$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa File: 3a49eb68-6216-3abc-822d-65fec49cdd7d.roa (raw, json) Hash identifier: SS9LlRF5mn6d3k9Wja7zcxtAppGDBE9O1JHDaUufNaQ= Subject key identifier: 10:41:13:E2:10:39:4C:31:09:27:F3:E6:A0:8E:7F:9C:09:8A:52:D4 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849ED4FC25E308C9275A5A2CC80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 12189 IP address blocks: 131.153.124.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:c2:5e:30:8c:92:75:a5:a2:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=973b74f5-7890-4310-81d1-b22482091acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:4b:70:ce:b8:74:c3:17:ff:69:4a:59:c7: bb:78:ff:b4:4d:53:9b:55:a9:49:85:6a:cc:fa:6a: cc:50:ce:9a:cf:d8:e9:7f:ba:15:c7:4c:a7:2b:da: 62:b1:22:3e:b4:a4:eb:24:74:08:33:0e:08:6d:1c: 72:ab:30:b9:b6:3e:a8:4e:f2:11:3c:07:bb:5e:62: 2f:32:d4:ec:e9:8b:40:eb:03:c2:c9:ff:9c:3e:83: 99:44:0f:1e:14:c2:77:04:c2:c2:b9:45:c7:59:14: 30:b4:d5:6b:75:28:48:2d:2d:0f:48:8b:83:d2:43: 53:00:9a:7c:64:dc:b1:bc:2c:f9:87:ef:85:1f:2d: 52:17:8b:c0:cc:af:fd:0a:f2:9d:af:af:8a:73:50: 30:39:9b:64:94:9e:b2:e4:0b:63:b8:46:fe:9c:7a: d1:5f:d1:05:4c:d2:b3:2f:ac:fa:2e:4f:f2:f0:27: a8:38:8c:69:6e:0c:e9:b7:68:55:33:af:42:9d:b2: 01:2c:c0:dc:e0:62:f3:e9:0c:33:e0:e2:cb:db:5b: 71:e7:02:c2:c8:7f:4b:d9:e3:57:d1:22:8b:b9:55: 77:8c:2c:fe:79:0e:fb:1a:43:84:bc:d8:b3:e9:09: f1:1e:bf:55:0f:7a:31:e9:66:d5:21:22:a1:5c:1f: 1c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:41:13:E2:10:39:4C:31:09:27:F3:E6:A0:8E:7F:9C:09:8A:52:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:7a:67:9d:2d:cb:53:a1:73:b1:76:48:c3:f7:5d:2d:7a:a8: 5e:45:18:24:0a:08:a9:cd:09:a6:84:df:eb:0c:cb:e0:f9:f1: b8:2e:17:8f:11:04:88:48:70:a1:b9:3b:5f:6a:0a:29:a7:80: 54:0a:1c:37:bf:4a:77:15:e5:eb:f6:5a:80:c1:74:a5:e4:ad: 34:9e:2f:52:2b:e8:20:99:5c:a6:29:06:c5:48:09:79:ec:45: 43:3d:49:f2:c5:62:61:5c:6d:45:4a:a9:56:35:c0:e5:f0:89: 17:38:d6:7f:5a:e9:14:d1:10:12:18:57:4b:7e:9c:e7:9e:e2: cb:8f:62:f5:29:58:44:fb:85:02:f2:1a:ca:97:f5:b6:24:e7: 03:ba:80:46:15:a5:4a:89:1d:0c:55:d1:f8:34:db:4a:72:df: 48:50:0f:71:da:2d:81:26:5f:2b:5b:cd:58:c7:f8:0a:07:2e: 89:37:2f:e8:7d:a4:51:86:e7:08:e7:7d:15:93:74:62:17:b9: fe:0e:bc:e9:67:ef:78:b8:4b:04:37:9c:c6:02:79:95:70:9a: 90:2a:a1:25:7c:66:5f:f8:08:58:b3:05:7f:6d:7b:40:9a:4c: c2:eb:97:40:0d:55:a2:13:eb:00:0c:b7:80:8b:31:f7:27:86: 08:c1:65:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8JeMIySdaWizIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk OTczYjc0ZjUtNzg5MC00MzEwLTgxZDEtYjIyNDgyMDkxYWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkFLcM64dMMX/2lKWce7eP+0TVObValJhWrM +mrMUM6az9jpf7oVx0ynK9pisSI+tKTrJHQIMw4IbRxyqzC5tj6oTvIRPAe7XmIv MtTs6YtA6wPCyf+cPoOZRA8eFMJ3BMLCuUXHWRQwtNVrdShILS0PSIuD0kNTAJp8 ZNyxvCz5h++FHy1SF4vAzK/9CvKdr6+Kc1AwOZtklJ6y5AtjuEb+nHrRX9EFTNKz L6z6Lk/y8CeoOIxpbgzpt2hVM69CnbIBLMDc4GLz6Qwz4OLL21tx5wLCyH9L2eNX 0SKLuVV3jCz+eQ77GkOEvNiz6QnxHr9VD3ox6WbVISKhXB8ctwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBBE+IQOUwxCSfz5qCOf5wJilLUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2E0OWViNjgtNjIxNi0z YWJjLTgyMmQtNjVmZWM0OWNkZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5l8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHR6Z50ty1Ohc7F2SMP3XS16qF5FGCQKCKnNCaaE3+sMy+D58bguF48R BIhIcKG5O19qCimngFQKHDe/SncV5ev2WoDBdKXkrTSeL1Ir6CCZXKYpBsVICXns RUM9SfLFYmFcbUVKqVY1wOXwiRc41n9a6RTREBIYV0t+nOee4suPYvUpWET7hQLy GsqX9bYk5wO6gEYVpUqJHQxV0fg020py30hQD3HaLYEmXytbzVjH+AoHLok3L+h9 pFGG5wjnfRWTdGIXuf4OvOln73i4SwQ3nMYCeZVwmpAqoSV8Zl/4CFizBX9te0Ca TMLrl0ANVaIT6wAMt4CLMfcnhgjBZeE= -----END CERTIFICATE-----Generated at Sun Jun 15 22:01:06 2025 by rpki-client