$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa File: cc973301-7c68-348a-bd7d-e22b5396a832.roa (raw, json) Hash identifier: FW0SoAOqB8uhIGDknf5hsZmm3iEgyYID9vj2W4TKbTs= Subject key identifier: 17:76:23:FA:52:DA:70:98:C9:64:31:2D:F7:AE:15:7A:8A:FC:F4:BE Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EBEA4D1881B7E554232ABC80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 12189 IP address blocks: 131.153.112.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4d:18:81:b7:e5:54:23:2a:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=5050f0f1-cc03-40e0-9b9a-46984d9c7172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6d:74:da:b9:a0:c9:9d:88:bd:2f:c6:30:5c: e0:30:3c:7b:52:28:2e:01:49:33:8b:00:03:53:1c: 7f:d1:3f:61:70:3d:1f:3b:06:5a:0f:a3:21:20:3d: f2:79:81:fe:66:71:b6:40:4e:01:20:aa:84:7b:bc: ae:72:77:d7:a8:71:2d:c5:49:3e:5e:6e:60:b3:27: 7e:04:51:3c:d5:1b:d6:e6:c9:77:23:a1:ac:a5:39: ce:97:6d:cc:11:ea:c8:22:dd:75:ed:30:24:94:98: e9:c8:4f:ef:62:a3:b0:d2:d2:7c:08:37:3f:c0:6a: 31:76:98:8f:a8:89:0b:f3:15:7b:bb:6a:08:48:54: 26:ff:ad:0b:76:04:82:5e:0a:83:0b:f9:8b:29:50: 20:71:15:46:94:b1:48:cf:d2:22:18:97:0e:9e:a4: b1:f1:b0:44:9c:1f:3a:7d:7d:89:88:73:9c:d8:ac: 60:a0:ca:66:c3:76:e3:2a:56:94:c6:03:f7:7e:a6: 11:78:41:02:47:dd:ae:ac:4e:da:2b:d1:34:af:ab: c5:bb:b9:f4:80:e2:6a:f8:c7:1b:72:78:90:14:3a: 91:09:79:c1:4d:ac:c2:cb:7b:a6:dc:3d:8e:ab:22: 7a:1e:84:9a:d2:f5:77:0a:54:a0:1e:09:b1:22:c0: b3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:76:23:FA:52:DA:70:98:C9:64:31:2D:F7:AE:15:7A:8A:FC:F4:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:dc:1c:45:06:ae:60:e7:ab:ac:43:93:7c:73:bf:fd:3c:2e: 6a:3a:8c:e0:1d:ca:5d:62:93:76:c6:46:b2:0b:c0:a4:06:ca: 43:f3:1e:41:05:78:c4:57:37:50:98:95:28:25:3b:7f:1a:5c: 7b:44:d4:f9:18:ab:93:f7:40:72:5c:5a:b7:8b:b7:87:5c:1b: 40:f1:ce:be:59:75:9d:d5:38:bf:d9:f9:f3:cd:24:58:8c:96: b4:a8:07:90:31:43:df:07:bc:53:02:43:d3:44:21:2e:20:8e: b7:3b:73:48:96:23:39:5f:c4:40:6a:cb:fb:bc:9a:89:45:40: 05:d5:16:42:3b:51:a2:de:6c:ee:03:5f:02:29:b9:76:7a:b6: 54:91:43:77:29:b7:1f:96:f2:28:97:b3:a7:eb:48:52:4d:c1: 74:ec:28:05:9e:15:d3:7e:bb:cb:7b:30:62:09:d4:bf:55:cb: 0f:65:ee:78:9f:e4:15:36:0e:a1:61:74:8d:95:25:2b:c7:dc: f8:5c:69:d5:53:ce:02:d3:05:ca:36:d0:2d:8e:e1:4a:f9:e4: f6:de:d4:81:25:1a:a9:96:ae:94:32:16:21:f2:f1:07:c0:19: aa:6d:f0:2c:e0:82:3b:80:de:c2:63:65:4e:7d:8b:36:97:a6: 7a:37:34:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6k0YgbflVCMqvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk NTA1MGYwZjEtY2MwMy00MGUwLTliOWEtNDY5ODRkOWM3MTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm102rmgyZ2IvS/GMFzgMDx7UiguAUkziwAD Uxx/0T9hcD0fOwZaD6MhID3yeYH+ZnG2QE4BIKqEe7yucnfXqHEtxUk+Xm5gsyd+ BFE81RvW5sl3I6GspTnOl23MEerIIt117TAklJjpyE/vYqOw0tJ8CDc/wGoxdpiP qIkL8xV7u2oISFQm/60LdgSCXgqDC/mLKVAgcRVGlLFIz9IiGJcOnqSx8bBEnB86 fX2JiHOc2KxgoMpmw3bjKlaUxgP3fqYReEECR92urE7aK9E0r6vFu7n0gOJq+Mcb cniQFDqRCXnBTazCy3um3D2OqyJ6HoSa0vV3ClSgHgmxIsCzaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBd2I/pS2nCYyWQxLfeuFXqK/PS+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvY2M5NzMzMDEtN2M2OC0z NDhhLWJkN2QtZTIyYjUzOTZhODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3cHEUGrmDnq6xDk3xzv/08Lmo6jOAdyl1ik3bGRrILwKQGykPzHkEF eMRXN1CYlSglO38aXHtE1PkYq5P3QHJcWreLt4dcG0Dxzr5ZdZ3VOL/Z+fPNJFiM lrSoB5AxQ98HvFMCQ9NEIS4gjrc7c0iWIzlfxEBqy/u8molFQAXVFkI7UaLebO4D XwIpuXZ6tlSRQ3cptx+W8iiXs6frSFJNwXTsKAWeFdN+u8t7MGIJ1L9Vyw9l7nif 5BU2DqFhdI2VJSvH3PhcadVTzgLTBco20C2O4Ur55Pbe1IElGqmWrpQyFiHy8QfA Gapt8CzggjuA3sJjZU59izaXpno3NCI= -----END CERTIFICATE-----Generated at Sun Jun 15 15:58:43 2025 by rpki-client