$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0483fbc3-32be-3bbe-8b50-8cf492bc0a44.roa File: 0483fbc3-32be-3bbe-8b50-8cf492bc0a44.roa (raw, json) Hash identifier: +Gzqd0J2QIiqw5i88hzCtGAL9uMf5zaF5bZ20U4gwAQ= Subject key identifier: 1F:2B:77:C1:A8:B0:6E:78:28:2A:38:C8:EF:A4:86:79:FD:D7:43:E5 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EBEA4CCAFD3F07D8439F4F80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0483fbc3-32be-3bbe-8b50-8cf492bc0a44.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 19437 IP address blocks: 131.153.129.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4c:ca:fd:3f:07:d8:43:9f:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=2cadd2e9-6e08-495d-9d55-e4757e22b7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:76:8b:e4:f0:eb:f9:e3:4e:5f:29:83:38:52: 3b:2b:b2:80:e4:b1:e1:50:30:0c:13:ed:55:c5:bd: 7e:ee:9a:7f:86:52:2d:34:6d:41:b2:32:b9:73:53: 38:f1:ac:58:49:a5:c3:89:a6:00:37:82:e2:27:b1: 5c:ce:5f:7e:d4:d0:fb:0a:57:b6:d6:be:09:a6:d9: 27:91:a6:80:73:d1:2b:85:5f:1e:f3:3c:cd:5c:92: bf:95:e0:a6:cc:63:71:99:7e:ac:2d:1c:80:be:0b: cf:e1:4d:ab:4d:4e:00:f7:10:7c:07:b9:91:6a:ce: 12:39:b3:a7:0b:a7:71:29:27:ec:86:67:0c:63:5b: 6b:d6:e3:2d:df:77:d0:a2:18:ac:2e:1e:c3:19:47: 42:a2:ea:50:bf:76:30:ba:35:7b:d6:80:38:25:8b: cc:3a:4e:73:46:ea:22:61:d6:60:56:eb:2e:f0:c8: 8e:9d:b1:5d:cf:45:d7:1f:8b:7b:20:50:1f:62:14: 80:36:b7:5a:85:d4:46:8a:e6:f6:51:9c:4a:59:5f: e1:5e:c6:2c:ed:01:07:91:a7:1a:bb:98:20:39:dc: 07:d6:e9:e2:0a:8a:ab:d5:8f:c1:3f:18:40:1d:ae: 59:e8:98:1b:18:ae:b1:62:7e:97:92:f9:f1:57:25: 5d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2B:77:C1:A8:B0:6E:78:28:2A:38:C8:EF:A4:86:79:FD:D7:43:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0483fbc3-32be-3bbe-8b50-8cf492bc0a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:9b:9b:bf:96:27:bf:fe:cc:4b:e2:47:a6:2f:5d:bd:40:20: 23:84:be:11:84:e4:e2:32:fa:3d:d7:00:50:3c:82:20:02:7f: a2:44:58:8b:63:4e:70:de:6f:bc:a7:2e:d1:64:e2:11:2f:5a: 16:37:dd:09:4d:0f:9b:aa:83:e1:5b:01:05:9a:35:ee:de:ea: 72:41:0a:73:aa:fe:10:d0:51:cd:f0:50:a7:a2:73:47:17:50: ce:04:47:3e:5a:f7:de:9d:92:0f:bc:a8:fc:da:7b:b4:63:84: f7:c5:51:77:54:d7:fe:63:20:54:aa:ab:4a:d7:53:39:d0:de: 0b:ac:26:5d:4f:74:f4:7a:41:84:6f:d1:7c:7d:70:63:e2:31: c5:3e:13:9d:58:77:9e:5e:14:5f:34:87:69:ca:90:65:47:df: 1f:7e:d6:48:a0:da:11:34:2d:c1:6b:51:fb:1f:da:2d:4e:fa: ef:fe:9d:e4:41:a9:32:8e:e6:1d:6f:c2:8a:89:b1:1c:0e:ea: 78:27:68:12:85:95:ac:5e:69:35:1b:b5:32:27:f5:05:8d:4c: 4a:a8:6c:12:c4:d3:8f:09:98:14:78:20:17:8e:f9:3a:bb:78: 3d:3d:2b:f1:e9:b6:02:3f:6d:da:2c:b5:52:20:dc:c9:77:4e: e4:20:fc:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6kzK/T8H2EOfT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MmNhZGQyZTktNmUwOC00OTVkLTlkNTUtZTQ3NTdlMjJiN2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0naL5PDr+eNOXymDOFI7K7KA5LHhUDAME+1V xb1+7pp/hlItNG1BsjK5c1M48axYSaXDiaYAN4LiJ7Fczl9+1ND7Cle21r4Jptkn kaaAc9ErhV8e8zzNXJK/leCmzGNxmX6sLRyAvgvP4U2rTU4A9xB8B7mRas4SObOn C6dxKSfshmcMY1tr1uMt33fQohisLh7DGUdCoupQv3YwujV71oA4JYvMOk5zRuoi YdZgVusu8MiOnbFdz0XXH4t7IFAfYhSANrdahdRGiub2UZxKWV/hXsYs7QEHkaca u5ggOdwH1uniCoqr1Y/BPxhAHa5Z6JgbGK6xYn6XkvnxVyVdNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8rd8GosG54KCo4yO+khnn910PlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMDQ4M2ZiYzMtMzJiZS0z YmJlLThiNTAtOGNmNDkyYmMwYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5mBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJibm7+WJ7/+zEviR6YvXb1AICOEvhGE5OIy+j3XAFA8giACf6JEWItj TnDeb7ynLtFk4hEvWhY33QlND5uqg+FbAQWaNe7e6nJBCnOq/hDQUc3wUKeic0cX UM4ERz5a996dkg+8qPzae7RjhPfFUXdU1/5jIFSqq0rXUznQ3gusJl1PdPR6QYRv 0Xx9cGPiMcU+E51Yd55eFF80h2nKkGVH3x9+1kig2hE0LcFrUfsf2i1O+u/+neRB qTKO5h1vwoqJsRwO6ngnaBKFlaxeaTUbtTIn9QWNTEqobBLE048JmBR4IBeO+Tq7 eD09K/HptgI/bdostVIg3Ml3TuQg/HI= -----END CERTIFICATE-----Generated at Sun Jun 15 13:05:05 2025 by rpki-client