$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/27e7076b-0319-36fe-a986-009cd77f209f.roa File: 27e7076b-0319-36fe-a986-009cd77f209f.roa (raw, json) Hash identifier: 596HWmn5i5DKrivxxJB/erZnw9fsGNHfcLnKpGmcE3k= Subject key identifier: D6:45:4A:26:96:98:73:5C:0A:9C:6F:12:73:A1:DD:26:40:90:0B:4B Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490E16BFF1910A93CAFFB68F40 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/27e7076b-0319-36fe-a986-009cd77f209f.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 60558 IP address blocks: 131.153.16.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:bf:f1:91:0a:93:ca:ff:b6:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=05c2e5fc-6dff-4f93-ba35-650c56a3a9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3f:33:61:52:19:a4:77:c8:f4:ac:f5:17:26: d5:70:57:b6:28:35:bf:63:97:a4:2c:b4:9f:0c:7d: 83:57:ec:58:9b:84:6e:5f:fe:f3:97:ed:59:14:8e: b7:f5:d2:a4:08:5c:d3:31:03:f9:9f:9f:90:e1:44: 1d:af:a7:22:6d:2a:45:58:8a:45:7a:7b:a0:35:f9: 14:25:37:93:45:2a:64:5e:db:b0:84:ad:8d:d3:63: 4d:de:6d:1e:91:07:13:e1:b0:ca:2f:97:3e:f3:df: fb:95:e6:e5:e6:2f:b9:0e:93:e4:b4:9d:06:a3:bf: 87:91:71:4a:9d:e7:69:41:d7:f5:5f:47:c1:4d:0e: 02:83:d6:c8:1b:28:1e:79:c1:57:ad:b6:85:6c:3e: 94:52:de:a0:8f:f4:36:49:a1:25:cc:89:21:b4:35: bb:51:d9:c5:db:05:9a:49:df:b6:14:e6:56:8e:1a: 0c:b1:ee:96:4e:fc:a3:9a:51:54:6a:40:44:af:fa: be:99:47:cf:5f:fc:7d:0a:a1:01:36:29:0d:2f:4c: ac:d6:6e:01:69:1f:53:3e:a9:1c:2d:35:4a:a7:d5: d6:d8:30:b5:c1:16:26:59:7f:0d:e1:1c:f4:dc:ec: 8f:16:51:63:a6:91:a1:27:6e:50:46:3e:d8:e8:f1: a7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:45:4A:26:96:98:73:5C:0A:9C:6F:12:73:A1:DD:26:40:90:0B:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/27e7076b-0319-36fe-a986-009cd77f209f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:5a:c6:26:c9:41:a3:06:d7:f3:f0:5f:23:7c:aa:fd:ea:b5: 09:f9:86:ba:93:01:a9:7c:08:68:d6:a1:70:e0:88:54:0e:7c: 36:b0:dc:07:1e:17:a8:43:9c:e2:3a:0c:e0:9b:1f:a5:0d:1c: eb:29:da:0a:16:a5:d7:e6:1f:7f:b8:db:a3:25:ec:a1:de:8e: 24:d2:8b:25:5b:8e:0e:5d:98:0d:0d:f1:68:a9:c0:45:c0:eb: f4:c3:ea:69:89:ba:6c:21:cc:de:75:42:c1:64:db:96:f5:bc: bd:e5:be:cd:4e:ad:47:32:30:cc:82:dd:f7:b9:90:c3:4d:53: e8:ab:eb:46:50:fc:cc:40:d6:db:5e:68:90:37:78:9b:46:e7: 96:10:0e:eb:19:25:3d:6c:8e:f7:bd:30:95:3e:21:4d:3d:f0: ce:5b:86:85:93:7f:ae:7d:1c:4d:58:31:b7:f4:3e:b2:f5:c2: 8d:a8:70:83:c6:b1:0d:f7:0c:1f:32:9e:c7:23:fb:41:82:31: 0b:37:7b:fe:4e:b9:d1:87:77:3a:3e:9b:c2:11:d3:ee:67:7b: d3:2a:41:c9:45:03:90:c1:c9:0a:fe:44:59:d5:f2:35:60:23: 8f:34:d8:ac:e2:61:e5:ff:30:5a:61:1b:09:fc:af:68:a4:0c: 78:39:47:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFr/xkQqTyv+2j0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk MDVjMmU1ZmMtNmRmZi00ZjkzLWJhMzUtNjUwYzU2YTNhOWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D8zYVIZpHfI9Kz1FybVcFe2KDW/Y5ekLLSf DH2DV+xYm4RuX/7zl+1ZFI639dKkCFzTMQP5n5+Q4UQdr6cibSpFWIpFenugNfkU JTeTRSpkXtuwhK2N02NN3m0ekQcT4bDKL5c+89/7lebl5i+5DpPktJ0Go7+HkXFK nedpQdf1X0fBTQ4Cg9bIGygeecFXrbaFbD6UUt6gj/Q2SaElzIkhtDW7UdnF2wWa Sd+2FOZWjhoMse6WTvyjmlFUakBEr/q+mUfPX/x9CqEBNikNL0ys1m4BaR9TPqkc LTVKp9XW2DC1wRYmWX8N4Rz03OyPFlFjppGhJ25QRj7Y6PGn0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZFSiaWmHNcCpxvEnOh3SZAkAtLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMjdlNzA3NmItMDMxOS0z NmZlLWE5ODYtMDA5Y2Q3N2YyMDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5kQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxaxibJQaMG1/PwXyN8qv3qtQn5hrqTAal8CGjWoXDgiFQOfDaw3Ace F6hDnOI6DOCbH6UNHOsp2goWpdfmH3+426Ml7KHejiTSiyVbjg5dmA0N8WipwEXA 6/TD6mmJumwhzN51QsFk25b1vL3lvs1OrUcyMMyC3fe5kMNNU+ir60ZQ/MxA1tte aJA3eJtG55YQDusZJT1sjve9MJU+IU098M5bhoWTf659HE1YMbf0PrL1wo2ocIPG sQ33DB8ynscj+0GCMQs3e/5OudGHdzo+m8IR0+5ne9MqQclFA5DByQr+RFnV8jVg I4802KziYeX/MFphGwn8r2ikDHg5R5U= -----END CERTIFICATE-----Generated at Sun Apr 27 07:19:16 2025 by rpki-client