$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db04736c-f31c-3c7f-873c-818d9665fd54.roa File: db04736c-f31c-3c7f-873c-818d9665fd54.roa (raw, json) Hash identifier: 9FOSNeoYGXJr+UTRXv8A/CERA8zqS3aAIpa4Z/fdVmw= Subject key identifier: E1:D0:00:D9:22:54:95:94:2C:1B:2E:49:62:5A:2F:0D:F5:5D:B9:D5 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EBEA4E913E6D0355E5105D40 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db04736c-f31c-3c7f-873c-818d9665fd54.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 11572 IP address blocks: 131.153.66.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4e:91:3e:6d:03:55:e5:10:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=e3cff48b-a32f-42d3-99a4-3c80c51c67f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:64:ba:0a:12:84:ae:cb:14:14:40:d0:d2:4d: 60:9c:08:d1:2e:8b:b3:f6:5a:92:3f:3a:2d:07:0f: 12:89:12:75:b9:f6:23:96:21:97:11:5c:7b:d6:4e: f0:22:e4:75:c2:95:61:c9:5a:3c:7f:4d:2a:d8:c5: b9:b7:e4:81:7d:bf:58:9a:9b:04:81:fc:5f:f2:f7: e6:f3:f7:92:7a:b2:15:44:d5:9e:9e:0a:51:f3:7c: 15:64:3f:3c:f3:5d:01:c2:b5:58:a9:31:d7:80:35: ff:9c:27:19:1d:9b:be:80:9f:5d:fe:8e:33:f1:e1: 88:d9:dd:99:ee:fa:0b:a0:63:87:41:a8:20:cd:a4: b2:e0:6a:63:84:12:49:84:75:19:08:a2:b7:eb:ab: 25:c6:63:fa:12:18:bb:4c:4e:b6:28:86:16:db:f8: 54:43:81:a7:ca:c1:5e:7e:52:89:e1:ad:ec:07:bb: 37:e2:56:de:2e:fc:f7:e8:58:04:96:20:5f:61:f8: 25:19:96:78:78:2c:9b:07:68:88:74:f1:61:f0:a5: 46:26:45:bf:5b:8a:07:56:22:f6:84:e0:66:cf:59: 85:22:06:1e:7d:3e:61:28:c6:0a:91:ad:e7:fa:d2: fd:b4:25:9d:5d:b1:72:90:ec:d4:ad:cf:a7:4d:5b: 48:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D0:00:D9:22:54:95:94:2C:1B:2E:49:62:5A:2F:0D:F5:5D:B9:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db04736c-f31c-3c7f-873c-818d9665fd54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:18:53:51:3d:5e:ac:23:ea:f8:08:4b:4a:c4:3d:77:01:1e: 4d:0a:b5:b7:77:52:be:0c:48:13:a8:da:c7:6e:82:c3:db:b2: 80:be:9f:02:68:3a:b7:c1:f7:75:6a:88:1d:f7:6e:9e:db:87: fb:26:d0:1b:6c:c8:11:05:3a:8a:cb:18:bd:b6:84:2a:ba:12: bd:8b:ec:62:3f:ff:26:91:53:70:84:5e:2a:fc:d5:55:c6:be: af:ba:d1:e7:6e:df:21:27:30:42:2e:44:7f:4e:f6:54:04:0b: c4:e8:69:82:38:dc:56:b9:02:03:39:bb:0b:59:a5:c5:80:7a: 61:66:9a:64:2e:06:07:3c:0a:13:be:43:a5:66:05:f2:86:24: 02:7b:23:42:da:f2:d8:1d:78:1d:71:c5:e4:2f:7b:7e:8a:7d: e3:74:e8:21:91:09:7f:9e:05:27:59:70:59:72:da:1f:be:42: d1:aa:ce:ba:09:e9:51:e3:84:e6:88:ba:bf:87:d1:29:da:ba: 7f:19:58:42:a5:ad:81:86:b2:cd:1c:46:fe:29:1c:4a:52:4a: 86:59:63:4c:3d:77:18:f2:f5:fd:1e:85:ba:c5:5d:df:6e:93: 0e:61:10:ff:da:b7:1b:a7:4d:90:48:63:42:47:ab:77:0e:43: c3:26:ad:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6k6RPm0DVeUQXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk ZTNjZmY0OGItYTMyZi00MmQzLTk5YTQtM2M4MGM1MWM2N2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2S6ChKErssUFEDQ0k1gnAjRLouz9lqSPzot Bw8SiRJ1ufYjliGXEVx71k7wIuR1wpVhyVo8f00q2MW5t+SBfb9YmpsEgfxf8vfm 8/eSerIVRNWengpR83wVZD88810BwrVYqTHXgDX/nCcZHZu+gJ9d/o4z8eGI2d2Z 7voLoGOHQaggzaSy4GpjhBJJhHUZCKK366slxmP6Ehi7TE62KIYW2/hUQ4GnysFe flKJ4a3sB7s34lbeLvz36FgEliBfYfglGZZ4eCybB2iIdPFh8KVGJkW/W4oHViL2 hOBmz1mFIgYefT5hKMYKka3n+tL9tCWdXbFykOzUrc+nTVtIhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHQANkiVJWULBsuSWJaLw31XbnVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZGIwNDczNmMtZjMxYy0z YzdmLTg3M2MtODE4ZDk2NjVmZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5lCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0YU1E9Xqwj6vgIS0rEPXcBHk0Ktbd3Ur4MSBOo2sdugsPbsoC+nwJo OrfB93VqiB33bp7bh/sm0BtsyBEFOorLGL22hCq6Er2L7GI//yaRU3CEXir81VXG vq+60edu3yEnMEIuRH9O9lQEC8ToaYI43Fa5AgM5uwtZpcWAemFmmmQuBgc8ChO+ Q6VmBfKGJAJ7I0La8tgdeB1xxeQve36KfeN06CGRCX+eBSdZcFly2h++QtGqzroJ 6VHjhOaIur+H0Snaun8ZWEKlrYGGss0cRv4pHEpSSoZZY0w9dxjy9f0ehbrFXd9u kw5hEP/atxunTZBIY0JHq3cOQ8MmraU= -----END CERTIFICATE-----Generated at Mon Jun 16 15:41:35 2025 by rpki-client