$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d498f1ad-6550-3118-8da5-441323aa3937.roa File: d498f1ad-6550-3118-8da5-441323aa3937.roa (raw, json) Hash identifier: abljz7j1B0mk0icSRjFKtqHC3sMv2VmyzjporvsnJj4= Subject key identifier: E3:8E:6C:AD:1D:A3:DD:7E:30:3B:59:11:5A:E2:35:9F:06:A4:BF:7D Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EBEA4A691B08B2F46CC6AB40 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d498f1ad-6550-3118-8da5-441323aa3937.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 20454 IP address blocks: 131.153.37.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4a:69:1b:08:b2:f4:6c:c6:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=973dd573-c3ea-4fca-8e37-4fe1ad8afa1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bc:9b:0a:b4:c9:06:03:e1:07:ca:92:a8:16: ae:f7:ab:ed:33:e6:37:1b:bf:ed:16:83:9d:e2:4f: 8f:fa:7a:7b:1d:c6:02:dc:95:33:92:38:20:69:91: a6:50:79:9e:1f:0c:e3:45:8d:6d:af:b0:e0:31:80: 69:fb:ea:33:8e:89:a8:2b:39:f9:f3:7d:cc:4f:7a: 68:03:3f:2c:7a:2a:3e:5c:a9:b4:29:92:45:20:8a: c2:6e:88:ea:fa:36:a4:75:90:43:9d:b1:0d:9a:0b: d7:e4:8d:be:8f:12:f3:50:0e:eb:2b:c1:0a:11:4e: 83:02:3e:d5:9d:f5:cc:cc:38:93:2f:31:78:73:68: 4f:31:25:3f:7d:aa:4c:00:21:f4:37:33:cc:65:cd: 07:9c:96:ee:fe:52:f7:ae:94:bd:46:dc:8e:f2:14: 0a:d1:86:07:f9:66:14:dd:eb:55:4d:96:29:98:81: 01:ee:c4:6c:38:1b:63:1a:50:a2:fa:5a:7b:19:db: da:10:c6:25:78:8c:99:5b:d3:4d:12:f3:ef:97:08: fa:e9:ce:bd:b4:0f:c7:25:ec:2f:b8:e0:63:6b:78: fc:a6:5f:b9:23:ba:62:ec:df:c7:e3:c2:64:7f:ee: 46:fc:15:cf:1a:12:59:46:35:56:18:3d:50:e8:aa: d6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8E:6C:AD:1D:A3:DD:7E:30:3B:59:11:5A:E2:35:9F:06:A4:BF:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d498f1ad-6550-3118-8da5-441323aa3937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:b7:5a:c7:c4:59:5b:b4:f9:8b:a1:0d:97:30:60:ce:1a:50: 9c:68:51:99:6c:5d:d7:60:b6:05:10:41:72:58:ca:1e:23:04: ca:d9:95:0a:a7:9c:c2:d1:64:3c:ed:8b:3b:b6:c1:90:51:ab: f2:05:3a:72:59:59:c9:aa:55:a3:c2:3a:91:33:92:95:a2:69: 88:dd:b2:e9:a8:c3:09:05:14:00:38:29:83:65:83:c0:e8:31: 19:a6:e5:64:e1:ec:23:61:f4:4c:0f:f8:96:63:72:a4:f5:d9: 68:8b:18:93:9b:e0:b2:97:78:6a:0c:78:7b:4e:3b:bd:b3:2d: 1b:09:c6:95:44:94:0f:fc:b8:92:98:9d:1d:6b:84:7e:87:84: 0f:4a:f9:b6:af:be:54:00:21:ee:1a:52:85:4e:82:65:c9:f2: 83:95:eb:bc:3f:f8:da:0b:ed:fe:2c:b2:a1:3a:a9:cf:05:c5: 2f:57:65:13:24:75:4d:02:b1:52:61:d1:01:d5:55:e5:05:ba: 90:06:49:a2:d0:93:55:9a:85:6a:af:42:34:7e:b4:7f:c5:36: 54:da:de:75:14:97:85:3d:ec:8b:2f:70:d1:15:00:dc:0d:a3: b7:43:3a:73:98:ab:93:11:a7:f3:a7:eb:6a:1e:ad:a5:9f:32: bf:1b:b1:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6kppGwiy9GzGq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk OTczZGQ1NzMtYzNlYS00ZmNhLThlMzctNGZlMWFkOGFmYTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7ybCrTJBgPhB8qSqBau96vtM+Y3G7/tFoOd 4k+P+np7HcYC3JUzkjggaZGmUHmeHwzjRY1tr7DgMYBp++ozjomoKzn5833MT3po Az8seio+XKm0KZJFIIrCbojq+jakdZBDnbENmgvX5I2+jxLzUA7rK8EKEU6DAj7V nfXMzDiTLzF4c2hPMSU/fapMACH0NzPMZc0HnJbu/lL3rpS9RtyO8hQK0YYH+WYU 3etVTZYpmIEB7sRsOBtjGlCi+lp7GdvaEMYleIyZW9NNEvPvlwj66c69tA/HJewv uOBja3j8pl+5I7pi7N/H48Jkf+5G/BXPGhJZRjVWGD1Q6KrWdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOObK0do91+MDtZEVriNZ8GpL99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDQ5OGYxYWQtNjU1MC0z MTE4LThkYTUtNDQxMzIzYWEzOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5klMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIu3WsfEWVu0+YuhDZcwYM4aUJxoUZlsXddgtgUQQXJYyh4jBMrZlQqn nMLRZDztizu2wZBRq/IFOnJZWcmqVaPCOpEzkpWiaYjdsumowwkFFAA4KYNlg8Do MRmm5WTh7CNh9EwP+JZjcqT12WiLGJOb4LKXeGoMeHtOO72zLRsJxpVElA/8uJKY nR1rhH6HhA9K+bavvlQAIe4aUoVOgmXJ8oOV67w/+NoL7f4ssqE6qc8FxS9XZRMk dU0CsVJh0QHVVeUFupAGSaLQk1WahWqvQjR+tH/FNlTa3nUUl4U97IsvcNEVANwN o7dDOnOYq5MRp/On62oeraWfMr8bsUk= -----END CERTIFICATE-----Generated at Sun Jun 15 17:32:06 2025 by rpki-client