$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f167a86e-0304-38f6-baf0-2ee2779263a8.roa File: f167a86e-0304-38f6-baf0-2ee2779263a8.roa (raw, json) Hash identifier: BdPBxZgE0NOYW3BAZRrkriJ5DVcB3O/XdweYVezGKYA= Subject key identifier: 0A:D8:B3:FB:87:54:2C:40:4A:88:33:A1:CC:57:6D:B1:2D:F0:B0:68 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490E16BF9BEB330ADBD25FF800 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f167a86e-0304-38f6-baf0-2ee2779263a8.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 59210 IP address blocks: 131.153.159.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:bf:9b:eb:33:0a:db:d2:5f:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=1d11df42-bca6-4ba1-8680-3ae40c5dded1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:77:d4:fc:f1:47:90:81:db:3a:1f:24:63:32: 77:48:75:62:73:13:e9:e1:ca:4f:74:da:b0:d0:81: 5e:20:df:b2:56:52:70:c4:76:5d:ab:8b:4f:d2:b1: c4:a5:24:9b:fc:6d:20:e7:2b:c2:a3:f1:cc:fd:28: eb:a5:65:7d:bf:2c:68:6e:24:60:c8:f2:5f:e4:97: 5e:d5:4a:86:d8:4c:bc:c6:8a:33:f9:5e:94:f2:da: 7a:13:a6:f7:a8:a4:a3:91:92:6c:f9:b6:2c:c8:cb: cd:df:a8:d2:b2:d6:9a:a7:e1:dd:be:3c:f9:e3:07: 60:9f:de:4e:75:a5:41:cc:c0:99:29:bb:14:51:91: 0b:cf:27:6e:0f:56:5b:39:44:02:66:95:20:82:b9: 24:b6:32:b9:09:07:02:64:04:ad:de:97:7f:cb:f9: 68:90:28:a1:90:6c:a6:c2:5f:b9:57:15:e0:37:82: 0a:4c:08:f6:78:6c:03:6f:de:68:2f:c2:6b:fd:d7: d1:81:41:21:ad:c5:fa:1c:c7:7c:c1:5d:6f:ed:82: 2d:73:ea:d7:5e:18:bd:44:86:dd:0f:b5:c7:7d:0b: 4d:fe:a0:74:36:a3:4b:50:e0:6f:e9:76:e7:e3:eb: 7e:e7:5c:74:74:ab:eb:fb:18:3d:48:46:83:1f:1c: 39:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D8:B3:FB:87:54:2C:40:4A:88:33:A1:CC:57:6D:B1:2D:F0:B0:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f167a86e-0304-38f6-baf0-2ee2779263a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f6:c5:c2:69:a8:af:66:cf:15:34:9f:9b:bf:86:2d:ce:a5: 73:34:86:de:f8:c1:1d:e5:04:9e:e0:e5:f0:07:7e:0f:5f:90: c4:2e:6d:f1:53:b5:79:48:e9:24:8b:f5:f5:4d:f6:d8:4a:75: d8:cd:88:a1:22:8c:4d:de:34:5f:13:20:0b:39:dd:96:18:25: a1:c3:0e:87:fa:2f:e5:91:55:b6:57:c7:17:dd:ab:23:1b:55: 98:2f:55:d4:02:b1:d0:78:f5:92:c8:06:1d:af:8c:89:db:3c: ce:ff:e3:58:23:11:c6:ed:25:de:70:eb:40:cb:41:4b:e8:71: 1f:e1:d8:d8:e9:52:80:e8:eb:6e:0e:de:40:9a:1b:fe:90:0e: 7c:af:b2:6d:4b:39:91:d0:7e:87:90:e1:b4:07:57:ab:ad:5f: 38:06:70:63:f0:ca:f3:5c:51:13:ae:0d:90:8a:63:3e:c3:f6: 41:8d:fe:bf:18:0a:7c:ca:48:d6:34:26:c5:95:11:44:b4:6a: 82:bf:0e:44:43:f5:29:2a:df:8b:cd:b0:21:4a:ab:97:bd:c5: 0a:a8:66:1a:c0:e4:6d:8f:30:47:a8:49:e2:52:6f:f2:09:0a: 85:ac:96:13:d4:23:0a:9e:51:6e:36:5b:32:10:e8:4f:9c:26: d0:0e:46:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFr+b6zMK29Jf+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk MWQxMWRmNDItYmNhNi00YmExLTg2ODAtM2FlNDBjNWRkZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHfU/PFHkIHbOh8kYzJ3SHVicxPp4cpPdNqw 0IFeIN+yVlJwxHZdq4tP0rHEpSSb/G0g5yvCo/HM/SjrpWV9vyxobiRgyPJf5Jde 1UqG2Ey8xooz+V6U8tp6E6b3qKSjkZJs+bYsyMvN36jSstaap+Hdvjz54wdgn95O daVBzMCZKbsUUZELzyduD1ZbOUQCZpUggrkktjK5CQcCZASt3pd/y/lokCihkGym wl+5VxXgN4IKTAj2eGwDb95oL8Jr/dfRgUEhrcX6HMd8wV1v7YItc+rXXhi9RIbd D7XHfQtN/qB0NqNLUOBv6Xbn4+t+51x0dKvr+xg9SEaDHxw5rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArYs/uHVCxASogzocxXbbEt8LBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjE2N2E4NmUtMDMwNC0z OGY2LWJhZjAtMmVlMjc3OTI2M2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5mfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn2xcJpqK9mzxU0n5u/hi3OpXM0ht74wR3lBJ7g5fAHfg9fkMQubfFT tXlI6SSL9fVN9thKddjNiKEijE3eNF8TIAs53ZYYJaHDDof6L+WRVbZXxxfdqyMb VZgvVdQCsdB49ZLIBh2vjInbPM7/41gjEcbtJd5w60DLQUvocR/h2NjpUoDo624O 3kCaG/6QDnyvsm1LOZHQfoeQ4bQHV6utXzgGcGPwyvNcUROuDZCKYz7D9kGN/r8Y CnzKSNY0JsWVEUS0aoK/DkRD9Skq34vNsCFKq5e9xQqoZhrA5G2PMEeoSeJSb/IJ CoWslhPUIwqeUW42WzIQ6E+cJtAORmg= -----END CERTIFICATE-----Generated at Sun Apr 6 08:25:47 2025 by rpki-client