$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1953286a-a99c-383c-b91c-34fa8adbd086.roa File: 1953286a-a99c-383c-b91c-34fa8adbd086.roa (raw, json) Hash identifier: LRIhXyY8l7fU+BfL0O5ZHMUVfEgifxuZlgBdtDyf0zk= Subject key identifier: 50:66:FE:B2:63:EB:F2:41:F8:60:AA:74:A0:37:D4:89:8B:35:3A:9F Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490E16B9F9627961148FE441C0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1953286a-a99c-383c-b91c-34fa8adbd086.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 19437 IP address blocks: 131.153.162.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:b9:f9:62:79:61:14:8f:e4:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=d54f8c30-72a0-44c2-a17f-f18bb21f2cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:19:46:82:7e:14:40:e9:d4:cc:69:02:24: 72:46:20:02:f7:44:28:46:af:e6:56:e2:6b:ac:a8: 19:f6:3e:63:eb:91:fd:dc:02:c3:23:e4:ce:c8:20: 91:00:e6:73:9a:4c:b8:8f:ef:9d:38:9e:10:3e:be: 50:7c:86:a6:af:94:37:90:bd:68:1f:ad:b3:67:1a: af:af:d6:5c:be:06:20:a9:db:f0:10:11:1d:29:32: 6b:80:2f:b2:0b:9c:41:e2:32:8e:03:e3:5c:0c:3d: 24:17:2c:34:31:62:d5:19:d7:5e:7e:03:cc:38:76: 9a:2a:99:23:40:30:9d:69:a4:43:70:8b:1e:47:20: b7:0c:fb:47:ea:12:1a:ff:c8:54:86:98:37:57:b4: 81:27:53:5b:5a:49:8b:91:7b:b4:ca:7d:10:01:77: 3b:f2:c0:c4:d3:bf:70:ec:88:fa:16:d7:5a:b5:e7: 44:7e:bb:5a:e0:d3:7f:50:c6:f9:0b:e2:00:9f:9d: 82:7d:d8:e3:1e:e8:c0:c2:1f:c6:23:5c:f0:6b:f8: 79:91:1c:9a:bb:d2:15:40:f5:a4:dd:7e:2e:28:40: 65:18:51:92:4b:78:49:14:c5:37:b2:52:83:b8:d5: 4c:2e:3c:6d:3f:0c:e8:25:95:1d:38:61:ce:60:fb: 96:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:66:FE:B2:63:EB:F2:41:F8:60:AA:74:A0:37:D4:89:8B:35:3A:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1953286a-a99c-383c-b91c-34fa8adbd086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:02:52:76:80:cd:9a:77:f7:c4:a2:cc:2c:de:d8:9a:fa:d3: b5:b0:db:4a:c5:92:f7:07:88:94:c5:a0:de:6b:07:d6:54:e4: d4:3d:02:db:6a:fe:32:3c:e2:f9:4f:73:4c:ac:e2:ab:18:12: ba:af:29:54:c8:6f:b5:9d:a4:26:f0:b6:4d:38:df:ae:82:02: cc:6c:b1:01:c5:a7:14:46:18:21:97:84:f2:fc:14:36:53:50: 40:ee:ba:9a:73:aa:f7:65:6b:26:ea:a9:45:94:75:0a:72:bd: 55:7d:fb:9e:c4:77:b9:23:04:78:06:5c:1e:7c:52:fe:f7:25: 11:8e:52:2b:66:06:ad:06:fc:1b:84:1a:fd:80:99:8c:c2:b2: 35:5e:1d:4e:d1:cc:ba:3d:92:09:08:59:18:97:3c:84:00:12: ea:9a:5a:fc:56:53:99:b4:cb:6d:d3:77:a6:a5:8c:6c:87:23: 88:7b:78:11:45:08:62:8b:ba:fa:0c:66:fa:2d:4e:a3:27:8e: e1:42:3d:a8:ae:39:69:89:2a:a1:eb:3c:78:fd:d8:fc:97:ba: c7:49:25:e5:b2:8c:3f:87:4a:2c:cc:9b:99:97:fc:1f:13:4c: e6:bb:2b:39:64:fa:08:86:5e:da:7c:33:b4:e9:29:d9:cb:63: c1:4b:49:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFrn5YnlhFI/kQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk ZDU0ZjhjMzAtNzJhMC00NGMyLWExN2YtZjE4YmIyMWYyY2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOsZRoJ+FEDp1MxpAiRyRiAC90QoRq/mVuJr rKgZ9j5j65H93ALDI+TOyCCRAOZzmky4j++dOJ4QPr5QfIamr5Q3kL1oH62zZxqv r9ZcvgYgqdvwEBEdKTJrgC+yC5xB4jKOA+NcDD0kFyw0MWLVGddefgPMOHaaKpkj QDCdaaRDcIseRyC3DPtH6hIa/8hUhpg3V7SBJ1NbWkmLkXu0yn0QAXc78sDE079w 7Ij6FtdatedEfrta4NN/UMb5C+IAn52CfdjjHujAwh/GI1zwa/h5kRyau9IVQPWk 3X4uKEBlGFGSS3hJFMU3slKDuNVMLjxtPwzoJZUdOGHOYPuWxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBm/rJj6/JB+GCqdKA31ImLNTqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTk1MzI4NmEtYTk5Yy0z ODNjLWI5MWMtMzRmYThhZGJkMDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5miMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4CUnaAzZp398SizCze2Jr607Ww20rFkvcHiJTFoN5rB9ZU5NQ9Attq /jI84vlPc0ys4qsYErqvKVTIb7WdpCbwtk04366CAsxssQHFpxRGGCGXhPL8FDZT UEDuuppzqvdlaybqqUWUdQpyvVV9+57Ed7kjBHgGXB58Uv73JRGOUitmBq0G/BuE Gv2AmYzCsjVeHU7RzLo9kgkIWRiXPIQAEuqaWvxWU5m0y23Td6aljGyHI4h7eBFF CGKLuvoMZvotTqMnjuFCPaiuOWmJKqHrPHj92PyXusdJJeWyjD+HSizMm5mX/B8T TOa7Kzlk+giGXtp8M7TpKdnLY8FLSXk= -----END CERTIFICATE-----Generated at Sun Apr 27 11:16:47 2025 by rpki-client