$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa File: 5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa (raw, json) Hash identifier: CaUydBs+NWWk4UCMv8wGZLhI6Ebwhj4q41CHL1aAJT0= Subject key identifier: 4E:D4:FB:51:00:D0:1C:B9:C6:91:2D:8C:39:69:B2:BE:DE:21:E2:F3 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490E16BF652D7ED52A8C4C9F80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 19437 IP address blocks: 131.153.144.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:bf:65:2d:7e:d5:2a:8c:4c:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=9d0365d8-a977-4a95-9d91-ad0ad1fe8b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:10:8f:db:80:86:5b:b9:b0:c0:36:57:8a: 1f:e6:86:5b:34:fc:19:aa:26:52:5f:a8:73:eb:81: 87:d7:38:a1:58:16:72:b2:c6:24:c7:62:5e:fe:9c: fe:0f:b4:64:be:88:74:b2:9c:55:47:c7:64:fa:56: ae:ba:ab:b2:0d:1c:ef:92:c3:35:e4:76:64:1b:df: 4f:d6:83:44:91:f3:b5:90:d5:5a:14:1c:17:31:1c: f0:15:de:74:4e:79:ac:26:d4:ad:01:53:6f:4c:8d: 3c:00:e7:2f:29:d2:07:51:bd:e9:96:63:a8:a8:44: be:2a:37:91:c4:90:a8:e3:65:a5:a7:e9:f5:ed:c8: 4f:38:c8:9d:f2:15:bd:16:2d:33:d2:89:18:54:27: d2:af:63:eb:18:b7:ce:4b:95:fe:92:20:7e:9e:b8: 8a:90:29:55:84:6a:81:4e:50:2a:a4:8d:7b:1c:4c: ee:42:a9:57:fe:e2:41:c8:bc:19:e2:08:6e:0f:e3: e0:b3:60:03:ad:f3:f1:53:82:3d:ba:29:4e:e0:71: 37:b9:ae:19:90:66:b4:7c:8d:60:c3:bb:c1:2d:bb: 52:45:02:91:51:87:9c:3d:39:7a:be:fd:6b:80:36: 8a:fb:53:9b:71:38:a6:ea:78:e4:83:47:f2:c0:3e: 4e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D4:FB:51:00:D0:1C:B9:C6:91:2D:8C:39:69:B2:BE:DE:21:E2:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c2:bc:ef:35:ec:b4:16:b9:87:38:f7:5a:84:cc:86:91:69: ed:b8:86:3d:58:8f:4d:f6:11:c7:26:28:df:1f:1e:33:a5:c7: ed:96:4c:2c:4a:56:25:00:7d:55:54:56:a8:c2:8f:72:73:28: e9:09:0a:5c:ff:4b:1c:4b:f8:c2:c3:dc:20:34:18:68:cf:85: c6:c0:cf:c7:ae:57:68:36:2d:03:1b:15:5f:20:76:53:4d:8d: 9f:77:20:1b:11:cb:bf:62:90:bb:a4:35:b1:a8:b7:4d:67:01: 28:11:a1:02:0c:00:27:01:49:54:0d:b9:a1:db:42:22:12:5b: 0c:4b:ec:0c:01:89:9a:5a:96:a8:ae:fd:ce:59:bf:55:8f:03: 17:7f:04:9b:87:e9:ce:23:fa:ef:9f:90:87:3c:ac:56:06:af: 03:a5:93:3b:48:ae:1a:36:e3:80:49:ad:4d:d8:53:cb:91:5d: ee:37:0a:8a:70:03:c5:6b:af:96:af:f9:f0:94:05:db:0c:69: 56:41:c3:5a:1f:13:ad:7e:c4:c9:07:b1:ce:9b:01:30:d5:d6: f5:68:81:8c:81:67:d4:1a:12:bc:86:15:d0:11:96:fe:8f:ec: 53:d3:b6:d8:07:63:d1:9f:8a:4b:98:80:8c:6c:b8:86:e4:bf: 0b:c4:c6:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFr9lLX7VKoxMn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk OWQwMzY1ZDgtYTk3Ny00YTk1LTlkOTEtYWQwYWQxZmU4YjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC4Qj9uAhlu5sMA2V4of5oZbNPwZqiZSX6hz 64GH1zihWBZyssYkx2Je/pz+D7Rkvoh0spxVR8dk+lauuquyDRzvksM15HZkG99P 1oNEkfO1kNVaFBwXMRzwFd50TnmsJtStAVNvTI08AOcvKdIHUb3plmOoqES+KjeR xJCo42Wlp+n17chPOMid8hW9Fi0z0okYVCfSr2PrGLfOS5X+kiB+nriKkClVhGqB TlAqpI17HEzuQqlX/uJByLwZ4ghuD+Pgs2ADrfPxU4I9uilO4HE3ua4ZkGa0fI1g w7vBLbtSRQKRUYecPTl6vv1rgDaK+1ObcTim6njkg0fywD5O7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7U+1EA0By5xpEtjDlpsr7eIeLzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNWYzNDAyZTUtY2Q5Mi0z M2I2LTgxMmMtMDg5MmMwYjhiMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5mQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/CvO817LQWuYc491qEzIaRae24hj1Yj032EccmKN8fHjOlx+2WTCxK ViUAfVVUVqjCj3JzKOkJClz/SxxL+MLD3CA0GGjPhcbAz8euV2g2LQMbFV8gdlNN jZ93IBsRy79ikLukNbGot01nASgRoQIMACcBSVQNuaHbQiISWwxL7AwBiZpalqiu /c5Zv1WPAxd/BJuH6c4j+u+fkIc8rFYGrwOlkztIrho244BJrU3YU8uRXe43Copw A8Vrr5av+fCUBdsMaVZBw1ofE61+xMkHsc6bATDV1vVogYyBZ9QaEryGFdARlv6P 7FPTttgHY9GfikuYgIxsuIbkvwvExvY= -----END CERTIFICATE-----Generated at Sun Apr 27 07:27:27 2025 by rpki-client