$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa File: ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa (raw, json) Hash identifier: 1VM2Jq+t5nnxPwxf1et2+GnUvNMTEt477JO5W35uzp0= Subject key identifier: CB:3C:77:4F:7F:44:4B:2C:44:46:FE:6B:08:51:2D:D7:E5:85:3B:C2 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858491246AC7AACF2256D2DBD6000 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 0 IP address blocks: 131.153.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ac:7a:ac:f2:25:6d:2d:bd:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=ffa7412f-f9e0-495d-acbd-15bc514f2758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:75:23:76:5d:21:fd:1f:6a:78:03:1c:89:9e: 69:88:49:0f:45:0d:f6:3e:4d:34:97:83:b4:05:c6: c2:d1:6f:23:62:8d:ae:86:53:87:a1:54:52:f1:2b: e8:65:42:a9:2f:13:13:a6:9b:9c:58:c3:75:c8:25: 89:15:2b:91:55:18:81:5c:e9:37:8e:dd:d8:99:99: 8e:1b:1f:e9:d9:69:87:ca:8d:71:bd:05:7f:ae:2b: 52:eb:a0:f0:b1:a1:a4:f7:36:df:cd:a0:aa:2b:70: f6:58:96:9e:2f:75:4a:02:af:f6:93:19:7e:f2:d9: b1:0d:c0:f6:35:25:95:de:59:b1:2e:37:71:a2:e3: be:93:b5:fb:95:92:4a:34:f2:39:65:55:76:b9:07: 50:97:a0:58:59:a8:2b:7f:6d:5c:02:35:89:f8:98: f6:f1:71:9c:77:7d:ea:2d:99:e1:85:8f:a4:f1:77: b2:10:1f:7c:b2:c3:74:d4:aa:45:60:93:ff:56:60: 5f:7b:4c:a1:ac:af:4e:47:00:df:5a:21:6c:ca:89: a0:14:e4:43:dd:85:9a:55:28:73:d8:a6:2c:fb:c8: 20:cb:1f:df:bb:bf:75:6b:42:b8:c5:28:89:f1:0f: 41:5a:ec:d5:88:26:f9:5c:10:79:27:e6:84:04:c3: a0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3C:77:4F:7F:44:4B:2C:44:46:FE:6B:08:51:2D:D7:E5:85:3B:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:ce:c4:22:88:4c:05:92:5c:8a:98:49:f2:41:98:47:13:1c: a6:87:46:28:f3:90:4e:93:af:00:e4:4f:b1:63:87:d3:b0:ac: ca:5f:06:b8:0b:6e:d3:34:65:b1:1a:fd:a6:12:e3:33:e7:0d: d4:a5:2a:8c:95:55:3d:60:4d:f0:0b:c2:3b:6e:1d:94:92:36: 15:33:20:39:e3:19:c9:3c:1a:01:ec:4b:48:32:c0:6a:cb:a7: de:cd:00:d4:df:2a:74:35:c0:b7:11:53:1c:4b:99:6d:c7:41: 6a:47:2b:3f:83:ac:da:5c:c6:cf:13:c3:2d:ff:7b:ae:64:1d: d4:24:60:ac:e8:93:51:27:b0:07:bb:f5:66:ad:8d:c7:4b:4d: 7a:41:76:c2:dc:f4:a1:ec:74:7c:7e:86:6d:b4:e2:38:68:c3: 91:97:cc:74:5c:ea:52:11:89:38:81:69:16:58:84:68:f6:73: f3:f4:b3:33:13:24:ca:ea:bc:4e:5a:b7:fe:9c:67:bc:88:05: 49:d1:14:f4:db:1b:52:f4:3d:51:a0:e1:7a:69:81:39:f6:b1: 42:5d:59:a0:52:59:17:29:87:82:01:da:39:b7:8a:f0:86:7e: ef:a4:e9:f7:0e:9c:30:46:03:78:61:e3:63:f7:ed:22:d6:2b: 86:94:1e:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqx6rPIlbS29YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZmZhNzQxMmYtZjllMC00OTVkLWFjYmQtMTViYzUxNGYyNzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23Ujdl0h/R9qeAMciZ5piEkPRQ32Pk00l4O0 BcbC0W8jYo2uhlOHoVRS8SvoZUKpLxMTppucWMN1yCWJFSuRVRiBXOk3jt3YmZmO Gx/p2WmHyo1xvQV/ritS66DwsaGk9zbfzaCqK3D2WJaeL3VKAq/2kxl+8tmxDcD2 NSWV3lmxLjdxouO+k7X7lZJKNPI5ZVV2uQdQl6BYWagrf21cAjWJ+Jj28XGcd33q LZnhhY+k8XeyEB98ssN01KpFYJP/VmBfe0yhrK9ORwDfWiFsyomgFORD3YWaVShz 2KYs+8ggyx/fu791a0K4xSiJ8Q9BWuzViCb5XBB5J+aEBMOg9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMs8d09/REssREb+awhRLdflhTvCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZGRjYWQ0ZDAtNTBmOS0z ZjYzLTk2NjAtN2I1YjkzMWJiYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5nwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPOxCKITAWSXIqYSfJBmEcTHKaHRijzkE6TrwDkT7Fjh9OwrMpfBrgL btM0ZbEa/aYS4zPnDdSlKoyVVT1gTfALwjtuHZSSNhUzIDnjGck8GgHsS0gywGrL p97NANTfKnQ1wLcRUxxLmW3HQWpHKz+DrNpcxs8Twy3/e65kHdQkYKzok1EnsAe7 9WatjcdLTXpBdsLc9KHsdHx+hm204jhow5GXzHRc6lIRiTiBaRZYhGj2c/P0szMT JMrqvE5at/6cZ7yIBUnRFPTbG1L0PVGg4XppgTn2sUJdWaBSWRcph4IB2jm3ivCG fu+k6fcOnDBGA3hh42P37SLWK4aUHu4= -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:01 2025 by rpki-client