$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befbf2d4-33bd-301f-926b-a3513a089308.roa File: befbf2d4-33bd-301f-926b-a3513a089308.roa (raw, json) Hash identifier: gcC+pV/wCXn14mQ/9azOXoZePeXwrt4IjzAq3xm3zEo= Subject key identifier: 30:52:20:69:FF:28:0F:D3:B8:AF:D3:C1:C4:4D:B1:A6:51:BA:47:B1 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849806F18473DFBEC2600857880 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befbf2d4-33bd-301f-926b-a3513a089308.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 400275 IP address blocks: 131.153.204.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:18:47:3d:fb:ec:26:00:85:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=d5535fc4-aece-458a-9247-9c04caaa324e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:88:a2:b7:c3:50:fb:e2:d3:fc:84:5d:3f:00: 49:a6:40:e0:50:b8:b4:f4:29:12:ab:1e:b1:44:a6: e4:42:cc:84:46:32:1e:0b:b7:f4:2e:25:b0:51:51: ad:69:10:4a:e1:2a:5b:f9:bd:35:fb:a5:aa:0b:7c: 16:6f:c0:0a:5b:a8:7a:1f:13:13:df:dd:b6:22:6e: 41:93:18:8d:0d:a7:d4:e4:45:0a:1b:2c:99:13:73: 66:6d:a3:79:22:ba:ea:b8:7f:4f:51:68:e9:86:d1: e1:f1:35:42:5c:d0:96:b5:b7:9e:60:3b:73:4e:30: 8b:d8:65:3e:64:5b:22:92:63:cb:b5:f9:69:ed:8d: 0b:66:f4:9d:18:36:38:41:86:20:7e:9f:ab:d9:f6: 34:dc:4e:a6:4c:b8:04:58:72:a3:fb:e7:a7:b3:fa: 85:76:52:ae:2e:d2:66:8d:aa:6d:27:e3:50:4b:4e: 36:96:f1:83:45:ec:44:b7:a3:cf:e4:0f:68:3f:cb: 6e:38:3d:ba:af:76:a2:0a:e9:91:1c:a9:51:ec:20: be:82:23:d9:4a:5a:ac:a4:6a:10:7d:fb:c1:55:e6: ff:e6:d5:f5:52:ef:13:47:16:7b:94:2d:f6:1e:f8: ec:ac:cc:93:fc:20:9c:2e:09:37:2f:5c:a9:1f:b8: 81:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:52:20:69:FF:28:0F:D3:B8:AF:D3:C1:C4:4D:B1:A6:51:BA:47:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befbf2d4-33bd-301f-926b-a3513a089308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:4e:87:9d:f4:46:68:a0:22:4f:59:bb:db:06:68:d1:79:42: 0c:f0:fa:43:3b:88:c8:47:ca:b4:e8:3c:58:3e:c3:cc:9d:37: 99:3d:c0:d9:90:9e:58:18:c0:53:2e:e5:b5:c7:39:5a:59:a3: cb:eb:77:bf:3f:81:dc:51:44:bd:59:8a:6c:4b:36:f6:d0:46: 7d:a4:ac:c2:28:68:be:ce:7c:21:fb:92:dc:66:bc:0e:c4:fc: 0d:02:92:cf:96:e7:d0:8a:d7:8c:1a:69:1a:82:2f:91:4b:2c: 58:c8:9c:f9:86:e9:27:be:67:c8:1a:a7:71:16:f8:aa:1c:9d: 43:e8:a8:9a:22:5e:75:f1:72:74:1c:37:5e:fc:e3:97:58:de: 9c:d3:08:57:cf:58:56:db:da:83:f9:b7:80:ca:68:6b:80:f5: 80:0d:45:aa:57:bd:b5:5d:f7:77:48:b8:be:df:92:c4:7f:4e: 5c:c8:f6:82:bc:ca:65:44:15:84:70:d0:0c:a1:3a:24:12:a1: 2d:d9:2c:78:bc:e6:58:4f:fd:34:19:4b:bf:0f:3c:ad:a5:a6: 25:97:01:a9:d7:5b:a2:db:76:d0:da:7e:37:74:14:94:7b:a4: 4d:53:1d:54:0a:2b:b9:c7:0b:a5:de:7a:aa:2b:2d:d9:c5:f0: 8a:6d:cc:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbxhHPfvsJgCFeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk ZDU1MzVmYzQtYWVjZS00NThhLTkyNDctOWMwNGNhYWEzMjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloiit8NQ++LT/IRdPwBJpkDgULi09CkSqx6x RKbkQsyERjIeC7f0LiWwUVGtaRBK4Spb+b01+6WqC3wWb8AKW6h6HxMT3922Im5B kxiNDafU5EUKGyyZE3NmbaN5IrrquH9PUWjphtHh8TVCXNCWtbeeYDtzTjCL2GU+ ZFsikmPLtflp7Y0LZvSdGDY4QYYgfp+r2fY03E6mTLgEWHKj++ens/qFdlKuLtJm japtJ+NQS042lvGDRexEt6PP5A9oP8tuOD26r3aiCumRHKlR7CC+giPZSlqspGoQ ffvBVeb/5tX1Uu8TRxZ7lC32HvjsrMyT/CCcLgk3L1ypH7iBiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBSIGn/KA/TuK/TwcRNsaZRukexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYmVmYmYyZDQtMzNiZC0z MDFmLTkyNmItYTM1MTNhMDg5MzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZOh530RmigIk9Zu9sGaNF5Qgzw+kM7iMhHyrToPFg+w8ydN5k9wNmQ nlgYwFMu5bXHOVpZo8vrd78/gdxRRL1ZimxLNvbQRn2krMIoaL7OfCH7ktxmvA7E /A0Cks+W59CK14waaRqCL5FLLFjInPmG6Se+Z8gap3EW+KocnUPoqJoiXnXxcnQc N17845dY3pzTCFfPWFbb2oP5t4DKaGuA9YANRapXvbVd93dIuL7fksR/TlzI9oK8 ymVEFYRw0AyhOiQSoS3ZLHi85lhP/TQZS78PPK2lpiWXAanXW6LbdtDafjd0FJR7 pE1THVQKK7nHC6XeeqorLdnF8IptzBI= -----END CERTIFICATE-----Generated at Mon Apr 28 08:22:47 2025 by rpki-client