$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ca174187-a544-3df0-8b36-2922d0060aea.roa File: ca174187-a544-3df0-8b36-2922d0060aea.roa (raw, json) Hash identifier: Rp8MI7Jnbg+ht67Q+KCQJHDcpKTjEfqK3PzLrM1EHfw= Subject key identifier: 33:A7:08:9B:0A:B8:D4:FC:DD:A9:79:1B:93:A0:52:17:33:D5:70:FD Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858491246A653DDBBCEC775E4E400 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ca174187-a544-3df0-8b36-2922d0060aea.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 0 IP address blocks: 131.153.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:a6:53:dd:bb:ce:c7:75:e4:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=477dd142-ef0a-4015-a979-dc716c0f2b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:77:8c:5e:34:97:e9:dc:56:09:76:7b:b3:c6: 1e:97:e8:b1:43:53:b2:f0:b2:3f:04:aa:65:e3:5d: 93:60:a7:23:f9:d2:15:15:03:e7:b0:68:e8:41:a1: d2:33:98:79:d0:5f:bc:39:41:4d:01:8a:b0:d4:9a: cd:e8:82:f6:55:6c:f4:8f:c8:01:18:dc:9c:9b:34: b9:da:67:4f:3f:8e:a5:ee:8b:6c:0c:d0:37:af:99: 07:f1:fe:11:fc:3d:82:2e:ed:74:ca:ab:e1:38:13: a2:cf:78:d2:de:06:7d:e0:79:7e:c4:e9:a5:5e:e9: 37:3d:86:c8:dd:34:7d:c2:fd:93:59:28:f0:d8:a7: b4:a1:7a:97:50:b9:05:08:7e:45:8c:30:0b:18:45: 50:69:4c:b6:0f:4c:4c:1e:1b:31:e4:0c:57:da:80: fa:6a:ff:43:dc:45:2f:74:7b:53:9f:73:4f:76:ca: 0c:4f:73:bc:68:81:3d:8c:b8:76:92:6a:92:85:87: 0f:54:23:a3:b5:62:3c:32:11:dc:c4:52:d2:53:ef: d9:00:2c:78:3f:e6:54:42:6e:16:e3:bb:64:0c:45: c1:f0:06:0f:3d:cc:7f:d1:a8:c2:8e:68:53:d5:b7: 10:df:9f:b5:7b:c3:b5:16:04:ec:f1:36:d6:7b:75: 94:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A7:08:9B:0A:B8:D4:FC:DD:A9:79:1B:93:A0:52:17:33:D5:70:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ca174187-a544-3df0-8b36-2922d0060aea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:05:02:0f:b9:3c:e4:1d:02:95:db:09:cb:6f:cb:98:d6:ff: 5c:40:7a:3b:6f:61:33:a6:b4:83:49:96:de:a3:f1:07:d4:29: 68:5b:95:c3:2b:fc:71:f6:ae:e0:d0:0d:a0:da:10:d8:50:b2: 15:95:a1:bb:66:b6:05:e0:c3:3b:ee:b3:cf:2c:cb:4a:bb:ab: 14:3e:86:41:df:6f:cf:5a:dd:db:54:de:63:f9:78:f8:4e:3f: 0b:40:1a:b4:76:65:fb:b1:10:8b:72:bc:b0:a3:d9:bc:7a:fc: 06:9c:d1:6c:31:3b:bc:e1:e8:e6:0c:95:29:27:dc:37:9c:b0: 9c:56:17:93:22:9c:f5:0c:8b:db:70:8c:a2:75:09:35:26:7f: a4:03:da:dd:a5:03:a4:28:17:4d:88:9c:b2:75:e1:29:5c:5a: 2e:b2:aa:2f:a1:b7:b8:be:1f:c8:1c:5e:8b:d9:33:b0:37:a3: 77:b2:3f:94:bc:92:e1:3c:a0:1b:a0:76:0c:bf:e8:78:09:4d: 8d:f2:6d:fe:5e:bf:64:42:08:f8:84:e4:e6:1f:c0:3f:99:76: b0:e4:2b:11:9a:95:b6:bb:df:d1:22:5b:0c:dc:b0:7a:75:2e: 08:24:7e:14:24:eb:ef:e3:07:77:4c:96:39:c9:68:2d:a2:47: 8f:ff:68:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqZT3bvOx3Xk5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NDc3ZGQxNDItZWYwYS00MDE1LWE5NzktZGM3MTZjMGYyYjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHeMXjSX6dxWCXZ7s8Yel+ixQ1Oy8LI/BKpl 412TYKcj+dIVFQPnsGjoQaHSM5h50F+8OUFNAYqw1JrN6IL2VWz0j8gBGNycmzS5 2mdPP46l7otsDNA3r5kH8f4R/D2CLu10yqvhOBOiz3jS3gZ94Hl+xOmlXuk3PYbI 3TR9wv2TWSjw2Ke0oXqXULkFCH5FjDALGEVQaUy2D0xMHhsx5AxX2oD6av9D3EUv dHtTn3NPdsoMT3O8aIE9jLh2kmqShYcPVCOjtWI8MhHcxFLSU+/ZACx4P+ZUQm4W 47tkDEXB8AYPPcx/0ajCjmhT1bcQ35+1e8O1FgTs8TbWe3WUYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOnCJsKuNT83al5G5OgUhcz1XD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvY2ExNzQxODctYTU0NC0z ZGYwLThiMzYtMjkyMmQwMDYwYWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEg5ngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkFAg+5POQdApXbCctvy5jW/1xAejtvYTOmtINJlt6j8QfUKWhblcMr /HH2ruDQDaDaENhQshWVobtmtgXgwzvus88sy0q7qxQ+hkHfb89a3dtU3mP5ePhO PwtAGrR2ZfuxEItyvLCj2bx6/Aac0WwxO7zh6OYMlSkn3DecsJxWF5MinPUMi9tw jKJ1CTUmf6QD2t2lA6QoF02InLJ14SlcWi6yqi+ht7i+H8gcXovZM7A3o3eyP5S8 kuE8oBugdgy/6HgJTY3ybf5ev2RCCPiE5OYfwD+ZdrDkKxGalba739EiWwzcsHp1 LggkfhQk6+/jB3dMljnJaC2iR4//aIg= -----END CERTIFICATE-----Generated at Sat Apr 26 20:24:11 2025 by rpki-client