$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/00b7549a-a565-32d7-a6e9-7ffb9bd6697b.roa File: 00b7549a-a565-32d7-a6e9-7ffb9bd6697b.roa (raw, json) Hash identifier: /O6G6AdXvyO/F/HA3O1pV1TYGUOlSHAzorSVGiKvlqM= Subject key identifier: 17:91:16:10:C7:64:FC:A0:81:8C:43:8A:5D:68:71:2F:87:0E:3E:3F Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490E16B9BB9547BDB72AE530C0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/00b7549a-a565-32d7-a6e9-7ffb9bd6697b.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 11572 IP address blocks: 131.153.152.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:b9:bb:95:47:bd:b7:2a:e5:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=65ce19ed-adef-489f-bb33-bc2ce38c4ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:72:5e:bf:6c:bf:5c:31:6b:59:f9:9b:87:c7: 55:79:9f:4a:95:bb:b1:f5:1b:37:b5:51:dc:c5:36: dd:13:f5:02:3a:cd:35:54:be:f4:91:b5:13:5f:e7: 53:ff:70:7c:09:fa:13:57:aa:79:7b:49:10:8a:92: b7:d4:f2:1d:a5:39:77:81:5d:f2:33:39:be:bd:4f: b5:f4:5e:54:9f:d4:03:b3:8d:d3:d5:53:a3:e6:7b: 5f:e3:e7:f6:47:b6:65:c6:46:d5:e1:1f:df:28:de: 26:94:2b:7f:0d:57:20:fa:f4:a6:28:48:50:a7:aa: 86:05:ce:fb:70:1a:0b:a5:d2:7b:67:e8:36:3d:9a: 2a:ea:96:57:a4:ed:0c:85:89:97:2a:ce:22:7a:1b: f0:81:11:fb:60:49:34:d2:fe:03:43:a8:a0:ce:ce: 43:e3:19:d3:af:33:ee:71:e2:82:47:ac:0f:6b:1b: 26:69:fd:6c:59:32:db:a9:cb:7b:1c:a3:12:2e:d0: 83:ed:87:3f:f4:d2:32:8e:5c:75:08:10:b1:69:20: 1e:d9:19:42:31:2f:c8:fe:37:2c:08:f3:77:17:d3: 84:52:03:c8:d9:e6:6f:f5:72:57:eb:25:8d:ea:d6: 59:54:d3:25:52:cf:7f:fa:76:75:a3:20:4c:9a:2b: a4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:91:16:10:C7:64:FC:A0:81:8C:43:8A:5D:68:71:2F:87:0E:3E:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/00b7549a-a565-32d7-a6e9-7ffb9bd6697b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:32:0c:e4:3d:d7:cb:32:98:e6:cc:4e:bb:78:9b:ba:9a:1b: f4:cb:a3:3f:0f:39:d0:ec:23:66:c8:6b:91:38:8e:d2:81:43: af:48:1a:9f:de:9f:2c:75:ff:9c:51:04:28:d2:0e:15:4b:f6: f0:37:ef:14:34:7e:76:90:3c:ca:26:45:8a:9c:e5:8f:0d:e6: d4:3c:c7:28:8a:f4:92:39:6c:8e:6f:83:94:02:7e:51:85:d9: c7:d3:3d:c5:ef:eb:fe:27:c2:27:6c:ac:e2:f1:62:58:c2:f5: 30:48:2d:51:69:e7:0e:c0:1f:bb:45:bd:43:98:85:71:31:23: f5:9a:e1:54:2b:6c:3a:32:6b:2a:73:3f:53:38:fa:cb:93:1c: 17:20:35:4c:5d:1e:b0:e1:8d:06:33:58:e5:f4:00:72:69:7c: 1f:ce:47:96:af:bf:c3:c0:c8:42:8d:96:c9:3f:28:a2:1c:81: 5a:1a:14:e2:e5:7f:75:fc:4a:5c:ce:f7:b1:0c:32:9a:b8:e1: d6:48:e7:8c:48:db:d4:6a:aa:90:87:80:fd:3d:1b:19:56:3f: b7:f5:99:22:91:ff:eb:e6:5b:9b:d7:71:d1:55:85:7b:0d:26: 6e:e8:b5:d2:31:db:16:89:3a:a7:40:80:e7:a7:54:62:d6:5b: 82:54:78:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFrm7lUe9tyrlMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk NjVjZTE5ZWQtYWRlZi00ODlmLWJiMzMtYmMyY2UzOGM0ZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3Jev2y/XDFrWfmbh8dVeZ9Klbux9Rs3tVHc xTbdE/UCOs01VL70kbUTX+dT/3B8CfoTV6p5e0kQipK31PIdpTl3gV3yMzm+vU+1 9F5Un9QDs43T1VOj5ntf4+f2R7ZlxkbV4R/fKN4mlCt/DVcg+vSmKEhQp6qGBc77 cBoLpdJ7Z+g2PZoq6pZXpO0MhYmXKs4iehvwgRH7YEk00v4DQ6igzs5D4xnTrzPu ceKCR6wPaxsmaf1sWTLbqct7HKMSLtCD7Yc/9NIyjlx1CBCxaSAe2RlCMS/I/jcs CPN3F9OEUgPI2eZv9XJX6yWN6tZZVNMlUs9/+nZ1oyBMmiukvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeRFhDHZPyggYxDil1ocS+HDj4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMDBiNzU0OWEtYTU2NS0z MmQ3LWE2ZTktN2ZmYjliZDY2OTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5mYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEyDOQ918symObMTrt4m7qaG/TLoz8POdDsI2bIa5E4jtKBQ69IGp/e nyx1/5xRBCjSDhVL9vA37xQ0fnaQPMomRYqc5Y8N5tQ8xyiK9JI5bI5vg5QCflGF 2cfTPcXv6/4nwidsrOLxYljC9TBILVFp5w7AH7tFvUOYhXExI/Wa4VQrbDoyaypz P1M4+suTHBcgNUxdHrDhjQYzWOX0AHJpfB/OR5avv8PAyEKNlsk/KKIcgVoaFOLl f3X8SlzO97EMMpq44dZI54xI29RqqpCHgP09GxlWP7f1mSKR/+vmW5vXcdFVhXsN Jm7otdIx2xaJOqdAgOenVGLWW4JUeM8= -----END CERTIFICATE-----Generated at Sun Apr 6 10:40:50 2025 by rpki-client