$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa File: 88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa (raw, json) Hash identifier: klkd9YghVZgOvyHFn55FWkxADyTgjAM+FrcPKjniS8s= Subject key identifier: B1:1E:A7:D6:35:8C:22:F8:49:C1:0B:1B:4B:61:FD:A7:74:C8:06:36 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490CB168B0B47C94ADEAFC80C0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 59210 IP address blocks: 131.153.48.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:68:b0:b4:7c:94:ad:ea:fc:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=02eeccb7-303d-4edf-b523-6b4d6fe256cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:34:15:61:c2:f4:a4:21:e2:0c:25:f0:03: c9:0f:3a:6b:0e:aa:9f:ae:52:f7:aa:0d:78:14:6a: c4:76:93:4f:93:e6:d7:8a:55:b5:09:e5:6e:96:62: 0f:e1:9f:06:4e:1c:4f:a4:10:52:68:bd:31:37:4f: a9:10:f9:ae:8b:67:7e:ae:96:f3:8f:12:c5:0d:6f: 00:42:e3:df:cb:40:1c:e4:32:83:a8:6f:89:64:99: ad:42:3c:92:50:6f:ad:8d:1e:17:19:ce:f5:45:50: db:7c:e2:e6:4b:9e:7b:c1:10:73:97:c0:19:a6:7d: 64:95:36:bc:49:d1:f3:4f:4e:a7:fc:fb:a5:ee:5f: 92:49:9a:98:cb:d2:90:b8:92:d8:88:39:ff:33:70: 83:d9:73:b4:fa:5c:07:79:f3:84:b4:62:d4:44:dd: e7:38:2b:58:55:a3:db:3b:b5:fc:e8:cc:60:33:06: 04:ae:7c:2a:c4:7c:c8:b3:20:30:be:67:76:3d:87: 6f:c3:ce:6e:3e:25:17:2a:92:36:3f:1e:59:d7:8a: 5d:22:60:4a:e8:55:bf:46:c7:3d:63:23:2b:99:0e: 8b:06:d1:ad:8a:9e:44:4c:56:7e:78:a9:de:d8:19: 43:9f:40:77:98:65:e3:57:66:ef:ba:73:29:4f:13: 26:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1E:A7:D6:35:8C:22:F8:49:C1:0B:1B:4B:61:FD:A7:74:C8:06:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:43:bf:85:5c:3f:eb:33:ce:5d:00:4a:12:9a:46:b9:31:80: b2:c9:c0:5f:7d:8d:18:3f:b1:f2:c7:5e:8f:35:88:70:4a:b8: 19:33:03:47:8c:97:ca:58:10:e5:d0:93:55:9f:be:2a:fc:66: 5b:ce:b1:d9:0c:84:7f:df:cc:bc:db:e7:af:b4:36:65:43:86: 01:e5:a0:7e:c1:8f:fa:2a:71:62:a3:94:48:29:8b:15:cd:81: cc:ae:16:6b:8b:19:9e:d5:53:fb:68:e8:fa:f3:a6:96:8a:1a: e3:ae:bd:e6:21:5d:f7:5b:73:d4:db:c1:1d:72:07:28:87:30: c1:b7:32:fa:f0:24:49:7e:79:77:0b:39:57:e1:f6:45:ec:d7: f4:e1:51:84:4f:be:a5:55:99:fa:82:04:8c:fc:32:d2:21:af: c0:1f:b6:e1:24:63:e1:05:96:e9:6d:95:b6:f1:20:b9:b5:e2: 3e:26:e9:8e:98:b9:d2:60:9d:8b:05:cd:12:40:fd:bd:cd:f7: 1a:68:13:45:35:52:cc:96:5c:11:18:59:11:f6:0e:4c:91:10: ee:e5:0a:3c:05:a5:63:e5:32:ac:82:24:87:9d:70:c8:89:55: fd:96:88:14:ea:b6:2c:4c:3e:21:25:4e:fb:39:ae:2b:b1:a6: 1c:0b:57:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWiwtHyUrer8gMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk MDJlZWNjYjctMzAzZC00ZWRmLWI1MjMtNmI0ZDZmZTI1NmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Oo0FWHC9KQh4gwl8APJDzprDqqfrlL3qg14 FGrEdpNPk+bXilW1CeVulmIP4Z8GThxPpBBSaL0xN0+pEPmui2d+rpbzjxLFDW8A QuPfy0Ac5DKDqG+JZJmtQjySUG+tjR4XGc71RVDbfOLmS557wRBzl8AZpn1klTa8 SdHzT06n/Pul7l+SSZqYy9KQuJLYiDn/M3CD2XO0+lwHefOEtGLURN3nOCtYVaPb O7X86MxgMwYErnwqxHzIsyAwvmd2PYdvw85uPiUXKpI2Px5Z14pdImBK6FW/Rsc9 YyMrmQ6LBtGtip5ETFZ+eKne2BlDn0B3mGXjV2bvunMpTxMmJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEep9Y1jCL4ScELG0th/ad0yAY2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvODhhMjk2OWYtN2FiYy0z YzFjLWFmODktNmIyOWZkYTE4YmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5kwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtDv4VcP+szzl0AShKaRrkxgLLJwF99jRg/sfLHXo81iHBKuBkzA0eM l8pYEOXQk1Wfvir8ZlvOsdkMhH/fzLzb56+0NmVDhgHloH7Bj/oqcWKjlEgpixXN gcyuFmuLGZ7VU/to6PrzppaKGuOuveYhXfdbc9TbwR1yByiHMMG3MvrwJEl+eXcL OVfh9kXs1/ThUYRPvqVVmfqCBIz8MtIhr8AftuEkY+EFlultlbbxILm14j4m6Y6Y udJgnYsFzRJA/b3N9xpoE0U1UsyWXBEYWRH2DkyREO7lCjwFpWPlMqyCJIedcMiJ Vf2WiBTqtixMPiElTvs5riuxphwLV0Y= -----END CERTIFICATE-----Generated at Sun Apr 6 10:40:53 2025 by rpki-client