$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4f51b694-0877-3f09-a534-664615d32a62.roa File: 4f51b694-0877-3f09-a534-664615d32a62.roa (raw, json) Hash identifier: /Cbfm3n49ETIrW14Z2e+1MVgqRKr7zb3jhWJl1GsN8c= Subject key identifier: F5:9B:5F:AB:35:22:E0:B0:DA:3B:45:E5:AD:E1:0E:C7:B5:E8:58:BA Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490CB16C1EE8CF85932E6BE340 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4f51b694-0877-3f09-a534-664615d32a62.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 136899 IP address blocks: 131.153.113.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:6c:1e:e8:cf:85:93:2e:6b:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=b47cf3f9-8fcc-4fcf-8e0d-38a51bcc350a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:04:49:48:b1:48:bd:53:86:30:18:20:91: 1c:86:02:46:a1:91:ee:e0:61:5e:c4:da:9d:15:ed: ea:f8:35:0b:45:5e:95:ae:3d:e4:37:3a:da:f5:10: 89:89:34:d7:d3:0f:cd:8a:a2:80:cc:0a:5e:23:71: c0:e0:08:49:ab:e0:9d:62:4d:c3:23:7e:99:2b:3c: dd:cd:da:c9:fd:3e:ed:7d:ed:41:d1:63:c6:bb:92: 28:92:1c:00:f3:c4:71:c3:53:ef:bc:21:21:35:2a: f2:cd:e5:05:ae:e2:bd:b4:88:04:42:90:ae:08:4d: ff:d8:49:be:63:45:cc:d9:42:07:6f:c7:33:d4:21: 74:66:da:c2:88:d0:d5:3d:46:1e:56:23:1c:a7:55: 79:07:b8:cb:42:2a:9e:4d:d9:f0:d2:57:fe:f0:af: 00:d3:bd:d2:05:30:84:4d:5e:2c:fb:34:e2:17:f2: 2f:09:2e:91:0b:1a:9c:74:98:a6:8a:1b:69:74:60: e3:ad:f1:7d:b7:14:00:bc:33:de:38:dd:ae:70:85: d6:7e:74:4f:7f:a9:44:df:b3:b3:04:11:d6:ce:cf: 0f:3f:10:35:37:40:1f:db:51:b4:50:e8:14:4a:de: ed:fc:3a:90:f9:b8:98:87:fa:23:40:54:59:47:83: fb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9B:5F:AB:35:22:E0:B0:DA:3B:45:E5:AD:E1:0E:C7:B5:E8:58:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4f51b694-0877-3f09-a534-664615d32a62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:d9:33:3f:aa:77:e3:66:07:3a:93:7e:87:4f:75:c0:bd:e4: 88:0c:f6:e6:31:ed:e3:b0:79:de:da:3e:42:38:35:34:42:96: 74:34:da:83:62:1f:5a:17:46:7b:a3:61:fd:ae:92:6a:3e:df: 6a:c2:91:48:22:82:ac:53:75:13:e7:1f:cd:fe:38:35:a4:ab: cb:a8:7b:25:3f:fa:26:ff:af:19:43:e1:8d:ef:56:8c:02:f3: 10:e6:0d:4b:88:78:0c:1f:03:44:f9:5a:4b:e0:b4:bb:ae:74: d3:c8:09:1b:e6:48:b6:80:f2:1b:23:61:d6:c0:0a:f5:13:63: 55:e8:ea:47:e3:4d:7d:8e:f8:75:3f:ff:5a:11:69:9a:1b:6c: 9b:8d:88:b3:71:d8:3e:95:3f:d7:85:a1:19:e8:0a:f9:c3:ce: 8a:c9:f6:d2:d7:ff:5d:76:7b:da:0b:6d:f1:bf:da:ed:cb:2d: 1c:97:89:e6:86:69:f9:27:4a:96:b6:de:f1:1d:80:ad:a2:0e: c4:ab:d8:7b:a6:b8:22:de:db:fd:6f:c0:8c:db:e5:62:c5:fc: 8e:cc:e6:13:ac:9f:01:5b:3c:a6:ae:91:61:84:42:79:a7:87: 4b:ee:3d:19:27:e6:9e:74:2b:10:13:b4:47:07:92:6d:e4:d6: d5:e0:2a:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWwe6M+Fky5r40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk YjQ3Y2YzZjktOGZjYy00ZmNmLThlMGQtMzhhNTFiY2MzNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMEESUixSL1ThjAYIJEchgJGoZHu4GFexNqd Fe3q+DULRV6Vrj3kNzra9RCJiTTX0w/NiqKAzApeI3HA4AhJq+CdYk3DI36ZKzzd zdrJ/T7tfe1B0WPGu5IokhwA88Rxw1PvvCEhNSryzeUFruK9tIgEQpCuCE3/2Em+ Y0XM2UIHb8cz1CF0ZtrCiNDVPUYeViMcp1V5B7jLQiqeTdnw0lf+8K8A073SBTCE TV4s+zTiF/IvCS6RCxqcdJimihtpdGDjrfF9txQAvDPeON2ucIXWfnRPf6lE37Oz BBHWzs8PPxA1N0Af21G0UOgUSt7t/DqQ+biYh/ojQFRZR4P7iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWbX6s1IuCw2jtF5a3hDse16Fi6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNGY1MWI2OTQtMDg3Ny0z ZjA5LWE1MzQtNjY0NjE1ZDMyYTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbZMz+qd+NmBzqTfodPdcC95IgM9uYx7eOwed7aPkI4NTRClnQ02oNi H1oXRnujYf2ukmo+32rCkUgigqxTdRPnH83+ODWkq8uoeyU/+ib/rxlD4Y3vVowC 8xDmDUuIeAwfA0T5WkvgtLuudNPICRvmSLaA8hsjYdbACvUTY1Xo6kfjTX2O+HU/ /1oRaZobbJuNiLNx2D6VP9eFoRnoCvnDzorJ9tLX/112e9oLbfG/2u3LLRyXieaG afknSpa23vEdgK2iDsSr2HumuCLe2/1vwIzb5WLF/I7M5hOsnwFbPKaukWGEQnmn h0vuPRkn5p50KxATtEcHkm3k1tXgKi4= -----END CERTIFICATE-----Generated at Sun Apr 6 08:30:19 2025 by rpki-client