$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9e468c02-912e-327f-a060-95177befb6a0.roa File: 9e468c02-912e-327f-a060-95177befb6a0.roa (raw, json) Hash identifier: TtZNezKmBuvAwI4te7u0GsuaoqCw0UPYgOtyuP61Lpg= Subject key identifier: 0D:9B:D5:10:28:09:10:9A:79:22:A6:0F:38:EF:F3:90:8B:BE:05:E9 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490E16BF3EB4ECEBDF020C9F00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9e468c02-912e-327f-a060-95177befb6a0.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 12189 IP address blocks: 131.153.136.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:bf:3e:b4:ec:eb:df:02:0c:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=85082c51-e502-4b85-b676-7e2533ea4a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3f:af:f3:b6:63:4b:3d:70:67:81:ad:39:e0: b6:9a:03:b3:f1:f9:6e:de:3c:85:02:20:66:ab:6a: f6:36:18:67:12:26:7c:30:49:4e:bd:3e:18:47:a8: 62:be:f8:fc:6f:de:0c:63:53:73:b8:07:79:30:19: 8c:54:31:34:60:15:a9:4e:71:b8:17:ac:32:e0:f4: 4d:f1:43:90:05:7d:c6:30:ac:29:41:ba:6e:1b:4c: bc:56:02:af:c0:d4:5e:d6:7d:8a:a3:24:47:f2:ba: 2d:51:cd:eb:4b:0d:4b:46:13:08:df:f4:65:13:51: 61:cd:b0:71:92:85:bb:cb:1b:62:4a:a4:20:86:b7: 14:7d:e2:d2:5e:7f:dd:0f:d0:09:a2:c8:57:19:cc: 1a:c2:4a:fc:41:fa:2e:bf:b4:45:54:0d:25:8a:b2: e3:3d:f1:6e:00:dd:f4:ba:77:bc:83:64:19:11:9f: 52:52:ed:91:6d:50:5b:53:d1:fd:cf:34:f1:2a:c3: d7:a3:52:af:0c:a4:7c:03:8d:3d:99:cf:09:96:c2: bf:c6:3a:b5:b8:de:47:de:65:68:1f:8b:f5:58:77: fa:77:72:36:16:ad:7b:2d:6e:d5:b4:fe:52:d7:e6: a5:b5:90:6e:ae:89:a8:ef:ca:c5:27:c8:7b:53:3d: 7b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9B:D5:10:28:09:10:9A:79:22:A6:0F:38:EF:F3:90:8B:BE:05:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9e468c02-912e-327f-a060-95177befb6a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:50:77:c0:85:22:66:ee:8e:72:8d:2c:9f:f9:7b:05:59:20: 60:ab:a4:8a:0d:82:aa:8c:ea:80:3b:92:17:08:8d:48:93:96: 35:77:07:ba:4f:c8:9c:f4:83:a2:b8:b3:dc:cb:28:96:62:a9: 5a:df:30:49:c5:ed:f7:5e:b3:26:81:85:0d:a2:26:8e:cf:59: b8:d2:c4:09:2d:24:30:52:3d:05:d2:e7:2e:4e:b4:4f:8f:07: a9:af:af:19:57:9c:49:d9:79:23:7d:d1:6f:62:dc:7e:46:ca: 88:65:45:79:cf:19:e9:18:5a:07:47:e1:f3:be:e2:89:8c:63: 06:be:21:c9:12:0f:0c:97:45:6d:ec:ae:a5:c8:d8:14:e2:18: 0a:6c:a4:0e:20:ce:3e:29:b4:60:9c:12:e7:5f:54:01:1d:bf: d0:28:ec:07:4a:71:40:5f:18:d7:32:ce:9f:d2:62:bc:e8:f2: 95:9f:a1:f1:f5:82:2b:81:7e:c8:30:46:7b:5d:fc:09:d2:1b: 94:c2:f7:2a:e2:8c:c4:6c:55:c0:68:22:e5:4c:9a:a6:df:3e: 76:d6:da:ac:f3:32:0c:2f:8c:fc:27:fb:69:d5:fa:ae:46:b4: 8a:ca:4f:08:8d:b4:94:4f:87:b2:d8:b9:7a:b7:5e:ae:f4:d1: e5:5d:90:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFr8+tOzr3wIMnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk ODUwODJjNTEtZTUwMi00Yjg1LWI2NzYtN2UyNTMzZWE0YTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj+v87ZjSz1wZ4GtOeC2mgOz8flu3jyFAiBm q2r2NhhnEiZ8MElOvT4YR6hivvj8b94MY1NzuAd5MBmMVDE0YBWpTnG4F6wy4PRN 8UOQBX3GMKwpQbpuG0y8VgKvwNRe1n2KoyRH8rotUc3rSw1LRhMI3/RlE1FhzbBx koW7yxtiSqQghrcUfeLSXn/dD9AJoshXGcwawkr8Qfouv7RFVA0lirLjPfFuAN30 une8g2QZEZ9SUu2RbVBbU9H9zzTxKsPXo1KvDKR8A409mc8JlsK/xjq1uN5H3mVo H4v1WHf6d3I2Fq17LW7VtP5S1+altZBuromo78rFJ8h7Uz17qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2b1RAoCRCaeSKmDzjv85CLvgXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvOWU0NjhjMDItOTEyZS0z MjdmLWEwNjAtOTUxNzdiZWZiNmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5mIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVQd8CFImbujnKNLJ/5ewVZIGCrpIoNgqqM6oA7khcIjUiTljV3B7pP yJz0g6K4s9zLKJZiqVrfMEnF7fdesyaBhQ2iJo7PWbjSxAktJDBSPQXS5y5OtE+P B6mvrxlXnEnZeSN90W9i3H5GyohlRXnPGekYWgdH4fO+4omMYwa+IckSDwyXRW3s rqXI2BTiGApspA4gzj4ptGCcEudfVAEdv9Ao7AdKcUBfGNcyzp/SYrzo8pWfofH1 giuBfsgwRntd/AnSG5TC9yrijMRsVcBoIuVMmqbfPnbW2qzzMgwvjPwn+2nV+q5G tIrKTwiNtJRPh7LYuXq3Xq700eVdkCY= -----END CERTIFICATE-----Generated at Sat Apr 5 18:15:27 2025 by rpki-client