$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d498f1ad-6550-3118-8da5-441323aa3937.roa File: d498f1ad-6550-3118-8da5-441323aa3937.roa (raw, json) Hash identifier: TQwcCfe+g9/CH8NZNqNvdRQuTVovHqiQaDZnUooK0jk= Subject key identifier: 45:CD:E1:16:B4:16:32:EA:35:C2:98:E3:B5:33:84:BE:C8:8F:C7:E5 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490CB1685517ACF3E0BA789580 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d498f1ad-6550-3118-8da5-441323aa3937.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 20454 IP address blocks: 131.153.37.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:68:55:17:ac:f3:e0:ba:78:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=81c784ff-9ccf-41c1-b57d-e76cc525771b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:44:42:17:a3:73:60:f1:9a:87:06:8f:dd:c0: b9:46:43:81:6f:f5:3a:38:dd:1d:db:5d:56:ba:82: d8:de:07:89:84:4b:ff:ca:21:ff:50:3f:5a:67:f7: da:bc:26:f3:8c:d1:c9:2d:dd:6b:74:e3:b8:3a:a5: 7e:4e:95:56:15:1d:52:dc:d3:36:bc:43:1b:1f:c4: 1a:3c:af:1a:45:3f:6b:02:d8:7a:dc:c7:42:ef:61: 8b:14:1a:d6:4a:2b:a5:92:3d:80:fe:41:4c:80:0b: 08:9f:c8:e1:95:bb:f2:7f:82:bc:fe:bd:25:7e:34: 0c:6c:2f:e9:00:07:72:db:eb:92:d9:7f:89:3b:44: 1b:63:b9:50:61:f4:0c:ce:ea:83:b3:93:46:30:cf: ce:d4:ce:62:c3:04:c0:d1:ba:dd:d2:c8:1d:83:43: 08:ed:66:ee:f9:2f:cc:8f:6a:b8:7c:4b:e3:62:ed: c5:c4:6b:b7:c5:a5:70:6d:53:a3:6e:47:c0:d4:16: 11:05:0c:7b:99:a2:94:a0:a1:14:9e:1c:79:5b:d6: 69:70:44:d1:83:f7:0c:68:fc:9b:79:0a:71:f6:b9: bd:6d:93:ee:79:87:05:70:b9:83:83:6f:1d:dd:5d: 0d:f4:fa:64:54:4b:29:6c:69:4a:34:6a:ca:33:54: 89:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CD:E1:16:B4:16:32:EA:35:C2:98:E3:B5:33:84:BE:C8:8F:C7:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d498f1ad-6550-3118-8da5-441323aa3937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ec:1c:56:2a:ef:a4:e3:6b:d9:d6:77:20:e4:7f:47:05:9d: 50:99:2e:fe:a0:58:10:ff:f5:31:80:8e:dd:b0:3b:71:39:38: d1:17:7a:62:9d:fe:cc:30:21:3e:00:cb:de:4f:a3:25:e3:8b: 5c:f6:01:36:b0:c1:38:76:b4:7b:c6:ce:20:96:e9:a4:7f:32: a4:13:4f:3a:bd:cc:59:0d:1f:75:7c:9b:78:ad:88:92:db:fb: 06:37:e4:45:b7:d6:d8:9b:55:b5:13:73:2a:1c:93:8f:1b:79: f2:b1:6f:f4:f3:e1:36:57:ee:b4:9a:6d:05:07:96:15:f0:d5: bc:c2:d1:9a:12:3d:24:94:6d:f7:fd:da:ab:bf:b4:07:3f:11: ff:4c:0a:7e:8d:c7:c2:9a:39:02:0c:7d:30:6e:6a:64:5e:26: d3:c3:e8:fe:b0:2e:7d:43:21:14:92:45:95:fc:75:80:94:2e: 99:e4:38:3a:58:61:a0:9e:60:48:b2:ea:86:67:d2:7b:d9:46: ed:8f:f8:ae:48:f3:07:69:f5:86:f0:5e:c6:e9:fe:f1:92:0a: 1a:dd:15:5c:5b:92:29:d2:71:9d:18:f7:13:fe:e8:5d:a0:3e: 7f:0c:3c:3d:55:cd:af:0c:c7:95:27:3a:3f:11:2f:34:9f:00: 9b:91:eb:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWhVF6zz4Lp4lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk ODFjNzg0ZmYtOWNjZi00MWMxLWI1N2QtZTc2Y2M1MjU3NzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyERCF6NzYPGahwaP3cC5RkOBb/U6ON0d211W uoLY3geJhEv/yiH/UD9aZ/favCbzjNHJLd1rdOO4OqV+TpVWFR1S3NM2vEMbH8Qa PK8aRT9rAth63MdC72GLFBrWSiulkj2A/kFMgAsIn8jhlbvyf4K8/r0lfjQMbC/p AAdy2+uS2X+JO0QbY7lQYfQMzuqDs5NGMM/O1M5iwwTA0brd0sgdg0MI7Wbu+S/M j2q4fEvjYu3FxGu3xaVwbVOjbkfA1BYRBQx7maKUoKEUnhx5W9ZpcETRg/cMaPyb eQpx9rm9bZPueYcFcLmDg28d3V0N9PpkVEspbGlKNGrKM1SJBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXN4Ra0FjLqNcKY47UzhL7Ij8flMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDQ5OGYxYWQtNjU1MC0z MTE4LThkYTUtNDQxMzIzYWEzOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5klMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvsHFYq76Tja9nWdyDkf0cFnVCZLv6gWBD/9TGAjt2wO3E5ONEXemKd /swwIT4Ay95PoyXji1z2ATawwTh2tHvGziCW6aR/MqQTTzq9zFkNH3V8m3itiJLb +wY35EW31tibVbUTcyock48befKxb/Tz4TZX7rSabQUHlhXw1bzC0ZoSPSSUbff9 2qu/tAc/Ef9MCn6Nx8KaOQIMfTBuamReJtPD6P6wLn1DIRSSRZX8dYCULpnkODpY YaCeYEiy6oZn0nvZRu2P+K5I8wdp9YbwXsbp/vGSChrdFVxbkinScZ0Y9xP+6F2g Pn8MPD1Vza8Mx5UnOj8RLzSfAJuR6w0= -----END CERTIFICATE-----Generated at Sat Apr 5 07:34:00 2025 by rpki-client