$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6118720a-ed2c-312e-8962-08dd436ce917.roa File: 6118720a-ed2c-312e-8962-08dd436ce917.roa (raw, json) Hash identifier: GKmoAvCs7obztL/XEqYR36H0EERyXV7AcW+3bWyaXIs= Subject key identifier: 4C:10:B0:89:78:A0:A8:7B:53:44:A6:0F:17:56:04:DA:D2:3F:1E:45 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584A07D529AD25D3732E3AEC3EC0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6118720a-ed2c-312e-8962-08dd436ce917.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 19437 IP address blocks: 131.153.207.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:29:ad:25:d3:73:2e:3a:ec:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=a071b4bf-a45b-4a18-84be-24afb87065b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8c:e3:ea:59:dc:95:df:eb:e9:1a:3d:83:32: 7a:92:10:4a:fb:90:5f:63:16:64:c3:63:64:8e:21: 6c:13:3a:ba:f1:b7:86:10:0f:ae:57:d9:7b:17:73: 59:73:d9:44:9b:e8:4b:97:a9:6b:e2:8d:4f:4e:c1: 8a:6f:f6:7b:85:54:55:a6:69:8a:41:01:a5:e2:3a: 2b:9f:24:fb:35:d9:d5:6b:08:41:e2:03:5d:b9:32: 6e:03:3e:40:53:6f:36:75:fa:ef:1e:88:04:52:d9: 6c:85:1a:06:aa:0f:d7:94:6b:f2:e6:9d:12:2f:a3: 3a:bf:47:d2:34:e2:32:4b:89:17:89:bd:e3:60:03: 96:80:92:1c:73:38:c8:86:45:2b:54:fe:7e:47:ef: 46:80:5f:b1:31:e7:44:d7:61:6a:80:4e:d0:22:6b: 33:a5:f9:7f:60:57:a0:4a:7b:28:df:23:b2:64:5d: 2c:c6:ae:60:05:7c:d3:83:a5:e0:61:56:dd:ff:32: d9:7e:fc:e5:80:6c:08:3e:a9:72:cf:70:28:25:5b: c9:00:b4:3f:e7:1c:25:d3:ed:e8:a0:22:e9:dc:74: ce:8c:92:61:b3:e5:66:4f:3f:7f:9b:b6:40:54:5b: b2:a0:fd:ca:ad:c2:89:f6:7b:19:04:a8:85:d3:da: a5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:10:B0:89:78:A0:A8:7B:53:44:A6:0F:17:56:04:DA:D2:3F:1E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6118720a-ed2c-312e-8962-08dd436ce917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:db:fb:92:3e:c4:a7:a8:fa:d7:f6:4c:c2:ac:71:b3:2d:c9: 3e:2e:69:b7:df:5c:11:f5:8d:f3:69:7a:7c:1f:68:da:31:48: 5c:e3:5c:4a:f7:9a:f9:1e:8a:1f:d7:89:c5:ec:e9:f7:25:2b: 38:4f:b6:bc:b0:fc:3c:ed:a0:cd:a8:39:c3:83:17:38:13:90: 52:68:55:6b:76:34:9f:ce:7c:3b:a8:0e:81:6c:91:20:b5:0b: bb:df:75:55:1f:2c:14:e6:c4:2d:a6:38:4e:7a:6a:fe:24:3f: 24:24:62:ea:be:4e:c3:40:fa:8d:93:04:23:4a:0c:e3:f1:07: 0a:69:57:87:f6:03:0f:3e:06:49:99:d9:a5:fb:af:e3:23:93: 38:0d:b6:eb:a6:2c:b1:07:fe:95:0c:c0:e6:7b:15:41:70:71: 7d:69:5b:fa:18:cb:a3:8c:17:8d:0a:e7:33:34:56:b7:fe:9f: 43:bf:04:2a:bc:11:5a:72:ed:0b:14:3f:e0:75:b1:b9:78:59: 5d:bb:00:5b:e0:8c:04:f4:62:c0:2b:0e:ea:e1:15:9b:9b:48: d7:a8:e8:3f:74:f5:a5:2f:6d:43:57:ec:e9:7d:08:11:62:99: 90:a7:72:a2:7a:aa:55:03:32:68:06:f2:99:12:51:e2:1c:67: 1f:6f:32:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1SmtJdNzLjrsPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk YTA3MWI0YmYtYTQ1Yi00YTE4LTg0YmUtMjRhZmI4NzA2NWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4zj6lncld/r6Ro9gzJ6khBK+5BfYxZkw2Nk jiFsEzq68beGEA+uV9l7F3NZc9lEm+hLl6lr4o1PTsGKb/Z7hVRVpmmKQQGl4jor nyT7NdnVawhB4gNduTJuAz5AU282dfrvHogEUtlshRoGqg/XlGvy5p0SL6M6v0fS NOIyS4kXib3jYAOWgJIcczjIhkUrVP5+R+9GgF+xMedE12FqgE7QImszpfl/YFeg Snso3yOyZF0sxq5gBXzTg6XgYVbd/zLZfvzlgGwIPqlyz3AoJVvJALQ/5xwl0+3o oCLp3HTOjJJhs+VmTz9/m7ZAVFuyoP3KrcKJ9nsZBKiF09qlewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwQsIl4oKh7U0SmDxdWBNrSPx5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNjExODcyMGEtZWQyYy0z MTJlLTg5NjItMDhkZDQzNmNlOTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADb+5I+xKeo+tf2TMKscbMtyT4uabffXBH1jfNpenwfaNoxSFzjXEr3 mvkeih/XicXs6fclKzhPtryw/DztoM2oOcODFzgTkFJoVWt2NJ/OfDuoDoFskSC1 C7vfdVUfLBTmxC2mOE56av4kPyQkYuq+TsNA+o2TBCNKDOPxBwppV4f2Aw8+BkmZ 2aX7r+MjkzgNtuumLLEH/pUMwOZ7FUFwcX1pW/oYy6OMF40K5zM0Vrf+n0O/BCq8 EVpy7QsUP+B1sbl4WV27AFvgjAT0YsArDurhFZubSNeo6D909aUvbUNX7Ol9CBFi mZCncqJ6qlUDMmgG8pkSUeIcZx9vMiQ= -----END CERTIFICATE-----Generated at Sun Jun 15 13:20:12 2025 by rpki-client