$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ae5ad5b6-1e7e-33fe-8e48-b4014fbaf2d6.roa File: ae5ad5b6-1e7e-33fe-8e48-b4014fbaf2d6.roa (raw, json) Hash identifier: ZrBXuXJ3fkypMae8ONt55bdERuIO8nIXiAyIEzKRgEg= Subject key identifier: 5F:31:93:A5:2F:77:02:DF:49:58:E0:6D:92:06:4B:A6:42:B9:59:41 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EBEA4B4A9CA62F6104323540 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ae5ad5b6-1e7e-33fe-8e48-b4014fbaf2d6.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 19181 IP address blocks: 131.153.57.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4b:4a:9c:a6:2f:61:04:32:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=34297ed0-a8ea-4e00-9e42-2a2db278a526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:80:22:8b:91:69:1c:ae:04:89:74:53:73:f5: d6:87:b0:2f:e2:38:7a:a9:72:7a:67:f0:bb:60:2a: 88:9f:de:bd:27:18:0c:71:88:06:23:18:c6:20:47: 5f:3b:38:8f:e8:2b:03:e7:b7:f3:16:01:9a:d1:85: 2d:a5:d1:af:c6:3e:d5:a3:b7:58:c7:3f:cd:f2:5a: 36:f0:21:a2:64:d3:21:d9:aa:c9:31:a6:59:ac:58: 22:af:67:12:54:6b:d1:c4:aa:fc:50:c8:79:bb:b8: 21:41:8c:a8:38:5e:69:2b:e0:d2:30:be:b1:64:65: 12:2d:1b:79:a9:54:18:e4:43:bb:41:dc:bf:d1:13: ae:ee:8f:37:ce:57:5d:64:80:fe:d2:90:01:32:94: 87:5b:3c:91:1b:de:10:4f:93:1c:0c:d6:55:df:d2: bf:2a:cd:f9:9b:ed:99:e5:cd:22:7d:4e:90:98:75: 20:a0:6d:3a:69:68:e9:cb:ed:50:3f:a2:ed:57:42: 4c:13:a7:fe:bd:34:41:01:fc:85:89:55:a6:bf:9f: ab:76:48:fe:67:46:84:7d:8b:1b:7f:d6:26:ba:63: c9:06:4c:a9:00:fd:09:3f:10:49:8f:5a:ad:5a:f0: 95:a8:a9:e3:29:7e:32:b6:57:47:64:fc:07:2e:52: f7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:31:93:A5:2F:77:02:DF:49:58:E0:6D:92:06:4B:A6:42:B9:59:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ae5ad5b6-1e7e-33fe-8e48-b4014fbaf2d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:2a:5a:a5:22:37:a5:ad:68:55:78:c9:72:1c:0a:bd:96:c9: 69:8c:6c:e8:90:c8:32:d1:72:28:8a:f9:92:59:22:aa:36:e2: 7d:26:a4:36:0c:b0:76:a4:c2:79:fd:25:05:ea:8d:51:41:51: 84:6e:01:56:42:60:16:e4:95:4e:3f:07:8b:fc:20:84:1d:00: 0f:d5:45:f6:ad:7d:a8:63:11:0f:eb:cc:f3:45:80:8e:e7:47: 96:62:18:f0:bd:00:88:f9:7d:21:ba:0d:e3:e4:ae:d9:96:ba: 0d:66:90:34:06:fa:af:0c:06:29:f2:7f:a7:4b:57:96:7c:12: 4b:ac:1b:62:31:91:16:47:30:72:3b:d2:36:51:7d:44:24:eb: 1a:e3:d8:59:00:70:bb:a9:49:f7:e1:27:b2:4d:b3:a3:89:30: f3:0a:69:d9:80:76:a6:52:79:bb:7b:41:21:e9:76:94:aa:1c: a7:62:23:8e:ba:29:92:c3:46:f2:f8:ff:cd:c4:2b:6e:b8:2c: c8:61:2e:3d:2a:6e:b9:25:6f:0d:35:0b:77:47:5c:35:6a:d6: bc:b3:3e:b0:02:46:7c:39:5f:cb:0f:43:07:1f:2c:be:b4:28: c6:39:1d:d9:22:d1:fa:d1:32:c7:ab:26:ef:44:a6:ae:ad:cb: 8a:3d:75:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6ktKnKYvYQQyNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MzQyOTdlZDAtYThlYS00ZTAwLTllNDItMmEyZGIyNzhhNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIAii5FpHK4EiXRTc/XWh7Av4jh6qXJ6Z/C7 YCqIn969JxgMcYgGIxjGIEdfOziP6CsD57fzFgGa0YUtpdGvxj7Vo7dYxz/N8lo2 8CGiZNMh2arJMaZZrFgir2cSVGvRxKr8UMh5u7ghQYyoOF5pK+DSML6xZGUSLRt5 qVQY5EO7Qdy/0ROu7o83zlddZID+0pABMpSHWzyRG94QT5McDNZV39K/Ks35m+2Z 5c0ifU6QmHUgoG06aWjpy+1QP6LtV0JME6f+vTRBAfyFiVWmv5+rdkj+Z0aEfYsb f9YmumPJBkypAP0JPxBJj1qtWvCVqKnjKX4ytldHZPwHLlL3WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8xk6UvdwLfSVjgbZIGS6ZCuVlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYWU1YWQ1YjYtMWU3ZS0z M2ZlLThlNDgtYjQwMTRmYmFmMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5k5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcqWqUiN6WtaFV4yXIcCr2WyWmMbOiQyDLRciiK+ZJZIqo24n0mpDYM sHakwnn9JQXqjVFBUYRuAVZCYBbklU4/B4v8IIQdAA/VRfatfahjEQ/rzPNFgI7n R5ZiGPC9AIj5fSG6DePkrtmWug1mkDQG+q8MBinyf6dLV5Z8EkusG2IxkRZHMHI7 0jZRfUQk6xrj2FkAcLupSffhJ7JNs6OJMPMKadmAdqZSebt7QSHpdpSqHKdiI466 KZLDRvL4/83EK264LMhhLj0qbrklbw01C3dHXDVq1ryzPrACRnw5X8sPQwcfLL60 KMY5Hdki0frRMserJu9Epq6ty4o9dfI= -----END CERTIFICATE-----Generated at Mon Jun 16 15:25:43 2025 by rpki-client