$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa File: 2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa (raw, json) Hash identifier: RNL4K3oZ/q/hqhF63yyOHgtgtf8H/+lgfQLGimOU4q8= Subject key identifier: 3E:11:F1:CB:91:35:11:97:5E:47:BD:80:6D:98:03:69:36:E1:60:DC Certificate issuer: /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Certificate serial: 010D0C9F43285848BBBB7E4A8A5C647FA8DE8380 Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 14464 IP address blocks: 131.109.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:7e:4a:8a:5c:64:7f:a8:de:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=b0933032-5aa3-4eae-a827-02b7aaa74e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d3:56:f7:a5:39:29:72:76:16:03:b4:2b:b2: ac:d3:85:ea:de:2b:81:29:fd:26:87:fc:40:2d:40: 37:4e:44:e6:0c:42:27:ae:c1:0f:d3:9b:0b:cb:4b: f1:37:b3:c5:f7:6c:a9:4c:58:76:a0:8d:4e:6a:28: 51:e6:57:6d:0b:55:be:4e:29:b9:07:31:f0:36:1b: ba:86:a7:5d:7b:ca:19:1b:ef:c9:03:a6:c3:5d:82: f6:8b:a8:81:f8:48:e4:e2:e5:79:b6:d7:26:f6:90: 47:da:bd:84:b3:9a:58:b4:d1:31:2d:85:06:f9:69: 34:bc:f0:31:da:2b:4c:e9:a9:45:e1:4d:1c:43:b1: d1:88:e6:af:1b:89:cf:69:93:d5:b0:21:c5:2c:14: bc:89:1d:e0:57:85:5b:e1:c1:90:37:5a:5b:c7:98: 59:35:32:00:f7:6f:f7:a3:f3:75:a5:97:39:ab:d6: 15:fb:d5:04:76:f7:ad:22:2f:40:ea:af:53:0a:97: fa:f5:af:63:ab:4c:89:3f:95:63:a0:7d:dd:c4:2a: 0b:27:28:76:b7:d2:a4:4d:e5:49:15:eb:78:b0:20: 66:e3:9c:a6:17:30:df:e7:2c:37:ac:7a:0b:d7:58: 05:86:47:a8:a6:fb:ba:f2:0c:ee:9f:70:f4:c6:a9: 14:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:11:F1:CB:91:35:11:97:5E:47:BD:80:6D:98:03:69:36:E1:60:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl X509v3 Authority Key Identifier: keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer sbgp-ipAddrBlock: critical IPv4: 131.109.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:33:f4:0c:d4:06:b6:6e:b3:df:83:f1:03:1e:59:b0:24:58: 5a:70:ac:75:c8:4f:a7:04:b9:60:12:9c:57:26:38:20:14:3d: a9:92:8b:25:00:54:99:5e:8e:77:cc:c1:21:0f:07:6f:6f:95: 35:0e:94:bf:84:d3:df:43:a1:38:1f:f0:16:9a:de:db:28:fa: 1c:0d:88:16:97:1e:b4:40:ab:b1:61:da:73:fe:72:4d:f7:2f: 74:cb:30:38:71:d5:6e:4f:e8:66:d2:0f:0e:e8:12:f6:e1:d6: 57:6e:de:7e:ad:ae:e2:55:4d:d3:d0:b6:6a:9f:51:9d:57:7b: 9a:0d:60:d4:eb:e7:c0:8f:a8:66:91:f7:69:f3:72:d8:fc:82: f5:db:d0:8c:61:fd:45:6a:02:9d:bd:10:f8:ae:05:4a:82:34: 26:c6:8f:36:59:bc:80:63:74:e1:76:62:88:d2:0d:89:30:e5: 2b:7d:75:a3:50:24:95:fb:f7:5b:45:87:3f:8e:c1:04:24:d1: b2:c4:6e:79:d8:47:42:38:26:e1:3a:23:fe:3f:a5:92:cd:33: f3:48:42:a7:cb:83:26:a6:13:3d:4c:9d:f8:2c:63:e7:84:7e: 5e:f5:cd:36:b2:91:de:d8:b2:f2:cc:f8:e5:4e:9f:dd:3e:b0: df:bc:0e:5c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEi7u35Kilxkf6jeg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNlMDk2NzMtNWM2ZS00MzQwLWFkMTEtNGRhOGRmYjhj Nzc3MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk YjA5MzMwMzItNWFhMy00ZWFlLWE4MjctMDJiN2FhYTc0ZTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9NW96U5KXJ2FgO0K7Ks04Xq3iuBKf0mh/xA LUA3TkTmDEInrsEP05sLy0vxN7PF92ypTFh2oI1OaihR5ldtC1W+Tim5BzHwNhu6 hqdde8oZG+/JA6bDXYL2i6iB+Ejk4uV5ttcm9pBH2r2Es5pYtNExLYUG+Wk0vPAx 2itM6alF4U0cQ7HRiOavG4nPaZPVsCHFLBS8iR3gV4Vb4cGQN1pbx5hZNTIA92/3 o/N1pZc5q9YV+9UEdvetIi9A6q9TCpf69a9jq0yJP5VjoH3dxCoLJyh2t9KkTeVJ Fet4sCBm45ymFzDf5yw3rHoL11gFhkeopvu68gzun3D0xqkUrQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFD4R8cuRNRGXXke9gG2YA2k24WDcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mM2Uw OTY3My01YzZlLTQzNDAtYWQxMS00ZGE4ZGZiOGM3NzcvMmMzMmUzYmQtMTIwMC0z OTg4LTlhNTQtZWU0YTZkMjc1YzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjNlMDk2NzMtNWM2ZS00MzQwLWFk MTEtNGRhOGRmYjhjNzc3L2YzZTA5NjczLTVjNmUtNDM0MC1hZDExLTRkYThkZmI4 Yzc3Ny5jcmwwHwYDVR0jBBgwFoAUaz+txng1ZU8YT7uqjnskCN4y2rswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mM2UwOTY3My01YzZlLTQzNDAtYWQxMS00ZGE4 ZGZiOGM3NzcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg20wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAajP0DNQGtm6z34PxAx5ZsCRYWnCsdchPpwS5YBKcVyY4IBQ9qZKLJQBU mV6Od8zBIQ8Hb2+VNQ6Uv4TT30OhOB/wFpre2yj6HA2IFpcetECrsWHac/5yTfcv dMswOHHVbk/oZtIPDugS9uHWV27efq2u4lVN09C2ap9RnVd7mg1g1OvnwI+oZpH3 afNy2PyC9dvQjGH9RWoCnb0Q+K4FSoI0JsaPNlm8gGN04XZiiNINiTDlK311o1Ak lfv3W0WHP47BBCTRssRuedhHQjgm4Toj/j+lks0z80hCp8uDJqYTPUyd+Cxj54R+ XvXNNrKR3tiy8sz45U6f3T6w37wOXA== -----END CERTIFICATE-----Generated at Fri Apr 11 23:15:12 2025 by rpki-client