$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0d4b973e-bcf0-3096-9daf-6b8ec6792aa1.roa File: 0d4b973e-bcf0-3096-9daf-6b8ec6792aa1.roa (raw, json) Hash identifier: E/1I068mDLO/MnGQOQiVh1qOWdqsA1s8a8jYruA9ZS4= Subject key identifier: FE:89:76:79:1E:06:A0:A1:D5:CD:6C:59:25:55:21:8B:49:09:21:21 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490E16BF50991402841F40DB00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0d4b973e-bcf0-3096-9daf-6b8ec6792aa1.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 20454 IP address blocks: 131.153.142.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:bf:50:99:14:02:84:1f:40:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=85d7d0ad-ef31-484a-9a5c-3c26c88e8de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:38:87:fb:1e:c7:92:c2:a1:8e:54:de:26:65: 54:77:2e:bf:09:06:32:d8:11:b2:da:4b:01:ca:b2: a2:ac:12:07:1f:41:d2:b1:99:71:f2:7b:62:17:80: fc:60:fc:07:57:26:63:56:38:57:a9:5b:e7:1d:61: ef:13:57:5a:c3:ee:ea:cd:cf:21:22:95:44:2f:d9: fc:01:05:56:f4:1b:2b:d8:f1:63:0e:41:ac:a2:4a: 0b:66:01:19:9e:dc:03:5f:36:14:20:73:76:ad:6e: d4:4f:0e:cd:2f:d9:df:f2:9f:cc:08:5d:c1:1f:0d: 8e:7a:91:84:40:ed:72:7d:b3:d7:33:db:6b:fc:fe: c2:38:b8:51:36:c8:3d:f8:5a:30:3d:d4:45:0d:5f: 19:39:61:0b:a1:f9:56:91:86:4d:77:ff:83:c4:50: 73:46:b7:91:54:e0:80:c5:23:42:13:7f:5f:3d:84: 36:34:5c:78:5f:8a:69:06:65:73:93:d3:7b:2b:9e: 1f:cc:50:61:5b:b6:c2:9d:c0:fa:67:3d:0b:b7:82: 27:d4:33:16:21:fa:4b:f4:c5:41:f4:c8:c7:03:f0: a4:c9:03:78:2a:1f:57:b4:ba:c2:c7:c0:8f:90:2e: 0f:fe:6c:f9:93:34:e9:bd:61:fe:43:da:cd:09:30: 56:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:89:76:79:1E:06:A0:A1:D5:CD:6C:59:25:55:21:8B:49:09:21:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0d4b973e-bcf0-3096-9daf-6b8ec6792aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a2:39:d3:75:51:60:6c:8a:3a:af:95:25:5a:4d:b5:85:2d: 4d:f9:0c:0e:8a:96:62:80:7e:31:b9:b4:20:20:0e:71:fb:43: fe:bb:ee:d6:95:70:a8:d6:1d:cf:8f:25:52:67:3c:8c:97:f9: b9:b1:13:26:10:cd:fb:74:30:5b:b9:31:7c:1c:3f:2d:2b:f2: 1b:1d:af:a8:36:64:3a:d5:96:05:43:38:2f:a1:6a:39:7b:f4: 86:21:c5:bb:f2:2b:90:c4:7f:04:c8:e8:55:70:69:04:12:99: b4:a6:35:81:e8:8e:25:ba:01:cb:de:5d:3f:fe:5f:d9:b6:8e: 14:0c:14:38:c0:25:6a:2d:aa:15:cd:d1:41:59:49:50:3f:12: 64:3d:bb:4f:e1:97:7c:43:6a:f9:5a:e4:3e:be:0c:b7:fb:8c: d6:d2:7a:15:25:0e:8f:27:96:b4:55:6b:5e:c7:98:27:71:4c: d9:97:2d:ec:6e:5f:e9:ea:0f:99:5b:35:92:f6:4e:75:0f:1a: 65:94:00:53:0d:70:91:bd:f9:c1:d7:8e:2a:d6:69:a4:23:28: 33:4a:f5:f5:07:c1:2e:e0:ed:68:c5:32:a2:52:b3:ee:60:12: 1c:88:96:b3:31:33:82:19:b7:5a:be:79:e5:e8:e7:07:a4:e2: e9:bb:e3:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFr9QmRQChB9A2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk ODVkN2QwYWQtZWYzMS00ODRhLTlhNWMtM2MyNmM4OGU4ZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDiH+x7HksKhjlTeJmVUdy6/CQYy2BGy2ksB yrKirBIHH0HSsZlx8ntiF4D8YPwHVyZjVjhXqVvnHWHvE1daw+7qzc8hIpVEL9n8 AQVW9Bsr2PFjDkGsokoLZgEZntwDXzYUIHN2rW7UTw7NL9nf8p/MCF3BHw2OepGE QO1yfbPXM9tr/P7COLhRNsg9+FowPdRFDV8ZOWELoflWkYZNd/+DxFBzRreRVOCA xSNCE39fPYQ2NFx4X4ppBmVzk9N7K54fzFBhW7bCncD6Zz0Lt4In1DMWIfpL9MVB 9MjHA/CkyQN4Kh9XtLrCx8CPkC4P/mz5kzTpvWH+Q9rNCTBWIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6JdnkeBqCh1c1sWSVVIYtJCSEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMGQ0Yjk3M2UtYmNmMC0z MDk2LTlkYWYtNmI4ZWM2NzkyYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5mOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCiOdN1UWBsijqvlSVaTbWFLU35DA6KlmKAfjG5tCAgDnH7Q/677taV cKjWHc+PJVJnPIyX+bmxEyYQzft0MFu5MXwcPy0r8hsdr6g2ZDrVlgVDOC+hajl7 9IYhxbvyK5DEfwTI6FVwaQQSmbSmNYHojiW6AcveXT/+X9m2jhQMFDjAJWotqhXN 0UFZSVA/EmQ9u0/hl3xDavla5D6+DLf7jNbSehUlDo8nlrRVa17HmCdxTNmXLexu X+nqD5lbNZL2TnUPGmWUAFMNcJG9+cHXjirWaaQjKDNK9fUHwS7g7WjFMqJSs+5g EhyIlrMxM4IZt1q+eeXo5wek4um746s= -----END CERTIFICATE-----Generated at Sat Apr 26 21:23:48 2025 by rpki-client