$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1823aeee-620e-331b-bd1e-36eec1af6cfa.roa File: 1823aeee-620e-331b-bd1e-36eec1af6cfa.roa (raw, json) Hash identifier: C2hhIJjbqu9ESt6nf8HnEpuaQo5i/6IAYojw3tteJX0= Subject key identifier: 1F:EC:6D:53:3F:A2:46:57:72:DD:E3:14:C0:18:CA:7D:BD:A0:C6:BB Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EBEA4E3FEF9940105E283600 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1823aeee-620e-331b-bd1e-36eec1af6cfa.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 20454 IP address blocks: 131.153.42.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4e:3f:ef:99:40:10:5e:28:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=212ff905-e1a5-4314-8748-121d0d19b3cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a8:c9:1f:95:49:c0:b6:b3:8e:bb:39:85:83: 93:e4:8a:f4:e0:79:90:ae:e7:fd:0b:e1:ee:73:3b: c7:9d:72:4c:43:15:ca:9f:1e:a6:82:78:53:72:c5: 75:af:89:8f:af:53:c2:ab:24:47:65:b0:1f:83:08: 0e:55:62:8d:f3:84:78:0a:de:86:01:97:d6:0b:d3: 3d:f4:1c:bd:f9:b5:80:c9:60:d0:53:9c:cd:02:18: ac:2b:ea:f1:83:0b:7f:d8:22:63:37:6f:78:60:75: 22:69:42:d1:17:bd:a0:b4:05:de:85:78:0c:c1:3f: 6a:f4:13:39:42:8d:89:b3:fb:04:2b:66:63:c1:79: fb:d4:cd:c7:2d:ad:7f:00:14:e5:88:bd:79:a8:d4: f0:5a:12:af:0c:27:c6:c4:39:4e:3a:a1:70:91:45: 8f:6e:83:7f:d3:f9:1f:95:47:6e:73:d7:60:6b:21: 24:6a:54:c3:2a:19:f2:72:eb:3a:42:c9:8f:a0:81: 89:e9:b1:16:71:af:d6:51:df:e6:cf:45:a3:f7:35: cf:d0:03:a2:2b:fe:b9:fd:09:81:3f:06:13:b0:00: 32:c9:80:b5:c7:04:71:b9:de:29:19:f4:48:07:6f: 30:2d:38:03:5d:91:3d:92:5f:27:01:0b:56:22:f1: 9f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:EC:6D:53:3F:A2:46:57:72:DD:E3:14:C0:18:CA:7D:BD:A0:C6:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1823aeee-620e-331b-bd1e-36eec1af6cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c1:3e:72:25:e0:61:5f:f9:28:e1:cc:ba:6e:b2:4d:e2:b0: 86:f1:0f:2c:b0:3c:5f:e0:b5:ca:3c:d0:cb:c5:72:42:17:ee: b4:a7:ec:be:b6:ad:51:bd:0e:b5:1e:c5:ba:f0:ea:ef:ab:ec: 4d:4c:cf:cc:fb:2b:8a:bb:d4:55:3b:5c:92:44:5e:72:6f:0a: 10:9d:cb:b4:a8:91:c0:c2:df:3b:88:fa:00:8c:10:25:00:88: d2:d9:ea:ec:fc:7b:88:75:3c:8a:73:e3:b0:9e:82:83:51:bf: 0e:67:2c:5e:ab:1f:1f:35:0a:3f:67:fa:9c:f0:44:e3:8d:9d: 91:59:d7:44:20:1b:b0:cb:9a:f2:32:1a:79:5f:08:f2:0f:74: 31:3f:c4:18:b9:ba:a4:0c:06:f0:21:d6:4d:60:a4:00:00:69: 3f:1f:12:89:96:bc:08:cc:ce:df:58:6c:6f:18:ad:f5:c2:b6: 86:aa:70:38:a8:cc:1d:88:1f:43:9b:c2:4f:74:1f:d8:f6:a5: 92:65:fb:15:cd:96:5b:ac:3e:fc:96:f1:5d:4f:af:b8:cb:83: fb:a6:87:d8:c0:ed:6e:6f:c9:c2:81:9a:6d:f2:26:79:e2:8f: 7c:60:10:43:14:db:08:0a:05:ca:94:8f:f4:be:56:67:50:2d: 3e:f8:a1:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6k4/75lAEF4oNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MjEyZmY5MDUtZTFhNS00MzE0LTg3NDgtMTIxZDBkMTliM2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoajJH5VJwLazjrs5hYOT5Ir04HmQruf9C+Hu czvHnXJMQxXKnx6mgnhTcsV1r4mPr1PCqyRHZbAfgwgOVWKN84R4Ct6GAZfWC9M9 9By9+bWAyWDQU5zNAhisK+rxgwt/2CJjN294YHUiaULRF72gtAXehXgMwT9q9BM5 Qo2Js/sEK2ZjwXn71M3HLa1/ABTliL15qNTwWhKvDCfGxDlOOqFwkUWPboN/0/kf lUduc9dgayEkalTDKhnycus6QsmPoIGJ6bEWca/WUd/mz0Wj9zXP0AOiK/65/QmB PwYTsAAyyYC1xwRxud4pGfRIB28wLTgDXZE9kl8nAQtWIvGf+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/sbVM/okZXct3jFMAYyn29oMa7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTgyM2FlZWUtNjIwZS0z MzFiLWJkMWUtMzZlZWMxYWY2Y2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5kqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3BPnIl4GFf+SjhzLpusk3isIbxDyywPF/gtco80MvFckIX7rSn7L62 rVG9DrUexbrw6u+r7E1Mz8z7K4q71FU7XJJEXnJvChCdy7SokcDC3zuI+gCMECUA iNLZ6uz8e4h1PIpz47CegoNRvw5nLF6rHx81Cj9n+pzwROONnZFZ10QgG7DLmvIy GnlfCPIPdDE/xBi5uqQMBvAh1k1gpAAAaT8fEomWvAjMzt9YbG8YrfXCtoaqcDio zB2IH0Obwk90H9j2pZJl+xXNllusPvyW8V1Pr7jLg/umh9jA7W5vycKBmm3yJnni j3xgEEMU2wgKBcqUj/S+VmdQLT74oTo= -----END CERTIFICATE-----Generated at Sun Jun 29 10:35:58 2025 by rpki-client