$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/498edecf-1b28-3ff2-8e56-58ead838dea2.roa File: 498edecf-1b28-3ff2-8e56-58ead838dea2.roa (raw, json) Hash identifier: HPiQ58kj3QtUSlS1Ymww1K3vG9tBG0c3jm+3m8LJ12k= Subject key identifier: 95:52:8A:B4:36:06:FC:61:90:2E:9B:F3:C5:10:F8:8B:43:55:D1:C7 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EBEA4BDBE8232ED9150214C0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/498edecf-1b28-3ff2-8e56-58ead838dea2.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 46385 IP address blocks: 131.153.84.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4b:db:e8:23:2e:d9:15:02:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=4f1d8f59-1e03-433c-b22c-a275545a847e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:31:34:1c:a4:4e:86:c1:a6:cc:2b:92:da: 6b:5a:75:00:32:a5:2a:55:5b:f4:97:4a:5f:39:42: f1:63:aa:dd:4b:df:27:aa:86:56:11:61:d6:96:9e: f3:25:f2:8c:2c:ea:ab:93:17:04:7d:2a:0d:49:f2: a0:0d:91:e0:d1:64:66:a9:27:50:69:cc:40:37:ef: 9a:0c:56:b9:6e:5a:a9:ea:54:1b:3e:e8:a5:59:16: 5b:fa:68:45:50:48:e3:9a:77:97:12:7d:08:57:a2: 2b:0e:78:58:32:74:fd:46:29:df:65:67:ab:7a:51: 1e:a5:5a:00:0d:56:cc:d4:38:89:a7:e0:d9:39:49: d1:9b:8a:98:54:2e:d2:63:bf:d1:a0:c3:25:90:13: 2b:2f:9c:6b:25:48:09:bd:a2:5a:19:6b:8b:ce:2f: 49:f2:62:cd:d9:43:61:c3:fd:1b:c3:8d:20:7d:04: 5d:84:9b:0b:78:70:19:24:90:25:bb:cb:ac:fc:b0: be:cb:94:d2:ed:56:90:4f:a8:75:76:9c:cb:99:c1: b0:a6:af:b6:7d:44:71:82:df:fa:28:2b:c4:1f:ba: 48:e7:01:d5:c7:3a:cc:11:71:8d:7f:85:72:59:48: a3:54:83:19:09:a8:9a:3c:0c:c2:c9:23:05:63:34: fd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:52:8A:B4:36:06:FC:61:90:2E:9B:F3:C5:10:F8:8B:43:55:D1:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/498edecf-1b28-3ff2-8e56-58ead838dea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:da:9d:e9:98:58:21:53:f3:02:4f:a4:2a:f3:ba:ef:b0:69: 55:17:ff:03:51:1f:53:65:94:92:26:a6:d8:01:ab:79:32:21: 8d:c2:b8:55:3b:be:d6:90:86:e6:b9:07:8a:c7:d4:11:a8:53: 1b:54:0e:f1:9f:33:5e:df:9d:74:a4:63:78:9a:ab:bd:6a:df: ad:a4:32:f7:3b:86:56:fd:cf:34:60:38:e1:be:8b:7b:2c:6f: e5:fd:5a:be:3a:bc:58:ac:cc:2d:5e:7a:b5:62:a0:3a:bf:92: 36:c3:bb:ba:3f:05:0a:18:93:19:08:3f:b8:16:ea:69:e2:1a: bc:fb:f2:a4:85:31:65:c9:c1:19:49:ec:39:a1:36:27:e6:43: 9d:97:eb:94:e7:55:26:12:c8:a2:7e:6f:b9:45:dd:b4:5b:51: 95:c5:e4:3b:3b:c5:c4:30:33:d9:d1:bb:7e:e7:c7:cb:7a:a4: 3c:70:b2:fd:05:c2:fa:67:f8:9a:37:d1:40:69:01:c2:ff:81: 41:57:5e:cd:11:f7:4e:70:55:51:dd:94:44:46:31:3c:77:9e: 68:88:ea:cd:84:44:9d:6d:29:1d:9a:34:0b:99:d5:25:7b:3a: 90:30:7b:34:51:8a:cb:dc:eb:34:44:73:29:33:f6:9c:55:47: b4:6f:7f:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6kvb6CMu2RUCFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk NGYxZDhmNTktMWUwMy00MzNjLWIyMmMtYTI3NTU0NWE4NDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnsxNBykTobBpswrktprWnUAMqUqVVv0l0pf OULxY6rdS98nqoZWEWHWlp7zJfKMLOqrkxcEfSoNSfKgDZHg0WRmqSdQacxAN++a DFa5blqp6lQbPuilWRZb+mhFUEjjmneXEn0IV6IrDnhYMnT9RinfZWerelEepVoA DVbM1DiJp+DZOUnRm4qYVC7SY7/RoMMlkBMrL5xrJUgJvaJaGWuLzi9J8mLN2UNh w/0bw40gfQRdhJsLeHAZJJAlu8us/LC+y5TS7VaQT6h1dpzLmcGwpq+2fURxgt/6 KCvEH7pI5wHVxzrMEXGNf4VyWUijVIMZCaiaPAzCySMFYzT9RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVSirQ2BvxhkC6b88UQ+ItDVdHHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNDk4ZWRlY2YtMWIyOC0z ZmYyLThlNTYtNThlYWQ4MzhkZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIranemYWCFT8wJPpCrzuu+waVUX/wNRH1NllJImptgBq3kyIY3CuFU7 vtaQhua5B4rH1BGoUxtUDvGfM17fnXSkY3iaq71q362kMvc7hlb9zzRgOOG+i3ss b+X9Wr46vFiszC1eerVioDq/kjbDu7o/BQoYkxkIP7gW6mniGrz78qSFMWXJwRlJ 7DmhNifmQ52X65TnVSYSyKJ+b7lF3bRbUZXF5Ds7xcQwM9nRu37nx8t6pDxwsv0F wvpn+Jo30UBpAcL/gUFXXs0R905wVVHdlERGMTx3nmiI6s2ERJ1tKR2aNAuZ1SV7 OpAwezRRisvc6zREcykz9pxVR7Rvf58= -----END CERTIFICATE-----Generated at Mon Jun 16 06:52:29 2025 by rpki-client