$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7af57255-95e9-35f8-a3b4-964cc0e6608e.roa File: 7af57255-95e9-35f8-a3b4-964cc0e6608e.roa (raw, json) Hash identifier: eDopInJYW8nOtauwudlx8NQ7vLGqb79+CCsIwxgMKM8= Subject key identifier: CA:7D:44:0A:30:54:2C:61:42:D2:F1:EE:9F:90:00:9A:97:78:B7:DF Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849ED4FC3AED4F7E7E7489DF700 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7af57255-95e9-35f8-a3b4-964cc0e6608e.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 12189 IP address blocks: 131.153.72.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:c3:ae:d4:f7:e7:e7:48:9d:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=9ad7fa68-fa18-41e3-8412-07b6bf25c7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5a:67:e8:b3:0d:e3:bf:f7:58:fa:d2:ae:dd: 2c:5c:f3:e1:da:fd:6f:62:a2:a9:1a:cd:b4:72:46: da:e7:2f:13:a4:88:a8:da:5a:6e:c1:dc:eb:b0:dd: b2:c3:f3:36:4a:2e:c3:3b:e3:19:75:0d:0c:e9:76: b6:6a:fb:35:2c:5e:fd:73:d3:3c:36:f0:cb:42:ad: 4e:49:91:82:90:7a:90:dd:04:67:c7:95:7a:c6:46: 3f:e9:ad:46:4b:19:b4:5c:04:36:d6:06:58:33:04: 81:c3:5e:41:c1:92:d6:d1:dd:5d:1e:58:20:75:30: ee:93:a4:3b:42:aa:85:df:71:6e:c0:e8:3a:92:b5: df:a2:4b:db:6c:83:01:31:1f:4b:33:81:73:01:52: c0:52:6b:5f:ef:c2:ce:fa:00:55:c9:1e:47:5c:23: 30:73:dd:b4:44:9d:a4:cb:44:5f:81:9e:50:ac:dd: af:aa:70:0b:f6:34:df:ce:1d:d6:21:87:70:3f:27: cf:b2:04:a9:21:41:66:b2:37:9f:00:f9:b3:69:2d: e2:40:bb:ed:37:29:ff:f1:48:8b:30:93:16:1e:4d: 98:a9:ee:f1:15:f8:6f:67:22:45:88:fe:e7:fa:68: 62:61:7e:e0:6b:4a:3a:e6:e8:87:b8:23:e1:13:7d: bb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7D:44:0A:30:54:2C:61:42:D2:F1:EE:9F:90:00:9A:97:78:B7:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7af57255-95e9-35f8-a3b4-964cc0e6608e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:40:57:a6:f5:25:b3:5e:04:03:58:e1:e3:f5:61:58:e3:d5: f9:32:f8:4c:d1:1b:6a:18:36:26:c1:1b:1a:9b:9e:28:3e:cc: 1a:a2:91:b7:7f:8c:28:f4:de:e5:d3:54:80:29:b2:38:e7:0b: f2:e8:9e:27:f7:0d:da:bc:db:20:e7:6a:f5:56:47:81:44:38: bc:62:8d:13:a1:19:c0:77:a9:0d:87:a9:45:61:67:ac:8d:93: 57:51:85:36:45:51:35:05:00:61:b2:c9:ca:ca:52:5d:b3:e0: 1c:b5:7c:5f:06:64:5b:2d:f0:02:c1:f0:62:4e:57:7c:b2:cd: fa:14:0d:07:5d:88:c9:b6:21:6d:38:a1:cc:76:94:55:fe:8d: b4:a3:43:1b:4a:68:38:c7:60:62:cd:af:1d:de:c1:15:e5:5d: 4e:41:30:ab:49:a1:0d:48:15:26:5f:79:01:b0:5d:ec:d7:5a: e0:ee:4b:27:85:3a:48:fb:3b:13:53:4e:11:81:e0:34:57:ea: c3:e6:ee:73:a7:c9:fb:44:38:8b:d1:42:5b:ed:6a:ba:ff:12: d5:32:0d:c3:49:d2:55:a7:c5:12:0c:6d:93:a4:4e:e9:53:c3: fe:a0:54:96:38:d6:2f:85:68:bd:e7:e6:7e:db:6d:bb:c3:72: 30:9d:6b:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8Ou1Pfn50id9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk OWFkN2ZhNjgtZmExOC00MWUzLTg0MTItMDdiNmJmMjVjN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVpn6LMN47/3WPrSrt0sXPPh2v1vYqKpGs20 ckba5y8TpIio2lpuwdzrsN2yw/M2Si7DO+MZdQ0M6Xa2avs1LF79c9M8NvDLQq1O SZGCkHqQ3QRnx5V6xkY/6a1GSxm0XAQ21gZYMwSBw15BwZLW0d1dHlggdTDuk6Q7 QqqF33FuwOg6krXfokvbbIMBMR9LM4FzAVLAUmtf78LO+gBVyR5HXCMwc920RJ2k y0RfgZ5QrN2vqnAL9jTfzh3WIYdwPyfPsgSpIUFmsjefAPmzaS3iQLvtNyn/8UiL MJMWHk2Yqe7xFfhvZyJFiP7n+mhiYX7ga0o65uiHuCPhE327BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMp9RAowVCxhQtLx7p+QAJqXeLffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvN2FmNTcyNTUtOTVlOS0z NWY4LWEzYjQtOTY0Y2MwZTY2MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRAV6b1JbNeBANY4eP1YVjj1fky+EzRG2oYNibBGxqbnig+zBqikbd/ jCj03uXTVIApsjjnC/Lonif3Ddq82yDnavVWR4FEOLxijROhGcB3qQ2HqUVhZ6yN k1dRhTZFUTUFAGGyycrKUl2z4By1fF8GZFst8ALB8GJOV3yyzfoUDQddiMm2IW04 ocx2lFX+jbSjQxtKaDjHYGLNrx3ewRXlXU5BMKtJoQ1IFSZfeQGwXezXWuDuSyeF Okj7OxNTThGB4DRX6sPm7nOnyftEOIvRQlvtarr/EtUyDcNJ0lWnxRIMbZOkTulT w/6gVJY41i+FaL3n5n7bbbvDcjCda30= -----END CERTIFICATE-----Generated at Sun Jun 15 17:40:06 2025 by rpki-client