$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa File: bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa (raw, json) Hash identifier: 8qZwWC4YZPG3gcxjP4/d+UDQ0ge/gX14pMsfNY6KO5U= Subject key identifier: 6E:F4:FE:4A:BF:D0:19:DC:91:A4:58:0D:80:0F:D6:B5:FC:2B:37:91 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EBEA4C003A707A6ABE75BC80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 136899 IP address blocks: 131.153.92.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4c:00:3a:70:7a:6a:be:75:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=01e214f3-80a2-4a1b-ac87-c85c6de0a296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:72:24:5b:f8:7a:60:75:27:cd:52:25:f5:e8: fb:c1:68:20:0a:e2:1a:04:e2:54:c5:90:80:d5:5d: 09:e3:22:35:96:5f:81:08:83:6f:19:21:b3:00:ac: e6:1d:4c:43:77:6c:2b:99:b8:88:18:13:f9:bf:68: d7:41:18:d8:3d:1a:a5:a6:77:b2:08:6b:3f:7c:84: fd:b2:58:26:45:f0:40:e9:c3:6c:e6:6e:9f:9a:ee: 9a:39:a0:3d:b2:4a:bb:dc:76:d8:bb:c9:34:78:8a: ec:b8:67:2e:e0:b9:06:cd:2d:b4:5e:7f:f1:d6:30: 0a:3c:0b:b3:96:e2:ca:9d:36:e2:26:f9:62:21:7e: 45:3c:ae:5a:73:cb:8c:69:9a:ff:09:29:2f:98:17: 1b:e1:40:74:d6:f2:90:98:c0:eb:95:5b:a9:f8:14: bd:f1:61:b8:de:5a:ec:f3:87:f4:4d:11:36:1c:29: 9e:b2:39:49:f4:01:07:46:14:f0:7b:d2:27:eb:b0: e9:b0:fb:30:b4:74:e3:d4:09:c3:d0:8a:fb:f2:5d: 29:f0:15:89:0c:d5:50:00:7d:6d:75:d3:ea:66:18: b1:48:17:90:2d:64:4f:e1:3a:11:a0:39:37:23:d6: 85:90:5e:7e:57:7e:dd:8c:42:87:45:e3:be:23:a0: 3b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F4:FE:4A:BF:D0:19:DC:91:A4:58:0D:80:0F:D6:B5:FC:2B:37:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:eb:b2:27:a1:d8:d5:47:ac:3d:fb:3e:02:aa:30:32:02:48: 31:2e:27:f6:75:40:a4:cc:33:d2:2e:35:48:5d:9d:77:4d:52: 5e:0d:64:c8:87:97:bd:00:90:96:a2:1c:b7:bc:86:b8:6a:22: e2:7f:1c:bf:04:b8:39:32:7a:3d:08:36:8d:8e:8f:8e:8a:e3: 28:1b:56:79:6c:27:1a:f9:7a:32:62:cb:ee:95:12:8a:dd:84: dd:d8:be:db:7a:6e:9f:ae:f1:b5:12:92:d0:9c:08:3f:ec:81: cc:f7:70:41:1a:84:ea:4c:8b:b7:10:24:95:ea:0f:0f:e4:33: 81:dd:7f:1f:77:fd:0d:47:56:3e:44:c1:ca:43:f1:80:36:53: f9:fa:1c:b8:33:93:1a:9b:a8:53:da:3b:50:27:57:a1:65:db: e4:b0:f0:97:9d:5c:f8:9e:8a:b8:f9:be:15:07:33:80:18:2a: 52:3e:cf:b1:8b:f5:8f:27:24:78:0b:35:32:47:a3:b3:b4:27: c1:0e:21:e8:21:53:ba:ca:ab:02:3e:19:d8:bb:36:d3:9a:d3: da:7e:ac:0b:64:2b:ef:e8:a4:4f:7c:f5:b2:10:59:c8:75:1b: 4a:63:a7:f6:69:6f:30:ba:a8:6e:5a:82:6c:d1:04:05:92:55: 7e:bf:43:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6kwAOnB6ar51vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MDFlMjE0ZjMtODBhMi00YTFiLWFjODctYzg1YzZkZTBhMjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynIkW/h6YHUnzVIl9ej7wWggCuIaBOJUxZCA 1V0J4yI1ll+BCINvGSGzAKzmHUxDd2wrmbiIGBP5v2jXQRjYPRqlpneyCGs/fIT9 slgmRfBA6cNs5m6fmu6aOaA9skq73HbYu8k0eIrsuGcu4LkGzS20Xn/x1jAKPAuz luLKnTbiJvliIX5FPK5ac8uMaZr/CSkvmBcb4UB01vKQmMDrlVup+BS98WG43lrs 84f0TRE2HCmesjlJ9AEHRhTwe9In67DpsPswtHTj1AnD0Ir78l0p8BWJDNVQAH1t ddPqZhixSBeQLWRP4ToRoDk3I9aFkF5+V37djEKHReO+I6A7GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG70/kq/0BnckaRYDYAP1rX8KzeRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYmIyYmMzMmQtY2M2Yi0z MjI2LWJiZWItY2FhM2U5ZmViYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvrsieh2NVHrD37PgKqMDICSDEuJ/Z1QKTMM9IuNUhdnXdNUl4NZMiH l70AkJaiHLe8hrhqIuJ/HL8EuDkyej0INo2Oj46K4ygbVnlsJxr5ejJiy+6VEord hN3Yvtt6bp+u8bUSktCcCD/sgcz3cEEahOpMi7cQJJXqDw/kM4Hdfx93/Q1HVj5E wcpD8YA2U/n6HLgzkxqbqFPaO1AnV6Fl2+Sw8JedXPieirj5vhUHM4AYKlI+z7GL 9Y8nJHgLNTJHo7O0J8EOIeghU7rKqwI+Gdi7NtOa09p+rAtkK+/opE989bIQWch1 G0pjp/ZpbzC6qG5agmzRBAWSVX6/Q+g= -----END CERTIFICATE-----Generated at Sun Jun 15 15:01:51 2025 by rpki-client