$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/69872d89-79da-3819-8185-7de21929d884.roa File: 69872d89-79da-3819-8185-7de21929d884.roa (raw, json) Hash identifier: y7osE+XfAMPsZfkjrWU3b8q0siJT/fM1lg0m7Mh2JX8= Subject key identifier: F3:DB:EA:A0:5C:3D:AC:45:B7:BF:E4:AD:FF:F4:05:35:8A:C7:16:3B Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584930DE5F11A7F20D350C0A7300 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/69872d89-79da-3819-8185-7de21929d884.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 19437 IP address blocks: 131.153.238.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:5f:11:a7:f2:0d:35:0c:0a:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=a1d195d3-8ae6-4cf6-883a-72d4257ad5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:ff:0b:07:ad:67:ee:35:ba:fa:c8:12:bb: 6e:8f:5f:8e:bf:3e:18:8d:f9:74:13:62:78:f3:99: 5f:eb:ff:5e:22:0b:f9:5e:fc:6a:2f:7e:f0:4e:07: d1:3d:f4:16:83:dc:d5:8b:db:17:08:82:cd:6f:68: 9c:5d:bd:36:dd:cd:19:87:92:dc:09:51:99:54:44: 8e:67:b2:1f:7c:d4:d4:e2:01:48:e9:3d:3b:a1:2a: e3:2f:d6:f2:34:03:64:a3:7c:36:3e:b7:24:23:3c: 3b:55:63:77:67:fb:18:31:45:e2:46:7f:2d:e9:43: 4b:ea:c8:3e:31:e8:30:e6:b1:9f:2c:08:5d:83:01: 4d:bf:3a:96:c0:6a:62:ac:51:44:33:e7:71:7c:d5: e2:d6:78:57:9d:4f:e9:ea:8f:40:cc:39:d6:6c:70: 9b:cd:1c:a3:67:37:e3:a5:48:7f:37:df:a1:28:27: d9:bf:8c:64:6f:c1:63:08:7c:cf:73:0e:b4:64:49: c3:4b:c3:dd:0b:78:17:3f:24:8b:bb:0e:ff:a1:6b: 5e:c0:a5:9c:41:dd:b0:3b:8e:1a:b2:0f:42:db:12: 95:39:66:fd:ed:b2:56:af:1c:f5:36:4c:e0:67:f9: f1:cc:3f:23:3b:80:74:68:f2:2a:ed:ec:42:9d:4f: 8d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DB:EA:A0:5C:3D:AC:45:B7:BF:E4:AD:FF:F4:05:35:8A:C7:16:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/69872d89-79da-3819-8185-7de21929d884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:b4:92:36:4d:11:af:f6:7e:45:a5:03:40:4a:16:24:69:84: f5:08:53:09:2f:8d:a3:6a:21:ee:b8:44:4c:fd:46:97:52:20: 1c:ac:8b:7c:36:33:ca:49:bb:88:bb:a2:9e:bc:eb:c8:ec:b6: 62:b5:68:1d:42:fc:4c:af:50:63:7f:21:53:6a:96:90:f8:25: e6:49:dc:d2:97:5d:db:1f:1e:d8:b6:fe:62:aa:7c:b3:9a:25: 3c:1d:75:b2:2c:c1:f8:0f:08:fa:76:1a:a1:07:47:e1:32:88: a0:cf:74:2b:3f:e9:4d:7a:1a:cd:c2:a7:d5:00:ca:90:8f:aa: ee:7e:db:cb:f2:4d:0e:0d:4e:41:ff:a2:ee:03:38:8d:b5:30: 83:60:33:69:9d:e2:89:d7:6f:ff:76:de:42:86:81:ff:7f:b0: f0:4c:65:3a:8b:24:d5:d0:71:e6:8a:1e:18:8f:d6:7d:1a:85: aa:a1:05:6e:10:e4:60:95:ef:8b:4f:c6:d5:72:7d:f0:fe:01: ee:9a:c6:cd:6c:8d:40:6d:9e:6e:39:a1:c2:b7:84:48:1c:10: c3:b8:8b:ed:59:46:d5:ee:3f:0f:da:68:c1:7d:76:11:ac:28: ee:52:62:e1:04:37:ca:4d:7c:28:52:7a:d0:03:e1:5e:64:e4: ea:de:a7:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3l8Rp/INNQwKcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk YTFkMTk1ZDMtOGFlNi00Y2Y2LTg4M2EtNzJkNDI1N2FkNWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQP/CwetZ+41uvrIErtuj1+Ovz4Yjfl0E2J4 85lf6/9eIgv5XvxqL37wTgfRPfQWg9zVi9sXCILNb2icXb023c0Zh5LcCVGZVESO Z7IffNTU4gFI6T07oSrjL9byNANko3w2PrckIzw7VWN3Z/sYMUXiRn8t6UNL6sg+ Megw5rGfLAhdgwFNvzqWwGpirFFEM+dxfNXi1nhXnU/p6o9AzDnWbHCbzRyjZzfj pUh/N9+hKCfZv4xkb8FjCHzPcw60ZEnDS8PdC3gXPySLuw7/oWtewKWcQd2wO44a sg9C2xKVOWb97bJWrxz1NkzgZ/nxzD8jO4B0aPIq7exCnU+NVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPb6qBcPaxFt7/krf/0BTWKxxY7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNjk4NzJkODktNzlkYS0z ODE5LTgxODUtN2RlMjE5MjlkODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJa0kjZNEa/2fkWlA0BKFiRphPUIUwkvjaNqIe64REz9RpdSIBysi3w2 M8pJu4i7op6868jstmK1aB1C/EyvUGN/IVNqlpD4JeZJ3NKXXdsfHti2/mKqfLOa JTwddbIswfgPCPp2GqEHR+EyiKDPdCs/6U16Gs3Cp9UAypCPqu5+28vyTQ4NTkH/ ou4DOI21MINgM2md4onXb/923kKGgf9/sPBMZTqLJNXQceaKHhiP1n0ahaqhBW4Q 5GCV74tPxtVyffD+Ae6axs1sjUBtnm45ocK3hEgcEMO4i+1ZRtXuPw/aaMF9dhGs KO5SYuEEN8pNfChSetAD4V5k5Orep3Q= -----END CERTIFICATE-----Generated at Sun Apr 27 04:14:44 2025 by rpki-client