$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa File: 2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa (raw, json) Hash identifier: niALsYncXFADGUcBaVR8q1NvQxX5+E+bISrl+8BZKs8= Subject key identifier: D9:7D:7A:CD:42:A6:6E:71:E3:92:BC:F1:2C:D8:FD:62:32:B6:43:E7 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285848EC96A1ABAB9381E071C95700 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 20454 IP address blocks: 131.153.231.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:a1:ab:ab:93:81:e0:71:c9:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=a3b74fc7-d0d4-475b-9ecf-e1c4caeecacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:df:13:bb:f4:6f:28:fd:1a:52:80:2e:82:fe: f0:40:b9:09:2f:92:73:62:2c:4d:c8:9b:5a:de:e1: a0:c6:99:0d:fd:6b:99:c8:a6:1d:23:4b:06:95:e4: 73:2c:2c:dd:a3:24:0f:1f:f4:de:06:3d:6c:9d:be: 1d:93:e2:54:2d:a6:0c:47:9e:54:2a:9b:65:f2:84: e7:62:59:70:b9:13:1b:ba:c6:4e:ed:ad:d8:da:b0: d8:5d:d2:88:0d:e4:66:a2:f4:9b:16:2b:7d:42:7f: 7a:1d:0e:25:ef:93:cc:af:93:1c:dc:ef:6a:83:99: cc:27:09:4b:ce:c4:25:ea:e9:b4:93:84:c0:50:9b: 68:d2:d5:d2:df:0c:33:63:66:cb:34:86:58:c2:98: 25:e7:91:a7:ad:26:57:0e:fb:e0:fc:5a:06:b6:3f: 5a:93:4e:04:65:c2:98:27:8c:79:28:b7:f7:7d:cb: 9b:42:ad:95:5f:63:d5:76:b0:a9:f9:7c:ce:29:17: a0:9a:39:70:ab:fb:0b:78:ff:7e:df:97:94:9d:49: b4:e2:c7:86:af:77:29:d5:e4:f4:c4:b1:f3:3a:20: f7:40:4a:95:ef:cf:54:34:76:67:b2:8e:ce:66:7b: 94:27:00:61:48:c1:13:37:cd:d6:5c:bc:cb:a6:4e: 6c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7D:7A:CD:42:A6:6E:71:E3:92:BC:F1:2C:D8:FD:62:32:B6:43:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/2b566fcb-c743-3fac-a3e8-a3fafbbff657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:e8:3a:bf:28:21:f5:73:55:05:77:72:78:f7:01:40:cc:2f: 21:48:91:b2:d9:9f:76:aa:05:5f:ab:97:37:fe:e7:f1:59:18: bb:26:1a:a9:c2:ef:97:bc:ea:42:c9:7e:bb:8d:5a:7f:62:e5: df:7b:2d:78:b7:1c:37:e3:cf:26:53:66:19:9a:48:fb:16:fb: 9b:f1:65:c5:e4:3b:80:ad:c0:98:9e:60:59:a8:a4:19:4d:b3: dd:f3:70:a9:0e:f0:7f:86:e8:f4:56:26:80:2f:bf:5c:3b:af: 37:d2:62:c2:6a:cb:0a:7b:5d:ea:f7:2a:6b:e8:d4:11:5c:e4: de:53:2a:ce:c6:46:af:28:66:58:a5:af:88:f4:bb:ae:4a:0a: d0:75:ec:b8:ef:fb:c6:8e:3d:f4:c3:5c:72:d5:d8:03:71:6a: 2d:eb:df:12:49:ec:18:3b:db:7a:62:72:fd:13:17:98:e5:f9: 95:ab:6a:85:31:9a:0c:d5:d2:eb:9b:85:ff:9c:3f:47:49:c2: 11:78:b7:d1:3a:f2:7a:84:49:21:ab:06:81:8d:d2:f4:20:68: ed:98:16:13:f1:1d:bf:a5:e8:0c:ee:11:ee:8e:cc:b3:15:06: fd:3c:9a:11:8f:89:be:38:65:4c:7f:4e:41:89:d8:8f:5c:f6: 95:59:ac:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslqGrq5OB4HHJVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk YTNiNzRmYzctZDBkNC00NzViLTllY2YtZTFjNGNhZWVjYWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid8Tu/RvKP0aUoAugv7wQLkJL5JzYixNyJta 3uGgxpkN/WuZyKYdI0sGleRzLCzdoyQPH/TeBj1snb4dk+JULaYMR55UKptl8oTn YllwuRMbusZO7a3Y2rDYXdKIDeRmovSbFit9Qn96HQ4l75PMr5Mc3O9qg5nMJwlL zsQl6um0k4TAUJto0tXS3wwzY2bLNIZYwpgl55GnrSZXDvvg/FoGtj9ak04EZcKY J4x5KLf3fcubQq2VX2PVdrCp+XzOKRegmjlwq/sLeP9+35eUnUm04seGr3cp1eT0 xLHzOiD3QEqV789UNHZnso7OZnuUJwBhSMETN83WXLzLpk5s1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNl9es1Cpm5x45K88SzY/WIytkPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMmI1NjZmY2ItYzc0My0z ZmFjLWEzZTgtYTNmYWZiYmZmNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7oOr8oIfVzVQV3cnj3AUDMLyFIkbLZn3aqBV+rlzf+5/FZGLsmGqnC 75e86kLJfruNWn9i5d97LXi3HDfjzyZTZhmaSPsW+5vxZcXkO4CtwJieYFmopBlN s93zcKkO8H+G6PRWJoAvv1w7rzfSYsJqywp7Xer3Kmvo1BFc5N5TKs7GRq8oZlil r4j0u65KCtB17Ljv+8aOPfTDXHLV2ANxai3r3xJJ7Bg723picv0TF5jl+ZWraoUx mgzV0uubhf+cP0dJwhF4t9E68nqESSGrBoGN0vQgaO2YFhPxHb+l6AzuEe6OzLMV Bv08mhGPib44ZUx/TkGJ2I9c9pVZrNw= -----END CERTIFICATE-----Generated at Sat Apr 5 07:26:10 2025 by rpki-client