$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa File: 88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa (raw, json) Hash identifier: zLNTAFpKKx4qUX6F1kZRwJeaEDxtavKwN+9lHXogyws= Subject key identifier: 3C:4F:55:20:F8:B4:83:1B:F6:C5:A2:44:4F:D4:EA:8A:5A:51:95:33 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EBEA4B13DCD572CC837DFDC0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 59210 IP address blocks: 131.153.48.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4b:13:dc:d5:72:cc:83:7d:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=d21ba60d-3bcb-4a52-bdc0-9acaa9f85519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:49:cf:f7:ec:07:2f:d8:6a:70:58:59:11:d9: 38:bd:10:5e:77:84:da:e7:17:f3:b1:c0:84:2b:b2: f8:a5:1a:a1:03:91:64:8b:f6:52:42:fb:4a:d4:5a: 59:d4:75:40:a0:0a:61:f1:6f:0d:60:9e:04:1d:f5: 61:40:21:d2:f3:f2:47:9b:77:9a:62:e0:5d:74:60: 13:43:b9:09:19:cb:98:6b:30:ab:16:8e:d2:ae:51: eb:9b:c6:53:17:ba:18:72:2a:dc:68:e8:e1:04:f3: b9:2d:d1:43:83:b9:5c:1a:15:9b:b0:93:75:9a:04: b0:9d:f0:e6:32:72:9f:39:c1:78:96:56:7a:dc:1f: 2c:80:8d:59:67:60:17:20:3e:31:35:b3:a3:a2:08: d0:a1:ed:35:59:39:fc:67:af:4e:02:55:0c:bf:f5: 73:7a:60:b6:c8:62:a1:2b:05:78:78:7f:25:b6:bc: c8:2b:6b:f8:c6:5d:b7:1d:d2:55:58:bf:fd:82:d9: 25:c9:ec:4f:2a:7d:f7:34:a3:1b:33:ff:e4:2c:ca: 61:65:31:1b:b3:20:4c:81:11:32:ce:95:4f:95:7b: a4:ae:13:43:b8:1f:66:bc:73:36:0b:c7:bc:ac:3e: fc:42:e6:e6:81:d5:3d:4b:21:7a:69:27:81:e7:82: e5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4F:55:20:F8:B4:83:1B:F6:C5:A2:44:4F:D4:EA:8A:5A:51:95:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/88a2969f-7abc-3c1c-af89-6b29fda18bf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:30:39:c8:0a:b0:fd:fb:ed:f0:77:67:3e:10:3f:f2:a9:12: 24:c8:e0:64:7d:9c:29:f1:8a:97:c5:9d:9f:bf:77:b0:cf:a5: 57:fc:14:2c:24:98:0f:ce:50:9b:12:32:13:74:31:86:65:c0: 0c:39:c7:35:e2:cb:5d:cf:5c:b6:4e:92:5d:dd:94:4d:d1:f1: 01:2d:3b:b5:34:ca:b7:b7:eb:ba:20:e2:e1:48:60:09:6e:d5: a1:1f:32:28:26:0f:0f:f2:8c:14:b3:99:f9:4e:6f:c3:9d:38: e9:9f:ac:71:15:dc:4f:52:92:fb:fa:3c:57:b9:90:e6:53:09: 81:32:d4:2e:7b:d4:a4:84:84:8f:8d:a8:87:2b:d1:22:ac:5b: 47:f0:29:26:36:75:12:84:2f:c9:95:9b:d1:ef:9e:bc:dd:1e: 43:28:aa:12:69:45:2f:bc:b8:1b:5f:82:6d:ff:a6:15:0c:b2: e0:89:0f:b2:b7:84:d0:ed:58:1c:e6:e7:d9:c1:4c:bc:88:d1: 8b:7d:05:35:35:d3:31:22:ff:53:b7:be:59:4e:23:5a:0b:f3: 93:3f:75:d8:a5:b3:9d:72:29:fe:02:59:40:cb:7f:b4:5b:8b: 50:c6:3e:f5:d4:fd:00:62:af:67:b3:fe:9c:e3:34:f7:af:48: 00:6d:d5:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6ksT3NVyzIN9/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk ZDIxYmE2MGQtM2JjYi00YTUyLWJkYzAtOWFjYWE5Zjg1NTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEnP9+wHL9hqcFhZEdk4vRBed4Ta5xfzscCE K7L4pRqhA5Fki/ZSQvtK1FpZ1HVAoAph8W8NYJ4EHfVhQCHS8/JHm3eaYuBddGAT Q7kJGcuYazCrFo7SrlHrm8ZTF7oYcircaOjhBPO5LdFDg7lcGhWbsJN1mgSwnfDm MnKfOcF4llZ63B8sgI1ZZ2AXID4xNbOjogjQoe01WTn8Z69OAlUMv/VzemC2yGKh KwV4eH8ltrzIK2v4xl23HdJVWL/9gtklyexPKn33NKMbM//kLMphZTEbsyBMgREy zpVPlXukrhNDuB9mvHM2C8e8rD78QubmgdU9SyF6aSeB54Ll9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxPVSD4tIMb9sWiRE/U6opaUZUzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvODhhMjk2OWYtN2FiYy0z YzFjLWFmODktNmIyOWZkYTE4YmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5kwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIwOcgKsP377fB3Zz4QP/KpEiTI4GR9nCnxipfFnZ+/d7DPpVf8FCwk mA/OUJsSMhN0MYZlwAw5xzXiy13PXLZOkl3dlE3R8QEtO7U0yre367og4uFIYAlu 1aEfMigmDw/yjBSzmflOb8OdOOmfrHEV3E9Skvv6PFe5kOZTCYEy1C571KSEhI+N qIcr0SKsW0fwKSY2dRKEL8mVm9HvnrzdHkMoqhJpRS+8uBtfgm3/phUMsuCJD7K3 hNDtWBzm59nBTLyI0Yt9BTU10zEi/1O3vllOI1oL85M/ddils51yKf4CWUDLf7Rb i1DGPvXU/QBir2ez/pzjNPevSABt1WI= -----END CERTIFICATE-----Generated at Sun Jun 15 12:02:37 2025 by rpki-client