$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d00dfcb1-8997-3cd3-af05-0800d9a48025.roa File: d00dfcb1-8997-3cd3-af05-0800d9a48025.roa (raw, json) Hash identifier: cH1GQMvSsg2aJWAJ2oaV21zrm7KqrtmJJ2KPS2SjmtU= Subject key identifier: 04:9E:99:27:9B:10:0D:F4:CA:E1:86:74:98:41:A9:2D:E5:EB:2E:8B Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490CB16884C968EDAF34FBBC80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d00dfcb1-8997-3cd3-af05-0800d9a48025.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 20454 IP address blocks: 131.153.45.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:68:84:c9:68:ed:af:34:fb:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=4733c5eb-fe4d-4988-b64e-a81671305233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:50:12:f1:a2:e9:7b:56:94:f4:b9:fc:e0:e2: 39:a1:96:1d:97:5f:90:14:77:2d:7c:d3:c8:50:da: 00:fc:23:12:e1:c1:15:23:6f:29:dd:36:c2:d3:35: 39:27:9b:44:3b:65:59:37:8f:bb:99:95:cb:8d:d7: ec:d6:12:7e:c9:28:4d:d5:97:0c:00:06:21:7a:10: 5f:8e:36:43:6a:87:6c:9e:7c:7a:87:22:70:c8:24: 52:48:da:0c:51:c4:4a:5d:01:a3:1b:ce:73:38:55: e0:1f:3f:92:c7:c6:8e:a0:34:1c:74:07:af:7b:3c: 61:9c:dc:c7:6d:a5:b8:7f:5d:c8:c8:d1:3d:42:19: 49:bb:9c:c6:42:a7:0e:41:17:dd:18:01:a4:2f:5b: af:a8:ea:8d:62:8e:fb:f0:b3:ed:2d:af:59:95:f8: 93:40:a3:02:f1:a5:8c:d1:b4:e7:79:83:b3:29:4f: d5:20:b0:a3:06:bd:8e:d7:b0:a4:2c:c3:d4:13:c2: 3f:61:0b:37:05:ca:4d:b9:29:bf:19:39:3f:28:8e: de:f7:0b:95:e4:a3:95:4b:61:de:f9:ae:bc:9c:13: 5b:a7:ca:8b:5b:03:78:84:11:ab:00:47:27:45:f7: 22:d2:41:7f:8d:21:7d:f7:18:26:45:ea:b9:cb:0c: 73:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9E:99:27:9B:10:0D:F4:CA:E1:86:74:98:41:A9:2D:E5:EB:2E:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d00dfcb1-8997-3cd3-af05-0800d9a48025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:bd:51:bb:e1:09:d6:87:07:e8:75:93:3a:5b:28:eb:92:50: e7:2f:0f:47:fb:3f:fc:10:72:d5:f6:73:be:ab:68:17:6f:31: 4e:28:d2:7f:b0:92:1e:41:11:e7:dc:62:e6:8b:51:e0:29:20: d6:a6:aa:b2:ee:2a:1c:28:71:9d:b7:7d:3d:b7:03:05:6c:6f: 1f:78:f0:61:c5:3a:92:b7:8d:f2:09:2d:10:29:11:6d:b4:67: be:ff:6d:e4:6e:c6:73:0a:25:f9:05:83:7b:b1:76:cb:c8:f8: be:68:c6:02:50:ff:86:57:51:93:3f:5c:c4:1f:25:45:43:75: 84:6a:f8:7e:76:5d:57:d0:f7:72:65:7f:4e:59:de:3c:7a:ba: a2:45:6b:d1:83:ee:2c:58:03:6f:a3:1d:0f:0b:b4:dc:42:f5: 3c:5d:41:e8:50:17:6a:d0:0f:2a:a8:ce:76:85:2f:bf:9f:5b: a7:50:c4:eb:e4:8e:b1:db:6a:6c:c2:3a:56:52:2d:be:01:4d: a3:64:ac:30:65:d4:b8:74:2c:2a:18:e1:d6:2a:9c:ca:f5:92: d3:22:62:4d:12:6c:e6:1e:85:8d:cd:e1:77:91:67:07:69:79: f1:b2:da:dc:01:a0:ab:42:5f:2d:03:05:3e:95:85:44:3f:a7: 17:5d:14:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWiEyWjtrzT7vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk NDczM2M1ZWItZmU0ZC00OTg4LWI2NGUtYTgxNjcxMzA1MjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFAS8aLpe1aU9Ln84OI5oZYdl1+QFHctfNPI UNoA/CMS4cEVI28p3TbC0zU5J5tEO2VZN4+7mZXLjdfs1hJ+yShN1ZcMAAYhehBf jjZDaodsnnx6hyJwyCRSSNoMUcRKXQGjG85zOFXgHz+Sx8aOoDQcdAevezxhnNzH baW4f13IyNE9QhlJu5zGQqcOQRfdGAGkL1uvqOqNYo778LPtLa9ZlfiTQKMC8aWM 0bTneYOzKU/VILCjBr2O17CkLMPUE8I/YQs3BcpNuSm/GTk/KI7e9wuV5KOVS2He +a68nBNbp8qLWwN4hBGrAEcnRfci0kF/jSF99xgmReq5ywxzRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASemSebEA30yuGGdJhBqS3l6y6LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDAwZGZjYjEtODk5Ny0z Y2QzLWFmMDUtMDgwMGQ5YTQ4MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5ktMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJm9UbvhCdaHB+h1kzpbKOuSUOcvD0f7P/wQctX2c76raBdvMU4o0n+w kh5BEefcYuaLUeApINamqrLuKhwocZ23fT23AwVsbx948GHFOpK3jfIJLRApEW20 Z77/beRuxnMKJfkFg3uxdsvI+L5oxgJQ/4ZXUZM/XMQfJUVDdYRq+H52XVfQ93Jl f05Z3jx6uqJFa9GD7ixYA2+jHQ8LtNxC9TxdQehQF2rQDyqoznaFL7+fW6dQxOvk jrHbamzCOlZSLb4BTaNkrDBl1Lh0LCoY4dYqnMr1ktMiYk0SbOYehY3N4XeRZwdp efGy2twBoKtCXy0DBT6VhUQ/pxddFHQ= -----END CERTIFICATE-----Generated at Sat Apr 5 07:29:02 2025 by rpki-client