$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/57c1f272-d40d-3157-8493-4276aeec2785.roa File: 57c1f272-d40d-3157-8493-4276aeec2785.roa (raw, json) Hash identifier: EKS/fN1e+i0u+SjRX7dVDZ+dxWatVRdhvI9tKCPPJd0= Subject key identifier: 43:49:39:19:39:8D:FC:94:9E:52:45:C2:19:58:75:D6:F1:FE:C3:4F Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584930DE5EF11ED8E4635E371100 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/57c1f272-d40d-3157-8493-4276aeec2785.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 20454 IP address blocks: 131.153.237.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:5e:f1:1e:d8:e4:63:5e:37:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=9f920edd-41f1-4f0c-8825-1ce829734146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:80:3e:f0:20:bf:eb:ef:88:52:3f:7c:c4:2a: 66:75:0d:62:be:a6:85:1a:e5:1c:24:55:d6:8f:27: d7:d6:3b:b7:33:5b:d2:55:1e:47:bb:68:9d:0d:87: 9c:0d:15:ba:2c:34:a2:be:8e:b6:d9:7b:02:3a:f6: c5:9e:fd:2c:ab:9d:d6:07:77:7d:2e:2e:46:7a:5d: f2:30:11:ba:76:c7:71:f1:cf:6b:6c:53:c7:7e:74: a7:d9:46:51:e6:fb:98:8e:4d:dc:25:62:19:c7:82: 3f:a1:50:42:c2:b1:5b:9d:be:3a:08:a6:ab:99:79: df:4b:12:1f:24:30:7b:ee:36:c1:6c:60:ed:3f:ff: 7b:6b:df:47:58:7b:61:66:44:18:f8:fa:c8:78:38: 0f:f2:57:65:56:f7:e5:4a:f1:3e:19:c9:28:6e:85: af:b0:4b:56:20:d8:86:d2:cf:56:38:04:7b:a9:7e: 08:6b:2e:c4:f9:45:8d:c4:e8:8c:56:5a:00:2b:7e: 22:f3:06:88:15:a9:46:d5:a4:ac:02:cf:28:88:5c: d3:63:ae:eb:c0:47:c9:dd:ef:d4:09:92:e5:c2:29: 2b:26:ae:be:82:c6:57:6b:d3:9c:97:cb:36:89:2c: f5:f9:e7:a9:55:84:4a:33:4e:a9:db:5b:54:3a:ff: 84:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:49:39:19:39:8D:FC:94:9E:52:45:C2:19:58:75:D6:F1:FE:C3:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/57c1f272-d40d-3157-8493-4276aeec2785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1f:62:79:d3:b1:87:fe:84:58:bc:2b:05:87:71:b1:da:e5: 90:22:9e:89:5a:38:b2:83:fe:69:e6:21:70:6d:88:64:13:5c: 46:72:3d:a3:e0:79:83:52:c4:ff:cb:55:9a:41:12:a4:bd:93: 3d:50:f1:66:0f:77:7e:50:b8:ac:d8:4e:63:99:e2:34:79:1e: 8e:3b:61:0f:42:70:f7:f0:9d:88:92:84:f6:fb:80:90:de:92: 4a:1f:dc:51:5e:fb:bd:7b:9f:79:5d:d1:8c:e8:e4:37:bf:78: 65:e2:0e:f0:88:10:1f:42:b0:9e:0d:2e:e6:8c:c4:ff:e0:56: e1:7d:30:1f:7f:00:00:6b:82:a6:51:c0:c4:41:f3:bb:64:3e: 24:c2:f9:59:1b:b2:ee:52:b8:89:1e:90:9f:75:d7:e9:44:88: 4c:ea:6f:fb:9e:00:59:cf:36:8f:2d:ca:a1:92:fd:2b:e6:a4: 98:10:cf:fa:79:9c:05:4b:0e:2d:0c:be:2f:d4:ca:4d:72:5c: 7f:8c:d6:1a:7d:7d:0e:fd:6c:0f:3f:83:d2:bd:97:76:c5:3d: 6b:0f:eb:95:4f:20:0a:ac:3e:fe:ed:c5:fc:92:71:4b:69:6c: d3:91:34:0c:15:7e:7a:aa:bd:cd:fd:b5:0f:13:a2:c9:6a:97: d8:71:5e:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3l7xHtjkY143EQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk OWY5MjBlZGQtNDFmMS00ZjBjLTg4MjUtMWNlODI5NzM0MTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4A+8CC/6++IUj98xCpmdQ1ivqaFGuUcJFXW jyfX1ju3M1vSVR5Hu2idDYecDRW6LDSivo622XsCOvbFnv0sq53WB3d9Li5Gel3y MBG6dsdx8c9rbFPHfnSn2UZR5vuYjk3cJWIZx4I/oVBCwrFbnb46CKarmXnfSxIf JDB77jbBbGDtP/97a99HWHthZkQY+PrIeDgP8ldlVvflSvE+GckoboWvsEtWINiG 0s9WOAR7qX4Iay7E+UWNxOiMVloAK34i8waIFalG1aSsAs8oiFzTY67rwEfJ3e/U CZLlwikrJq6+gsZXa9Ocl8s2iSz1+eepVYRKM06p21tUOv+EuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENJORk5jfyUnlJFwhlYddbx/sNPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNTdjMWYyNzItZDQwZC0z MTU3LTg0OTMtNDI3NmFlZWMyNzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5ntMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIfYnnTsYf+hFi8KwWHcbHa5ZAinolaOLKD/mnmIXBtiGQTXEZyPaPg eYNSxP/LVZpBEqS9kz1Q8WYPd35QuKzYTmOZ4jR5Ho47YQ9CcPfwnYiShPb7gJDe kkof3FFe+717n3ld0Yzo5De/eGXiDvCIEB9CsJ4NLuaMxP/gVuF9MB9/AABrgqZR wMRB87tkPiTC+Vkbsu5SuIkekJ911+lEiEzqb/ueAFnPNo8tyqGS/SvmpJgQz/p5 nAVLDi0Mvi/Uyk1yXH+M1hp9fQ79bA8/g9K9l3bFPWsP65VPIAqsPv7txfyScUtp bNORNAwVfnqqvc39tQ8Toslql9hxXpg= -----END CERTIFICATE-----Generated at Sat Apr 5 07:43:52 2025 by rpki-client