$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4ebe83df-81c7-321e-a9a9-64378ff786f2.roa File: 4ebe83df-81c7-321e-a9a9-64378ff786f2.roa (raw, json) Hash identifier: TjrgzedJHeO09b1njQefoB/Xm8wskO0Y6lxuCboG9Nk= Subject key identifier: 0B:09:6F:8F:B1:88:2A:BA:57:8A:DE:76:E9:EA:FF:16:C7:E7:92:EA Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490CB1694AAD1FC3E20196C180 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4ebe83df-81c7-321e-a9a9-64378ff786f2.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 19181 IP address blocks: 131.153.83.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:69:4a:ad:1f:c3:e2:01:96:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=ec00f078-6c49-4983-bf69-1ed50de51346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:11:51:c4:28:77:e3:2d:2f:9a:c1:eb:60:be: 53:6f:34:6d:9d:d8:aa:13:88:f4:79:aa:0a:e7:c6: 14:d7:75:7a:04:75:a4:5f:b2:33:67:e0:92:42:cc: 02:d6:40:b6:ac:b6:7d:19:ab:b1:57:cd:7b:04:51: 0a:37:34:d8:9d:a8:4d:ec:f4:fe:cd:21:d6:4b:82: 68:96:2d:5f:aa:ce:5a:20:e2:26:b4:46:c0:09:bb: ab:b0:23:56:6c:1c:e3:1a:e9:4f:cc:cb:3c:51:9c: 0e:ae:f3:a9:99:13:2b:f1:f1:09:40:79:1e:54:6e: ab:0e:39:a0:49:f6:0f:2f:ef:2f:a4:d5:e8:11:ec: 35:ef:93:0d:e0:c7:c0:e9:99:df:5e:88:32:d7:b2: b6:a2:78:6d:66:ed:e5:c7:24:d9:6a:42:76:73:15: b5:43:9a:84:c4:31:74:fa:42:ec:e3:3d:90:76:a3: 41:bc:87:0f:43:d0:80:cf:d0:e1:33:3f:db:60:e7: 70:e9:e2:fa:fe:78:fc:29:f5:5d:95:f2:3d:2a:bb: 30:78:e1:3b:33:b4:3e:12:ed:80:db:c1:3a:a3:a4: b3:7a:13:b8:cd:d2:58:92:5f:2e:1f:0e:8e:30:e0: 32:68:1b:95:d6:4f:d0:1b:39:3a:a3:a3:35:b4:94: 34:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:09:6F:8F:B1:88:2A:BA:57:8A:DE:76:E9:EA:FF:16:C7:E7:92:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4ebe83df-81c7-321e-a9a9-64378ff786f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:95:2e:57:82:b2:67:07:20:99:4b:80:9b:fa:78:8f:95:3b: b7:e6:55:8a:0e:3a:98:2d:f4:91:ee:e7:17:e2:de:c7:4f:97: 7e:ea:ff:81:d8:45:7d:9f:93:78:21:0a:7f:b8:01:a1:af:c7: 8b:fb:cf:03:80:3b:72:c5:a5:94:c0:44:17:12:31:0e:35:8f: 28:e2:ff:13:23:de:9d:6c:73:87:eb:2f:26:1b:7f:2f:04:e3: 44:ef:4d:e1:72:71:24:90:57:a1:5f:c3:13:4b:63:38:7b:9c: f4:24:b0:98:42:82:2d:ec:a2:2e:54:03:d7:95:1c:74:41:52: 62:ba:f1:8f:68:e4:28:c1:ba:21:fa:33:bf:c2:14:f3:40:2e: 63:d8:47:87:80:a6:fe:05:e6:07:8b:b1:f0:57:53:4a:7d:67: 1f:3b:86:e3:af:42:be:76:46:81:71:e5:72:aa:42:cd:09:05: b6:92:9d:e7:04:ff:b2:2e:42:d4:01:1a:00:8a:c2:79:51:56: 7b:a6:b6:64:6d:1b:1d:19:3f:a1:a6:6a:0d:14:1c:8e:8f:e9: cb:f8:cf:e5:59:74:34:06:11:46:d2:92:0d:70:27:9a:72:64: ea:0b:7c:49:f4:d8:5e:ac:85:c9:34:39:09:c6:1c:f7:fc:5c: a6:87:b3:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWlKrR/D4gGWwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk ZWMwMGYwNzgtNmM0OS00OTgzLWJmNjktMWVkNTBkZTUxMzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphFRxCh34y0vmsHrYL5TbzRtndiqE4j0eaoK 58YU13V6BHWkX7IzZ+CSQswC1kC2rLZ9GauxV817BFEKNzTYnahN7PT+zSHWS4Jo li1fqs5aIOImtEbACbursCNWbBzjGulPzMs8UZwOrvOpmRMr8fEJQHkeVG6rDjmg SfYPL+8vpNXoEew175MN4MfA6ZnfXogy17K2onhtZu3lxyTZakJ2cxW1Q5qExDF0 +kLs4z2QdqNBvIcPQ9CAz9DhMz/bYOdw6eL6/nj8KfVdlfI9KrsweOE7M7Q+Eu2A 28E6o6SzehO4zdJYkl8uHw6OMOAyaBuV1k/QGzk6o6M1tJQ0kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsJb4+xiCq6V4redunq/xbH55LqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNGViZTgzZGYtODFjNy0z MjFlLWE5YTktNjQzNzhmZjc4NmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOVLleCsmcHIJlLgJv6eI+VO7fmVYoOOpgt9JHu5xfi3sdPl37q/4HY RX2fk3ghCn+4AaGvx4v7zwOAO3LFpZTARBcSMQ41jyji/xMj3p1sc4frLyYbfy8E 40TvTeFycSSQV6FfwxNLYzh7nPQksJhCgi3soi5UA9eVHHRBUmK68Y9o5CjBuiH6 M7/CFPNALmPYR4eApv4F5geLsfBXU0p9Zx87huOvQr52RoFx5XKqQs0JBbaSnecE /7IuQtQBGgCKwnlRVnumtmRtGx0ZP6Gmag0UHI6P6cv4z+VZdDQGEUbSkg1wJ5py ZOoLfEn02F6shck0OQnGHPf8XKaHs/M= -----END CERTIFICATE-----Generated at Sun Apr 6 08:22:47 2025 by rpki-client