$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa File: 8d254be0-4973-3adb-9609-4a7ab5dad347.roa (raw, json) Hash identifier: DELmj9uQENVuE8W67iYuuK9MWvRBRTWojWs1VlruoOo= Subject key identifier: 96:00:A0:8F:30:22:B2:D9:8C:F4:0E:EB:DE:D3:50:CB:AE:FF:A8:41 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EBEA4D2E297EC94139A8FB00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 12189 IP address blocks: 131.153.116.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4d:2e:29:7e:c9:41:39:a8:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=5f4bfd6b-5c0d-4f8d-b0f8-904b6f509d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3b:16:42:bd:7e:d2:2b:45:4b:00:9f:12:43: 2e:cd:58:ce:fa:53:fb:27:bc:bb:fb:98:f9:6d:c8: 29:d0:b0:3d:81:b4:f5:51:cd:1d:84:d6:0d:53:68: fd:57:51:f9:44:36:c2:52:38:06:53:eb:02:0f:9f: b1:9c:1d:09:40:23:61:1e:f1:89:c1:e8:0a:85:0a: 01:01:59:a5:33:7c:a6:5a:31:0d:65:77:a4:72:d7: 4f:4e:a7:72:62:ab:c7:5d:e4:6d:e5:2f:2d:65:bc: 4e:26:0e:a6:7b:29:ec:e3:40:0f:2b:2e:66:3b:e5: 12:6d:ec:c7:68:fd:74:2c:1a:05:f2:ce:83:71:0b: e2:11:9e:2e:cd:93:c7:12:4c:f2:1e:86:98:2a:ee: da:f1:3c:1e:32:b6:1a:4a:32:f1:19:05:4b:a2:c1: 5f:57:04:dc:3f:b7:6d:44:cf:c7:f3:5c:86:77:c5: ee:58:9b:14:db:02:6a:c4:ca:4e:61:1e:f8:5c:5e: 3e:65:d5:2c:d6:41:de:81:34:39:99:75:a6:87:a1: 90:ed:bb:41:cb:cc:49:82:97:1d:e0:6a:10:2a:1a: 4f:6f:25:86:6f:d4:b7:86:5c:d3:c2:85:a0:25:d2: fd:82:3b:37:2b:64:a9:90:ae:f4:6d:80:9a:36:91: 51:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:00:A0:8F:30:22:B2:D9:8C:F4:0E:EB:DE:D3:50:CB:AE:FF:A8:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:75:57:c4:11:6f:f5:2c:74:ef:99:fb:6a:f8:7a:8b:13:72: cc:5b:82:5d:2f:0c:c2:b1:ce:dc:8f:4b:34:1d:cf:26:27:3b: 4a:b2:6e:81:26:64:0f:73:08:77:a0:ce:e8:96:3b:68:4c:85: 9a:6d:62:b7:36:96:77:14:22:b8:b2:13:de:5c:6e:66:ef:75: c4:fd:03:dc:d5:86:e8:a9:af:e6:3d:13:6b:21:2d:8c:84:f1: 73:05:02:6e:67:ef:11:55:9e:9c:af:88:c2:92:5d:c5:3a:d9: c8:39:52:ce:14:93:72:4a:de:21:59:65:97:68:c7:e1:29:82: 74:dd:a1:cb:d3:92:1b:a8:cb:2b:ea:77:aa:16:61:48:18:08: df:e9:b8:aa:aa:88:da:39:a9:0e:03:64:21:29:8e:c9:e3:3a: 65:04:e2:bb:5b:71:20:6b:f6:e9:7e:f7:9f:a9:86:19:a2:22: 08:cb:3f:be:9e:bc:45:19:f0:8a:ef:88:67:cd:c6:46:20:aa: 5e:02:81:52:93:1f:6f:8d:e2:92:d5:4a:61:98:08:d4:e9:3b: 2f:45:31:6d:be:aa:35:ae:4b:7d:95:05:c3:e9:9f:c7:00:55: 81:b1:42:d2:eb:cb:7a:43:b8:6b:fe:62:e5:d0:e9:f7:4e:ff: 1d:87:69:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6k0uKX7JQTmo+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk NWY0YmZkNmItNWMwZC00ZjhkLWIwZjgtOTA0YjZmNTA5ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzsWQr1+0itFSwCfEkMuzVjO+lP7J7y7+5j5 bcgp0LA9gbT1Uc0dhNYNU2j9V1H5RDbCUjgGU+sCD5+xnB0JQCNhHvGJwegKhQoB AVmlM3ymWjENZXekctdPTqdyYqvHXeRt5S8tZbxOJg6meyns40APKy5mO+USbezH aP10LBoF8s6DcQviEZ4uzZPHEkzyHoaYKu7a8TweMrYaSjLxGQVLosFfVwTcP7dt RM/H81yGd8XuWJsU2wJqxMpOYR74XF4+ZdUs1kHegTQ5mXWmh6GQ7btBy8xJgpcd 4GoQKhpPbyWGb9S3hlzTwoWgJdL9gjs3K2SpkK70bYCaNpFRawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYAoI8wIrLZjPQO697TUMuu/6hBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvOGQyNTRiZTAtNDk3My0z YWRiLTk2MDktNGE3YWI1ZGFkMzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5l0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV1V8QRb/UsdO+Z+2r4eosTcsxbgl0vDMKxztyPSzQdzyYnO0qyboEm ZA9zCHegzuiWO2hMhZptYrc2lncUIriyE95cbmbvdcT9A9zVhuipr+Y9E2shLYyE 8XMFAm5n7xFVnpyviMKSXcU62cg5Us4Uk3JK3iFZZZdox+EpgnTdocvTkhuoyyvq d6oWYUgYCN/puKqqiNo5qQ4DZCEpjsnjOmUE4rtbcSBr9ul+95+phhmiIgjLP76e vEUZ8IrviGfNxkYgql4CgVKTH2+N4pLVSmGYCNTpOy9FMW2+qjWuS32VBcPpn8cA VYGxQtLry3pDuGv+YuXQ6fdO/x2HaTk= -----END CERTIFICATE-----Generated at Sun Jun 15 17:38:04 2025 by rpki-client