$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/d398e187-3fa7-3919-8a37-a9993ff3c633.roa File: d398e187-3fa7-3919-8a37-a9993ff3c633.roa (raw, json) Hash identifier: dDjLnsQFz5NSo3tUSESaCtF2tK69EAOIdbBv4t7XFk4= Subject key identifier: DF:53:5C:7D:7A:B4:B0:2C:3C:38:80:8C:2A:56:9E:F0:8E:DD:AC:39 Certificate issuer: /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e Certificate serial: 010D0C9F43285848EC9693D590D50D066525D080 Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/d398e187-3fa7-3919-8a37-a9993ff3c633.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 16580 IP address blocks: 131.232.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:93:d5:90:d5:0d:06:65:25:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=0be85b28-5d76-45ea-b0e9-ea0b36fe3313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a0:4e:8f:9e:18:44:81:1b:5e:dc:ad:a2:6b: 6e:6b:de:dd:d7:4d:60:eb:fd:97:27:06:a2:4f:ab: 86:62:58:4e:a1:94:c7:70:94:15:0c:c5:48:85:5c: 03:b5:8f:f7:17:c5:20:20:72:7f:bc:18:61:cf:c2: 74:5e:40:ef:89:79:a5:49:aa:b4:8c:bc:bd:50:bb: ee:4a:be:42:d4:bc:d3:96:ed:1c:e6:34:da:d3:a0: 40:1c:ef:d4:78:8b:1a:54:f9:0d:db:d5:28:d0:8d: 2c:c3:58:0e:46:79:14:e9:65:b8:b2:57:34:44:bf: d6:e0:40:1d:ba:63:f8:66:f6:2d:22:c7:5b:7f:3c: a9:d1:47:3b:c2:0c:2c:c0:b4:a8:be:bf:8d:f3:8b: 45:13:9d:85:ef:b4:cf:ad:aa:07:3a:d7:97:ac:7b: 86:ef:1b:44:c7:74:1c:9d:26:5a:e4:1c:62:f2:e2: 7d:3e:59:18:fe:30:75:78:cb:db:92:31:bc:2b:ca: d2:74:bb:99:d1:91:3b:53:ae:67:ec:1e:72:12:d2: 5d:17:e8:29:95:83:ef:6c:af:b7:b9:9b:e1:ec:38: 21:03:e6:f1:03:6b:09:6e:6d:c3:b6:a8:2d:ac:fd: 1e:cc:f8:2e:85:4a:28:ed:f9:a7:c9:b8:30:c4:31: 12:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:53:5C:7D:7A:B4:B0:2C:3C:38:80:8C:2A:56:9E:F0:8E:DD:AC:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/d398e187-3fa7-3919-8a37-a9993ff3c633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl X509v3 Authority Key Identifier: keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer sbgp-ipAddrBlock: critical IPv4: 131.232.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:f4:75:e2:70:1b:e8:b2:63:0e:20:35:1d:79:1a:0e:6c:c0: 40:40:21:bd:33:f6:74:51:9d:3c:2c:d4:99:79:ca:e5:09:c7: ac:c0:03:2c:26:27:84:1e:cd:80:98:43:b4:30:0f:bc:7c:41: 0a:19:bb:3e:4a:3f:83:e7:1d:c7:28:11:a0:55:87:60:0e:1d: 05:14:06:1c:b2:16:7e:59:e7:93:79:f5:99:da:04:28:1b:05: 30:ac:9f:a9:b4:66:b6:15:7c:3e:92:78:2e:21:90:5c:d6:33: 41:9f:c6:ce:19:f1:c9:e3:a9:8b:4a:c5:d7:78:2b:f7:0a:52: 15:5b:39:97:c4:7d:3b:30:2a:a2:dd:a9:77:77:00:8f:31:c7: 4d:b1:15:dd:35:8d:14:af:ab:42:1c:36:a4:7c:17:40:da:80: 59:69:d6:51:ad:51:e9:30:53:19:a4:22:0e:16:82:4d:15:c6: 86:3c:fd:8d:3f:32:0d:51:4d:5f:dc:ab:5f:53:64:1b:60:e2: b0:5b:31:6f:2f:91:bd:fa:49:3e:6f:e9:27:36:cd:43:40:ee: be:6f:fb:1e:9a:4e:f1:81:d9:16:2b:de:c9:9d:9e:fa:12:ac: 40:f6:13:06:af:fe:e1:ab:67:e3:db:31:66:7b:2c:a2:c6:b9: 94:c0:5a:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpPVkNUNBmUl0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdlNjRiNjYtODRkZi00NjY1LWE0ZmItZWIzYjhhZGQz NjVlMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MGJlODViMjgtNWQ3Ni00NWVhLWIwZTktZWEwYjM2ZmUzMzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6BOj54YRIEbXtytomtua97d101g6/2XJwai T6uGYlhOoZTHcJQVDMVIhVwDtY/3F8UgIHJ/vBhhz8J0XkDviXmlSaq0jLy9ULvu Sr5C1LzTlu0c5jTa06BAHO/UeIsaVPkN29Uo0I0sw1gORnkU6WW4slc0RL/W4EAd umP4ZvYtIsdbfzyp0Uc7wgwswLSovr+N84tFE52F77TPraoHOteXrHuG7xtEx3Qc nSZa5Bxi8uJ9PlkY/jB1eMvbkjG8K8rSdLuZ0ZE7U65n7B5yEtJdF+gplYPvbK+3 uZvh7DghA+bxA2sJbm3DtqgtrP0ezPguhUoo7fmnybgwxDESdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9TXH16tLAsPDiAjCpWnvCO3aw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2 NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNiOGFkZDM2NWUvZDM5OGUxODctM2ZhNy0z OTE5LThhMzctYTk5OTNmZjNjNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdlNjRiNjYtODRkZi00NjY1LWE0 ZmItZWIzYjhhZGQzNjVlL2E3ZTY0YjY2LTg0ZGYtNDY2NS1hNGZiLWViM2I4YWRk MzY1ZS5jcmwwHwYDVR0jBBgwFoAURD98KgLjgWbdKUOAz3Mgib/DGEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNi OGFkZDM2NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+glMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHn0deJwG+iyYw4gNR15Gg5swEBAIb0z9nRRnTws1Jl5yuUJx6zAAywm J4QezYCYQ7QwD7x8QQoZuz5KP4PnHccoEaBVh2AOHQUUBhyyFn5Z55N59ZnaBCgb BTCsn6m0ZrYVfD6SeC4hkFzWM0Gfxs4Z8cnjqYtKxdd4K/cKUhVbOZfEfTswKqLd qXd3AI8xx02xFd01jRSvq0IcNqR8F0DagFlp1lGtUekwUxmkIg4Wgk0VxoY8/Y0/ Mg1RTV/cq19TZBtg4rBbMW8vkb36ST5v6Sc2zUNA7r5v+x6aTvGB2RYr3smdnvoS rED2Ewav/uGrZ+PbMWZ7LKLGuZTAWvA= -----END CERTIFICATE-----Generated at Fri Mar 14 09:17:50 2025 by rpki-client