$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/037fc556-352d-3887-b64f-865c72077791.roa File: 037fc556-352d-3887-b64f-865c72077791.roa (raw, json) Hash identifier: AhbXbf6koeg0Vh2MX2wwKp7zNq9boe50HOFzbMDU+c4= Subject key identifier: 9C:51:55:02:BF:6A:0A:06:43:22:16:1A:AF:85:4A:25:C4:58:06:05 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490E16BFCEDEBF0680DBDD1140 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/037fc556-352d-3887-b64f-865c72077791.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 19437 IP address blocks: 131.153.0.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:bf:ce:de:bf:06:80:db:dd:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=639f8cae-87f7-42aa-8d2d-e14299a3cfc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0d:bc:60:74:9e:a4:57:bd:1e:fe:04:97:53: ba:65:f3:8a:23:91:6c:8b:7d:40:6d:57:ee:54:84: e5:df:6b:67:65:d5:d7:8e:05:ee:d4:86:36:5f:94: 0f:57:37:42:42:a1:da:a4:59:32:b0:4d:66:b1:a4: 9e:ae:ed:d4:6a:a5:45:b0:1e:f3:71:55:28:b0:47: d1:e2:dd:74:20:5b:84:f2:be:3e:7c:00:2e:58:6a: bf:d7:12:f0:89:7c:49:43:63:21:db:60:88:46:7c: f0:81:78:b6:2a:70:68:ba:f6:22:46:b1:32:e3:c9: 1c:d8:3b:87:02:b7:44:41:91:84:68:95:cf:e6:68: 07:40:b9:24:b8:7a:9e:5c:25:2e:66:41:84:6a:3b: 56:5a:5f:1f:94:ae:16:7a:75:d5:a3:76:ad:64:90: b8:27:cb:94:f9:e8:ad:b4:c6:5c:c9:4b:a3:8e:56: 67:d9:41:e3:58:77:56:c1:61:69:be:e0:50:ba:a9: e7:d2:29:1f:f2:be:e3:50:f3:79:13:00:5b:f8:e9: da:0f:68:cb:0f:dd:39:fb:dc:6a:7e:9c:d8:2f:4a: 5c:c6:6a:09:c7:1a:99:e8:3f:43:a0:1c:c2:89:62: 12:9b:e7:16:f9:2c:c3:c8:b3:80:8e:05:0e:09:d6: 2d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:51:55:02:BF:6A:0A:06:43:22:16:1A:AF:85:4A:25:C4:58:06:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/037fc556-352d-3887-b64f-865c72077791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ae:a8:68:21:7c:0b:4c:d9:12:f6:59:f1:57:f8:2e:29:7c: 52:a3:de:45:1a:84:0b:34:5c:29:18:be:3e:8c:b7:05:3c:ae: 27:a2:32:02:da:ca:ca:71:69:1f:85:26:8e:df:f5:46:9d:d3: b3:77:ee:9a:29:c4:c9:b2:60:13:e8:24:93:7a:15:53:94:d1: c8:93:5c:da:5a:2a:06:1a:42:60:40:20:a3:55:55:a2:96:60: c4:af:67:bd:77:3f:f4:ed:19:89:34:0e:6d:71:04:31:19:72: 58:1a:3e:45:07:ed:d7:6a:73:6b:e1:5a:fa:7c:45:60:f4:18: bb:91:d3:3e:54:63:13:d2:5a:27:b8:50:3e:94:49:85:f5:fa: 68:15:2f:2e:a0:af:8b:e3:a9:37:a9:6c:08:1e:99:5b:19:66: ba:5d:f2:32:e5:10:90:47:33:e1:69:ee:68:78:d4:00:a3:8b: 19:9e:4b:d9:37:9d:0e:20:b4:11:9e:9b:4b:83:be:6d:65:f7: cd:eb:01:bb:43:d0:39:71:44:6e:f7:c0:63:cd:31:da:4e:a5: 7b:66:3a:ca:35:db:18:9b:3a:63:9f:6b:e8:3a:07:e3:b2:fd: 28:23:ad:90:88:8d:f2:dc:53:52:9d:77:e2:1a:30:49:fb:69: a7:8b:e8:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFr/O3r8GgNvdEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk NjM5ZjhjYWUtODdmNy00MmFhLThkMmQtZTE0Mjk5YTNjZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA28YHSepFe9Hv4El1O6ZfOKI5Fsi31AbVfu VITl32tnZdXXjgXu1IY2X5QPVzdCQqHapFkysE1msaSeru3UaqVFsB7zcVUosEfR 4t10IFuE8r4+fAAuWGq/1xLwiXxJQ2Mh22CIRnzwgXi2KnBouvYiRrEy48kc2DuH ArdEQZGEaJXP5mgHQLkkuHqeXCUuZkGEajtWWl8flK4WenXVo3atZJC4J8uU+eit tMZcyUujjlZn2UHjWHdWwWFpvuBQuqnn0ikf8r7jUPN5EwBb+OnaD2jLD905+9xq fpzYL0pcxmoJxxqZ6D9DoBzCiWISm+cW+SzDyLOAjgUOCdYtrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxRVQK/agoGQyIWGq+FSiXEWAYFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMDM3ZmM1NTYtMzUyZC0z ODg3LWI2NGYtODY1YzcyMDc3NzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+uqGghfAtM2RL2WfFX+C4pfFKj3kUahAs0XCkYvj6MtwU8rieiMgLa yspxaR+FJo7f9Uad07N37popxMmyYBPoJJN6FVOU0ciTXNpaKgYaQmBAIKNVVaKW YMSvZ713P/TtGYk0Dm1xBDEZclgaPkUH7ddqc2vhWvp8RWD0GLuR0z5UYxPSWie4 UD6USYX1+mgVLy6gr4vjqTepbAgemVsZZrpd8jLlEJBHM+Fp7mh41ACjixmeS9k3 nQ4gtBGem0uDvm1l983rAbtD0DlxRG73wGPNMdpOpXtmOso12xibOmOfa+g6B+Oy /SgjrZCIjfLcU1Kdd+IaMEn7aaeL6HA= -----END CERTIFICATE-----Generated at Sun Apr 6 08:34:10 2025 by rpki-client