$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3ee46f12-74ae-363f-b31c-2dfd7fd4d228.roa File: 3ee46f12-74ae-363f-b31c-2dfd7fd4d228.roa (raw, json) Hash identifier: YkJsJUNweUyIAKNOxBWk22FOySxXoeZzl4hTLHIzHQQ= Subject key identifier: C5:4D:2B:79:5D:E5:0E:2F:E4:43:5D:A7:8A:BE:CF:3C:CC:7D:57:2C Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490E16BA19ECCC752831584880 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3ee46f12-74ae-363f-b31c-2dfd7fd4d228.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 19181 IP address blocks: 131.153.164.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:ba:19:ec:cc:75:28:31:58:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=4a3c3a69-4b84-4269-a694-65e7e8b362bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:66:e5:b0:ea:5c:31:ca:c6:5e:b0:a9:84:24: 01:23:1f:39:0c:f3:ff:74:e9:f4:60:bb:f9:e1:88: d5:79:ee:a2:59:cb:b1:15:d3:27:84:e8:80:c7:6d: 71:80:f9:98:f8:aa:25:96:cb:ec:da:7a:ef:66:c6: 57:06:f1:7f:a9:08:15:88:94:86:50:0d:78:c3:2f: a6:53:29:53:6a:bc:f6:04:b9:6f:d9:b6:0c:bf:75: dd:ae:b0:dd:2a:fe:33:51:c6:54:51:55:30:75:b1: 62:ed:c5:de:45:b2:6f:fd:d6:44:22:bd:e2:5a:4e: 5b:58:2b:d9:d5:f6:42:3f:ac:ce:af:b4:fc:76:08: c1:bc:0b:f1:7c:60:bf:32:3e:72:89:72:89:cc:ce: 2a:39:a0:a8:ca:6f:e7:d2:94:07:04:92:0f:f8:16: 76:4a:df:ad:64:b3:54:56:a6:2c:95:ad:10:db:5c: 6c:2e:b8:fd:b1:d9:01:27:f7:9d:d3:b4:cb:4a:b2: 67:fb:6d:c2:1a:8e:f3:ef:b8:e8:14:f5:b7:0b:8a: f5:5e:04:62:7f:6d:53:44:24:9c:98:9e:46:c7:c4: cc:20:34:c0:94:78:58:7f:f2:86:83:65:6a:82:82: cb:1b:8d:97:ff:3d:bc:b4:e4:59:4a:da:05:d6:62: 8b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4D:2B:79:5D:E5:0E:2F:E4:43:5D:A7:8A:BE:CF:3C:CC:7D:57:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3ee46f12-74ae-363f-b31c-2dfd7fd4d228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6f:6b:95:61:af:53:25:9b:1a:82:af:04:ff:e8:00:f9:b2: c2:66:c9:bb:e0:05:1c:22:f2:56:49:da:00:1f:1f:a3:ca:c5: bd:99:27:2a:23:fd:df:37:64:56:c8:72:e3:1c:49:61:eb:87: 6b:20:0e:93:99:74:85:79:93:88:1f:2a:5a:32:5a:80:ef:cf: 17:29:0d:b9:e0:dd:69:1e:4b:cf:a6:9f:be:2a:ba:84:f6:f6: 4c:a7:ad:01:13:46:7f:3c:22:24:5e:7a:86:56:b7:60:0a:62: 5b:06:bf:1d:22:0f:4e:8b:d7:66:68:0c:69:80:60:f5:82:b4: e3:06:f3:61:53:22:6a:4d:3d:67:56:51:ae:8f:af:4a:cb:55: 9e:fb:bf:41:73:10:17:df:3a:84:6a:bf:33:63:fe:39:05:3b: b8:63:35:c1:fd:1a:e8:9f:f7:3e:a9:83:02:6c:4d:21:58:20: 47:c0:48:f4:1f:f1:e4:43:b3:01:12:41:dd:30:74:3d:6d:59: 57:11:85:13:9b:66:2f:65:a9:6c:51:a4:fb:c4:9c:df:7f:5f: e5:d0:4d:83:a8:c8:05:ce:3c:f4:ec:de:83:c1:eb:60:11:3b: 89:06:92:fa:5e:97:7e:2c:78:31:d2:72:ff:c5:97:ce:4e:8e: c8:3b:b7:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFroZ7Mx1KDFYSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk NGEzYzNhNjktNGI4NC00MjY5LWE2OTQtNjVlN2U4YjM2MmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGblsOpcMcrGXrCphCQBIx85DPP/dOn0YLv5 4YjVee6iWcuxFdMnhOiAx21xgPmY+Kollsvs2nrvZsZXBvF/qQgViJSGUA14wy+m UylTarz2BLlv2bYMv3XdrrDdKv4zUcZUUVUwdbFi7cXeRbJv/dZEIr3iWk5bWCvZ 1fZCP6zOr7T8dgjBvAvxfGC/Mj5yiXKJzM4qOaCoym/n0pQHBJIP+BZ2St+tZLNU VqYsla0Q21xsLrj9sdkBJ/ed07TLSrJn+23CGo7z77joFPW3C4r1XgRif21TRCSc mJ5Gx8TMIDTAlHhYf/KGg2VqgoLLG42X/z28tORZStoF1mKLaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVNK3ld5Q4v5ENdp4q+zzzMfVcsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2VlNDZmMTItNzRhZS0z NjNmLWIzMWMtMmRmZDdmZDRkMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5mkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtva5Vhr1MlmxqCrwT/6AD5ssJmybvgBRwi8lZJ2gAfH6PKxb2ZJyoj /d83ZFbIcuMcSWHrh2sgDpOZdIV5k4gfKloyWoDvzxcpDbng3WkeS8+mn74quoT2 9kynrQETRn88IiReeoZWt2AKYlsGvx0iD06L12ZoDGmAYPWCtOMG82FTImpNPWdW Ua6Pr0rLVZ77v0FzEBffOoRqvzNj/jkFO7hjNcH9Guif9z6pgwJsTSFYIEfASPQf 8eRDswESQd0wdD1tWVcRhRObZi9lqWxRpPvEnN9/X+XQTYOoyAXOPPTs3oPB62AR O4kGkvpel34seDHScv/Fl85Ojsg7twM= -----END CERTIFICATE-----Generated at Sun Apr 6 12:35:48 2025 by rpki-client