$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/53f05558-bdf3-3584-84db-3b70198450f8.roa File: 53f05558-bdf3-3584-84db-3b70198450f8.roa (raw, json) Hash identifier: pnvXuHBtzKHt5RN/upYvJ9tN3A34L6gRbYh8HEmAHiY= Subject key identifier: DC:51:EA:27:5C:50:EC:95:DE:94:11:35:5D:21:57:17:26:4F:80:7F Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858491246AC5CDC99C83C05770300 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/53f05558-bdf3-3584-84db-3b70198450f8.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 20454 IP address blocks: 131.153.240.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ac:5c:dc:99:c8:3c:05:77:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=e73ca19f-769b-44ec-9405-e9e5e240e89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9b:62:6a:0a:f3:26:3c:6e:86:3f:47:b6:a9: 87:d0:2f:df:da:0a:80:96:91:24:d7:e3:5a:6c:44: b6:d9:f9:6a:4f:29:2c:8a:7b:f5:49:ab:af:4c:47: 4d:06:2f:7b:6a:31:0a:86:a6:59:ee:e7:81:f6:0e: 20:16:73:ae:ea:66:a7:a3:0a:aa:34:68:4d:15:4f: 95:c8:b5:b6:4b:65:68:35:5b:9b:c2:67:4f:c7:ca: 68:a2:27:52:11:47:9c:ef:06:9f:2d:a4:3b:77:17: 18:b2:25:07:a5:bd:71:88:d1:25:6d:f7:39:c6:9e: 08:bc:18:3b:10:e8:14:37:b7:18:00:88:6e:64:53: a4:1f:65:de:80:94:18:04:c2:26:15:2a:87:5b:75: 43:9d:9e:15:dd:b3:64:aa:76:c4:34:fb:36:ca:f1: af:7a:61:60:1a:5d:68:a2:5f:a0:9f:0d:b5:5c:4d: 5c:f7:d2:3b:f2:cb:8a:59:72:e2:c7:99:5c:a4:79: af:5d:a9:14:dc:9b:14:15:12:5e:ab:ea:e9:dd:f4: 86:d0:f9:5f:3b:5e:f2:1f:61:0e:fb:c4:4b:59:6d: d5:2d:79:bb:2a:52:a9:b8:45:a9:5f:1c:34:34:1a: 4d:c9:a4:5e:5a:5b:c1:d4:25:75:39:2d:a4:0c:9a: da:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:51:EA:27:5C:50:EC:95:DE:94:11:35:5D:21:57:17:26:4F:80:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/53f05558-bdf3-3584-84db-3b70198450f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a6:a7:8f:1d:f8:08:09:cb:bd:07:a8:0a:20:e0:07:4e:5e: 6a:c1:de:ca:86:0a:cc:09:bd:88:cc:1c:4b:64:fc:4c:72:7c: bc:70:f0:63:d5:bf:61:56:c1:2a:8c:e6:02:82:69:4f:d3:14: 77:00:6c:da:c4:c7:d0:49:c3:93:38:3f:cb:d2:fe:1b:24:77: d2:ac:40:e2:a8:b4:0f:51:c3:e6:86:6d:8c:06:d3:5f:f1:c5: bc:fb:da:89:aa:94:6b:28:32:6f:24:4c:5c:4b:f2:65:04:ab: bd:fa:4b:49:1e:c1:4d:48:5e:87:ed:4d:e8:dd:23:27:db:f0: be:06:06:04:65:7c:f1:9e:f3:7e:bd:e5:07:c5:04:77:dc:a4: 36:93:0d:61:a0:1b:4d:b9:0f:f8:e9:2f:c7:17:b3:59:80:e3: 78:ef:d6:7b:4d:ff:be:48:00:7b:a1:6e:ce:a0:2d:09:9d:24: a4:34:ef:6c:7d:4a:3a:e0:7b:40:4b:74:a4:37:69:8e:d0:2a: 94:5c:33:44:d5:40:8b:f1:68:42:6c:33:4f:80:0b:fb:22:2c: b8:81:55:fa:8e:f9:c5:81:a6:3d:ce:ff:e8:d5:47:39:e5:25: b2:97:66:9c:84:7c:c3:ee:8f:0a:42:31:8f:62:99:bf:3a:bc: c0:7a:02:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqxc3JnIPAV3AwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZTczY2ExOWYtNzY5Yi00NGVjLTk0MDUtZTllNWUyNDBlODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5tiagrzJjxuhj9HtqmH0C/f2gqAlpEk1+Na bES22flqTyksinv1SauvTEdNBi97ajEKhqZZ7ueB9g4gFnOu6manowqqNGhNFU+V yLW2S2VoNVubwmdPx8pooidSEUec7wafLaQ7dxcYsiUHpb1xiNElbfc5xp4IvBg7 EOgUN7cYAIhuZFOkH2XegJQYBMImFSqHW3VDnZ4V3bNkqnbENPs2yvGvemFgGl1o ol+gnw21XE1c99I78suKWXLix5lcpHmvXakU3JsUFRJeq+rp3fSG0PlfO17yH2EO +8RLWW3VLXm7KlKpuEWpXxw0NBpNyaReWlvB1CV1OS2kDJraQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxR6idcUOyV3pQRNV0hVxcmT4B/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNTNmMDU1NTgtYmRmMy0z NTg0LTg0ZGItM2I3MDE5ODQ1MGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5nwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+mp48d+AgJy70HqAog4AdOXmrB3sqGCswJvYjMHEtk/ExyfLxw8GPV v2FWwSqM5gKCaU/TFHcAbNrEx9BJw5M4P8vS/hskd9KsQOKotA9Rw+aGbYwG01/x xbz72omqlGsoMm8kTFxL8mUEq736S0kewU1IXoftTejdIyfb8L4GBgRlfPGe8369 5QfFBHfcpDaTDWGgG025D/jpL8cXs1mA43jv1ntN/75IAHuhbs6gLQmdJKQ072x9 Sjrge0BLdKQ3aY7QKpRcM0TVQIvxaEJsM0+AC/siLLiBVfqO+cWBpj3O/+jVRznl JbKXZpyEfMPujwpCMY9imb86vMB6AlY= -----END CERTIFICATE-----Generated at Sun Apr 27 01:43:21 2025 by rpki-client