$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1123680b-9df2-3e1d-af74-0486a85ed8bf.roa File: 1123680b-9df2-3e1d-af74-0486a85ed8bf.roa (raw, json) Hash identifier: zYfOC8r4lwywBcXvfjOeleWaVSl6+zD6Dfjcybk8olY= Subject key identifier: EC:4C:F3:E4:68:14:65:BA:A8:27:C9:1E:31:CC:79:B1:0B:BC:33:64 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849ED4FC9F7396EA23CEE3E8DE0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1123680b-9df2-3e1d-af74-0486a85ed8bf.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 20454 IP address blocks: 131.153.8.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:c9:f7:39:6e:a2:3c:ee:3e:8d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=4c0c16d3-e836-4230-a99b-12a8bf446cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ce:cf:60:61:8c:00:1a:7c:42:06:67:a1:d5: aa:ef:1d:50:17:51:e5:51:ab:24:54:11:d9:06:ae: f9:29:71:b6:88:89:74:3f:d9:ce:9f:25:fb:31:cc: 3a:4c:7d:06:5c:22:22:d0:8f:93:af:28:0c:a3:ba: 92:e8:51:3b:db:53:07:45:9c:62:3e:7c:0d:0a:42: 9b:c9:61:ab:73:9c:a1:b4:03:62:c4:4a:17:89:02: 39:05:77:a6:ac:3d:a8:a8:b3:c7:b3:8f:02:0f:99: 2e:d1:97:41:66:35:9c:75:63:40:f4:75:c7:4d:fa: e6:bd:49:ea:75:4b:83:9a:f2:47:1f:08:f6:99:dd: 4b:ad:a1:3e:4d:0e:d4:c1:2a:e2:18:e9:f8:d1:1c: b0:ac:0d:1d:85:b2:55:28:19:32:75:4b:23:32:43: 06:cf:65:8e:1f:4e:5d:78:00:2d:5e:f7:5c:ee:89: cc:ae:de:3b:a0:13:57:60:4c:a7:a6:f9:20:b7:cd: 90:48:87:01:53:99:a0:5a:90:88:23:76:6b:e3:f1: b9:a4:1d:81:aa:0b:ba:9e:65:4d:ff:63:c0:00:4b: ec:cf:06:22:bd:22:36:49:a9:e5:7d:e5:c2:25:6c: 18:a8:67:7e:47:71:8d:79:a7:af:56:68:3b:29:9e: bf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4C:F3:E4:68:14:65:BA:A8:27:C9:1E:31:CC:79:B1:0B:BC:33:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1123680b-9df2-3e1d-af74-0486a85ed8bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:3d:dd:52:22:0a:ab:6f:f4:16:25:9c:d0:c0:37:a9:bf:58: 73:7c:68:c5:83:eb:b1:29:5a:d9:f9:b6:c2:90:54:3d:47:b0: d2:66:65:52:29:79:74:9b:ef:e7:61:7d:b3:87:fb:6c:9f:a5: e4:b1:bf:74:7b:a8:54:96:eb:ee:e2:9f:da:9c:41:04:76:7d: d5:e7:32:2e:b9:50:63:8d:f9:f7:e9:c8:5d:95:a6:85:12:7a: 27:ca:75:30:4b:15:4f:32:da:9f:2e:c4:fc:2b:c2:00:d7:eb: 03:e1:92:4b:56:69:2b:c4:e7:c3:ad:84:fb:de:26:81:07:84: 68:d2:a5:2e:14:5e:24:6a:2f:d9:8f:06:81:cd:cf:18:39:d4: 89:07:d1:c1:e4:d4:ce:32:c7:7c:79:aa:77:bc:2f:8f:ff:1c: 8d:63:83:c7:46:cb:31:4a:b2:4d:25:23:d1:84:c8:19:25:d8: c6:1c:02:fe:6d:8d:59:3a:a5:75:84:00:03:1a:80:89:db:58: e9:de:89:ee:33:5a:51:71:25:08:aa:53:b2:5a:a5:fd:9b:17: 9a:52:8b:d6:91:d9:d5:a8:b0:96:23:6b:61:e1:1f:f0:b2:07: e5:04:21:1c:d3:b2:7e:38:4c:06:a4:bb:d9:30:b9:b1:64:5f: 0a:36:e2:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8n3OW6iPO4+jeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk NGMwYzE2ZDMtZTgzNi00MjMwLWE5OWItMTJhOGJmNDQ2Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl87PYGGMABp8QgZnodWq7x1QF1HlUaskVBHZ Bq75KXG2iIl0P9nOnyX7Mcw6TH0GXCIi0I+TrygMo7qS6FE721MHRZxiPnwNCkKb yWGrc5yhtANixEoXiQI5BXemrD2oqLPHs48CD5ku0ZdBZjWcdWNA9HXHTfrmvUnq dUuDmvJHHwj2md1LraE+TQ7UwSriGOn40RywrA0dhbJVKBkydUsjMkMGz2WOH05d eAAtXvdc7onMrt47oBNXYEynpvkgt82QSIcBU5mgWpCII3Zr4/G5pB2Bqgu6nmVN /2PAAEvszwYivSI2SanlfeXCJWwYqGd+R3GNeaevVmg7KZ6/FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxM8+RoFGW6qCfJHjHMebELvDNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTEyMzY4MGItOWRmMi0z ZTFkLWFmNzQtMDQ4NmE4NWVkOGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5kIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIg93VIiCqtv9BYlnNDAN6m/WHN8aMWD67EpWtn5tsKQVD1HsNJmZVIp eXSb7+dhfbOH+2yfpeSxv3R7qFSW6+7in9qcQQR2fdXnMi65UGON+ffpyF2VpoUS eifKdTBLFU8y2p8uxPwrwgDX6wPhkktWaSvE58OthPveJoEHhGjSpS4UXiRqL9mP BoHNzxg51IkH0cHk1M4yx3x5qne8L4//HI1jg8dGyzFKsk0lI9GEyBkl2MYcAv5t jVk6pXWEAAMagInbWOneie4zWlFxJQiqU7Japf2bF5pSi9aR2dWosJYja2HhH/Cy B+UEIRzTsn44TAaku9kwubFkXwo24uI= -----END CERTIFICATE-----Generated at Sun Jun 15 17:24:29 2025 by rpki-client