$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/830d0188-475d-3ee7-9aa5-5efdfa596241.roa File: 830d0188-475d-3ee7-9aa5-5efdfa596241.roa (raw, json) Hash identifier: 9Sm7fx5jhCfT8TeqpZ/IeLezqFiwrfDVn7Q3F4aISKI= Subject key identifier: C0:23:46:BD:75:2F:F8:48:4E:CF:F5:45:C5:52:AA:9A:30:F6:D6:55 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EBEA4EEF9906F10248D1DA80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/830d0188-475d-3ee7-9aa5-5efdfa596241.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 50389 IP address blocks: 131.153.88.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4e:ef:99:06:f1:02:48:d1:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=46704955-c515-4f92-858f-ac63fab5dce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2f:ac:51:0d:07:7e:04:9a:31:f0:5c:de:30: 25:67:92:df:cc:37:69:78:27:a2:e0:fa:b3:b9:41: 22:f1:84:0f:02:69:33:09:a1:1d:01:56:14:f3:a2: 25:a4:82:22:cb:1b:f9:98:11:59:99:1b:3d:5d:ad: 3a:3f:71:a3:73:c7:e6:a7:87:16:b5:3e:34:fe:c8: 64:d0:ef:92:ff:58:37:04:84:1b:4a:72:21:74:9d: 9b:40:3c:37:7b:01:29:0a:54:0c:da:27:7d:6d:2a: 9b:f6:00:68:4e:60:99:ed:47:2b:48:c4:e4:98:e2: b9:d9:67:4f:fa:3a:3a:bb:44:ec:c8:3b:e1:40:3d: ee:71:8e:44:c3:e6:44:08:5e:a7:4d:61:42:ee:08: f1:75:bb:23:ac:60:47:ce:30:9c:16:f8:27:3f:97: 50:1d:b5:52:cb:ff:86:1e:c4:c1:a3:e0:91:2c:ec: f4:3b:57:60:07:a0:f9:ee:01:28:d9:54:4f:85:b1: b0:6d:75:e4:dd:42:e5:bc:2d:2b:1f:48:01:a4:53: c1:f5:cd:1f:26:df:5e:85:30:05:e1:d5:9d:b8:22: 62:5e:a9:53:46:ca:d6:1a:18:1c:05:f9:21:c2:d3: a4:26:6a:ce:ee:c5:82:83:ed:89:29:e6:6e:8e:29: 9b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:23:46:BD:75:2F:F8:48:4E:CF:F5:45:C5:52:AA:9A:30:F6:D6:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/830d0188-475d-3ee7-9aa5-5efdfa596241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:34:32:54:fc:73:1d:30:6e:14:cf:1a:93:3a:d1:fe:e1:26: f0:6d:fb:05:dd:73:49:20:34:45:ee:45:ee:85:64:2b:9b:8d: 32:55:ed:c5:98:55:7d:c8:f4:e4:dd:3b:07:bb:51:86:63:89: 43:c3:df:9e:ab:9c:97:76:85:5d:a1:73:73:b0:1a:6a:37:3f: 0f:ad:6d:9d:c8:40:d9:09:d0:e8:c3:26:03:8f:ff:89:a7:76: c2:ac:e7:0d:ef:64:08:3d:21:8f:26:c1:e1:83:02:09:10:4d: 9a:99:9c:a4:e4:6c:cc:65:32:25:00:c2:2a:39:72:32:9f:3c: 08:98:ae:ef:c1:5a:2c:cb:75:10:c7:17:84:89:69:b0:9b:92: 5f:f0:e7:5d:ac:b5:ed:cb:a5:61:2d:e6:bc:e5:e0:6c:be:cc: 58:79:b8:bb:50:5f:b1:c8:49:89:84:89:16:fa:9e:c3:a5:30: 77:36:2d:58:49:32:ba:d7:1c:b6:70:c5:d9:b8:9c:6c:4e:b1: 9b:db:ee:de:77:85:5f:20:e0:dc:97:83:11:17:88:67:e0:8a: 72:22:0d:79:d4:8a:2b:6b:b1:54:2f:8d:38:7e:1b:55:56:96: 13:fd:42:df:f2:ac:29:0d:49:93:83:7d:f5:51:3f:1d:33:2d: 83:6c:f0:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6k7vmQbxAkjR2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk NDY3MDQ5NTUtYzUxNS00ZjkyLTg1OGYtYWM2M2ZhYjVkY2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC+sUQ0HfgSaMfBc3jAlZ5LfzDdpeCei4Pqz uUEi8YQPAmkzCaEdAVYU86IlpIIiyxv5mBFZmRs9Xa06P3Gjc8fmp4cWtT40/shk 0O+S/1g3BIQbSnIhdJ2bQDw3ewEpClQM2id9bSqb9gBoTmCZ7UcrSMTkmOK52WdP +jo6u0TsyDvhQD3ucY5Ew+ZECF6nTWFC7gjxdbsjrGBHzjCcFvgnP5dQHbVSy/+G HsTBo+CRLOz0O1dgB6D57gEo2VRPhbGwbXXk3ULlvC0rH0gBpFPB9c0fJt9ehTAF 4dWduCJiXqlTRsrWGhgcBfkhwtOkJmrO7sWCg+2JKeZujimbqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAjRr11L/hITs/1RcVSqpow9tZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvODMwZDAxODgtNDc1ZC0z ZWU3LTlhYTUtNWVmZGZhNTk2MjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk0MlT8cx0wbhTPGpM60f7hJvBt+wXdc0kgNEXuRe6FZCubjTJV7cWY VX3I9OTdOwe7UYZjiUPD356rnJd2hV2hc3OwGmo3Pw+tbZ3IQNkJ0OjDJgOP/4mn dsKs5w3vZAg9IY8mweGDAgkQTZqZnKTkbMxlMiUAwio5cjKfPAiYru/BWizLdRDH F4SJabCbkl/w512ste3LpWEt5rzl4Gy+zFh5uLtQX7HISYmEiRb6nsOlMHc2LVhJ MrrXHLZwxdm4nGxOsZvb7t53hV8g4NyXgxEXiGfginIiDXnUiitrsVQvjTh+G1VW lhP9Qt/yrCkNSZODffVRPx0zLYNs8KM= -----END CERTIFICATE-----Generated at Sun Jun 15 17:41:54 2025 by rpki-client