$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a135045-ff0a-32c9-be71-5f1bd079a5b0.roa File: 3a135045-ff0a-32c9-be71-5f1bd079a5b0.roa (raw, json) Hash identifier: nX/otKdNBjs7J+zoUYWhwiEs28fvIuZ4AmD1HrGySCY= Subject key identifier: FD:2F:AA:00:56:60:45:86:8D:3A:A5:0E:56:05:9F:2E:D5:99:42:AD Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EBEA4BEE59EDC757FFF5B580 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a135045-ff0a-32c9-be71-5f1bd079a5b0.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 210266 IP address blocks: 131.153.90.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4b:ee:59:ed:c7:57:ff:f5:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=503a9f03-360a-4787-90e9-2a24febd366c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:c9:02:d8:86:c3:66:16:cd:01:fd:33:a4: 19:55:83:72:0f:7e:06:e5:a5:74:9f:dd:3e:eb:e5: 94:65:7d:33:49:c2:33:35:f6:bc:5c:8b:25:24:98: 90:c5:03:e8:46:79:57:ff:fa:f6:19:cb:ee:fa:13: 5c:fc:03:7d:50:50:92:06:d6:42:cb:74:e8:8e:8d: 41:5a:98:1f:77:90:75:38:b3:b8:71:8b:94:f1:df: 58:9b:67:2c:72:7b:ac:15:a4:f4:65:d1:f5:fd:44: cc:14:64:58:ff:49:52:13:95:7d:4e:09:23:4f:63: 2f:30:45:22:5a:fa:c4:09:87:66:d7:fd:55:6c:42: 24:ee:c3:9d:50:9b:8a:82:37:fb:7f:cd:89:c3:9e: 0e:d4:99:f6:96:07:b0:59:9c:8b:78:84:2c:60:4e: e1:80:e1:2d:b5:08:44:43:6a:7f:fb:4d:89:93:ad: 98:b9:64:91:1a:7a:b7:61:b0:3b:f3:e8:37:15:88: 5d:ec:28:63:f4:03:70:3a:5d:c9:2c:2d:1c:6b:32: fc:72:9b:21:b5:59:5e:a3:50:bc:92:09:8f:40:81: d4:40:1b:0a:d1:20:95:1e:f6:8e:b4:f0:96:72:bf: c9:70:d9:f3:35:e6:1b:5e:62:6c:45:8b:0c:e8:47: 5e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2F:AA:00:56:60:45:86:8D:3A:A5:0E:56:05:9F:2E:D5:99:42:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a135045-ff0a-32c9-be71-5f1bd079a5b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:20:54:83:8a:95:2e:1c:b4:f0:55:8b:41:ee:db:a5:59:3b: 25:a6:37:79:24:33:29:48:74:bf:5c:49:80:f7:41:13:f6:d8: a6:cf:52:5d:93:71:94:ab:2f:04:c6:45:f5:db:10:42:76:34: 7d:1f:8b:45:57:aa:3b:62:cf:23:c8:ec:26:d2:95:89:16:d0: ac:bb:bd:74:83:e1:8d:47:82:f0:b1:38:20:06:e1:a6:cf:57: df:4a:b1:ab:ad:85:94:d7:65:5e:9e:4b:6c:da:06:06:ad:5e: 96:0f:1d:73:05:dd:13:3d:92:b6:62:0e:e7:37:6a:e3:b8:f5: fc:fa:a8:12:51:1f:ab:2e:1e:93:d5:b7:11:2e:e5:6d:89:c5: 96:d3:6e:68:20:7c:1c:f5:32:41:18:f6:bd:9b:26:27:85:73: 49:4f:a7:0c:01:44:6e:76:db:f5:40:f1:a5:d6:23:ec:b8:21: 55:0a:2d:b3:03:f6:2b:b4:c6:34:f0:d9:55:ee:65:9e:b4:a1: 9c:e6:bc:f6:ca:8f:5c:78:62:c2:1d:61:a0:44:44:e1:7b:e3: 88:4a:9b:0c:d0:4e:ca:7b:1a:84:90:43:68:75:48:3a:2e:ef: 73:3b:61:48:67:f4:83:82:05:76:ed:36:98:75:55:b9:5b:5b: 92:a4:25:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6kvuWe3HV//1tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk NTAzYTlmMDMtMzYwYS00Nzg3LTkwZTktMmEyNGZlYmQzNjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx7JAtiGw2YWzQH9M6QZVYNyD34G5aV0n90+ 6+WUZX0zScIzNfa8XIslJJiQxQPoRnlX//r2Gcvu+hNc/AN9UFCSBtZCy3Tojo1B Wpgfd5B1OLO4cYuU8d9Ym2cscnusFaT0ZdH1/UTMFGRY/0lSE5V9TgkjT2MvMEUi WvrECYdm1/1VbEIk7sOdUJuKgjf7f82Jw54O1Jn2lgewWZyLeIQsYE7hgOEttQhE Q2p/+02Jk62YuWSRGnq3YbA78+g3FYhd7Chj9ANwOl3JLC0cazL8cpshtVleo1C8 kgmPQIHUQBsK0SCVHvaOtPCWcr/JcNnzNeYbXmJsRYsM6EdedwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0vqgBWYEWGjTqlDlYFny7VmUKtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2ExMzUwNDUtZmYwYS0z MmM5LWJlNzEtNWYxYmQwNzlhNWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5laMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIgVIOKlS4ctPBVi0Hu26VZOyWmN3kkMylIdL9cSYD3QRP22KbPUl2T cZSrLwTGRfXbEEJ2NH0fi0VXqjtizyPI7CbSlYkW0Ky7vXSD4Y1HgvCxOCAG4abP V99KsauthZTXZV6eS2zaBgatXpYPHXMF3RM9krZiDuc3auO49fz6qBJRH6suHpPV txEu5W2JxZbTbmggfBz1MkEY9r2bJieFc0lPpwwBRG522/VA8aXWI+y4IVUKLbMD 9iu0xjTw2VXuZZ60oZzmvPbKj1x4YsIdYaBEROF744hKmwzQTsp7GoSQQ2h1SDou 73M7YUhn9IOCBXbtNph1VblbW5KkJd8= -----END CERTIFICATE-----Generated at Sun Jun 15 16:07:42 2025 by rpki-client