$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7af57255-95e9-35f8-a3b4-964cc0e6608e.roa File: 7af57255-95e9-35f8-a3b4-964cc0e6608e.roa (raw, json) Hash identifier: nM446BRDBGm5HuQSBGNmNGsaNqld7NWDEDfe6q+f8ms= Subject key identifier: F2:AE:CE:F6:A9:FB:DE:F3:62:85:45:90:97:FB:26:B9:D8:5B:44:FD Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490E16BA8EFECC883AD0CE0AA0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7af57255-95e9-35f8-a3b4-964cc0e6608e.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 12189 IP address blocks: 131.153.72.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:ba:8e:fe:cc:88:3a:d0:ce:0a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=05e8251a-c02a-4a6f-9b2f-77ce26150470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ec:00:7e:af:5f:21:49:fb:be:df:4f:eb:16: 8c:63:c2:64:00:77:48:1b:5d:63:2d:36:04:c1:38: 8c:2a:a1:1b:ae:2b:c2:7c:bb:80:25:fc:a5:43:1d: 9e:8a:76:82:9e:86:dd:80:c8:59:d0:82:04:24:59: 9e:4d:a0:a4:02:93:b3:70:26:20:d5:09:0c:33:f6: 5c:8d:c8:7f:0d:9e:3f:b4:6f:2f:db:b6:61:e6:63: 1d:5d:c6:4a:0b:c8:5c:b7:89:76:ab:48:72:42:99: 59:d7:5a:25:07:f1:3d:02:78:05:b5:07:cf:b5:1b: 0b:52:81:82:46:84:91:f0:ce:ac:00:8d:e6:fd:18: d5:b8:62:04:8b:a0:3f:e5:a9:da:49:7f:d4:ec:e8: 35:ca:b8:85:35:21:fb:35:a4:9e:22:5f:04:19:95: 0b:92:60:ea:3d:3c:60:a8:ff:ad:46:fa:b6:c6:5a: 49:a4:db:cf:0a:09:c0:83:5a:af:23:ad:cd:23:28: 04:d4:f4:5c:55:f5:f1:39:73:04:2e:a6:e2:a4:1e: 77:3a:17:fa:02:7d:a3:7c:c8:78:43:05:02:6c:ce: 8c:c3:66:87:be:1f:61:cb:0c:64:2f:18:73:1e:d2: ab:ae:05:9a:b7:7a:04:78:27:09:94:15:09:41:a9: f7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AE:CE:F6:A9:FB:DE:F3:62:85:45:90:97:FB:26:B9:D8:5B:44:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7af57255-95e9-35f8-a3b4-964cc0e6608e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:b2:55:ac:f5:86:43:87:8b:24:2b:85:e2:94:ca:2d:76:5d: 5d:f5:ba:3e:a3:3d:b7:90:ce:17:9f:34:aa:9c:1f:15:f0:a0: ee:0f:d6:85:7f:6e:e4:69:5d:ca:8b:ca:b8:e5:92:ef:bc:ba: 48:e8:4b:67:ae:14:dd:ee:60:08:9e:c1:7d:bb:fe:c4:8b:fa: fb:2c:0c:88:1e:02:c2:1c:a3:1b:b3:34:20:88:69:5e:3e:7d: a9:e4:72:a5:07:cf:02:b7:7b:7d:d1:2f:6a:42:95:71:65:13: 71:bd:eb:26:c8:79:02:a5:50:1f:f3:a4:bf:86:37:ca:55:08: d4:a8:47:e1:fc:b7:8a:df:19:bb:e0:aa:95:ee:9b:bc:66:21: 17:91:9c:6c:35:d9:3e:43:09:4f:e3:ae:97:8e:02:10:33:45: c3:b0:a5:ed:86:f0:cd:fc:17:8e:a5:de:6e:8a:7c:5b:52:d9: 7c:3a:44:9f:a6:64:a1:f4:ed:d5:e9:47:0d:c2:90:c7:80:88: b4:50:58:3c:a6:bb:8b:47:d6:e5:ca:c7:b5:2a:6f:fc:1b:36: 1a:80:c2:c4:04:05:97:b7:70:51:df:16:c3:39:1f:0b:47:d7: b8:2e:97:5a:af:36:c0:3d:28:18:af:1d:72:d8:1e:b2:f9:51: 36:a5:78:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFrqO/syIOtDOCqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk MDVlODI1MWEtYzAyYS00YTZmLTliMmYtNzdjZTI2MTUwNDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOwAfq9fIUn7vt9P6xaMY8JkAHdIG11jLTYE wTiMKqEbrivCfLuAJfylQx2einaCnobdgMhZ0IIEJFmeTaCkApOzcCYg1QkMM/Zc jch/DZ4/tG8v27Zh5mMdXcZKC8hct4l2q0hyQplZ11olB/E9AngFtQfPtRsLUoGC RoSR8M6sAI3m/RjVuGIEi6A/5anaSX/U7Og1yriFNSH7NaSeIl8EGZULkmDqPTxg qP+tRvq2xlpJpNvPCgnAg1qvI63NIygE1PRcVfXxOXMELqbipB53Ohf6An2jfMh4 QwUCbM6Mw2aHvh9hywxkLxhzHtKrrgWat3oEeCcJlBUJQan33QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKuzvap+97zYoVFkJf7JrnYW0T9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvN2FmNTcyNTUtOTVlOS0z NWY4LWEzYjQtOTY0Y2MwZTY2MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGyVaz1hkOHiyQrheKUyi12XV31uj6jPbeQzhefNKqcHxXwoO4P1oV/ buRpXcqLyrjlku+8ukjoS2euFN3uYAiewX27/sSL+vssDIgeAsIcoxuzNCCIaV4+ fankcqUHzwK3e33RL2pClXFlE3G96ybIeQKlUB/zpL+GN8pVCNSoR+H8t4rfGbvg qpXum7xmIReRnGw12T5DCU/jrpeOAhAzRcOwpe2G8M38F46l3m6KfFtS2Xw6RJ+m ZKH07dXpRw3CkMeAiLRQWDymu4tH1uXKx7Uqb/wbNhqAwsQEBZe3cFHfFsM5HwtH 17gul1qvNsA9KBivHXLYHrL5UTaleHs= -----END CERTIFICATE-----Generated at Sat Apr 5 20:46:42 2025 by rpki-client