$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/845a3255-66a8-34dc-a162-c938627caa3a.roa File: 845a3255-66a8-34dc-a162-c938627caa3a.roa (raw, json) Hash identifier: /LfbXYkJtkHvAvSc6tnz1MYwZD4PYiKCcVxFdGmw1IU= Subject key identifier: EE:54:57:77:7D:C5:19:67:0C:EA:92:4C:10:D1:44:B7:60:D5:C5:43 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849ED4FCA19ED805DCCD57DD240 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/845a3255-66a8-34dc-a162-c938627caa3a.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 11572 IP address blocks: 131.153.24.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:ca:19:ed:80:5d:cc:d5:7d:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=f9bf5ca4-5428-4208-9d21-1606ca6c9f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7a:2f:c8:3c:d7:8a:27:64:65:19:48:5a:2d: a2:36:46:ae:d9:bf:0d:7e:ca:1f:5f:24:63:5a:94: fa:59:5a:34:73:0e:c7:c0:b1:63:e3:81:f0:1a:8b: 19:b1:a4:89:23:40:13:ab:1e:b7:6b:66:bb:32:53: de:37:59:2a:b7:94:a7:f9:9d:d8:9d:43:74:6a:bf: 17:b9:e7:bd:f8:c7:9b:77:b7:c9:9f:98:86:02:78: 22:e9:d1:cb:de:8b:15:7f:fd:e1:32:f4:03:ea:5e: 52:30:7f:ba:aa:4d:b8:8d:00:2d:ed:3d:14:f5:28: 6d:a3:2f:7c:36:b7:ab:5f:75:5b:60:ef:fd:66:e2: de:70:94:88:23:c3:f8:a2:56:12:0a:30:a2:8c:7e: 56:90:6d:51:b3:7d:1f:d7:09:2f:eb:1b:8b:c9:5c: af:58:ff:6d:c9:f1:42:e3:c6:de:76:32:e8:e2:3f: ff:5d:30:a3:fd:3d:80:6e:10:58:b9:e8:e4:fd:e2: 08:41:2a:e2:da:28:0f:7f:25:4a:e5:85:1d:b8:84: b5:9f:2b:f6:bc:6d:01:ff:06:ea:0d:0b:cb:84:fd: 28:7c:b8:ea:dc:c5:5b:e0:33:49:3b:14:d1:a0:8b: 4b:15:81:4e:36:f1:07:41:db:e7:9a:46:51:5c:e8: f3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:54:57:77:7D:C5:19:67:0C:EA:92:4C:10:D1:44:B7:60:D5:C5:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/845a3255-66a8-34dc-a162-c938627caa3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e6:c9:3d:e8:b1:5e:ca:21:15:05:ac:fb:55:45:64:0d:a8: 90:5e:c4:0e:a1:32:35:5f:af:0d:58:22:9d:4b:7b:82:20:34: 4f:26:4f:8a:45:40:cd:09:ec:d9:ef:b0:79:3c:a7:73:c7:30: b3:f0:38:45:e2:22:05:3f:57:5c:11:97:9c:f6:8a:5c:5f:56: c9:59:df:e5:df:f7:c3:73:3d:b6:9f:f6:1f:3d:1e:36:36:d9: b5:d0:75:88:ad:da:99:de:c4:dd:d6:9c:d0:ee:4d:7c:27:d8: c3:88:32:cf:4c:be:84:12:8d:a1:3a:9e:b8:77:f6:c9:2c:c0: 4b:31:96:42:0d:f6:da:cd:2e:b7:b3:23:e8:16:80:60:e4:d4: fc:f8:03:a9:d6:f1:af:c6:7a:1c:5c:b2:cd:b0:b8:d3:ce:fd: 9b:58:76:38:18:2e:b3:1b:64:53:d8:0f:9b:39:1d:7a:20:3c: 04:41:a0:02:5f:71:71:a8:b9:ec:db:ba:24:d6:ce:d7:aa:5a: ab:19:b8:09:04:a9:72:c3:65:be:28:32:36:c0:3e:c4:2e:a7: c7:3b:35:bc:08:7f:10:02:6e:48:1f:50:52:a6:de:5d:00:58: c0:cd:64:83:ba:37:65:03:26:38:be:98:16:d8:39:3f:44:19: a7:e4:e7:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8oZ7YBdzNV90kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk ZjliZjVjYTQtNTQyOC00MjA4LTlkMjEtMTYwNmNhNmM5ZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHovyDzXiidkZRlIWi2iNkau2b8NfsofXyRj WpT6WVo0cw7HwLFj44HwGosZsaSJI0ATqx63a2a7MlPeN1kqt5Sn+Z3YnUN0ar8X uee9+Mebd7fJn5iGAngi6dHL3osVf/3hMvQD6l5SMH+6qk24jQAt7T0U9Shtoy98 NrerX3VbYO/9ZuLecJSII8P4olYSCjCijH5WkG1Rs30f1wkv6xuLyVyvWP9tyfFC 48bedjLo4j//XTCj/T2AbhBYuejk/eIIQSri2igPfyVK5YUduIS1nyv2vG0B/wbq DQvLhP0ofLjq3MVb4DNJOxTRoItLFYFONvEHQdvnmkZRXOjzfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5UV3d9xRlnDOqSTBDRRLdg1cVDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvODQ1YTMyNTUtNjZhOC0z NGRjLWExNjItYzkzODYyN2NhYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5kYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDmyT3osV7KIRUFrPtVRWQNqJBexA6hMjVfrw1YIp1Le4IgNE8mT4pF QM0J7NnvsHk8p3PHMLPwOEXiIgU/V1wRl5z2ilxfVslZ3+Xf98NzPbaf9h89HjY2 2bXQdYit2pnexN3WnNDuTXwn2MOIMs9MvoQSjaE6nrh39skswEsxlkIN9trNLrez I+gWgGDk1Pz4A6nW8a/Gehxcss2wuNPO/ZtYdjgYLrMbZFPYD5s5HXogPARBoAJf cXGouezbuiTWzteqWqsZuAkEqXLDZb4oMjbAPsQup8c7NbwIfxACbkgfUFKm3l0A WMDNZIO6N2UDJji+mBbYOT9EGafk5w4= -----END CERTIFICATE-----Generated at Sun Jun 15 17:18:52 2025 by rpki-client