$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7e61e908-169f-33b7-a055-27c63e9911e5.roa File: 7e61e908-169f-33b7-a055-27c63e9911e5.roa (raw, json) Hash identifier: YgLt1n178Ul6TXZv2fAMQlzs+3NIcvLMlChkEhQkN/I= Subject key identifier: B6:41:69:68:66:C9:3F:F0:A4:D8:F8:18:1F:C0:95:BD:7E:1F:C2:57 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584A1465740692708A1072177700 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7e61e908-169f-33b7-a055-27c63e9911e5.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 394643 IP address blocks: 131.153.244.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:74:06:92:70:8a:10:72:17:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=b642cc33-441b-408b-8aca-125ab4299c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e2:bd:fe:78:b7:54:89:55:48:85:90:06:ca: b4:32:d8:1b:2a:ea:bc:21:73:a4:a9:b4:82:1d:c4: fe:64:09:40:9a:e5:38:69:b1:7e:9e:26:22:4c:ac: 2b:c3:28:b1:84:71:05:55:8a:51:40:9b:3a:ef:46: 2d:cc:e2:3d:1f:4f:eb:1c:a2:60:f1:e9:dd:d5:7d: 4b:69:b0:4c:36:c8:aa:f0:0f:b9:52:bf:43:35:85: e0:06:4e:b8:51:ac:6d:fd:67:08:ad:1b:00:da:d8: cf:84:9f:6e:d6:35:ce:de:ef:f6:01:4b:36:03:2e: 82:01:75:d2:12:83:ce:2a:6d:3d:c4:9e:61:9e:ab: 54:da:87:d3:18:b5:c1:17:1e:51:dc:26:61:ad:55: a3:e8:15:a2:d5:60:64:f6:6f:ff:06:3a:f1:49:4e: 42:dc:39:b3:3c:21:70:22:a7:26:1f:15:d7:fc:cd: f0:b3:47:a8:16:a9:1a:00:c1:d4:94:39:ac:d1:f2: 22:5c:81:e9:28:e0:18:33:f6:2a:b7:99:2c:95:4a: 27:7f:8a:58:d9:d8:7e:21:55:0d:6e:60:ac:b5:f2: 24:e0:5c:cb:13:42:b0:29:49:e2:45:68:86:65:00: 00:f5:db:23:f8:53:af:d4:c5:05:71:24:a9:76:6b: 74:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:41:69:68:66:C9:3F:F0:A4:D8:F8:18:1F:C0:95:BD:7E:1F:C2:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7e61e908-169f-33b7-a055-27c63e9911e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f8:d1:39:d7:d1:b2:52:be:17:b1:64:1a:6e:fe:dc:47:a2: f4:4c:8d:01:1c:0c:40:b5:37:39:1f:1a:ef:6e:86:54:a3:1b: 83:4e:0a:c3:58:36:dd:5b:d9:d2:16:ca:6e:0e:3b:eb:91:a1: a2:29:0a:b1:6f:b4:c0:db:43:e2:ae:17:4f:c2:3c:a4:ef:a9: 85:ca:50:63:ac:12:6e:85:2b:1f:1c:b9:cb:08:08:3d:f8:a3: 95:75:fa:35:29:1d:44:19:4a:29:78:99:d7:87:19:aa:1e:7a: 2a:eb:01:fe:87:d0:19:36:67:6a:66:b6:7f:97:7e:d0:33:f0: 39:2d:63:8c:49:fc:e4:43:fe:d1:90:70:0a:48:bd:a9:ed:47: e9:bf:d7:c9:bc:de:04:68:c6:4c:01:b0:7b:8f:56:fb:c8:1e: 8a:eb:4d:ab:5d:ec:1f:72:15:ae:e6:d1:37:5f:7b:e0:f7:d2: 35:25:0d:c2:50:0b:8e:d0:7c:a6:26:eb:e6:ba:dd:ed:10:d9: d0:64:00:8e:10:52:61:7c:e8:2d:fb:d7:c7:63:27:e5:24:67: b2:26:c6:ee:e6:a9:e9:c4:e9:e6:8f:14:c5:8c:55:23:67:f7: 85:4a:89:b3:36:7f:7d:10:d2:ee:88:a4:0b:0c:3b:cc:7e:c1: fd:71:54:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXQGknCKEHIXdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk YjY0MmNjMzMtNDQxYi00MDhiLThhY2EtMTI1YWI0Mjk5YzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuK9/ni3VIlVSIWQBsq0MtgbKuq8IXOkqbSC HcT+ZAlAmuU4abF+niYiTKwrwyixhHEFVYpRQJs670YtzOI9H0/rHKJg8end1X1L abBMNsiq8A+5Ur9DNYXgBk64Uaxt/WcIrRsA2tjPhJ9u1jXO3u/2AUs2Ay6CAXXS EoPOKm09xJ5hnqtU2ofTGLXBFx5R3CZhrVWj6BWi1WBk9m//BjrxSU5C3DmzPCFw IqcmHxXX/M3ws0eoFqkaAMHUlDms0fIiXIHpKOAYM/Yqt5kslUonf4pY2dh+IVUN bmCstfIk4FzLE0KwKUniRWiGZQAA9dsj+FOv1MUFcSSpdmt0BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZBaWhmyT/wpNj4GB/Alb1+H8JXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvN2U2MWU5MDgtMTY5Zi0z M2I3LWEwNTUtMjdjNjNlOTkxMWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5n0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/40TnX0bJSvhexZBpu/txHovRMjQEcDEC1NzkfGu9uhlSjG4NOCsNY Nt1b2dIWym4OO+uRoaIpCrFvtMDbQ+KuF0/CPKTvqYXKUGOsEm6FKx8cucsICD34 o5V1+jUpHUQZSil4mdeHGaoeeirrAf6H0Bk2Z2pmtn+XftAz8DktY4xJ/ORD/tGQ cApIvantR+m/18m83gRoxkwBsHuPVvvIHorrTatd7B9yFa7m0Tdfe+D30jUlDcJQ C47QfKYm6+a63e0Q2dBkAI4QUmF86C3718djJ+UkZ7Imxu7mqenE6eaPFMWMVSNn 94VKibM2f30Q0u6IpAsMO8x+wf1xVJY= -----END CERTIFICATE-----Generated at Sun Jun 15 17:26:03 2025 by rpki-client