$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3ab54a66-25b0-3e50-a398-0c25be9a9b70.roa File: 3ab54a66-25b0-3e50-a398-0c25be9a9b70.roa (raw, json) Hash identifier: 2OOqZeqB9AHv2g/peXQOT/wZ7RbQELxavcNgYIJaeJY= Subject key identifier: 1B:9B:0E:37:62:B3:59:B5:80:59:F7:3D:BB:25:26:62:F9:96:4F:53 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858496CE4504B2FF5D85CC5AC4B40 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3ab54a66-25b0-3e50-a398-0c25be9a9b70.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 19181 IP address blocks: 131.153.224.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:50:4b:2f:f5:d8:5c:c5:ac:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=d3466538-170a-410a-a370-3711d1797e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:df:54:c0:c9:48:67:7d:96:c1:08:3a:18:c6: f9:53:9f:a8:69:1f:b9:a4:34:88:d7:01:3c:f8:25: 07:9a:07:24:e9:c3:0d:a9:de:01:4e:81:9a:46:f9: 90:ab:43:27:2d:75:48:8b:fa:4f:7f:44:fb:2b:e6: 30:cf:34:b0:5f:f2:60:1a:61:9f:39:6e:dd:ac:36: e1:a9:5c:d5:20:6d:ff:8b:25:7c:fe:be:fd:41:09: 76:b3:bc:11:2a:d7:95:c2:38:1c:7e:68:65:e0:04: 75:15:d1:49:ab:16:44:52:df:bb:8c:e2:c9:dc:cf: 5e:15:1a:08:4e:01:47:5b:be:4a:0b:08:f0:bb:3d: 2c:18:b0:a5:02:50:be:db:2a:85:4a:01:0f:ec:fb: ff:20:a8:87:6f:70:52:2b:07:cd:68:88:1d:68:c3: e4:a8:39:11:91:dd:50:18:11:f5:64:19:3b:de:b8: 26:8b:99:7f:91:5a:27:16:25:d6:c3:62:8a:71:54: c3:2f:b6:28:1d:4a:fa:83:a7:9d:a7:dd:72:f3:d0: a7:a6:9f:2a:dc:0b:4d:8b:32:71:6c:be:b6:5a:26: 5d:1a:3d:9e:82:f6:44:4a:83:56:1f:15:6d:06:47: 04:78:de:cd:d5:2a:be:da:fb:51:d4:3d:7d:4c:f6: 15:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9B:0E:37:62:B3:59:B5:80:59:F7:3D:BB:25:26:62:F9:96:4F:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3ab54a66-25b0-3e50-a398-0c25be9a9b70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:8d:06:06:d9:69:5a:1d:69:7c:53:23:20:78:02:f4:66:0c: e2:41:89:a2:67:bb:0d:db:e3:ee:f8:09:8b:62:65:aa:a2:05: f0:ad:d6:e3:65:36:ab:6d:75:17:aa:03:05:9f:fe:ee:25:d1: e5:57:b3:f0:0d:cd:76:5c:60:f2:4c:aa:c3:26:23:75:04:30: d6:b2:b6:c0:38:46:5d:43:52:8c:12:de:0d:c2:77:30:f1:60: 8d:1a:54:67:86:2d:dd:37:dc:98:84:3c:a4:58:ea:2c:88:39: 0e:1f:d8:a6:99:d8:cb:74:88:da:26:22:ec:30:2d:98:f4:33: e2:db:1a:3f:84:8d:bb:e5:64:c6:ea:09:58:2a:e9:11:8f:65: b5:ee:a5:34:18:91:4c:55:db:b3:36:76:e6:48:8c:47:18:d3: f5:e3:41:2c:5e:b0:db:7f:6d:26:bb:69:d2:e1:e8:97:ba:70: 55:36:68:ff:1e:ce:e1:63:e4:4b:fd:43:02:11:93:1c:19:ea: a3:98:1d:3b:35:8c:d8:fb:5a:f1:b4:f1:d0:05:72:62:7c:9a: 5d:5c:ba:f5:70:9f:3e:08:ad:1a:1b:3b:55:08:89:54:fa:f3: 75:3f:cf:cf:c7:38:86:fc:3b:85:f9:63:66:62:dd:79:45:42: 66:40:ca:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5FBLL/XYXMWsS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk ZDM0NjY1MzgtMTcwYS00MTBhLWEzNzAtMzcxMWQxNzk3ZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt9UwMlIZ32WwQg6GMb5U5+oaR+5pDSI1wE8 +CUHmgck6cMNqd4BToGaRvmQq0MnLXVIi/pPf0T7K+YwzzSwX/JgGmGfOW7drDbh qVzVIG3/iyV8/r79QQl2s7wRKteVwjgcfmhl4AR1FdFJqxZEUt+7jOLJ3M9eFRoI TgFHW75KCwjwuz0sGLClAlC+2yqFSgEP7Pv/IKiHb3BSKwfNaIgdaMPkqDkRkd1Q GBH1ZBk73rgmi5l/kVonFiXWw2KKcVTDL7YoHUr6g6edp91y89Cnpp8q3AtNizJx bL62WiZdGj2egvZESoNWHxVtBkcEeN7N1Sq+2vtR1D19TPYVCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBubDjdis1m1gFn3PbslJmL5lk9TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2FiNTRhNjYtMjViMC0z ZTUwLWEzOTgtMGMyNWJlOWE5YjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5ngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSNBgbZaVodaXxTIyB4AvRmDOJBiaJnuw3b4+74CYtiZaqiBfCt1uNl NqttdReqAwWf/u4l0eVXs/ANzXZcYPJMqsMmI3UEMNaytsA4Rl1DUowS3g3CdzDx YI0aVGeGLd033JiEPKRY6iyIOQ4f2KaZ2Mt0iNomIuwwLZj0M+LbGj+EjbvlZMbq CVgq6RGPZbXupTQYkUxV27M2duZIjEcY0/XjQSxesNt/bSa7adLh6Je6cFU2aP8e zuFj5Ev9QwIRkxwZ6qOYHTs1jNj7WvG08dAFcmJ8ml1cuvVwnz4IrRobO1UIiVT6 83U/z8/HOIb8O4X5Y2Zi3XlFQmZAysY= -----END CERTIFICATE-----Generated at Sun Apr 6 08:22:32 2025 by rpki-client