$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e2c6b733-3093-3b88-a09b-6789783fe662.roa File: e2c6b733-3093-3b88-a09b-6789783fe662.roa (raw, json) Hash identifier: GmZm1A05K8FJ6fALY3W2z3LTy4yWGXrJq1uMvH0k728= Subject key identifier: 16:96:3B:8A:24:A0:44:76:F8:DC:AA:11:6C:EE:E0:BF:69:7A:64:5E Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490E16BA794FE985F650C287A0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e2c6b733-3093-3b88-a09b-6789783fe662.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 12189 IP address blocks: 131.153.60.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:ba:79:4f:e9:85:f6:50:c2:87:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=3cf90337-e2f4-433b-a42f-a8c43abbf0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bc:5c:b8:15:02:da:65:4d:a1:b8:54:34:c1: 74:18:61:d1:fe:ca:9e:b1:78:ef:86:5a:96:0a:ee: 64:8c:6d:fd:15:d1:b8:7f:a6:7f:36:1c:16:28:81: f6:92:32:0f:9e:f3:5c:d8:34:de:73:3b:fd:fc:36: 2c:df:25:31:46:51:68:9a:39:34:60:d3:93:6c:63: 9f:bb:19:9b:60:4a:55:f2:b8:f6:21:34:ba:73:3c: 33:75:c5:ad:fb:97:d1:b0:9e:42:00:1b:77:5c:13: aa:27:87:92:07:58:c3:4c:ec:c4:00:3d:3c:02:ad: 68:cd:e5:67:17:48:f5:df:b0:d0:d2:25:55:51:a3: 78:17:0c:c2:34:a2:d5:42:37:e3:49:cc:14:39:84: 90:ce:1b:06:37:e5:c7:f1:4a:e7:cf:e2:c6:1a:c5: 10:eb:98:89:fe:26:2c:1b:f2:c0:a8:bc:0c:f4:ff: d0:28:95:42:f3:cf:46:c3:ea:cb:c3:3a:37:40:a3: 3d:91:ed:24:2b:06:3d:3b:8b:a0:70:23:03:a7:79: ff:22:84:b0:09:6c:7c:7d:e3:b0:17:b7:40:b4:25: 88:7a:8d:06:fa:0c:02:95:9d:ce:49:7a:ff:33:86: 5c:db:13:e7:fc:c8:a6:5e:ab:6e:84:c6:88:5d:22: d8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:96:3B:8A:24:A0:44:76:F8:DC:AA:11:6C:EE:E0:BF:69:7A:64:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e2c6b733-3093-3b88-a09b-6789783fe662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:9b:15:fd:07:0f:1c:18:c7:91:89:38:f0:c8:75:47:56:02: 1c:96:44:3b:2c:ad:84:67:b9:22:bf:ff:3f:d3:b1:19:c1:44: a5:fc:1b:70:7e:a4:a5:63:7a:8e:1b:3b:c3:58:1e:cb:e1:f9: 90:e5:a9:ea:5d:94:49:90:3e:80:5c:d5:d0:c1:be:4e:3d:7f: e6:43:69:a6:fc:75:1b:26:aa:2c:b5:77:1b:c3:03:e4:61:ca: 6e:3f:ac:b0:9b:65:63:b2:d2:4d:b9:06:01:75:1d:2d:bc:48: 07:2e:4f:76:e0:30:81:30:0a:d2:82:94:1a:d2:a2:62:7a:87: bd:2e:4c:e8:e2:74:e3:9b:3f:37:5e:c2:d3:55:d6:de:fd:b7: a4:d7:0a:be:ea:9a:08:7b:d9:8c:13:4c:5d:91:68:89:5d:38: ae:4a:e3:19:24:98:01:77:5a:64:4c:08:a2:39:59:06:0b:af: 0d:f0:7d:79:5e:e6:1e:b2:a0:12:2c:a1:cf:c3:1c:b0:b3:a2: cf:c8:d2:b4:3c:68:1d:70:7d:fd:ee:cd:dd:59:31:80:88:2d: 6a:86:db:1f:3e:74:e4:90:fc:0a:a5:fb:4b:48:a4:eb:f8:6b: 9f:51:eb:fd:3d:c3:16:2b:84:55:a5:be:a8:d1:58:74:90:c3: ce:3f:a8:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFrp5T+mF9lDCh6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk M2NmOTAzMzctZTJmNC00MzNiLWE0MmYtYThjNDNhYmJmMGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bxcuBUC2mVNobhUNMF0GGHR/sqesXjvhlqW Cu5kjG39FdG4f6Z/NhwWKIH2kjIPnvNc2DTeczv9/DYs3yUxRlFomjk0YNOTbGOf uxmbYEpV8rj2ITS6czwzdcWt+5fRsJ5CABt3XBOqJ4eSB1jDTOzEAD08Aq1ozeVn F0j137DQ0iVVUaN4FwzCNKLVQjfjScwUOYSQzhsGN+XH8Urnz+LGGsUQ65iJ/iYs G/LAqLwM9P/QKJVC889Gw+rLwzo3QKM9ke0kKwY9O4ugcCMDp3n/IoSwCWx8feOw F7dAtCWIeo0G+gwClZ3OSXr/M4Zc2xPn/MimXqtuhMaIXSLY5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaWO4okoER2+NyqEWzu4L9pemReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZTJjNmI3MzMtMzA5My0z Yjg4LWEwOWItNjc4OTc4M2ZlNjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5k8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+bFf0HDxwYx5GJOPDIdUdWAhyWRDssrYRnuSK//z/TsRnBRKX8G3B+ pKVjeo4bO8NYHsvh+ZDlqepdlEmQPoBc1dDBvk49f+ZDaab8dRsmqiy1dxvDA+Rh ym4/rLCbZWOy0k25BgF1HS28SAcuT3bgMIEwCtKClBrSomJ6h70uTOjidOObPzde wtNV1t79t6TXCr7qmgh72YwTTF2RaIldOK5K4xkkmAF3WmRMCKI5WQYLrw3wfXle 5h6yoBIsoc/DHLCzos/I0rQ8aB1wff3uzd1ZMYCILWqG2x8+dOSQ/Aql+0tIpOv4 a59R6/09wxYrhFWlvqjRWHSQw84/qF0= -----END CERTIFICATE-----Generated at Sat Apr 5 21:36:58 2025 by rpki-client