$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa File: 8d254be0-4973-3adb-9609-4a7ab5dad347.roa (raw, json) Hash identifier: WFZIUjed7AwXz19qVBolXph4hhSZQ4c4r95unxbf/TE= Subject key identifier: 99:91:79:67:9F:C2:A9:3B:6D:A4:29:0C:08:5D:F9:04:CD:5F:23:ED Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490CB16A6B11C0F91340C7D280 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 12189 IP address blocks: 131.153.116.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:6a:6b:11:c0:f9:13:40:c7:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=81f120d1-1b81-4b47-ad7d-d88cb4f7a7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:35:ad:ab:52:6e:04:43:cb:b6:31:5a:a5:c9: d1:d5:32:10:c5:d2:6f:e8:5d:ed:28:4e:c6:93:d2: 97:c1:83:fc:a9:f9:48:f6:02:a9:e3:33:c5:fb:66: 59:43:34:b2:22:f0:0b:0f:b4:01:63:5c:18:0e:74: 00:fc:2c:bb:15:44:07:19:6a:fb:d9:30:ba:de:80: 30:e4:a1:d4:c9:ac:c1:70:0d:45:9d:44:d1:08:d0: b3:d0:2e:49:b1:44:f6:43:ef:81:e6:52:ce:f8:a2: 82:d7:3b:9a:98:74:b7:3c:09:3a:d5:23:29:76:46: 7e:aa:98:9e:d1:88:35:a0:47:fa:0a:7d:12:40:95: a4:85:25:fa:f0:99:15:fd:c0:bd:31:14:ab:1a:d2: cf:94:5d:b9:ef:32:5d:a7:0b:f2:ee:b4:d3:19:7c: ba:16:5c:9b:4d:b7:0f:01:4d:64:48:65:55:2d:d8: 37:71:3e:66:58:b2:e2:d9:9c:a1:0d:d5:81:70:02: 71:b4:26:0a:ff:fb:e0:12:ff:c5:43:a3:78:69:79: 6c:92:b6:fa:da:3d:d0:5e:cd:66:59:65:59:e8:00: 93:9b:8d:00:5c:b5:5a:17:55:d0:5e:69:92:fd:2f: 95:cc:fb:f7:80:7a:33:1b:da:82:91:30:32:80:d8: 7b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:91:79:67:9F:C2:A9:3B:6D:A4:29:0C:08:5D:F9:04:CD:5F:23:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:69:fd:ff:41:c5:1c:b6:26:e2:08:03:8c:6d:7f:98:b4:9b: 90:88:05:58:84:92:3e:4f:a8:56:ee:55:50:61:a0:d7:16:1b: 4a:91:a4:43:d3:18:09:7d:0a:43:3e:c8:65:8b:72:55:a0:b7: cb:00:c0:38:a4:5f:40:48:d0:bb:c3:2f:85:cd:a4:6d:b7:11: 64:92:b8:61:f7:d2:8b:9a:ee:98:cd:7c:c3:07:9d:24:fb:b8: 79:c6:69:75:96:71:65:84:91:4d:50:60:60:39:b4:b6:8f:97: 85:da:d0:bf:92:63:45:ac:53:73:d4:6a:2a:6b:0f:2a:cb:39: 56:d6:d5:30:05:ee:fc:5d:73:cd:2e:c7:36:75:aa:0b:f3:33: 57:19:40:cc:24:b3:01:f3:f0:1b:9d:93:68:b9:b6:b6:c2:f2: be:fe:47:84:a6:72:be:d5:20:65:18:55:56:fc:5a:2d:76:42: c8:4a:4d:a2:04:34:ed:69:85:34:d8:b2:90:b0:ac:ca:90:19: a0:28:00:6c:84:e8:33:ce:1c:3d:ce:9d:5f:8c:a0:79:e1:51: e5:68:06:f9:73:e7:18:14:e8:cf:a8:c5:b5:19:84:c0:48:b3: 51:e8:e6:6b:8d:24:1c:5d:cc:d4:62:f4:54:63:64:e2:75:45: a4:ec:8e:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWprEcD5E0DH0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk ODFmMTIwZDEtMWI4MS00YjQ3LWFkN2QtZDg4Y2I0ZjdhN2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjWtq1JuBEPLtjFapcnR1TIQxdJv6F3tKE7G k9KXwYP8qflI9gKp4zPF+2ZZQzSyIvALD7QBY1wYDnQA/Cy7FUQHGWr72TC63oAw 5KHUyazBcA1FnUTRCNCz0C5JsUT2Q++B5lLO+KKC1zuamHS3PAk61SMpdkZ+qpie 0Yg1oEf6Cn0SQJWkhSX68JkV/cC9MRSrGtLPlF257zJdpwvy7rTTGXy6FlybTbcP AU1kSGVVLdg3cT5mWLLi2ZyhDdWBcAJxtCYK//vgEv/FQ6N4aXlskrb62j3QXs1m WWVZ6ACTm40AXLVaF1XQXmmS/S+VzPv3gHozG9qCkTAygNh7WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmReWefwqk7baQpDAhd+QTNXyPtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvOGQyNTRiZTAtNDk3My0z YWRiLTk2MDktNGE3YWI1ZGFkMzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5l0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNp/f9BxRy2JuIIA4xtf5i0m5CIBViEkj5PqFbuVVBhoNcWG0qRpEPT GAl9CkM+yGWLclWgt8sAwDikX0BI0LvDL4XNpG23EWSSuGH30oua7pjNfMMHnST7 uHnGaXWWcWWEkU1QYGA5tLaPl4Xa0L+SY0WsU3PUaiprDyrLOVbW1TAF7vxdc80u xzZ1qgvzM1cZQMwkswHz8Budk2i5trbC8r7+R4Smcr7VIGUYVVb8Wi12QshKTaIE NO1phTTYspCwrMqQGaAoAGyE6DPOHD3OnV+MoHnhUeVoBvlz5xgU6M+oxbUZhMBI s1Ho5muNJBxdzNRi9FRjZOJ1RaTsjv8= -----END CERTIFICATE-----Generated at Sun Apr 6 08:27:55 2025 by rpki-client