$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa File: ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa (raw, json) Hash identifier: LwfxqWnkSDMA2wwE/YvkfMtI/pUCjX4U2M3wMOy3SG8= Subject key identifier: C3:77:40:4D:D0:3E:3C:5E:ED:EE:24:EF:A3:95:24:88:8E:E4:AF:69 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490CB16B846C47A7042AEEFA00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 20454 IP address blocks: 131.153.68.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:6b:84:6c:47:a7:04:2a:ee:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=c5054fe7-f603-49ab-9fa6-c62cd724ff7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:63:3b:0c:38:df:84:f3:08:ee:dd:a7:54:e1: 74:87:97:b7:ac:18:a9:97:0c:c3:ce:1f:26:dd:a7: 42:fd:c8:73:84:95:cf:19:81:95:3c:6b:06:17:bf: 86:fe:e1:76:fa:23:e3:4f:ce:0f:3b:3e:41:6e:0c: e6:ef:7b:bf:fc:bc:aa:d4:86:41:9a:d5:3d:32:99: 88:f8:a6:7c:a7:cf:aa:ec:2f:fe:83:3d:b1:38:6c: 42:ed:69:72:f5:36:01:8e:a0:4f:d7:d0:3a:5b:63: 05:88:26:6b:18:94:d1:cb:7b:99:7c:e8:32:90:9a: 01:d7:65:a3:74:1b:8c:9a:22:ff:48:6b:ff:d8:6d: 23:77:44:78:c7:44:4f:b2:84:d6:93:f1:14:d0:3b: 05:34:32:9b:6d:22:cf:c3:3a:66:b4:d3:2b:0a:3c: db:01:91:aa:f1:9d:da:a7:f0:84:e2:d2:bc:d4:75: 79:43:e0:6a:86:d1:21:30:4c:c2:b0:bd:ec:ff:0b: c9:9b:f1:df:95:fb:bb:25:fd:bd:c4:d5:0f:12:cc: 56:02:50:e7:e3:44:19:1b:01:55:c0:4e:d3:f1:14: 29:d8:a0:36:f5:06:96:b6:88:fd:d5:6c:eb:57:be: 6c:71:a3:a9:b1:ea:f3:59:77:67:34:09:7c:2b:2b: 96:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:77:40:4D:D0:3E:3C:5E:ED:EE:24:EF:A3:95:24:88:8E:E4:AF:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d9:71:f8:20:26:a8:7c:ab:99:c3:c4:e2:e9:6f:46:8b:64: be:7b:ac:ee:1c:39:0b:c3:3f:df:d2:1c:80:83:24:6e:07:d4: e1:c8:f1:fd:ba:6d:9a:4f:7d:d0:bb:2a:b0:b7:90:d6:58:60: 2e:c9:22:45:dd:d7:e3:db:bd:f7:b6:30:63:9d:97:fe:92:f6: a7:2d:54:04:f3:fd:ea:37:08:be:b2:1a:ce:5f:50:e3:e0:6b: 6f:29:ea:65:59:f5:d2:3a:83:18:3e:5e:2b:ba:88:68:eb:54: a2:d8:98:47:98:00:f0:9e:1c:1d:f4:23:1e:64:36:19:e7:d0: d0:f1:f6:ba:58:5c:92:76:2e:d1:06:11:b0:d7:db:e7:28:fc: c2:39:24:82:92:7e:12:ab:cc:c7:a2:0c:79:b1:af:0c:bc:a3: 3f:e6:83:ce:47:e6:f2:76:45:e8:96:c7:7f:fe:f0:4a:1f:fb: 78:a6:e4:f2:cd:fa:c6:b1:1d:ca:56:17:f6:8b:20:4b:cb:88: b0:36:5e:55:75:12:a2:45:92:0e:01:11:a2:70:5f:34:f8:0e: 81:b3:2a:ef:55:92:d4:a0:a9:18:3e:f4:44:d7:dc:83:61:18: 97:19:11:04:17:ff:23:7f:0a:3a:e7:59:99:1d:27:c7:a3:91: 45:67:53:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWuEbEenBCru+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk YzUwNTRmZTctZjYwMy00OWFiLTlmYTYtYzYyY2Q3MjRmZjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2M7DDjfhPMI7t2nVOF0h5e3rBiplwzDzh8m 3adC/chzhJXPGYGVPGsGF7+G/uF2+iPjT84POz5Bbgzm73u//Lyq1IZBmtU9MpmI +KZ8p8+q7C/+gz2xOGxC7Wly9TYBjqBP19A6W2MFiCZrGJTRy3uZfOgykJoB12Wj dBuMmiL/SGv/2G0jd0R4x0RPsoTWk/EU0DsFNDKbbSLPwzpmtNMrCjzbAZGq8Z3a p/CE4tK81HV5Q+BqhtEhMEzCsL3s/wvJm/Hflfu7Jf29xNUPEsxWAlDn40QZGwFV wE7T8RQp2KA29QaWtoj91WzrV75scaOpserzWXdnNAl8KyuWXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMN3QE3QPjxe7e4k76OVJIiO5K9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYWM3YjRlMWUtMGExMC0z NzIwLThjZDMtMzM1NjM4MWQzNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5lEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbZcfggJqh8q5nDxOLpb0aLZL57rO4cOQvDP9/SHICDJG4H1OHI8f26 bZpPfdC7KrC3kNZYYC7JIkXd1+Pbvfe2MGOdl/6S9qctVATz/eo3CL6yGs5fUOPg a28p6mVZ9dI6gxg+Xiu6iGjrVKLYmEeYAPCeHB30Ix5kNhnn0NDx9rpYXJJ2LtEG EbDX2+co/MI5JIKSfhKrzMeiDHmxrwy8oz/mg85H5vJ2ReiWx3/+8Eof+3im5PLN +saxHcpWF/aLIEvLiLA2XlV1EqJFkg4BEaJwXzT4DoGzKu9VktSgqRg+9ETX3INh GJcZEQQX/yN/CjrnWZkdJ8ejkUVnUwQ= -----END CERTIFICATE-----Generated at Sat Apr 5 07:41:31 2025 by rpki-client