$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3b710bba-fc04-3741-970d-7622d98c7f22.roa File: 3b710bba-fc04-3741-970d-7622d98c7f22.roa (raw, json) Hash identifier: 3Je/0lBKgORSwSd4LQSgPOFPdtY51kB4n7WhQUizHZs= Subject key identifier: 94:93:31:2D:C3:31:45:0A:FF:5E:64:A0:59:1B:A1:0A:D6:0A:79:C2 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849BF3F5E86E857E0F011DE1200 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3b710bba-fc04-3741-970d-7622d98c7f22.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 20454 IP address blocks: 131.153.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:5e:86:e8:57:e0:f0:11:de:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=5d9b5e3e-ab90-40c6-93b7-bd7429654e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e6:26:37:23:2e:b7:35:ff:0d:dd:19:4f:4b: 36:7a:4a:19:96:96:d7:cf:1e:b1:a0:97:9b:e7:f8: b3:1b:9a:99:98:da:12:43:99:3a:c3:7c:1a:44:e2: 54:e7:40:12:00:8e:29:cb:08:6d:e4:0d:5c:59:8a: 21:6e:5d:97:e1:67:8d:a1:8b:d5:77:df:ee:62:8a: 26:e8:fd:0e:86:90:31:ef:1d:97:41:04:62:71:19: e1:76:74:37:4d:d1:40:2f:29:df:e4:d9:df:2c:bd: ef:68:0e:cc:06:c6:aa:e0:da:ca:92:20:01:8d:34: e4:b8:79:70:7a:1a:f2:b0:76:9c:d4:61:c2:24:7b: 38:b7:eb:af:bf:f6:a7:c8:16:94:6b:65:c2:ae:2f: 12:8f:2c:bb:53:23:6d:54:0e:44:0f:44:2d:ab:df: ea:21:1d:4e:38:e4:02:2c:12:25:b7:ed:bc:33:25: fc:6e:f7:83:e6:97:a2:1a:a3:40:10:1d:27:57:b8: 89:bc:f3:1e:94:c0:85:a4:7f:ed:d8:9d:eb:2c:29: f3:4e:e5:88:ca:be:2a:d0:9d:a8:c8:73:80:3a:8d: 02:ea:f0:32:02:f4:b8:aa:22:85:00:d2:f2:59:6c: 3a:9e:59:dd:0a:91:81:60:48:4a:38:70:bd:1d:fb: 57:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:93:31:2D:C3:31:45:0A:FF:5E:64:A0:59:1B:A1:0A:D6:0A:79:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3b710bba-fc04-3741-970d-7622d98c7f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:61:e5:59:ec:b2:1c:58:54:d4:d0:f2:6d:ec:75:c1:84:2f: 48:53:2d:7f:50:a7:48:17:de:46:f5:63:6f:49:dc:ca:63:0f: 00:83:82:3b:65:c8:de:24:ad:d5:6f:d6:73:f8:0e:05:9e:31: 0f:39:36:d0:af:8f:f8:34:39:4e:ac:2f:4a:20:d6:d2:24:47: 3d:5c:61:ab:f7:00:80:53:21:1d:32:7f:ba:af:37:51:c7:d3: 5e:fc:81:81:10:40:c7:ba:37:ce:33:81:a1:96:31:00:87:f8: e9:a6:49:bc:c3:86:d1:c7:f6:c6:c9:27:c2:17:d4:bb:34:e2: a9:74:04:42:9a:15:07:76:4d:ce:f9:88:16:74:cf:f7:e5:03: 37:20:5a:fb:25:22:e6:e6:39:ba:55:78:dc:0e:10:bb:da:1c: 86:57:9f:66:23:bb:08:8a:1a:fb:bd:a5:bd:80:4d:d1:fc:ff: e9:5f:89:e0:4d:dc:f3:ac:8c:3c:b8:f3:8c:d5:bd:5a:1b:90: 32:62:8b:d5:8b:5b:f1:9a:b5:e8:4b:ba:eb:d3:ab:0a:56:4f: 73:13:32:44:09:48:b1:a7:1e:1c:2c:c6:8a:55:ae:67:b6:da: 23:f7:9c:bd:ed:30:66:00:d1:5a:72:e7:8d:bc:bc:f1:00:79: c3:e2:a6:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P16G6Ffg8BHeEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NWQ5YjVlM2UtYWI5MC00MGM2LTkzYjctYmQ3NDI5NjU0ZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOYmNyMutzX/Dd0ZT0s2ekoZlpbXzx6xoJeb 5/izG5qZmNoSQ5k6w3waROJU50ASAI4pywht5A1cWYohbl2X4WeNoYvVd9/uYoom 6P0OhpAx7x2XQQRicRnhdnQ3TdFALynf5NnfLL3vaA7MBsaq4NrKkiABjTTkuHlw ehrysHac1GHCJHs4t+uvv/anyBaUa2XCri8Sjyy7UyNtVA5ED0Qtq9/qIR1OOOQC LBIlt+28MyX8bveD5peiGqNAEB0nV7iJvPMelMCFpH/t2J3rLCnzTuWIyr4q0J2o yHOAOo0C6vAyAvS4qiKFANLyWWw6nlndCpGBYEhKOHC9HftXPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSTMS3DMUUK/15koFkboQrWCnnCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2I3MTBiYmEtZmMwNC0z NzQxLTk3MGQtNzYyMmQ5OGM3ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5nqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdh5VnsshxYVNTQ8m3sdcGEL0hTLX9Qp0gX3kb1Y29J3MpjDwCDgjtl yN4krdVv1nP4DgWeMQ85NtCvj/g0OU6sL0og1tIkRz1cYav3AIBTIR0yf7qvN1HH 0178gYEQQMe6N84zgaGWMQCH+OmmSbzDhtHH9sbJJ8IX1Ls04ql0BEKaFQd2Tc75 iBZ0z/flAzcgWvslIubmObpVeNwOELvaHIZXn2YjuwiKGvu9pb2ATdH8/+lfieBN 3POsjDy484zVvVobkDJii9WLW/GatehLuuvTqwpWT3MTMkQJSLGnHhwsxopVrme2 2iP3nL3tMGYA0Vpy5428vPEAecPipio= -----END CERTIFICATE-----Generated at Sat May 10 10:17:55 2025 by rpki-client