$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7f85d337-9f8f-38fb-85b0-eea49c753437.roa File: 7f85d337-9f8f-38fb-85b0-eea49c753437.roa (raw, json) Hash identifier: 1VRYVPBuF4ir31je/1SkyAqCZy65oB2IevYV7CxJGTg= Subject key identifier: 98:2C:5C:D9:38:40:6F:D7:B3:75:6B:3F:42:C9:29:E1:84:3B:60:08 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490E16B9A4D2B4E6FBDD9D8D00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7f85d337-9f8f-38fb-85b0-eea49c753437.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 19437 IP address blocks: 131.153.128.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:b9:a4:d2:b4:e6:fb:dd:9d:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=7536a478-eef0-4f48-ab71-d4a6c14aa115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:b1:2a:8a:bf:a0:c2:60:df:95:a1:2d:38: 6f:96:f0:95:d5:4f:d4:2e:b8:52:b6:4a:4e:ce:26: c2:ca:b7:f9:aa:04:b5:f3:05:33:f2:58:bf:f6:9d: fe:7a:29:f3:d6:c1:cb:9a:b7:af:a5:6c:2b:11:3d: ff:be:ae:30:28:aa:da:64:53:9d:60:b0:46:35:76: f9:d6:fb:cb:21:68:de:4e:6a:46:f0:b9:ca:ea:95: 71:26:7e:3c:85:4c:d0:eb:a8:b8:c8:61:30:ca:b2: a5:b8:cb:eb:46:d5:0e:68:c0:d9:39:ed:34:f0:66: d9:f6:10:68:b8:a2:be:1c:57:72:67:20:78:b8:43: ed:52:ba:dd:7a:75:d0:65:87:d0:97:cb:e2:ab:b5: f5:e4:e3:33:04:ae:17:50:17:77:77:ae:68:a6:e7: 7c:30:74:a5:d2:e6:3a:7f:26:76:e1:25:62:00:f8: 24:1e:96:63:6b:6d:f5:48:d9:15:ee:0c:3e:6f:79: 94:f9:8f:bd:22:96:6d:02:68:e5:dc:d1:c3:df:37: 74:d4:6e:eb:2a:4c:91:39:5f:7f:76:dd:a2:ed:4b: 23:10:7c:d3:af:bc:0a:47:1d:87:ac:88:17:f3:e1: 02:67:07:b5:f6:77:26:2c:d1:b4:64:80:33:fe:a4: 01:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2C:5C:D9:38:40:6F:D7:B3:75:6B:3F:42:C9:29:E1:84:3B:60:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7f85d337-9f8f-38fb-85b0-eea49c753437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:83:8e:c5:5d:ef:56:a3:45:1b:81:97:c4:59:79:8a:10:17: 6d:18:be:65:a5:f5:f5:d6:32:af:72:ac:c3:ff:5f:bd:25:08: a0:3b:1f:0a:dd:cc:dc:9c:63:af:5b:62:d6:b9:75:4c:ac:8f: 7a:49:ee:2a:5f:e7:4c:5b:76:45:d5:99:99:89:4e:83:01:f0: d9:2f:e5:10:17:9d:b5:f4:03:a2:c6:b7:ac:2d:58:76:5e:0a: 41:a6:0b:d3:d1:30:3a:84:79:c5:96:4e:49:14:a4:7c:b1:4a: b8:c8:76:75:2a:ae:bd:d7:22:6a:79:d2:35:94:80:58:82:65: 3e:ad:29:75:d4:ee:b8:53:3b:0f:bd:ec:b3:1d:86:5a:16:b3: 69:6b:30:53:1b:2d:c5:cc:70:1a:35:dd:3b:be:a1:6c:d6:4d: c2:fd:c4:55:c3:8c:8f:ca:72:fc:32:90:66:2d:e9:0e:36:bb: 6e:fb:51:d0:bb:d4:19:ca:ef:b7:6f:2f:13:c6:11:c6:66:01: a7:6c:39:b3:8c:95:89:88:2d:37:2d:35:d7:0f:f0:91:e1:7f: f4:12:94:92:83:6d:60:1b:de:f7:51:e7:4b:f9:1b:99:c5:29: c7:6e:90:6e:cf:37:bc:83:01:e4:73:9c:70:c2:cb:ba:42:45: 75:fe:f7:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFrmk0rTm+92djQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk NzUzNmE0NzgtZWVmMC00ZjQ4LWFiNzEtZDRhNmMxNGFhMTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJqxKoq/oMJg35WhLThvlvCV1U/ULrhStkpO zibCyrf5qgS18wUz8li/9p3+einz1sHLmrevpWwrET3/vq4wKKraZFOdYLBGNXb5 1vvLIWjeTmpG8LnK6pVxJn48hUzQ66i4yGEwyrKluMvrRtUOaMDZOe008GbZ9hBo uKK+HFdyZyB4uEPtUrrdenXQZYfQl8viq7X15OMzBK4XUBd3d65opud8MHSl0uY6 fyZ24SViAPgkHpZja231SNkV7gw+b3mU+Y+9IpZtAmjl3NHD3zd01G7rKkyROV9/ dt2i7UsjEHzTr7wKRx2HrIgX8+ECZwe19ncmLNG0ZIAz/qQBVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgsXNk4QG/Xs3VrP0LJKeGEO2AIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvN2Y4NWQzMzctOWY4Zi0z OGZiLTg1YjAtZWVhNDljNzUzNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqDjsVd71ajRRuBl8RZeYoQF20YvmWl9fXWMq9yrMP/X70lCKA7Hwrd zNycY69bYta5dUysj3pJ7ipf50xbdkXVmZmJToMB8Nkv5RAXnbX0A6LGt6wtWHZe CkGmC9PRMDqEecWWTkkUpHyxSrjIdnUqrr3XImp50jWUgFiCZT6tKXXU7rhTOw+9 7LMdhloWs2lrMFMbLcXMcBo13Tu+oWzWTcL9xFXDjI/KcvwykGYt6Q42u277UdC7 1BnK77dvLxPGEcZmAadsObOMlYmILTctNdcP8JHhf/QSlJKDbWAb3vdR50v5G5nF KcdukG7PN7yDAeRznHDCy7pCRXX+9x8= -----END CERTIFICATE-----Generated at Sun Apr 6 12:35:56 2025 by rpki-client