$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c8fa4d08-d3d2-3130-a026-334d188ad040.roa File: c8fa4d08-d3d2-3130-a026-334d188ad040.roa (raw, json) Hash identifier: 5kRj/YHriCl6ZKMrVMM6+To0yht8y/GUpY616HJzE3k= Subject key identifier: 0D:C6:43:E7:4B:33:44:D0:B1:BE:D3:65:D2:C0:06:80:A9:B5:DD:65 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849ED4FC3C1D100BFB72CCF4C80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c8fa4d08-d3d2-3130-a026-334d188ad040.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 59210 IP address blocks: 131.153.76.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:c3:c1:d1:00:bf:b7:2c:cf:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=b4cd64aa-bbaa-4f73-805c-d715173f65b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:dc:ae:2a:08:60:75:d4:8a:14:fa:1f:2b:42: 7c:9e:4e:79:4d:e3:35:06:c6:9c:f0:82:6f:e0:70: bc:79:b7:a9:83:2d:56:ab:a8:43:52:4f:c7:07:3e: ef:18:4d:50:d9:5b:87:db:06:f1:0c:de:82:3c:df: 97:0d:24:c6:ff:40:68:75:8e:30:50:56:c4:1f:d8: 02:22:a4:ff:a6:dd:61:dc:7c:3d:3a:ea:4e:d6:02: e4:db:5c:38:8f:fc:c2:e5:64:38:17:5e:3a:5b:5e: 82:bd:3b:96:13:f1:22:52:35:93:d5:3d:1f:e1:76: 0e:7b:f5:59:74:59:fe:b4:f7:c7:ab:76:85:73:ca: e7:b6:db:f0:f0:e7:4e:ed:84:0d:4a:f3:f7:46:79: 77:0b:e2:41:d8:b7:90:e2:5b:83:b8:7d:a4:e8:db: e9:4e:de:70:0d:62:b0:d2:1f:e8:f0:0a:ca:e1:1f: 50:f7:93:17:76:ae:f6:8f:a4:2d:d8:2f:01:19:80: ce:1a:4b:b6:e7:f4:67:ef:44:d8:8e:21:ff:37:b8: 80:2b:a3:0d:6e:eb:ec:e6:64:2c:ec:e4:d5:89:cf: b9:a7:06:8b:3a:68:7f:ea:2a:19:4c:7b:d3:2e:81: 84:b6:b2:fc:3d:02:35:c0:7b:07:1d:7a:68:cc:3e: fd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C6:43:E7:4B:33:44:D0:B1:BE:D3:65:D2:C0:06:80:A9:B5:DD:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c8fa4d08-d3d2-3130-a026-334d188ad040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:d5:77:df:f8:42:9c:04:a6:7e:af:3d:14:7b:17:13:20:23: 67:88:3a:83:13:4a:26:f2:3d:5b:ba:94:96:09:f5:0d:98:de: b0:dd:b9:b4:c2:ff:a5:67:79:23:75:15:b4:c1:19:14:5c:ae: c3:e5:07:24:c3:b0:7e:cd:b1:82:cf:9a:93:a8:11:b3:d9:97: 0a:4b:5a:02:ba:20:a1:12:b1:2b:17:11:43:7c:ea:33:05:a5: b5:30:65:9a:4b:1d:a4:c7:ee:29:21:3e:d3:be:83:20:f0:b3: 44:1d:da:56:76:bb:61:f4:5d:83:79:3e:a0:20:ec:f3:25:ba: 29:fd:d6:64:05:5e:0c:bd:32:ff:1e:36:ce:7f:3c:33:c0:73: f4:37:f7:28:3a:5b:a1:15:65:58:90:ea:34:32:c9:ab:9a:d0: e7:4c:f3:b9:01:fd:95:97:bc:27:2d:60:a5:3a:c2:50:05:5b: f2:04:27:d8:07:37:e0:64:a1:8e:e8:08:58:3d:dc:e4:be:91: d9:77:dc:e9:cf:4a:4a:dc:d0:24:6f:fe:5b:c6:c8:5c:19:82: c3:6b:b1:b9:30:58:ec:51:db:68:c4:68:5c:60:e0:58:5c:e4: 6e:5e:85:53:51:97:ed:59:58:2d:1a:6e:5e:b0:70:f2:b3:9d: 53:3b:a6:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8PB0QC/tyzPTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk YjRjZDY0YWEtYmJhYS00ZjczLTgwNWMtZDcxNTE3M2Y2NWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09yuKghgddSKFPofK0J8nk55TeM1Bsac8IJv 4HC8ebepgy1Wq6hDUk/HBz7vGE1Q2VuH2wbxDN6CPN+XDSTG/0BodY4wUFbEH9gC IqT/pt1h3Hw9OupO1gLk21w4j/zC5WQ4F146W16CvTuWE/EiUjWT1T0f4XYOe/VZ dFn+tPfHq3aFc8rnttvw8OdO7YQNSvP3Rnl3C+JB2LeQ4luDuH2k6NvpTt5wDWKw 0h/o8ArK4R9Q95MXdq72j6Qt2C8BGYDOGku25/Rn70TYjiH/N7iAK6MNbuvs5mQs 7OTVic+5pwaLOmh/6ioZTHvTLoGEtrL8PQI1wHsHHXpozD79LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3GQ+dLM0TQsb7TZdLABoCptd1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYzhmYTRkMDgtZDNkMi0z MTMwLWEwMjYtMzM0ZDE4OGFkMDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3Vd9/4QpwEpn6vPRR7FxMgI2eIOoMTSibyPVu6lJYJ9Q2Y3rDdubTC /6VneSN1FbTBGRRcrsPlByTDsH7NsYLPmpOoEbPZlwpLWgK6IKESsSsXEUN86jMF pbUwZZpLHaTH7ikhPtO+gyDws0Qd2lZ2u2H0XYN5PqAg7PMluin91mQFXgy9Mv8e Ns5/PDPAc/Q39yg6W6EVZViQ6jQyyaua0OdM87kB/ZWXvCctYKU6wlAFW/IEJ9gH N+BkoY7oCFg93OS+kdl33OnPSkrc0CRv/lvGyFwZgsNrsbkwWOxR22jEaFxg4Fhc 5G5ehVNRl+1ZWC0abl6wcPKznVM7prE= -----END CERTIFICATE-----Generated at Sun Jun 15 12:16:46 2025 by rpki-client