$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7f85d337-9f8f-38fb-85b0-eea49c753437.roa File: 7f85d337-9f8f-38fb-85b0-eea49c753437.roa (raw, json) Hash identifier: CRBxbkYfwQtNt8d41ceuwBC20f6LE1DDTRrzRPhoDqk= Subject key identifier: A0:A5:71:05:27:25:9E:C7:B1:E0:68:DD:0B:B6:DA:E2:79:29:B2:88 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849ED4FC273508C8DC897263E40 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7f85d337-9f8f-38fb-85b0-eea49c753437.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 19437 IP address blocks: 131.153.128.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:c2:73:50:8c:8d:c8:97:26:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=268386ff-a18d-4f8e-9d3b-e0d0cd5dcacf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:67:bc:80:0b:01:ff:35:e1:56:21:cd:0c:b9: 27:19:a4:ad:b0:96:91:63:5c:1b:47:ca:76:d2:ac: 71:00:95:4a:39:0e:58:a8:74:ea:2d:84:ea:a5:9c: 14:64:a8:e5:4c:59:80:c4:23:8c:b7:01:1f:45:16: 39:41:b2:51:4a:72:87:8f:fd:92:b6:bc:84:79:c2: 8e:0e:5d:f4:45:ad:f2:5d:1f:6b:d7:e0:51:a2:7c: d0:2c:8c:7a:ce:dc:ac:92:2f:e3:e3:0a:b9:46:24: e8:b0:6d:80:54:2a:a7:33:a9:e7:93:5c:23:e3:09: 66:57:70:f9:ed:66:5b:1d:15:2d:56:7e:00:ce:54: 5a:56:b6:e6:94:d1:89:56:42:56:6c:cd:c3:bc:ce: 98:25:6d:e1:60:ce:f3:dd:73:82:5a:76:3e:f4:12: 8c:e2:cf:f0:a0:23:e8:03:cc:de:53:58:94:4a:5f: 83:76:27:4c:6f:7d:a8:9a:d6:16:b7:3e:68:3c:14: b6:ad:3c:46:38:bc:6c:37:16:57:0f:5e:cc:fe:8d: 2b:26:5c:07:88:23:a8:67:41:cd:41:71:c6:d5:e6: 10:25:73:d4:3c:6a:7b:0d:a5:73:cc:e4:54:8f:ea: 72:c3:62:f1:87:3f:3e:ee:91:1b:09:d2:a2:4b:fe: 9a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A5:71:05:27:25:9E:C7:B1:E0:68:DD:0B:B6:DA:E2:79:29:B2:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7f85d337-9f8f-38fb-85b0-eea49c753437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c8:f6:47:3f:33:d8:ea:af:98:fd:01:a6:f9:9b:8a:d8:49: d9:97:94:c0:4c:21:23:cc:41:dd:74:76:fa:05:ef:db:c0:05: 14:8b:77:e8:94:88:d7:95:17:28:cc:7a:7e:26:c6:e7:b1:2e: 60:c4:f5:c4:14:f0:ea:d2:7e:12:74:bb:32:a1:3f:d0:23:bb: 1c:0c:17:b6:5f:c8:07:42:91:27:72:17:67:8c:f4:f4:31:ff: 9f:cf:ce:7c:21:28:37:1b:57:a5:0f:53:3d:ae:5c:ec:b2:90: 47:dc:82:ff:ad:70:2f:1d:25:03:06:85:d8:4d:96:d2:8b:f9: f6:cd:58:ce:4e:30:4d:e5:50:c0:7a:c2:6f:06:b6:9c:b9:12: 3d:93:bb:64:1c:0c:ff:9b:75:e5:89:28:32:49:5d:18:0c:f9: 5c:cd:a5:c5:29:91:8e:63:ea:bf:a8:da:a4:5c:23:1c:46:88: bc:9d:ad:78:3b:c3:95:d2:3c:60:a2:b8:22:78:31:cb:0b:24: 39:3a:55:89:1d:d0:05:da:b5:76:1e:70:6c:ca:6f:ba:55:e1: 55:aa:5d:0c:66:b9:db:34:3f:32:81:8f:0b:92:3f:f9:72:d5: 23:35:38:ae:af:4d:88:87:b6:ad:54:f5:9b:73:2e:5f:f2:3b: 03:ac:10:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8JzUIyNyJcmPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk MjY4Mzg2ZmYtYTE4ZC00ZjhlLTlkM2ItZTBkMGNkNWRjYWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGe8gAsB/zXhViHNDLknGaStsJaRY1wbR8p2 0qxxAJVKOQ5YqHTqLYTqpZwUZKjlTFmAxCOMtwEfRRY5QbJRSnKHj/2StryEecKO Dl30Ra3yXR9r1+BRonzQLIx6ztyski/j4wq5RiTosG2AVCqnM6nnk1wj4wlmV3D5 7WZbHRUtVn4AzlRaVrbmlNGJVkJWbM3DvM6YJW3hYM7z3XOCWnY+9BKM4s/woCPo A8zeU1iUSl+DdidMb32omtYWtz5oPBS2rTxGOLxsNxZXD17M/o0rJlwHiCOoZ0HN QXHG1eYQJXPUPGp7DaVzzORUj+pyw2Lxhz8+7pEbCdKiS/6afQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKClcQUnJZ7HseBo3Qu22uJ5KbKIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvN2Y4NWQzMzctOWY4Zi0z OGZiLTg1YjAtZWVhNDljNzUzNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTI9kc/M9jqr5j9Aab5m4rYSdmXlMBMISPMQd10dvoF79vABRSLd+iU iNeVFyjMen4mxuexLmDE9cQU8OrSfhJ0uzKhP9AjuxwMF7ZfyAdCkSdyF2eM9PQx /5/PznwhKDcbV6UPUz2uXOyykEfcgv+tcC8dJQMGhdhNltKL+fbNWM5OME3lUMB6 wm8Gtpy5Ej2Tu2QcDP+bdeWJKDJJXRgM+VzNpcUpkY5j6r+o2qRcIxxGiLydrXg7 w5XSPGCiuCJ4McsLJDk6VYkd0AXatXYecGzKb7pV4VWqXQxmuds0PzKBjwuSP/ly 1SM1OK6vTYiHtq1U9ZtzLl/yOwOsEI4= -----END CERTIFICATE-----Generated at Sun Jun 15 11:56:33 2025 by rpki-client