$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/06595940-0bb5-3c4e-89d3-7ec091d5d6ab.roa File: 06595940-0bb5-3c4e-89d3-7ec091d5d6ab.roa (raw, json) Hash identifier: vKVle0eds6qj28VgdtsebQwgHDQtClcaVL/1bfkMqYI= Subject key identifier: 61:D8:9E:B4:10:48:4F:41:CB:B1:F7:E6:25:30:09:79:B4:30:00:1C Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849ED4FCA2D7048E66E79E76900 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/06595940-0bb5-3c4e-89d3-7ec091d5d6ab.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 20454 IP address blocks: 131.153.32.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:ca:2d:70:48:e6:6e:79:e7:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=958aa3db-8ca1-4eee-9584-0078550b8c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4d:6f:12:6b:58:70:b4:17:9d:76:13:28:45: fa:50:80:22:f4:a7:2a:7a:35:7e:d2:97:28:a4:f0: c9:15:2a:37:05:2b:77:e6:c0:2a:af:16:21:d6:17: b1:0f:6c:02:c0:ad:ef:24:86:37:14:71:8b:08:53: 1d:d4:dd:2b:93:2e:4e:db:52:f3:e5:e9:9f:a0:d4: aa:e2:ea:e7:c5:19:4f:e9:80:d1:28:1b:fa:c5:d8: 46:44:47:43:3d:8c:81:e7:7b:36:63:df:04:76:e5: 59:4f:77:8c:18:b1:85:64:22:a2:a2:3d:0e:77:8a: a2:44:8c:97:42:8f:4d:3e:4c:dc:d3:7f:a6:eb:5f: f4:c6:bf:76:26:bc:c5:54:82:df:80:83:c0:dd:c2: 5a:c1:8b:48:ee:99:c6:87:75:b8:03:25:97:5a:94: 1a:e5:12:83:ee:10:30:4c:6d:0d:e6:ec:4c:01:14: fe:4e:e5:9f:b2:ee:5a:2b:b1:53:1e:46:33:d5:c2: e8:6a:96:60:f7:9f:9a:06:77:1b:a6:2b:31:aa:89: 8f:4d:09:61:eb:ea:8d:2e:e7:da:3f:0a:90:d7:25: 20:8d:e1:b8:d8:03:e1:86:f9:e0:92:da:cf:7b:a0: d8:a4:7f:d7:4a:4a:05:28:a7:62:6f:f8:77:0d:bd: 1b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D8:9E:B4:10:48:4F:41:CB:B1:F7:E6:25:30:09:79:B4:30:00:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/06595940-0bb5-3c4e-89d3-7ec091d5d6ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:57:e9:eb:7e:2f:7d:d3:5c:a3:92:16:99:c4:fa:be:f9:8d: 75:c6:6d:2b:24:b4:e2:75:ea:ab:c8:e1:6a:2e:a6:46:cc:fb: cb:2e:97:28:74:e3:67:a1:78:83:4b:a0:8a:bb:d5:45:40:23: 46:49:14:29:f5:47:cb:63:05:88:7e:7a:27:59:59:b6:c7:c4: 0e:5d:c6:4b:01:d5:39:78:ca:f0:9f:12:fa:87:e6:ba:f8:16: 57:5a:13:55:85:08:08:f7:1f:33:95:03:d8:33:ad:8b:02:65: dc:9c:24:e7:18:04:a9:c7:e1:bc:26:8d:5a:4b:d5:96:c1:dc: e9:79:8c:4d:bc:0c:fb:0f:55:9f:43:c8:d9:7d:fd:47:11:80: 4c:58:6e:b5:84:e5:ec:13:a0:c5:29:f0:cf:75:d9:a9:f8:85: 84:c3:39:e0:7a:9f:3e:fd:d5:93:ef:ed:97:4c:80:60:eb:8b: e7:30:1e:39:92:7d:1f:94:0d:55:4b:cb:63:ea:fd:08:58:d2: cf:e4:6a:4b:aa:39:2e:7e:88:31:21:70:a6:c6:8a:a0:33:4e: c1:aa:44:cf:fa:97:b4:4f:eb:6e:64:81:29:81:2e:7a:49:55: ed:28:8c:30:2a:ee:bc:3d:97:1a:d6:90:5e:3a:f6:86:12:a3: 69:9e:32:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8otcEjmbnnnaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk OTU4YWEzZGItOGNhMS00ZWVlLTk1ODQtMDA3ODU1MGI4YzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE1vEmtYcLQXnXYTKEX6UIAi9KcqejV+0pco pPDJFSo3BSt35sAqrxYh1hexD2wCwK3vJIY3FHGLCFMd1N0rky5O21Lz5emfoNSq 4urnxRlP6YDRKBv6xdhGREdDPYyB53s2Y98EduVZT3eMGLGFZCKioj0Od4qiRIyX Qo9NPkzc03+m61/0xr92JrzFVILfgIPA3cJawYtI7pnGh3W4AyWXWpQa5RKD7hAw TG0N5uxMART+TuWfsu5aK7FTHkYz1cLoapZg95+aBncbpisxqomPTQlh6+qNLufa PwqQ1yUgjeG42APhhvngktrPe6DYpH/XSkoFKKdib/h3Db0bQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHYnrQQSE9By7H35iUwCXm0MAAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMDY1OTU5NDAtMGJiNS0z YzRlLTg5ZDMtN2VjMDkxZDVkNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5kgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJX6et+L33TXKOSFpnE+r75jXXGbSsktOJ16qvI4WoupkbM+8sulyh0 42eheINLoIq71UVAI0ZJFCn1R8tjBYh+eidZWbbHxA5dxksB1Tl4yvCfEvqH5rr4 FldaE1WFCAj3HzOVA9gzrYsCZdycJOcYBKnH4bwmjVpL1ZbB3Ol5jE28DPsPVZ9D yNl9/UcRgExYbrWE5ewToMUp8M912an4hYTDOeB6nz791ZPv7ZdMgGDri+cwHjmS fR+UDVVLy2Pq/QhY0s/kakuqOS5+iDEhcKbGiqAzTsGqRM/6l7RP625kgSmBLnpJ Ve0ojDAq7rw9lxrWkF469oYSo2meMhI= -----END CERTIFICATE-----Generated at Sun Jun 29 16:21:01 2025 by rpki-client