$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/595fb046-9295-368f-8ffc-2a8deebe67e8.roa File: 595fb046-9295-368f-8ffc-2a8deebe67e8.roa (raw, json) Hash identifier: MUd1eTVbNAvi0SeuBWVipeOv+Nj+P5EdmHnKG20lE68= Subject key identifier: 64:33:66:DD:FB:1C:BA:06:6C:5B:09:15:54:70:89:73:05:8E:5C:A2 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490CB16A449A5C9A5BC177AA80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/595fb046-9295-368f-8ffc-2a8deebe67e8.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 12189 IP address blocks: 131.153.108.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:6a:44:9a:5c:9a:5b:c1:77:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=385c6ebf-bec0-4270-bec6-65b1003985c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:28:1e:b6:b4:8a:30:5a:5e:be:3d:9e:62:99: 27:15:34:e9:31:b3:b6:71:b4:f5:f7:0b:1b:9d:17: e5:07:33:08:a3:a5:cd:30:1b:0d:8b:7f:31:b5:f2: 4e:ef:8a:2b:dc:ac:0c:49:c7:39:8f:e1:9d:4a:cb: dd:42:81:8f:46:fa:c6:18:92:b3:4d:ce:70:2e:59: 06:d9:a2:b4:8a:a9:bf:31:4d:90:4b:ee:3d:41:24: 54:57:20:f7:07:25:a7:0c:87:b6:19:36:d5:51:49: 56:84:9d:17:22:ab:e6:1a:87:85:a0:05:df:55:9c: 3e:ba:81:d9:bd:4e:27:e6:18:2e:0d:58:74:0f:45: 98:89:85:7b:70:34:a1:f4:dc:b7:82:c8:18:af:0c: 9b:8a:e5:4a:87:94:71:df:df:ce:d9:da:1e:eb:89: 4f:4c:35:c0:77:8f:02:e1:e6:8c:45:02:b4:6b:da: 88:7b:33:60:6a:1e:7c:98:93:5c:c7:22:2c:9f:45: 11:65:82:9c:b0:a5:cc:a1:d3:af:99:10:ad:39:60: 98:4f:12:86:6a:1d:50:1c:c4:9a:72:4f:5d:1e:91: 4c:0f:e3:20:74:d0:30:bb:68:e4:e3:ca:78:71:57: 4c:c9:18:94:3c:79:ff:4d:ab:d9:3d:d3:03:23:34: 41:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:33:66:DD:FB:1C:BA:06:6C:5B:09:15:54:70:89:73:05:8E:5C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/595fb046-9295-368f-8ffc-2a8deebe67e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:3c:d4:eb:7a:90:b2:a3:71:fe:04:44:7b:06:d9:f1:1b:3e: ca:56:43:aa:d3:29:96:a5:08:6c:a0:59:da:e1:75:ce:69:18: 70:ad:b6:c2:14:05:be:1e:06:bb:37:d5:0d:2a:03:a7:74:56: cb:09:06:b8:f1:11:ce:cb:7d:2b:4d:e7:b0:61:34:e1:11:30: 5e:9d:44:36:97:be:08:f2:60:35:ae:33:fa:71:b3:70:10:c5: a3:38:15:74:85:2a:07:5d:eb:b2:f6:d2:e8:70:85:08:e9:93: e7:61:23:64:9d:ee:2d:17:75:56:3c:a2:9f:dd:6a:71:17:3d: 11:08:4a:68:72:21:ac:94:28:8b:6f:98:c0:aa:2a:f4:5b:08: c6:bd:09:66:3c:56:42:a8:42:14:dc:8f:2b:15:b6:a1:e5:25: 0b:c8:df:0b:e0:52:7d:d5:eb:42:3b:1c:43:10:57:92:ca:60: 5f:ef:0e:1c:82:ae:00:3d:0e:ff:f6:47:3d:ce:2e:0a:19:89: 89:1c:06:29:7b:c3:05:b6:cb:a2:1b:29:aa:33:10:ba:d6:44: 03:75:bc:30:23:ae:89:6f:38:0c:90:41:ad:18:00:f2:2f:b2: 10:7e:f5:57:21:d9:7c:dd:b8:ba:27:90:2c:8f:1b:23:e9:8e: ef:03:ea:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWpEmlyaW8F3qoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk Mzg1YzZlYmYtYmVjMC00MjcwLWJlYzYtNjViMTAwMzk4NWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSgetrSKMFpevj2eYpknFTTpMbO2cbT19wsb nRflBzMIo6XNMBsNi38xtfJO74or3KwMScc5j+GdSsvdQoGPRvrGGJKzTc5wLlkG 2aK0iqm/MU2QS+49QSRUVyD3ByWnDIe2GTbVUUlWhJ0XIqvmGoeFoAXfVZw+uoHZ vU4n5hguDVh0D0WYiYV7cDSh9Ny3gsgYrwybiuVKh5Rx39/O2doe64lPTDXAd48C 4eaMRQK0a9qIezNgah58mJNcxyIsn0URZYKcsKXModOvmRCtOWCYTxKGah1QHMSa ck9dHpFMD+MgdNAwu2jk48p4cVdMyRiUPHn/TavZPdMDIzRBvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQzZt37HLoGbFsJFVRwiXMFjlyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNTk1ZmIwNDYtOTI5NS0z NjhmLThmZmMtMmE4ZGVlYmU2N2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF481Ot6kLKjcf4ERHsG2fEbPspWQ6rTKZalCGygWdrhdc5pGHCttsIU Bb4eBrs31Q0qA6d0VssJBrjxEc7LfStN57BhNOERMF6dRDaXvgjyYDWuM/pxs3AQ xaM4FXSFKgdd67L20uhwhQjpk+dhI2Sd7i0XdVY8op/danEXPREISmhyIayUKItv mMCqKvRbCMa9CWY8VkKoQhTcjysVtqHlJQvI3wvgUn3V60I7HEMQV5LKYF/vDhyC rgA9Dv/2Rz3OLgoZiYkcBil7wwW2y6IbKaozELrWRAN1vDAjrolvOAyQQa0YAPIv shB+9Vch2XzduLonkCyPGyPpju8D6pw= -----END CERTIFICATE-----Generated at Wed Apr 9 08:09:51 2025 by rpki-client