$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f6f9a004-d208-326b-81c8-642c2ada7bb8.roa File: f6f9a004-d208-326b-81c8-642c2ada7bb8.roa (raw, json) Hash identifier: HdA+TQ3FFaGAn8IjmtpVCsQ+oIMcYQsJMi1p+iMN2qk= Subject key identifier: 4A:41:BF:75:4C:EB:C8:41:58:50:B0:C9:41:53:1B:DC:8D:BD:06:D7 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584949FE94F00B527A0F8BC52620 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f6f9a004-d208-326b-81c8-642c2ada7bb8.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 152879 IP address blocks: 131.153.230.0/24 maxlen: 32 131.153.245.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:94:f0:0b:52:7a:0f:8b:c5:26:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=93fbd0c9-d79a-48ff-a544-4a3ec9b24132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e1:35:98:60:55:39:21:58:61:f0:4f:4b:0b: 65:f6:49:7f:64:e6:ad:fb:de:7c:23:94:cf:cf:45: ab:b0:18:dc:04:fe:a9:8f:aa:4d:e3:0d:be:de:db: 09:35:04:47:fb:9b:4c:c9:cd:97:32:52:f9:f0:e7: ec:ab:5e:ff:aa:8b:5b:a7:56:48:36:fc:53:13:05: b6:12:db:d4:7c:ad:c7:1f:e5:e6:c9:c2:40:ad:0c: 79:b3:30:46:f4:ab:3f:41:9f:9e:63:03:fc:e8:c8: da:a6:3b:69:ea:df:13:fa:fe:86:dc:1d:43:5a:37: f6:9f:47:8c:30:ab:db:b0:8b:bf:3f:01:4e:24:df: 85:4f:72:73:76:5d:20:a4:b8:85:50:af:6d:e7:ed: a2:3d:17:fb:91:7e:e4:07:80:e6:0f:3f:b9:94:16: 87:4a:b8:84:69:67:5c:91:38:9d:14:e2:67:d9:44: ff:b6:ab:13:77:35:9c:f3:ab:13:72:41:29:43:b3: db:8a:44:fa:cb:af:0e:78:38:96:de:f0:a0:51:60: f1:19:d6:40:5e:72:8a:a0:7e:a7:17:86:99:1f:0d: d0:f9:80:89:78:1e:5c:9d:0d:7c:24:12:87:0d:27: 18:16:a5:4d:40:88:8a:f3:ea:a4:98:27:0d:5c:4b: 9a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:41:BF:75:4C:EB:C8:41:58:50:B0:C9:41:53:1B:DC:8D:BD:06:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f6f9a004-d208-326b-81c8-642c2ada7bb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.230.0/24 131.153.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:61:06:1d:9b:61:bb:be:42:71:20:2f:a8:af:02:9a:e7:3d: dc:94:a2:a9:c0:25:95:1d:d6:29:c5:4d:bc:34:bd:dd:9f:de: c4:9b:4f:6e:80:2e:5c:0b:16:e1:23:55:5b:48:f2:cd:49:55: 04:97:45:89:2d:42:fa:1e:92:cc:83:5a:4a:2a:a8:cb:17:0a: f0:26:58:ee:dc:be:7c:b4:10:b1:f4:1a:ce:73:cc:3c:0b:51: 60:60:6e:65:ca:86:7c:f7:cb:df:5f:00:ff:ef:7c:06:e0:0f: 2d:1d:6a:05:96:49:c4:28:09:da:e5:ac:76:f9:d2:b2:8b:cb: 7a:e2:81:6e:7e:91:8a:f7:f0:e7:a1:0f:71:06:83:d6:cc:87: 50:ca:09:33:0d:d8:a9:94:fb:34:53:8d:4d:60:4d:04:02:1d: da:33:1d:6d:cc:8d:86:6c:13:fa:22:ba:20:b4:2a:49:b7:fd: a0:b2:7f:a6:a0:c3:a2:17:7a:ab:8f:fa:8e:d7:8d:20:52:dd: a8:b6:71:61:42:8a:2f:3c:13:76:5a:4f:87:2e:56:21:55:f7: ac:43:1a:99:ea:59:44:96:08:78:fb:6d:e8:5f:de:eb:7b:5d: 75:b0:d0:d9:07:9e:08:f5:f4:30:f9:a8:25:2d:d2:a2:6c:ea: f4:2e:f8:58 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElJ/pTwC1J6D4vFJiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk OTNmYmQwYzktZDc5YS00OGZmLWE1NDQtNGEzZWM5YjI0MTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheE1mGBVOSFYYfBPSwtl9kl/ZOat+958I5TP z0WrsBjcBP6pj6pN4w2+3tsJNQRH+5tMyc2XMlL58Ofsq17/qotbp1ZINvxTEwW2 EtvUfK3HH+XmycJArQx5szBG9Ks/QZ+eYwP86Mjapjtp6t8T+v6G3B1DWjf2n0eM MKvbsIu/PwFOJN+FT3Jzdl0gpLiFUK9t5+2iPRf7kX7kB4DmDz+5lBaHSriEaWdc kTidFOJn2UT/tqsTdzWc86sTckEpQ7PbikT6y68OeDiW3vCgUWDxGdZAXnKKoH6n F4aZHw3Q+YCJeB5cnQ18JBKHDScYFqVNQIiK8+qkmCcNXEuaSQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEpBv3VM68hBWFCwyUFTG9yNvQbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjZmOWEwMDQtZDIwOC0z MjZiLTgxYzgtNjQyYzJhZGE3YmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAg5nmAwQA g5n1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABphBh2bYbu+QnEgL6ivAprnPdyUoqnAJZUd1inFTbw0vd2f 3sSbT26ALlwLFuEjVVtI8s1JVQSXRYktQvoeksyDWkoqqMsXCvAmWO7cvny0ELH0 Gs5zzDwLUWBgbmXKhnz3y99fAP/vfAbgDy0dagWWScQoCdrlrHb50rKLy3rigW5+ kYr38OehD3EGg9bMh1DKCTMN2KmU+zRTjU1gTQQCHdozHW3MjYZsE/oiuiC0Kkm3 /aCyf6agw6IXequP+o7XjSBS3ai2cWFCii88E3ZaT4cuViFV96xDGpnqWUSWCHj7 behf3ut7XXWw0NkHngj19DD5qCUt0qJs6vQu+Fg= -----END CERTIFICATE-----Generated at Sun Apr 6 08:30:22 2025 by rpki-client