$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/845a3255-66a8-34dc-a162-c938627caa3a.roa File: 845a3255-66a8-34dc-a162-c938627caa3a.roa (raw, json) Hash identifier: JySZKQtJuMMjmoTCzpG8fqVzug0GDWHGIjuDWMNDLvQ= Subject key identifier: 88:FC:42:DC:EE:0B:33:53:EE:FD:1A:E4:AC:A2:42:F4:FF:2F:C6:E8 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490E16BFFFA6A52CA6E34402C0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/845a3255-66a8-34dc-a162-c938627caa3a.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 11572 IP address blocks: 131.153.24.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:bf:ff:a6:a5:2c:a6:e3:44:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=54eee1fc-6de9-4a4a-bf42-32958aad4e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ba:d5:35:b6:fa:82:d7:7d:1b:7e:aa:01:b1: e2:2d:b3:28:41:da:ee:43:0b:bd:55:41:4f:45:66: 03:1d:8a:5d:12:7c:92:95:e1:e1:1d:2b:85:df:a2: 76:00:ab:31:3d:d0:db:4a:84:8e:d2:c4:0d:52:4d: ea:b5:56:4a:b6:aa:b8:d3:ad:d3:fd:6c:7b:5a:1c: 8f:17:5a:d7:45:9d:03:7c:8a:1c:5f:59:43:38:a6: 58:9f:9a:fe:d6:f9:f3:b6:d9:fa:36:14:cb:5a:e8: 08:85:5d:55:4c:3c:8c:ac:7a:84:20:57:18:db:b5: fd:70:a7:bb:08:f6:83:5e:6b:b3:52:37:99:62:44: b0:3e:f1:ea:d6:ca:6c:73:89:c3:52:28:60:4d:6f: b2:28:b3:0c:33:ea:44:df:d8:bc:b2:6d:15:1e:13: 3a:96:f0:bf:a7:b8:4a:9e:62:e0:98:01:2f:12:21: f5:44:8f:1d:e1:1e:e3:53:4a:18:c7:e8:1e:1c:00: aa:7e:c9:a1:ed:2b:62:20:96:7d:3f:0a:3c:69:43: cf:cb:2b:04:41:ef:4b:fd:3c:ca:43:06:21:63:1a: d1:c8:55:b7:cf:3c:d7:12:d2:24:11:39:15:0b:96: 27:8a:79:1a:35:5e:44:89:8d:96:2c:cb:3d:9b:bf: cd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FC:42:DC:EE:0B:33:53:EE:FD:1A:E4:AC:A2:42:F4:FF:2F:C6:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/845a3255-66a8-34dc-a162-c938627caa3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:10:bf:36:23:f8:b7:03:e2:5a:81:4f:bc:fd:9a:fa:a2:08: d6:d2:bb:3d:eb:57:66:5e:b1:c6:84:a0:27:d8:83:c3:69:e3: 95:de:b9:26:14:d3:d1:fc:8d:30:f5:79:5d:7d:0a:12:60:9b: 5b:d0:bf:34:a8:d0:ab:9a:eb:00:58:df:e3:22:1f:51:44:cd: f3:d1:59:04:90:38:d8:30:88:99:04:1e:b9:bd:3c:6a:92:54: 73:03:37:21:26:18:ee:ff:dc:bf:9e:33:e8:43:10:3f:fc:17: b5:dc:db:76:04:d2:2f:82:1d:ed:e6:8f:80:d4:de:7e:9c:77: 39:b0:a2:2e:26:9d:10:a5:bf:58:af:e4:85:22:c9:50:c1:a2: 0b:73:07:7d:6e:32:99:f3:0f:a9:1e:4d:39:4a:68:ea:1e:ce: a5:8a:a4:be:ec:03:11:84:6d:8f:df:46:95:f4:2c:e9:23:f3: 0f:b8:93:5b:7c:64:15:4c:7b:b7:b1:c3:5c:3c:f7:bb:99:3a: 70:4d:a4:0b:18:32:26:2a:20:8a:42:bf:d9:3d:50:4e:6c:ce: c7:d8:7b:12:09:d7:19:8a:02:94:65:c2:e5:02:bf:9e:3f:4e: 75:32:3e:43:4a:4e:c4:2d:1e:20:18:8f:44:23:01:61:e0:c5: 73:26:14:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFr//pqUspuNEAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk NTRlZWUxZmMtNmRlOS00YTRhLWJmNDItMzI5NThhYWQ0ZTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrrVNbb6gtd9G36qAbHiLbMoQdruQwu9VUFP RWYDHYpdEnySleHhHSuF36J2AKsxPdDbSoSO0sQNUk3qtVZKtqq4063T/Wx7WhyP F1rXRZ0DfIocX1lDOKZYn5r+1vnzttn6NhTLWugIhV1VTDyMrHqEIFcY27X9cKe7 CPaDXmuzUjeZYkSwPvHq1spsc4nDUihgTW+yKLMMM+pE39i8sm0VHhM6lvC/p7hK nmLgmAEvEiH1RI8d4R7jU0oYx+geHACqfsmh7StiIJZ9Pwo8aUPPyysEQe9L/TzK QwYhYxrRyFW3zzzXEtIkETkVC5YninkaNV5EiY2WLMs9m7/N2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj8QtzuCzNT7v0a5KyiQvT/L8boMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvODQ1YTMyNTUtNjZhOC0z NGRjLWExNjItYzkzODYyN2NhYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5kYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcQvzYj+LcD4lqBT7z9mvqiCNbSuz3rV2ZescaEoCfYg8Np45XeuSYU 09H8jTD1eV19ChJgm1vQvzSo0Kua6wBY3+MiH1FEzfPRWQSQONgwiJkEHrm9PGqS VHMDNyEmGO7/3L+eM+hDED/8F7Xc23YE0i+CHe3mj4DU3n6cdzmwoi4mnRClv1iv 5IUiyVDBogtzB31uMpnzD6keTTlKaOoezqWKpL7sAxGEbY/fRpX0LOkj8w+4k1t8 ZBVMe7exw1w897uZOnBNpAsYMiYqIIpCv9k9UE5szsfYexIJ1xmKApRlwuUCv54/ TnUyPkNKTsQtHiAYj0QjAWHgxXMmFBc= -----END CERTIFICATE-----Generated at Mon May 5 18:38:23 2025 by rpki-client