$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d00dfcb1-8997-3cd3-af05-0800d9a48025.roa File: d00dfcb1-8997-3cd3-af05-0800d9a48025.roa (raw, json) Hash identifier: ThI8OMP7xdBaLeFj9wCzeNgzADKHcpwxVLTFrzisRus= Subject key identifier: 17:B4:17:05:BA:B7:FC:50:CB:46:32:4C:09:29:D9:42:4A:7C:12:58 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EBEA4AB8CF785D3331848A80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d00dfcb1-8997-3cd3-af05-0800d9a48025.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 20454 IP address blocks: 131.153.45.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4a:b8:cf:78:5d:33:31:84:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=79fc55c5-04e5-4992-9bf5-e9ba4783ecf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4e:c7:b0:10:4e:bb:92:72:ec:8e:28:1e:9f: a9:45:96:85:e2:3a:9c:27:75:0c:bb:2a:6e:ec:a8: 74:c8:fd:06:4e:f3:75:d4:ba:35:70:f4:cf:2c:8a: 70:f0:22:dc:4f:3a:ec:b8:e2:bf:10:01:1f:43:d4: 31:da:20:9b:52:03:38:6a:47:4c:1c:53:36:86:2c: 5a:1a:66:98:5e:ff:08:e5:49:da:be:5f:04:e8:89: 3e:93:36:e3:97:a6:80:6f:00:a9:51:3a:0b:28:db: de:b9:e4:0a:fc:1c:bc:f1:52:ba:a3:67:31:eb:0f: 8e:20:26:04:77:2f:42:48:cd:c5:8f:12:02:86:17: 60:e5:bc:3e:7c:cb:c5:9f:37:76:f5:ca:66:fa:e2: d3:8a:a3:f1:98:aa:e1:23:d2:be:e1:9f:dd:b7:f2: df:92:2c:a2:42:21:0a:e1:ec:6b:66:0b:b9:bd:0b: 56:ee:ea:82:7c:d2:54:13:ce:c9:37:af:6e:9b:28: 22:e5:61:f3:0a:55:ae:00:1c:c1:9f:96:96:a3:6e: 60:c0:b2:23:95:56:fa:e8:1c:8d:97:fd:be:75:75: a2:47:31:e4:f2:d8:d3:58:ea:f6:c0:e8:d1:39:15: f8:7d:b7:07:38:fa:f7:ee:6e:e8:f4:88:dc:47:87: 07:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B4:17:05:BA:B7:FC:50:CB:46:32:4C:09:29:D9:42:4A:7C:12:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d00dfcb1-8997-3cd3-af05-0800d9a48025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:55:31:bd:9f:c6:4b:71:91:f3:b5:27:da:f3:23:19:46:e3: e2:cb:ea:be:b5:38:c6:82:a4:73:9e:d4:94:9b:1a:1c:43:69: f2:b0:ac:0b:23:5b:4f:03:db:82:df:7b:85:5d:06:5f:0c:8f: 37:14:16:cc:b7:5a:c3:6c:5d:b2:0e:c5:a7:a9:bb:0f:b8:91: 2d:fe:58:46:05:c7:a6:93:06:c9:d4:55:80:d9:62:a3:9f:92: 3a:cc:18:c3:a8:da:57:85:4d:23:23:b3:a4:88:6f:d5:e7:c4: a0:bc:28:d6:25:90:ba:3e:e8:e1:95:d0:f4:a8:0f:43:01:4c: 22:92:d4:f0:bb:2d:09:7a:02:65:03:66:fb:56:8c:0b:39:95: 2c:52:c6:42:e4:55:32:32:cf:01:0f:f9:5e:db:4e:d7:40:42: e9:fa:3f:e8:63:40:b7:5b:a7:27:29:33:45:e6:cd:4b:b7:ce: 95:7b:e3:c8:8e:be:cd:5f:04:32:d6:43:34:f2:71:3e:bd:9d: 94:5b:5c:db:e2:4e:33:97:60:89:07:35:83:2a:b9:38:04:e1: 76:29:ca:d3:d2:1e:28:38:d9:20:a4:f3:c0:42:94:49:d3:1b: ff:cc:61:6c:04:ba:55:44:bc:c5:aa:2d:5e:0e:68:a8:a9:90: 87:58:9a:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6kq4z3hdMzGEioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk NzlmYzU1YzUtMDRlNS00OTkyLTliZjUtZTliYTQ3ODNlY2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo07HsBBOu5Jy7I4oHp+pRZaF4jqcJ3UMuypu 7Kh0yP0GTvN11Lo1cPTPLIpw8CLcTzrsuOK/EAEfQ9Qx2iCbUgM4akdMHFM2hixa GmaYXv8I5Unavl8E6Ik+kzbjl6aAbwCpUToLKNveueQK/By88VK6o2cx6w+OICYE dy9CSM3FjxIChhdg5bw+fMvFnzd29cpm+uLTiqPxmKrhI9K+4Z/dt/LfkiyiQiEK 4exrZgu5vQtW7uqCfNJUE87JN69umygi5WHzClWuABzBn5aWo25gwLIjlVb66ByN l/2+dXWiRzHk8tjTWOr2wOjRORX4fbcHOPr37m7o9IjcR4cHKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBe0FwW6t/xQy0YyTAkp2UJKfBJYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDAwZGZjYjEtODk5Ny0z Y2QzLWFmMDUtMDgwMGQ5YTQ4MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5ktMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNVMb2fxktxkfO1J9rzIxlG4+LL6r61OMaCpHOe1JSbGhxDafKwrAsj W08D24Lfe4VdBl8MjzcUFsy3WsNsXbIOxaepuw+4kS3+WEYFx6aTBsnUVYDZYqOf kjrMGMOo2leFTSMjs6SIb9XnxKC8KNYlkLo+6OGV0PSoD0MBTCKS1PC7LQl6AmUD ZvtWjAs5lSxSxkLkVTIyzwEP+V7bTtdAQun6P+hjQLdbpycpM0XmzUu3zpV748iO vs1fBDLWQzTycT69nZRbXNviTjOXYIkHNYMquTgE4XYpytPSHig42SCk88BClEnT G//MYWwEulVEvMWqLV4OaKipkIdYmgI= -----END CERTIFICATE-----Generated at Sun Jun 15 15:52:45 2025 by rpki-client