$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a4f2b49c-7ed9-34b0-a05f-87fe78c41457.roa File: a4f2b49c-7ed9-34b0-a05f-87fe78c41457.roa (raw, json) Hash identifier: atPViUnXCtAFjiM5khnaKlhxN+jbGvfZUXz1hMVJcs4= Subject key identifier: F2:62:AF:2C:7D:8F:06:20:DC:AA:04:C9:5E:68:5A:3C:27:28:CA:6B Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490CB1690F953B727F7E3D8100 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a4f2b49c-7ed9-34b0-a05f-87fe78c41457.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 19437 IP address blocks: 131.153.71.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:69:0f:95:3b:72:7f:7e:3d:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=607cd203-dd03-4589-963b-a7bd8581a830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:59:fb:68:64:c1:9c:eb:d1:cb:f9:e3:be: a5:74:49:9d:ac:a9:97:37:08:69:ed:92:58:ff:47: dc:18:fa:6b:b3:30:09:86:ca:ca:bb:a6:78:b9:1b: fc:96:50:56:3c:3e:fb:08:8e:62:95:db:7a:82:ae: ef:7a:62:3f:c6:8a:90:46:18:7d:2e:bc:e2:d5:12: a7:0e:95:bb:90:9d:32:72:59:7d:68:94:c2:f7:3e: 63:6e:83:4e:fb:73:ff:0e:68:fa:cc:4d:c2:66:19: a5:50:e4:2b:fe:c8:d7:a2:da:0c:aa:ad:81:0c:f7: ca:67:2d:39:06:53:78:ef:62:8f:d9:f5:2f:40:0e: dd:f3:28:03:55:48:25:8b:4c:5f:2e:f7:64:f7:c5: df:1e:f4:e2:70:a8:30:f9:66:99:4e:85:8d:dc:6d: 51:50:14:c6:12:26:2a:cf:2f:74:02:b2:24:0a:34: 05:46:56:8f:b1:1c:b1:e6:b7:db:13:51:e5:51:3b: bd:64:d4:94:57:f3:3b:8e:96:7c:c7:d1:d1:f9:83: e3:7d:f1:35:e4:cc:49:b2:75:ce:19:cb:5a:9b:f5: 38:35:6c:dd:dc:cf:3e:24:62:a2:cc:b8:d2:6d:d6: 22:bd:68:7f:30:bd:f1:fa:ad:09:df:80:6c:ce:03: 13:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:62:AF:2C:7D:8F:06:20:DC:AA:04:C9:5E:68:5A:3C:27:28:CA:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a4f2b49c-7ed9-34b0-a05f-87fe78c41457.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:7f:34:37:4c:2d:7b:23:5c:2c:a2:6b:a2:57:bb:d0:e2:1a: 31:b0:78:7b:34:18:95:84:5a:0a:4a:a5:17:95:72:0b:d5:b0: 7c:5f:d9:69:60:ad:13:05:7c:bd:a4:d1:05:3f:6d:ef:aa:0c: 35:19:28:4e:19:b5:4d:e7:14:5e:4d:f5:17:17:56:9a:ad:34: 38:d0:e5:4f:e9:cb:1a:db:49:ef:48:9f:dc:be:d4:9b:79:fa: 98:33:94:4e:08:0e:67:1d:93:ec:cb:09:fe:01:ca:ad:4c:9f: 57:29:8c:19:7a:bb:b0:78:03:7e:ed:ee:16:75:55:cd:df:19: d6:05:d8:b9:d7:95:40:cf:22:1f:81:b8:a0:49:38:c5:c8:17: 2b:9b:51:d9:da:32:4f:1f:03:9e:92:ba:37:60:2a:dd:d8:86: e6:cf:03:1e:b9:0d:99:b4:55:6d:d4:08:13:ef:42:aa:65:54: 97:78:9b:66:45:af:6e:30:a7:18:71:a4:1e:03:8f:78:8d:74: bc:45:2c:9d:8c:bb:21:0d:a6:01:e5:45:0e:97:8e:b1:48:f2: 96:ce:dd:20:6c:5f:04:49:f2:1f:bf:2f:60:23:52:e4:34:11: b1:56:fc:57:29:5a:2a:5b:87:9d:3c:fd:fd:3f:d6:07:30:e4: 0f:c1:1a:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWkPlTtyf349gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk NjA3Y2QyMDMtZGQwMy00NTg5LTk2M2ItYTdiZDg1ODFhODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyRZ+2hkwZzr0cv5476ldEmdrKmXNwhp7ZJY /0fcGPprszAJhsrKu6Z4uRv8llBWPD77CI5ildt6gq7vemI/xoqQRhh9Lrzi1RKn DpW7kJ0ycll9aJTC9z5jboNO+3P/Dmj6zE3CZhmlUOQr/sjXotoMqq2BDPfKZy05 BlN472KP2fUvQA7d8ygDVUgli0xfLvdk98XfHvTicKgw+WaZToWN3G1RUBTGEiYq zy90ArIkCjQFRlaPsRyx5rfbE1HlUTu9ZNSUV/M7jpZ8x9HR+YPjffE15MxJsnXO Gctam/U4NWzd3M8+JGKizLjSbdYivWh/ML3x+q0J34BszgMTAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJiryx9jwYg3KoEyV5oWjwnKMprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYTRmMmI0OWMtN2VkOS0z NGIwLWEwNWYtODdmZTc4YzQxNDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt/NDdMLXsjXCyia6JXu9DiGjGweHs0GJWEWgpKpReVcgvVsHxf2Wlg rRMFfL2k0QU/be+qDDUZKE4ZtU3nFF5N9RcXVpqtNDjQ5U/pyxrbSe9In9y+1Jt5 +pgzlE4IDmcdk+zLCf4Byq1Mn1cpjBl6u7B4A37t7hZ1Vc3fGdYF2LnXlUDPIh+B uKBJOMXIFyubUdnaMk8fA56SujdgKt3YhubPAx65DZm0VW3UCBPvQqplVJd4m2ZF r24wpxhxpB4Dj3iNdLxFLJ2MuyENpgHlRQ6XjrFI8pbO3SBsXwRJ8h+/L2AjUuQ0 EbFW/FcpWipbh508/f0/1gcw5A/BGh0= -----END CERTIFICATE-----Generated at Sun Apr 27 18:11:31 2025 by rpki-client