$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa File: 3a49eb68-6216-3abc-822d-65fec49cdd7d.roa (raw, json) Hash identifier: eMMBMeBtkmyxDt5DWv20sP4xi/8ENOGpC0PYhi3aqqc= Subject key identifier: 1C:8A:F3:B3:7B:53:FB:16:F2:D3:03:10:D3:D4:7D:A2:A8:2C:03:F2 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490E16B9856503E586E0758B00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 12189 IP address blocks: 131.153.124.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:b9:85:65:03:e5:86:e0:75:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=1a94c243-1939-43a3-854e-c19b68b51701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:46:2d:42:38:cd:5e:c6:b4:4a:c4:2e:b7:42: e3:4b:36:1a:54:76:1f:59:ff:80:0b:b0:e3:6a:18: ff:d3:fd:90:f1:c9:a1:99:a6:4a:96:af:52:0e:62: f2:aa:55:71:d2:ce:4b:7a:52:91:69:7b:e6:f9:74: ca:21:cb:87:ae:b6:0f:8b:70:72:03:99:86:ec:2a: 7d:e1:e7:77:94:c8:06:94:5a:d9:01:8f:ff:80:24: 00:4a:9a:fc:2e:60:02:a7:43:91:0b:f7:67:ac:07: be:39:b6:c0:d4:dd:40:31:f5:b8:a2:9e:08:cd:24: 5a:3e:06:88:a9:cd:e2:16:28:56:72:43:76:9f:06: b2:de:58:e4:d5:64:03:1f:b7:11:b3:e4:b1:1e:df: c2:3f:04:60:a8:28:13:7a:4a:1f:c4:74:b4:f5:84: ff:ae:04:c2:5e:7c:06:ee:de:e7:05:59:1b:6c:ca: 0c:30:e4:66:e8:ea:75:c7:57:69:10:36:1c:f9:d5: 8d:9c:d8:9d:e8:ee:16:1f:d1:73:01:e1:d2:3e:29: eb:ea:61:0f:3d:c0:6e:da:fb:73:f6:b8:aa:7c:68: 85:37:03:d5:a8:9e:90:77:d4:c2:22:6c:14:3d:e7: 36:d1:bc:71:51:c7:47:66:a5:fa:2c:e5:c3:e1:ea: 9d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8A:F3:B3:7B:53:FB:16:F2:D3:03:10:D3:D4:7D:A2:A8:2C:03:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:36:2f:b0:fd:2b:c7:9a:f6:11:37:fd:9d:bf:bf:82:ca:dc: 4a:e3:b8:4b:48:ae:11:92:2c:19:c8:28:3d:d4:42:9a:10:8f: 92:f6:0c:24:80:65:08:a6:d6:58:e0:99:8c:fb:d3:93:6a:55: 9d:81:e5:37:ae:b1:14:07:81:00:cb:da:03:94:a6:81:87:a0: 77:54:13:ff:ad:0e:d4:1c:52:38:27:6f:26:f0:33:46:93:84: 40:10:45:a5:82:33:9b:f5:3b:9d:07:a0:bf:a8:6a:70:46:5c: c0:e5:34:94:fc:57:85:64:20:c4:bc:b7:b5:33:e6:43:3e:8d: 32:02:45:34:b5:59:c8:bb:47:02:bc:0f:a2:6b:7c:8c:0e:a2: 12:cc:93:61:c6:b3:b6:89:91:e4:f7:94:df:94:24:b8:e4:87: 8b:cf:51:17:d6:ee:90:01:3e:ff:36:d8:bf:b8:ed:72:cd:ab: b8:4a:a9:9e:d8:ad:e3:16:05:ab:4e:8e:a8:03:1d:30:e3:df: 8c:0e:2e:ac:4f:a3:6a:c1:28:24:9e:fa:04:aa:9b:04:9c:cc: e3:77:13:31:71:d1:5d:af:72:fb:a0:d5:5f:b6:bd:d1:a5:6d: b7:f6:8c:57:cd:ef:e8:f5:b8:98:85:35:b0:fa:5c:e8:14:68: 5d:4b:f6:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFrmFZQPlhuB1iwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk MWE5NGMyNDMtMTkzOS00M2EzLTg1NGUtYzE5YjY4YjUxNzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0YtQjjNXsa0SsQut0LjSzYaVHYfWf+AC7Dj ahj/0/2Q8cmhmaZKlq9SDmLyqlVx0s5LelKRaXvm+XTKIcuHrrYPi3ByA5mG7Cp9 4ed3lMgGlFrZAY//gCQASpr8LmACp0ORC/dnrAe+ObbA1N1AMfW4op4IzSRaPgaI qc3iFihWckN2nway3ljk1WQDH7cRs+SxHt/CPwRgqCgTekofxHS09YT/rgTCXnwG 7t7nBVkbbMoMMORm6Op1x1dpEDYc+dWNnNid6O4WH9FzAeHSPinr6mEPPcBu2vtz 9riqfGiFNwPVqJ6Qd9TCImwUPec20bxxUcdHZqX6LOXD4eqdmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByK87N7U/sW8tMDENPUfaKoLAPyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2E0OWViNjgtNjIxNi0z YWJjLTgyMmQtNjVmZWM0OWNkZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5l8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM2L7D9K8ea9hE3/Z2/v4LK3ErjuEtIrhGSLBnIKD3UQpoQj5L2DCSA ZQim1ljgmYz705NqVZ2B5TeusRQHgQDL2gOUpoGHoHdUE/+tDtQcUjgnbybwM0aT hEAQRaWCM5v1O50HoL+oanBGXMDlNJT8V4VkIMS8t7Uz5kM+jTICRTS1Wci7RwK8 D6JrfIwOohLMk2HGs7aJkeT3lN+UJLjkh4vPURfW7pABPv822L+47XLNq7hKqZ7Y reMWBatOjqgDHTDj34wOLqxPo2rBKCSe+gSqmwSczON3EzFx0V2vcvug1V+2vdGl bbf2jFfN7+j1uJiFNbD6XOgUaF1L9s8= -----END CERTIFICATE-----Generated at Sun Apr 6 03:28:45 2025 by rpki-client