$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/30cbe3fb-cf82-3693-9eb4-9036f6540e38.roa File: 30cbe3fb-cf82-3693-9eb4-9036f6540e38.roa (raw, json) Hash identifier: s1kTBAG0l4AIm4g6mJ5KDg/heDr6Je2t5BHJ9fWVg2A= Subject key identifier: 16:7F:5A:A3:9B:1B:54:F4:00:AE:58:01:97:57:E0:CD:16:57:64:F9 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EBEA4F02937891A428D6A080 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/30cbe3fb-cf82-3693-9eb4-9036f6540e38.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 39239 IP address blocks: 131.153.89.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4f:02:93:78:91:a4:28:d6:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=154a1575-361c-4c9e-93b8-685b9d86bcee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:78:41:c8:6c:89:ee:02:73:1c:50:05:65: 04:d2:a8:6b:ad:a3:ff:84:8b:09:e4:c5:70:ff:42: 78:c6:91:c3:bc:97:d2:3e:e3:c1:50:df:04:b1:ff: 73:36:6c:7e:76:79:d7:31:d3:58:ab:8a:e0:2c:5f: c0:9c:e8:b1:30:80:e4:57:f6:76:d7:21:b5:b2:15: a2:12:17:ea:17:2d:05:71:e5:0b:91:85:d8:c6:b1: 3f:7f:b1:db:34:f6:9b:17:2c:e3:dd:2f:a0:b6:16: 31:4e:33:5d:30:4d:69:75:91:1f:03:4c:15:06:f0: 61:73:30:02:b8:45:e7:0f:26:64:9d:f8:06:1d:dc: ea:90:51:88:9b:bd:f1:b7:61:74:f2:03:66:a8:c4: 18:5d:c0:d0:88:4a:3f:c1:8c:29:a2:83:50:f5:5d: e3:0b:ca:b2:7a:f7:f2:43:71:14:40:9f:d8:c9:ab: e3:9e:51:f2:bd:ce:92:a5:72:e1:7c:87:7f:cd:ac: 80:d5:2c:82:d1:c9:ad:b3:c9:ef:e3:b9:df:e1:3c: e3:6b:92:1a:3d:d0:6d:d4:ef:f5:38:ea:4f:a3:c5: ac:01:5d:c8:c3:ee:8f:61:ae:f3:35:69:84:d6:3e: 11:55:b6:d1:cc:1e:7d:76:42:9a:62:ab:4e:3a:21: c2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7F:5A:A3:9B:1B:54:F4:00:AE:58:01:97:57:E0:CD:16:57:64:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/30cbe3fb-cf82-3693-9eb4-9036f6540e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:29:13:5b:05:5f:c3:9e:d1:9c:e9:33:63:28:4a:3c:85:e6: 5c:10:7b:69:bc:c9:45:e0:05:34:bc:8e:5f:7a:fa:ce:a4:44: 40:bd:aa:10:71:3e:84:28:3a:66:47:2c:80:5a:60:26:e7:e8: 16:5f:da:85:95:27:4b:d1:bb:ad:a3:c2:98:3d:fa:17:9e:f5: 08:4d:0d:5d:5e:bd:18:25:08:af:ba:2d:67:07:e1:2d:29:93: 30:b2:ed:1b:e1:a8:50:e6:fc:41:a3:a8:21:e0:19:57:39:e0: a2:f2:8d:cc:96:77:0c:5c:38:78:0c:f4:8a:59:d5:bb:49:26: f7:d8:a8:5f:49:b0:ad:1f:57:19:30:1e:24:d3:e8:2a:a7:4b: 16:56:e7:3e:26:60:0a:01:a7:e1:5a:67:b7:4c:cf:11:e9:07: 75:e9:b5:6d:cf:79:09:b7:f8:d0:85:9e:05:ae:25:f5:fa:73: c7:63:18:61:4b:7f:ab:03:44:bc:9c:9f:bb:04:24:60:45:7d: dd:32:4a:b9:48:1b:3c:52:a1:34:6d:c8:c3:51:e6:8b:2a:72: 59:6a:61:8c:05:22:59:be:3c:64:1d:0f:c3:26:bc:ab:a3:59: 60:ee:9c:eb:46:5b:8e:e3:f7:0d:3a:bd:c6:20:22:a9:15:f7: 22:30:3e:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6k8Ck3iRpCjWoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MTU0YTE1NzUtMzYxYy00YzllLTkzYjgtNjg1YjlkODZiY2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwh4Qchsie4CcxxQBWUE0qhrraP/hIsJ5MVw /0J4xpHDvJfSPuPBUN8Esf9zNmx+dnnXMdNYq4rgLF/AnOixMIDkV/Z21yG1shWi EhfqFy0FceULkYXYxrE/f7HbNPabFyzj3S+gthYxTjNdME1pdZEfA0wVBvBhczAC uEXnDyZknfgGHdzqkFGIm73xt2F08gNmqMQYXcDQiEo/wYwpooNQ9V3jC8qyevfy Q3EUQJ/YyavjnlHyvc6SpXLhfId/zayA1SyC0cmts8nv47nf4Tzja5IaPdBt1O/1 OOpPo8WsAV3Iw+6PYa7zNWmE1j4RVbbRzB59dkKaYqtOOiHC0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZ/WqObG1T0AK5YAZdX4M0WV2T5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMzBjYmUzZmItY2Y4Mi0z NjkzLTllYjQtOTAzNmY2NTQwZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADopE1sFX8Oe0ZzpM2MoSjyF5lwQe2m8yUXgBTS8jl96+s6kREC9qhBx PoQoOmZHLIBaYCbn6BZf2oWVJ0vRu62jwpg9+hee9QhNDV1evRglCK+6LWcH4S0p kzCy7RvhqFDm/EGjqCHgGVc54KLyjcyWdwxcOHgM9IpZ1btJJvfYqF9JsK0fVxkw HiTT6CqnSxZW5z4mYAoBp+FaZ7dMzxHpB3XptW3PeQm3+NCFngWuJfX6c8djGGFL f6sDRLycn7sEJGBFfd0ySrlIGzxSoTRtyMNR5osqcllqYYwFIlm+PGQdD8MmvKuj WWDunOtGW47j9w06vcYgIqkV9yIwPtg= -----END CERTIFICATE-----Generated at Sun Jun 29 19:17:38 2025 by rpki-client