b9:24:96:c5: 7c:af:e9:bf:a9:18:2f:89:65:83:e9:1b:45:0c:3a:02:36:63: b5:dc:53:46:db:b9:6e:63:b3:11:b2:c9:d6:b4:bf:de:af:a3: 91:59:ab:c3:e4:5c:73:ff:a4:71:8e:b3:b9:be:84:6b:be:19: c0:31:4e:d1:5d:89:b9:1b:ec:46:5f:6b:2b:68:0f:60:5b:c8: 42:b4:33:bd:52:d2:3e:6d:ca:68:d3:69:dc:12:21:64:8e:84: 65:12:b2:59:bf:b8:f8:58:a3:a2:f1:1d:cf:96:05:63:18:94: 07:5b:01:21:2d:72:ad:98:5b:99:9b:e5:a7:48:c4:2e:13:b2: 9e:43:42:56:4e:70:7f:aa:a1:a1:fa:f3:77:95:4b:41:df:ff: 03:5a:87:ca:90:40:88:19:9e:b8:66:56:43:76:39:3a:82:7a: b9:00:8a:36:bb:cc:7d:a9:6d:14:e6:bc:64:1c:fa:66:b0:44: e7:af:0f:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+05CAXOigwjt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NjE1YTQ0YmYtMjk4YS00ZDQwLTkyZTgtZDE0NDJhZjY3MjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFu5seIS5zydKWW4IllJfEqyOrzOsdCpTr5H TbduUv4G2tn1s5pzITCq7o3edeYHYuOsw0nNfA3WSZmkNYyU0QSD1bQgTIkyqLrj NoD3U3mYYAu2B6hkJFBv/Ms2suozNO37qFhy9CJXihtQM99JT5ZBDB1lbauV48DC I0iH0Rt7d6BogWe4TmLsWK9BVBA/XL8+I0PtnZHNRxZpITj4sCuVTm9DwZ9jb030 lU8xu/P/l0nbs54bBLWKTkUlUtGK3n3LinbZFfbbUJYqMF885BT6s8H8iSEAE4wu gmsjQ3dPg7tIyMYxogI/i2xEl/ClHvz1tKhYGAT9r1LQuEWkPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6dGJkZFrLql4rehGi8inKjyTrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvMzNjZmM4OWEtNzdhZi0z MmNlLTk2N2YtNjI0ZjM4ZDUwNjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg8nwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNPbqakfvYb5hhBb7aVQ3LIkTq9ewILH4Q4wLr0pRkF4c4CpWA5VIt4 TobDhMvQJLb8lFeIH/6AWxC/qnssfnOpwCQvuSSWxXyv6b+pGC+JZYPpG0UMOgI2 Y7XcU0bbuW5jsxGyyda0v96vo5FZq8PkXHP/pHGOs7m+hGu+GcAxTtFdibkb7EZf aytoD2BbyEK0M71S0j5tymjTadwSIWSOhGUSslm/uPhYo6LxHc+WBWMYlAdbASEt cq2YW5mb5adIxC4Tsp5DQlZOcH+qoaH683eVS0Hf/wNah8qQQIgZnrhmVkN2OTqC erkAija7zH2pbRTmvGQc+mawROevD1M= -----END CERTIFICATE-----Generated at Sat Apr 5 10:07:55 2025 by rpki-client