$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ea53d572-5bb7-36a2-b587-3aaa2690505e.roa File: ea53d572-5bb7-36a2-b587-3aaa2690505e.roa (raw, json) Hash identifier: f1guaAo8ES/qW7nzg4TUDGHVJCKOQw14whmzNjGJW3g= Subject key identifier: 20:02:EA:03:05:37:C1:9F:21:48:CF:09:D0:26:8D:14:16:37:F7:58 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858498769B19F443535ABFCED2180 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ea53d572-5bb7-36a2-b587-3aaa2690505e.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 20454 IP address blocks: 131.153.226.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b1:9f:44:35:35:ab:fc:ed:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=adc7aa20-9327-4b69-9c62-47fab37692ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2e:65:e6:27:a9:ac:e5:f0:56:ee:de:1c:41: 98:ee:e2:ed:21:36:5d:ee:af:7f:51:7d:de:3c:4c: 5d:46:ad:de:55:29:46:df:2c:2e:49:4d:ce:a1:8e: 92:2f:83:b5:bf:e4:2c:cf:49:e2:0b:76:f3:c5:1f: 43:64:b2:33:f6:d6:e0:a5:66:e4:06:2b:5a:7d:3d: d4:03:4b:b3:dc:09:68:88:da:ce:51:7a:cc:bc:f2: 8e:6d:1e:41:b9:31:eb:bb:0a:dd:f1:ec:df:4f:54: e5:71:c1:72:94:55:4c:9b:c3:6b:9b:9b:eb:cf:1e: 5d:7d:64:53:69:0e:8c:79:6f:88:68:7f:1a:7e:25: c0:ba:26:89:3c:86:8d:a8:a9:8f:62:77:70:21:f4: c3:c8:e0:54:7b:00:5f:f4:31:40:e8:2f:d8:10:1b: 5f:cb:45:34:85:c0:e7:4d:8d:2f:bf:4f:dc:cd:01: 1c:f1:22:fd:6f:ca:50:df:d9:f5:b9:aa:33:9b:58: 0b:21:a0:23:73:78:81:8e:e2:bc:33:c8:35:22:f4: 7b:3c:b5:09:ca:68:8f:57:49:ff:87:e6:d7:30:c0: bb:c3:76:29:b4:32:90:c9:64:03:bd:78:9a:8c:48: cb:de:bd:97:14:5a:53:60:4a:37:2a:3e:75:13:39: 23:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:02:EA:03:05:37:C1:9F:21:48:CF:09:D0:26:8D:14:16:37:F7:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ea53d572-5bb7-36a2-b587-3aaa2690505e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:c0:8a:01:06:c2:6e:b5:80:4b:ad:f1:7c:36:8f:dc:c0:37: 3b:1b:92:e0:4d:ef:77:93:85:0a:46:46:46:3a:7f:cc:85:c0: 0d:20:db:72:9a:58:c8:b4:74:0d:a8:28:50:83:8a:6d:a9:6b: 0a:0a:1e:ea:3b:0f:96:46:c9:3e:93:92:e3:05:1d:09:f5:98: a5:67:8d:42:af:4b:b8:0c:e1:8f:ac:c1:9b:35:de:7c:5b:18: 1e:0e:c7:06:2f:6e:80:5c:f7:3e:df:88:4c:7b:14:f3:fb:eb: f9:8b:f3:cd:ae:03:22:c8:21:a0:3b:e2:c7:3f:c2:be:33:d9: 68:66:4e:e6:e4:fd:6b:8c:ce:7c:4f:1d:fc:41:9f:40:57:47: 1d:22:99:18:06:e1:19:e2:34:80:49:e4:2b:2d:6a:8d:06:27: d5:95:3c:2b:5a:44:45:49:cd:55:d2:ef:0d:bf:b0:41:53:a2: 4f:44:fb:b2:d4:b0:59:38:10:82:a0:4d:57:90:6c:fe:97:c7: ad:c3:71:14:04:dc:ca:25:f5:22:29:12:b3:b9:94:94:29:67: e4:26:14:fa:97:4e:6a:ac:63:8e:f9:68:1d:94:ca:fc:8a:ea: 26:eb:ad:39:04:c3:43:38:a8:a5:3a:10:3e:8d:8d:8c:cb:6a: e0:10:b5:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabGfRDU1q/ztIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YWRjN2FhMjAtOTMyNy00YjY5LTljNjItNDdmYWIzNzY5MmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny5l5ieprOXwVu7eHEGY7uLtITZd7q9/UX3e PExdRq3eVSlG3ywuSU3OoY6SL4O1v+Qsz0niC3bzxR9DZLIz9tbgpWbkBitafT3U A0uz3AloiNrOUXrMvPKObR5BuTHruwrd8ezfT1TlccFylFVMm8Nrm5vrzx5dfWRT aQ6MeW+IaH8afiXAuiaJPIaNqKmPYndwIfTDyOBUewBf9DFA6C/YEBtfy0U0hcDn TY0vv0/czQEc8SL9b8pQ39n1uaozm1gLIaAjc3iBjuK8M8g1IvR7PLUJymiPV0n/ h+bXMMC7w3YptDKQyWQDvXiajEjL3r2XFFpTYEo3Kj51EzkjKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAC6gMFN8GfIUjPCdAmjRQWN/dYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZWE1M2Q1NzItNWJiNy0z NmEyLWI1ODctM2FhYTI2OTA1MDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5niMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7AigEGwm61gEut8Xw2j9zANzsbkuBN73eThQpGRkY6f8yFwA0g23Ka WMi0dA2oKFCDim2pawoKHuo7D5ZGyT6TkuMFHQn1mKVnjUKvS7gM4Y+swZs13nxb GB4OxwYvboBc9z7fiEx7FPP76/mL882uAyLIIaA74sc/wr4z2WhmTubk/WuMznxP HfxBn0BXRx0imRgG4RniNIBJ5Cstao0GJ9WVPCtaREVJzVXS7w2/sEFTok9E+7LU sFk4EIKgTVeQbP6Xx63DcRQE3Mol9SIpErO5lJQpZ+QmFPqXTmqsY475aB2UyvyK 6ibrrTkEw0M4qKU6ED6NjYzLauAQtfw= -----END CERTIFICATE-----Generated at Sun Apr 27 01:08:11 2025 by rpki-client