$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ce21437b-4dbb-3e71-83a0-c7648489a6e0.roa File: ce21437b-4dbb-3e71-83a0-c7648489a6e0.roa (raw, json) Hash identifier: brBqdu4k8tN3+UIVAaZZ8DwyLOfSaDBMpnNEeni4+BY= Subject key identifier: A0:7E:17:8A:A5:58:6E:C1:51:BA:FF:C0:9D:A9:ED:0E:25:E2:DA:8C Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584961B9934E6FF6675C81FB4400 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ce21437b-4dbb-3e71-83a0-c7648489a6e0.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 59210 IP address blocks: 131.153.206.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:93:4e:6f:f6:67:5c:81:fb:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=db408d11-ae6a-4cdf-bc89-aeaf418667b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:17:f5:76:45:77:37:5e:44:ca:3d:8d:36:b7: 8a:6d:37:7d:25:55:ea:94:df:70:b5:ac:a1:c1:87: 97:2a:ca:bd:f1:04:22:20:31:4d:a9:44:2a:71:93: 8b:96:a0:b5:32:a4:f3:58:09:fb:89:a4:22:2f:48: e1:c2:ab:b8:a8:21:9a:72:5c:30:11:43:a8:6f:01: bc:98:69:e0:83:7b:27:dd:b0:df:7c:7f:fb:40:d9: 09:06:c3:be:58:2e:29:69:88:fe:8c:8e:f1:f3:c3: 21:61:cb:ce:35:de:f9:09:d6:42:eb:a6:8b:99:c1: 68:2d:24:5d:14:ea:0d:b0:5f:0f:0d:b5:be:27:b9: 6b:0b:5a:1c:fd:36:65:e6:1d:03:f8:87:cf:b1:26: c9:46:28:20:17:a0:bb:7b:a1:8f:81:7b:db:ad:a7: 8d:bf:71:46:b9:29:92:b1:42:e7:ab:e2:10:96:c8: ce:4c:d7:fe:13:ec:a3:34:f3:9d:6a:d0:c1:62:18: da:0c:0f:21:ac:4e:d7:59:06:c9:9f:cc:d2:7d:66: 9c:c4:1f:be:95:41:b6:59:c1:9e:1b:2d:a9:66:cc: 8e:55:8f:14:0d:68:fa:04:34:da:d0:e5:fa:20:c8: c0:0b:32:36:11:65:4b:7d:f5:e5:68:9d:34:a3:d0: f7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7E:17:8A:A5:58:6E:C1:51:BA:FF:C0:9D:A9:ED:0E:25:E2:DA:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ce21437b-4dbb-3e71-83a0-c7648489a6e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:1e:2a:61:7c:83:1a:5a:e5:8a:04:94:9d:f0:34:f0:e9:c5: 82:6f:74:b1:31:cf:d4:30:d0:c8:0d:bf:5e:86:35:8b:ab:0f: 86:6a:b3:c7:c1:ec:63:5e:d6:b2:10:44:36:1a:6a:9f:75:52: db:73:51:d3:69:0f:0e:6c:9b:4f:00:cf:d1:4c:f0:1c:d3:6c: be:2e:06:00:67:6a:1d:25:f2:65:d9:9e:d9:fe:a4:b2:16:14: 34:f1:77:09:3c:3d:08:20:be:fc:90:96:bb:c5:4b:9b:a9:2b: 1b:41:aa:e2:4a:3d:48:0d:27:b1:37:ba:df:91:66:bc:2e:d5: 9a:04:36:48:70:37:9e:94:f4:34:6a:31:cf:dd:73:9d:7f:5b: 9f:0f:d6:58:d1:bc:31:ba:6a:e7:f1:34:65:05:68:c5:65:19: ad:88:a0:aa:7a:a6:57:f6:dc:b1:5b:37:08:a1:49:cd:41:1a: b3:84:53:7a:c5:76:64:53:75:33:86:ab:f7:20:27:37:59:13: 4e:83:a8:85:a1:d2:35:70:94:16:4e:ed:47:a4:a9:4c:2d:b6: cf:34:83:dc:c9:44:bb:32:48:fc:4e:22:f4:fc:36:a1:49:4b: 85:d8:6f:f2:40:0b:89:36:ba:f0:f7:68:76:92:09:46:f3:bf: c6:ec:76:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZNOb/ZnXIH7RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ZGI0MDhkMTEtYWU2YS00Y2RmLWJjODktYWVhZjQxODY2N2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRf1dkV3N15Eyj2NNreKbTd9JVXqlN9wtayh wYeXKsq98QQiIDFNqUQqcZOLlqC1MqTzWAn7iaQiL0jhwqu4qCGaclwwEUOobwG8 mGngg3sn3bDffH/7QNkJBsO+WC4paYj+jI7x88MhYcvONd75CdZC66aLmcFoLSRd FOoNsF8PDbW+J7lrC1oc/TZl5h0D+IfPsSbJRiggF6C7e6GPgXvbraeNv3FGuSmS sULnq+IQlsjOTNf+E+yjNPOdatDBYhjaDA8hrE7XWQbJn8zSfWacxB++lUG2WcGe Gy2pZsyOVY8UDWj6BDTa0OX6IMjACzI2EWVLffXlaJ00o9D3bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKB+F4qlWG7BUbr/wJ2p7Q4l4tqMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvY2UyMTQzN2ItNGRiYi0z ZTcxLTgzYTAtYzc2NDg0ODlhNmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8eKmF8gxpa5YoElJ3wNPDpxYJvdLExz9Qw0MgNv16GNYurD4Zqs8fB 7GNe1rIQRDYaap91UttzUdNpDw5sm08Az9FM8BzTbL4uBgBnah0l8mXZntn+pLIW FDTxdwk8PQggvvyQlrvFS5upKxtBquJKPUgNJ7E3ut+RZrwu1ZoENkhwN56U9DRq Mc/dc51/W58P1ljRvDG6aufxNGUFaMVlGa2IoKp6plf23LFbNwihSc1BGrOEU3rF dmRTdTOGq/cgJzdZE06DqIWh0jVwlBZO7UekqUwtts80g9zJRLsySPxOIvT8NqFJ S4XYb/JAC4k2uvD3aHaSCUbzv8bsduA= -----END CERTIFICATE-----Generated at Sun Jun 15 12:14:33 2025 by rpki-client