$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac5492f6-7473-38cf-b089-8eb390c48316.roa File: ac5492f6-7473-38cf-b089-8eb390c48316.roa (raw, json) Hash identifier: ADyZ4ZdhNACMvi+32KVEtmxxvrlv0gSdlBqj8yMiZ8Y= Subject key identifier: 84:4A:92:1B:BF:68:85:4B:9B:97:FF:BB:95:D5:43:07:F0:84:8A:82 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490CB16B55D074D694125A5380 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac5492f6-7473-38cf-b089-8eb390c48316.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 19181 IP address blocks: 131.153.58.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:6b:55:d0:74:d6:94:12:5a:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=00dde0f2-0116-4da1-b0b8-ec0dc59d56dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fc:78:40:35:81:fd:a3:1e:aa:2c:aa:71:8c: 64:1f:96:be:ee:9f:7f:f9:fa:6b:6c:87:ba:83:9f: 93:ad:84:8f:5b:8a:69:40:11:87:f7:8f:72:97:e1: 67:f3:7c:e7:8b:5a:fe:44:9d:ef:81:5e:ec:29:f8: 4e:91:80:f6:ff:c7:74:aa:36:6a:79:1b:2b:19:f7: 8a:f8:79:60:ba:4f:e7:23:7d:8f:db:9a:56:b8:35: 63:46:8a:6d:ae:e1:65:6e:c0:ad:ee:99:77:8a:3f: 8d:81:a1:01:d0:dc:b3:93:92:79:0b:d9:44:d9:2a: dc:41:23:f1:ab:8a:90:83:be:28:c3:f0:d5:00:e6: 1b:11:49:10:28:62:19:a5:ba:0e:1c:80:92:e1:ee: 70:13:67:8c:43:01:86:6c:79:9c:9c:6a:ed:ac:77: 62:83:ab:f3:39:1f:84:1f:3c:ea:c3:2f:55:78:4d: 53:c4:bb:1b:d8:05:42:8b:0a:76:1a:b0:e2:6f:cd: 52:12:88:9c:82:6d:59:f9:93:5f:6b:ad:8c:4e:1d: 67:f2:10:cf:c5:bc:95:d0:25:06:92:07:28:83:72: 37:40:b9:0d:07:e4:b3:b3:67:a6:1d:67:14:0d:4a: d4:25:15:8a:7d:51:3c:07:3e:8d:0c:aa:f9:54:30: 21:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4A:92:1B:BF:68:85:4B:9B:97:FF:BB:95:D5:43:07:F0:84:8A:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac5492f6-7473-38cf-b089-8eb390c48316.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e2:03:86:dd:e5:05:33:96:be:df:ea:ce:9d:94:79:47:3b: 7b:2a:32:15:5d:38:59:fe:f3:30:cc:0a:87:27:a4:9b:62:4d: 44:f5:c9:1d:16:81:5e:57:d5:ea:62:eb:34:9e:c7:bb:a4:c1: c1:27:4b:76:4b:5d:9b:fc:9a:5d:61:dd:32:d6:42:fa:3d:eb: 73:d6:81:bd:ed:67:2c:33:ec:1c:da:a9:ce:f1:c5:a4:82:f9: 87:6b:a6:81:d9:4d:50:c7:d8:b3:3a:9b:4f:40:16:d8:c3:e8: 5d:07:29:39:04:84:3a:88:ea:20:d1:ea:a5:ed:29:e2:b6:e2: 65:3f:dc:86:13:64:22:d2:00:e9:ea:4e:aa:03:4a:51:7c:37: 69:86:bb:93:34:09:a8:ac:e8:85:d5:94:c1:f6:a5:3c:c4:25: 41:e1:3d:16:69:af:79:67:43:4d:6f:51:21:c0:07:1c:2d:7e: 00:a4:db:11:39:03:91:f6:39:cb:7c:92:2f:04:9a:e7:cc:f3: 00:bc:c5:05:5d:59:0a:be:ad:d7:0e:86:cf:71:2f:86:39:ef: 7f:3f:87:19:f9:fe:b8:ee:1e:29:c7:75:6a:f8:e9:93:dc:e5: 5e:90:a4:7f:34:e5:d1:26:73:64:af:6e:68:c9:a7:3e:9b:0c: 0a:a9:0c:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWtV0HTWlBJaU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk MDBkZGUwZjItMDExNi00ZGExLWIwYjgtZWMwZGM1OWQ1NmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfx4QDWB/aMeqiyqcYxkH5a+7p9/+fprbIe6 g5+TrYSPW4ppQBGH949yl+Fn83zni1r+RJ3vgV7sKfhOkYD2/8d0qjZqeRsrGfeK +Hlguk/nI32P25pWuDVjRoptruFlbsCt7pl3ij+NgaEB0Nyzk5J5C9lE2SrcQSPx q4qQg74ow/DVAOYbEUkQKGIZpboOHICS4e5wE2eMQwGGbHmcnGrtrHdig6vzOR+E Hzzqwy9VeE1TxLsb2AVCiwp2GrDib81SEoicgm1Z+ZNfa62MTh1n8hDPxbyV0CUG kgcog3I3QLkNB+Szs2emHWcUDUrUJRWKfVE8Bz6NDKr5VDAhBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRKkhu/aIVLm5f/u5XVQwfwhIqCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYWM1NDkyZjYtNzQ3My0z OGNmLWIwODktOGViMzkwYzQ4MzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5k6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3iA4bd5QUzlr7f6s6dlHlHO3sqMhVdOFn+8zDMCocnpJtiTUT1yR0W gV5X1epi6zSex7ukwcEnS3ZLXZv8ml1h3TLWQvo963PWgb3tZywz7Bzaqc7xxaSC +YdrpoHZTVDH2LM6m09AFtjD6F0HKTkEhDqI6iDR6qXtKeK24mU/3IYTZCLSAOnq TqoDSlF8N2mGu5M0Cais6IXVlMH2pTzEJUHhPRZpr3lnQ01vUSHABxwtfgCk2xE5 A5H2Oct8ki8EmufM8wC8xQVdWQq+rdcOhs9xL4Y5738/hxn5/rjuHinHdWr46ZPc 5V6QpH805dEmc2SvbmjJpz6bDAqpDPQ= -----END CERTIFICATE-----Generated at Sun Apr 6 08:34:05 2025 by rpki-client