$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2e020565-2650-3731-84b4-b30e83f1cb6a.roa File: 2e020565-2650-3731-84b4-b30e83f1cb6a.roa (raw, json) Hash identifier: mxEhOFaHFQ08ya9NgAN1rDTZ4Gxt1vg+Fd4hws0V/xc= Subject key identifier: 52:62:4A:DE:16:DA:35:6F:20:03:45:3F:3D:DE:C6:71:E6:55:4D:76 Certificate issuer: /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Certificate serial: 010D0C9F4328584905B6B4F135C15E54283AE280 Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2e020565-2650-3731-84b4-b30e83f1cb6a.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 32145 IP address blocks: 131.109.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b4:f1:35:c1:5e:54:28:3a:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=296913de-2565-4331-adac-112a3a94e475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:32:8a:2e:f9:a9:8f:b5:15:47:a6:0f:9f:84: 8e:da:2f:a6:cd:19:eb:f9:33:55:0f:98:50:e1:10: 58:3f:af:9b:01:f9:cc:88:b9:0c:cc:8e:65:35:6a: 26:70:af:e1:b3:f9:23:2d:95:42:73:b1:31:bb:75: 35:20:46:bc:d2:1b:65:9b:68:6a:7f:cc:92:2d:04: 34:dc:4e:0d:8c:30:28:e9:f7:4d:d0:b0:ad:20:f8: 9e:b4:20:b0:9c:46:a5:30:4a:b5:bb:60:a1:d1:06: 9a:77:21:ce:aa:36:b4:71:34:6a:02:b7:30:dd:c2: 2c:84:fc:6e:51:07:84:c2:33:f5:e0:f0:59:b2:a8: 0f:5c:c6:28:c0:0d:64:a2:a6:c9:aa:03:9d:44:85: e2:24:5e:ae:34:ef:8b:5c:be:16:6e:65:ac:a2:cd: c6:38:5e:a8:0c:8f:07:a4:dc:1c:16:a1:9d:a3:0b: dc:63:f7:4a:ed:b0:63:e7:e8:10:2c:dd:38:a5:b7: 4e:40:b2:50:bc:2b:c0:87:59:8a:23:f7:a9:3f:87: 7d:14:5f:2a:a5:6c:df:d3:46:45:0e:c4:f8:70:4c: b9:7a:52:6f:91:cc:ad:6f:1f:4a:75:71:e6:da:36: 02:72:05:c0:26:c2:5d:38:d5:53:18:af:53:b4:f8: 62:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:62:4A:DE:16:DA:35:6F:20:03:45:3F:3D:DE:C6:71:E6:55:4D:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2e020565-2650-3731-84b4-b30e83f1cb6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl X509v3 Authority Key Identifier: keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer sbgp-ipAddrBlock: critical IPv4: 131.109.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:12:0a:cb:5d:01:b7:57:f7:c0:cf:ee:1d:14:04:f9:8c:44: 19:8f:97:5d:69:ba:c8:e1:32:7e:2f:92:90:22:5e:f0:6a:7a: a1:0f:b9:94:df:2f:bd:32:36:58:5c:ac:7c:8c:bd:6a:55:f9: 44:87:99:e1:41:23:fa:dd:dd:27:86:fa:7e:d9:05:33:ce:88: 3c:53:1e:86:c6:75:b1:b7:c0:64:67:61:ea:cd:48:92:a8:87: 50:f7:1a:39:41:06:ff:b3:09:75:ea:2f:d5:10:b6:0c:c2:ff: e7:6f:3f:8f:65:e8:05:e3:4f:0d:14:cd:7f:d6:f8:aa:05:3e: 51:eb:93:1b:a1:c8:fa:41:e4:7c:7c:7d:b1:2c:cc:ba:f9:e2: 5c:d2:21:56:91:0a:06:41:21:1f:b5:9d:f2:ac:44:38:1b:ba: 1e:0b:e8:42:89:6f:b8:0d:1c:4a:65:82:cc:29:5e:6f:cf:df: 0d:58:41:7c:db:47:90:10:a9:ed:4d:78:04:1a:2a:4b:1b:b1: 63:71:a2:e0:87:c3:d9:11:36:a6:bf:d0:59:89:57:c8:d4:42: a8:68:36:be:48:19:44:c7:de:9a:1c:09:fe:5b:a3:b0:60:9d: 49:5c:89:9f:29:fe:fb:5b:68:28:74:3b:cb:e5:96:17:ca:5b: 3e:2e:4e:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrTxNcFeVCg64oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNlMDk2NzMtNWM2ZS00MzQwLWFkMTEtNGRhOGRmYjhj Nzc3MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk Mjk2OTEzZGUtMjU2NS00MzMxLWFkYWMtMTEyYTNhOTRlNDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DKKLvmpj7UVR6YPn4SO2i+mzRnr+TNVD5hQ 4RBYP6+bAfnMiLkMzI5lNWomcK/hs/kjLZVCc7Exu3U1IEa80htlm2hqf8ySLQQ0 3E4NjDAo6fdN0LCtIPietCCwnEalMEq1u2Ch0QaadyHOqja0cTRqArcw3cIshPxu UQeEwjP14PBZsqgPXMYowA1koqbJqgOdRIXiJF6uNO+LXL4WbmWsos3GOF6oDI8H pNwcFqGdowvcY/dK7bBj5+gQLN04pbdOQLJQvCvAh1mKI/epP4d9FF8qpWzf00ZF DsT4cEy5elJvkcytbx9KdXHm2jYCcgXAJsJdONVTGK9TtPhiVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJiSt4W2jVvIANFPz3exnHmVU12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mM2Uw OTY3My01YzZlLTQzNDAtYWQxMS00ZGE4ZGZiOGM3NzcvMmUwMjA1NjUtMjY1MC0z NzMxLTg0YjQtYjMwZTgzZjFjYjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjNlMDk2NzMtNWM2ZS00MzQwLWFk MTEtNGRhOGRmYjhjNzc3L2YzZTA5NjczLTVjNmUtNDM0MC1hZDExLTRkYThkZmI4 Yzc3Ny5jcmwwHwYDVR0jBBgwFoAUaz+txng1ZU8YT7uqjnskCN4y2rswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mM2UwOTY3My01YzZlLTQzNDAtYWQxMS00ZGE4 ZGZiOGM3NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg22AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8SCstdAbdX98DP7h0UBPmMRBmPl11pusjhMn4vkpAiXvBqeqEPuZTf L70yNlhcrHyMvWpV+USHmeFBI/rd3SeG+n7ZBTPOiDxTHobGdbG3wGRnYerNSJKo h1D3GjlBBv+zCXXqL9UQtgzC/+dvP49l6AXjTw0UzX/W+KoFPlHrkxuhyPpB5Hx8 fbEszLr54lzSIVaRCgZBIR+1nfKsRDgbuh4L6EKJb7gNHEplgswpXm/P3w1YQXzb R5AQqe1NeAQaKksbsWNxouCHw9kRNqa/0FmJV8jUQqhoNr5IGUTH3pocCf5bo7Bg nUlciZ8p/vtbaCh0O8vllhfKWz4uTgk= -----END CERTIFICATE-----Generated at Fri Apr 11 21:28:37 2025 by rpki-client