$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8806f017-bb65-315a-9c2b-a0754dc20c8a.roa File: 8806f017-bb65-315a-9c2b-a0754dc20c8a.roa (raw, json) Hash identifier: t3I0MuqoBesJ80wMVeOtf46AFUrWyvcwEx0S99qvMs0= Subject key identifier: 61:63:42:89:39:A0:A0:CA:FE:1C:F2:77:AA:9A:DC:8E:57:60:00:AF Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490E16BA64B7319F33575775E0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8806f017-bb65-315a-9c2b-a0754dc20c8a.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 207134 IP address blocks: 131.153.40.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:ba:64:b7:31:9f:33:57:57:75:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=6bce774c-d6b9-4a8d-a573-0cb79fa5a025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:39:2f:7b:82:9c:18:ad:0c:c3:21:f8:15:d9: 5b:75:23:96:94:b2:e3:af:4c:45:2f:a5:ce:c6:d0: d0:b2:bb:5b:90:da:b9:2a:f5:cd:91:59:ff:1f:55: 8a:b9:d7:6c:20:ad:c8:6c:62:64:35:cb:ac:0a:38: c5:12:cb:1d:fc:f2:1c:32:d3:f9:3b:d6:ee:c2:b6: c5:b9:4b:55:ae:ec:d3:bf:d4:49:19:34:00:2d:32: be:d8:a6:12:62:0f:0a:1c:0d:c8:6c:45:07:e3:ec: e6:4c:4f:e4:a0:71:df:25:1e:23:82:0c:b3:8e:9e: f3:45:af:6f:a7:a9:ed:5c:b2:a6:df:f3:e5:be:2a: e5:0b:11:a1:42:a0:03:e2:f0:61:fb:e5:25:e9:53: 36:84:f6:bc:09:38:e1:9c:24:4f:55:8b:96:0c:62: 70:20:12:5d:68:79:1a:1d:6c:cf:5a:ce:cf:55:40: a1:7a:9d:5d:ed:74:8a:59:8a:d2:0c:62:0d:59:c1: 89:4e:61:ab:65:5e:f5:a0:67:ae:b1:21:9c:5a:2a: c7:64:18:b0:e0:c0:8a:d2:36:bd:08:68:47:9c:5a: f3:da:73:c2:d2:6b:27:78:7e:6d:59:75:c7:d0:98: 3d:44:2a:bc:72:f9:77:1b:2e:35:60:6a:14:85:f4: 80:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:63:42:89:39:A0:A0:CA:FE:1C:F2:77:AA:9A:DC:8E:57:60:00:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8806f017-bb65-315a-9c2b-a0754dc20c8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:84:c0:18:c0:4d:eb:68:47:9e:0e:31:70:a2:e9:88:89:c1: e8:87:69:27:86:64:34:56:b0:e5:e2:78:a3:ec:c4:9e:96:eb: d8:e0:32:b9:cb:83:fc:01:5a:3e:25:e2:04:8e:2b:b1:eb:b9: ec:d3:d3:19:a8:50:df:12:1b:b4:c7:fd:48:90:6a:eb:f8:24: ea:fc:34:10:54:59:9c:a2:0c:8a:87:80:ea:df:1c:3f:3b:31: 5c:df:ec:45:e2:ae:2a:81:69:ae:e5:3d:4b:13:be:09:76:04: a9:8b:0b:81:34:05:8e:08:51:a3:0f:5d:01:8b:ed:da:8c:97: 02:58:b9:fe:09:e3:0a:a0:17:4c:6b:01:0b:5e:0d:90:52:54: 30:fc:65:96:c8:5b:b6:6c:37:e9:8b:62:d9:8b:de:73:3c:33: 70:a1:3d:e3:69:3a:cb:57:3c:30:8f:f5:ae:a9:c5:11:d1:8b: 87:e2:ed:8e:e6:24:04:b1:b4:9e:ef:b4:df:a4:f6:10:42:b6: 56:cc:89:5c:39:1c:3d:52:57:69:b0:b8:04:e9:f0:c8:99:f8: 11:13:0a:7a:3d:90:f9:56:27:b9:6d:f6:db:ee:55:b4:26:79: ee:48:ac:e7:06:3d:cb:fc:f9:96:43:25:f9:fa:7d:98:ff:0c: e3:9f:9f:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFrpktzGfM1dXdeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk NmJjZTc3NGMtZDZiOS00YThkLWE1NzMtMGNiNzlmYTVhMDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Dkve4KcGK0MwyH4FdlbdSOWlLLjr0xFL6XO xtDQsrtbkNq5KvXNkVn/H1WKuddsIK3IbGJkNcusCjjFEssd/PIcMtP5O9buwrbF uUtVruzTv9RJGTQALTK+2KYSYg8KHA3IbEUH4+zmTE/koHHfJR4jggyzjp7zRa9v p6ntXLKm3/PlvirlCxGhQqAD4vBh++Ul6VM2hPa8CTjhnCRPVYuWDGJwIBJdaHka HWzPWs7PVUChep1d7XSKWYrSDGINWcGJTmGrZV71oGeusSGcWirHZBiw4MCK0ja9 CGhHnFrz2nPC0msneH5tWXXH0Jg9RCq8cvl3Gy41YGoUhfSAawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFjQok5oKDK/hzyd6qa3I5XYACvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvODgwNmYwMTctYmI2NS0z MTVhLTljMmItYTA3NTRkYzIwYzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5koMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByEwBjATetoR54OMXCi6YiJweiHaSeGZDRWsOXieKPsxJ6W69jgMrnL g/wBWj4l4gSOK7HruezT0xmoUN8SG7TH/UiQauv4JOr8NBBUWZyiDIqHgOrfHD87 MVzf7EXiriqBaa7lPUsTvgl2BKmLC4E0BY4IUaMPXQGL7dqMlwJYuf4J4wqgF0xr AQteDZBSVDD8ZZbIW7ZsN+mLYtmL3nM8M3ChPeNpOstXPDCP9a6pxRHRi4fi7Y7m JASxtJ7vtN+k9hBCtlbMiVw5HD1SV2mwuATp8MiZ+BETCno9kPlWJ7lt9tvuVbQm ee5IrOcGPcv8+ZZDJfn6fZj/DOOfn14= -----END CERTIFICATE-----Generated at Sun Apr 6 08:32:52 2025 by rpki-client