$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4fe59b19-c5ad-3d24-8706-946768c99623.roa File: 4fe59b19-c5ad-3d24-8706-946768c99623.roa (raw, json) Hash identifier: X6vZkAxTicDxBP44zZHc+5USHAG4XzyfYmosLJtxVtQ= Subject key identifier: 8F:41:2A:6F:60:04:B7:58:C1:84:D3:8F:98:4B:66:6E:09:CD:FA:7E Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EBEA4F71B4C05592AF5FF800 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4fe59b19-c5ad-3d24-8706-946768c99623.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 209485 IP address blocks: 131.153.117.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4f:71:b4:c0:55:92:af:5f:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=f7bfc880-8f84-42cb-a7ab-d88cce5dbaf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5b:09:13:b9:59:20:a2:07:f9:f3:07:db:a1: d2:30:7e:ee:53:ac:fd:86:5b:71:b0:5f:4f:09:0a: 69:4f:97:3a:bc:21:d6:27:b2:78:b4:4a:50:0a:b4: 04:6a:d0:0f:3c:06:b6:25:e2:99:eb:f9:91:df:6d: 87:71:af:4a:8e:1d:34:dd:7c:74:84:63:29:28:ca: 2a:e4:c6:e4:a9:e3:dd:92:7d:b3:66:84:11:59:11: d9:6a:6f:dd:80:b3:6d:18:8a:33:9f:49:b7:83:b8: 5b:3c:c6:9e:71:4f:6f:fb:d7:c1:7a:72:93:30:20: 0b:48:21:d9:ff:c0:08:7f:78:cf:ec:bc:5a:65:fb: 8e:f3:f6:67:aa:d4:2f:5b:f9:d0:ea:a0:f2:1a:f7: 67:e1:84:23:30:7c:2c:01:9c:1c:27:26:82:51:f9: 82:30:75:ed:da:b6:50:aa:d7:6c:0c:b2:6e:eb:d9: f2:4e:23:dc:c9:dc:81:5d:21:7c:7c:79:b5:ba:42: 07:7d:bb:cf:10:c1:f4:75:d9:26:75:63:86:7e:6d: af:46:af:b0:44:25:04:2f:4c:c0:9c:3a:3b:f2:5d: ba:6b:17:66:4d:36:a4:d4:0b:d7:3d:36:8c:28:ad: fb:3c:85:9e:17:e8:c5:c5:22:27:83:d5:4e:56:5c: 11:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:41:2A:6F:60:04:B7:58:C1:84:D3:8F:98:4B:66:6E:09:CD:FA:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4fe59b19-c5ad-3d24-8706-946768c99623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:e8:23:31:f2:74:f2:83:a5:1b:a5:d0:55:4d:2c:2d:90:65: 83:16:5a:55:c3:32:aa:8d:c1:d3:23:50:b7:3f:1f:d0:e3:45: 91:49:23:7f:22:aa:9e:69:3f:7c:be:e6:48:79:9e:82:0d:99: ad:c8:28:95:4c:03:ca:b4:84:24:a4:b6:2a:39:6b:5d:ed:74: cc:4f:8d:d9:43:0a:a8:ae:be:e9:95:7d:8e:d9:82:1d:4f:87: 5b:67:2a:ad:e1:f2:54:3f:11:1d:85:d7:bd:de:39:56:f9:17: e9:73:f2:dd:ca:c2:de:cd:f7:fa:9d:67:32:31:f3:e0:c5:ae: 4d:a8:a8:05:6e:ef:d1:e9:78:5d:3a:7d:c8:ef:32:72:c7:92: 65:b3:f7:f6:c7:67:d3:5f:d0:81:8f:63:10:4b:c8:f7:7b:c9: ed:ec:01:8e:0d:97:bf:11:9a:3f:5a:5e:b6:36:60:f5:37:ed: d3:07:2d:bf:f2:3b:dc:5e:7d:ac:c9:9d:06:d3:bc:e6:cf:39: 4a:23:ab:22:06:7e:39:4b:d5:5e:9c:47:96:ca:4f:40:30:66: 32:f9:ca:9a:05:b3:cb:69:00:73:22:03:72:c5:ba:90:99:b3: 46:f5:d6:5d:e9:0d:23:43:0b:f8:4c:01:90:fb:43:d8:23:8c: 89:8c:02:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6k9xtMBVkq9f+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk ZjdiZmM4ODAtOGY4NC00MmNiLWE3YWItZDg4Y2NlNWRiYWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VsJE7lZIKIH+fMH26HSMH7uU6z9hltxsF9P CQppT5c6vCHWJ7J4tEpQCrQEatAPPAa2JeKZ6/mR322Hca9Kjh003Xx0hGMpKMoq 5MbkqePdkn2zZoQRWRHZam/dgLNtGIozn0m3g7hbPMaecU9v+9fBenKTMCALSCHZ /8AIf3jP7LxaZfuO8/ZnqtQvW/nQ6qDyGvdn4YQjMHwsAZwcJyaCUfmCMHXt2rZQ qtdsDLJu69nyTiPcydyBXSF8fHm1ukIHfbvPEMH0ddkmdWOGfm2vRq+wRCUEL0zA nDo78l26axdmTTak1AvXPTaMKK37PIWeF+jFxSIng9VOVlwRXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9BKm9gBLdYwYTTj5hLZm4Jzfp+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNGZlNTliMTktYzVhZC0z ZDI0LTg3MDYtOTQ2NzY4Yzk5NjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5l1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnoIzHydPKDpRul0FVNLC2QZYMWWlXDMqqNwdMjULc/H9DjRZFJI38i qp5pP3y+5kh5noINma3IKJVMA8q0hCSktio5a13tdMxPjdlDCqiuvumVfY7Zgh1P h1tnKq3h8lQ/ER2F173eOVb5F+lz8t3Kwt7N9/qdZzIx8+DFrk2oqAVu79HpeF06 fcjvMnLHkmWz9/bHZ9Nf0IGPYxBLyPd7ye3sAY4Nl78Rmj9aXrY2YPU37dMHLb/y O9xefazJnQbTvObPOUojqyIGfjlL1V6cR5bKT0AwZjL5ypoFs8tpAHMiA3LFupCZ s0b11l3pDSNDC/hMAZD7Q9gjjImMAjQ= -----END CERTIFICATE-----Generated at Sun Jun 15 15:02:52 2025 by rpki-client