$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6118720a-ed2c-312e-8962-08dd436ce917.roa File: 6118720a-ed2c-312e-8962-08dd436ce917.roa (raw, json) Hash identifier: SIt2+/2kELDYDzfj5T1PenoAmYE+kux6yryqbVe6trY= Subject key identifier: 12:BA:04:A7:B8:0E:DA:C1:F1:8A:87:DC:38:A7:B5:7D:80:0C:D8:D0 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849287E5FC9D00DAD60CA47AB80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6118720a-ed2c-312e-8962-08dd436ce917.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 19437 IP address blocks: 131.153.207.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:5f:c9:d0:0d:ad:60:ca:47:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=86bbb224-c48b-4b51-abc9-73196928587d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:cd:ce:87:af:89:4c:44:c9:5c:1c:da:35:69: c1:27:13:5d:db:0d:ae:0d:71:a2:ef:1b:8c:f1:71: 3c:6a:ee:07:29:fa:7a:13:c4:bd:43:dc:2f:df:17: 47:e1:8a:1a:05:db:da:c0:8b:d2:01:2c:1c:8d:ff: 5e:e2:cc:0c:04:19:da:49:97:4c:e0:58:d9:c2:84: 11:14:80:01:bc:06:77:96:bf:b7:de:f2:09:44:e7: 9a:56:08:80:88:63:d8:25:80:de:cc:45:c8:86:3a: 60:db:02:0e:7b:9a:b3:6c:46:7b:fd:83:21:2f:b7: c8:59:93:d0:c6:d7:db:ec:76:24:9f:82:71:14:5a: be:fe:96:1b:3f:d9:66:24:9b:79:64:b5:c8:7d:00: 1b:4c:11:7f:52:00:e2:e5:52:af:70:e6:6b:83:e1: 03:42:cb:84:4d:33:60:44:74:01:e4:fd:fe:e0:79: 9e:5d:9f:e9:b0:f7:22:c4:f8:b9:b7:ac:aa:83:d9: 2d:a4:9d:6a:7a:e3:bf:43:76:47:66:0f:57:20:5c: 88:be:22:d2:e5:13:d7:b1:e3:a6:36:93:e5:39:8b: ee:75:81:27:b5:47:2d:32:68:e1:e5:2f:88:aa:41: af:89:4e:25:69:7d:9b:39:d0:34:39:dd:4d:be:56: 94:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BA:04:A7:B8:0E:DA:C1:F1:8A:87:DC:38:A7:B5:7D:80:0C:D8:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6118720a-ed2c-312e-8962-08dd436ce917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c7:2f:24:50:c0:e0:5c:71:35:3b:e9:aa:ff:4a:8c:bb:53: 1b:e5:ed:6e:e6:e4:fc:dc:6c:09:25:68:f3:22:9d:dd:5b:aa: 5a:74:04:f7:4c:74:23:4d:9b:3e:bf:b0:1b:58:04:7b:0a:a5: 4d:65:98:44:93:14:d6:1d:1e:94:da:42:dd:71:af:19:f6:60: 5c:de:d9:e6:cd:02:1e:f6:b2:27:75:a0:42:47:1d:5d:88:db: 08:82:e1:a2:2e:48:f9:32:06:4f:42:29:57:39:c5:e3:17:f6: 12:ed:be:ec:42:a2:ac:31:6b:6c:45:d4:35:df:cc:8f:6f:82: ff:2e:3c:d6:f7:1a:9c:e4:6d:a2:3e:82:6d:59:f5:1e:54:5d: b5:1c:cc:73:cf:2d:06:35:3a:c9:c7:5b:b8:3c:2f:da:6d:f5: ea:6c:e5:c3:75:ef:fc:bb:10:dd:43:56:80:94:78:54:7e:65: 68:a8:3b:a6:4f:dc:0c:07:d5:54:8e:ef:ed:76:4d:2f:b1:01: da:7c:4a:80:c4:dd:39:b7:5c:bb:a7:b0:99:80:60:ad:55:37: 9f:33:bc:ab:8b:d7:81:8d:d2:a7:b6:21:ea:bf:07:65:1b:1f: 56:14:29:ec:2a:ef:d6:92:74:38:ac:64:a6:b5:ca:07:4b:80: e1:4f:d1:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofl/J0A2tYMpHq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk ODZiYmIyMjQtYzQ4Yi00YjUxLWFiYzktNzMxOTY5Mjg1ODdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9s3Oh6+JTETJXBzaNWnBJxNd2w2uDXGi7xuM 8XE8au4HKfp6E8S9Q9wv3xdH4YoaBdvawIvSASwcjf9e4swMBBnaSZdM4FjZwoQR FIABvAZ3lr+33vIJROeaVgiAiGPYJYDezEXIhjpg2wIOe5qzbEZ7/YMhL7fIWZPQ xtfb7HYkn4JxFFq+/pYbP9lmJJt5ZLXIfQAbTBF/UgDi5VKvcOZrg+EDQsuETTNg RHQB5P3+4HmeXZ/psPcixPi5t6yqg9ktpJ1qeuO/Q3ZHZg9XIFyIviLS5RPXseOm NpPlOYvudYEntUctMmjh5S+IqkGviU4laX2bOdA0Od1NvlaUkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBK6BKe4DtrB8YqH3DintX2ADNjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNjExODcyMGEtZWQyYy0z MTJlLTg5NjItMDhkZDQzNmNlOTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/HLyRQwOBccTU76ar/Soy7Uxvl7W7m5PzcbAklaPMind1bqlp0BPdM dCNNmz6/sBtYBHsKpU1lmESTFNYdHpTaQt1xrxn2YFze2ebNAh72sid1oEJHHV2I 2wiC4aIuSPkyBk9CKVc5xeMX9hLtvuxCoqwxa2xF1DXfzI9vgv8uPNb3GpzkbaI+ gm1Z9R5UXbUczHPPLQY1OsnHW7g8L9pt9eps5cN17/y7EN1DVoCUeFR+ZWioO6ZP 3AwH1VSO7+12TS+xAdp8SoDE3Tm3XLunsJmAYK1VN58zvKuL14GN0qe2Ieq/B2Ub H1YUKewq79aSdDisZKa1ygdLgOFP0Qg= -----END CERTIFICATE-----Generated at Sun Apr 6 08:32:47 2025 by rpki-client