$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8a02698f-e66f-3fd5-a9d0-8f283b13bc42.roa File: 8a02698f-e66f-3fd5-a9d0-8f283b13bc42.roa (raw, json) Hash identifier: aq+qcExPgcAGpe/RA1qrOnVC5j3WfFCMmhsTilTWZD0= Subject key identifier: 86:05:BF:7E:8B:C7:BF:65:FA:A7:CB:E3:3D:14:52:A3:5D:A1:64:5C Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EBEA4F86492EACF7312AB480 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8a02698f-e66f-3fd5-a9d0-8f283b13bc42.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 213246 IP address blocks: 131.153.140.0/24 maxlen: 32 131.153.141.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4f:86:49:2e:ac:f7:31:2a:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=811e2370-02e5-4e12-ac54-48c6b90d3659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e4:05:35:51:2f:22:69:5f:ac:73:e2:18:a0: 0b:b3:33:6f:45:ce:26:ba:90:c9:28:8e:f8:16:5f: a3:6e:d1:8b:30:62:9b:7a:fc:a9:37:d6:b4:02:52: 84:49:29:35:18:64:f0:54:2e:76:92:d5:0a:07:f5: a5:49:c6:4e:a5:c0:b5:94:e5:fc:49:50:29:f3:e1: 9b:9b:d5:51:e6:66:6a:81:a0:83:59:1e:d4:c6:32: 98:fa:f3:e1:a0:eb:63:50:da:1a:05:44:83:e3:2c: 86:69:9b:03:06:6a:7c:ee:ad:18:f9:b7:f6:b5:0b: 47:00:f1:fd:33:37:b4:40:2c:28:4b:25:5b:30:53: d9:bb:ba:bb:e4:98:88:83:b3:94:b8:5e:18:03:da: 38:01:fb:15:9f:92:b3:65:ad:1f:01:ac:3a:cb:d3: a4:74:07:7e:65:3a:fb:9e:67:6b:c6:63:f7:19:1c: 4d:08:00:e6:bd:15:c1:03:59:00:b7:d3:c4:47:2c: 96:ad:d5:e8:9f:17:d0:17:54:2f:92:d3:27:71:44: 59:06:01:eb:5e:2b:b5:c1:ac:60:85:b2:12:7a:e6: 3c:08:b6:af:a5:16:f4:5e:ec:78:f7:6a:b0:76:73: 61:5f:16:71:ba:f5:41:08:cb:d7:26:49:df:3d:eb: 09:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:05:BF:7E:8B:C7:BF:65:FA:A7:CB:E3:3D:14:52:A3:5D:A1:64:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8a02698f-e66f-3fd5-a9d0-8f283b13bc42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f3:e1:da:3c:92:eb:bc:75:b7:d7:75:bf:54:6f:cb:91:72: dc:b7:c9:44:2e:77:6e:5e:d2:f0:dd:7a:2d:47:58:e0:34:39: 3f:db:2a:33:27:1b:67:c6:d5:ae:14:20:40:00:ad:94:6a:a2: a5:78:43:b9:81:16:84:11:87:16:50:62:5d:75:e8:85:84:e3: bd:38:01:3b:69:0e:25:43:42:6d:23:3e:f6:d7:60:ec:5f:73: 9d:8a:75:28:9b:9c:46:10:e0:4d:7b:68:e3:9a:11:98:70:75: 2a:42:43:15:01:78:57:20:87:3b:89:2f:aa:51:ab:11:53:bb: 12:7d:b2:3f:55:0d:a8:84:da:e1:f4:8d:b8:fb:5a:19:85:4b: 6f:00:d8:b1:e8:1d:9c:58:10:26:09:0c:57:48:55:13:fc:ec: 8d:3a:44:aa:41:57:cc:13:db:ae:29:1e:9b:dd:72:b9:91:94: 30:c8:b2:ce:31:6b:7a:be:39:f5:04:37:cf:ab:9c:05:74:5a: de:e9:cc:b8:97:a7:c8:d1:01:91:a9:89:bd:32:83:2f:77:6c: 68:63:e4:c2:ec:8b:74:22:b8:2f:56:8e:bc:92:23:c1:b0:00: 20:d7:9a:2d:76:81:3e:ae:bc:72:3f:29:e0:6c:36:33:a0:ec: 38:1c:6a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6k+GSS6s9zEqtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk ODExZTIzNzAtMDJlNS00ZTEyLWFjNTQtNDhjNmI5MGQzNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+QFNVEvImlfrHPiGKALszNvRc4mupDJKI74 Fl+jbtGLMGKbevypN9a0AlKESSk1GGTwVC52ktUKB/WlScZOpcC1lOX8SVAp8+Gb m9VR5mZqgaCDWR7UxjKY+vPhoOtjUNoaBUSD4yyGaZsDBmp87q0Y+bf2tQtHAPH9 Mze0QCwoSyVbMFPZu7q75JiIg7OUuF4YA9o4AfsVn5KzZa0fAaw6y9OkdAd+ZTr7 nmdrxmP3GRxNCADmvRXBA1kAt9PERyyWrdXonxfQF1QvktMncURZBgHrXiu1waxg hbISeuY8CLavpRb0Xux492qwdnNhXxZxuvVBCMvXJknfPesJrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYFv36Lx79l+qfL4z0UUqNdoWRcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvOGEwMjY5OGYtZTY2Zi0z ZmQ1LWE5ZDAtOGYyODNiMTNiYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5mMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTz4do8kuu8dbfXdb9Ub8uRcty3yUQud25e0vDdei1HWOA0OT/bKjMn G2fG1a4UIEAArZRqoqV4Q7mBFoQRhxZQYl116IWE4704ATtpDiVDQm0jPvbXYOxf c52KdSibnEYQ4E17aOOaEZhwdSpCQxUBeFcghzuJL6pRqxFTuxJ9sj9VDaiE2uH0 jbj7WhmFS28A2LHoHZxYECYJDFdIVRP87I06RKpBV8wT264pHpvdcrmRlDDIss4x a3q+OfUEN8+rnAV0Wt7pzLiXp8jRAZGpib0ygy93bGhj5MLsi3QiuC9WjrySI8Gw ACDXmi12gT6uvHI/KeBsNjOg7DgcajA= -----END CERTIFICATE-----Generated at Mon Jun 16 15:33:24 2025 by rpki-client