$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c5c70e70-bb5c-30b4-8842-4be1aca4a393.roa File: c5c70e70-bb5c-30b4-8842-4be1aca4a393.roa (raw, json) Hash identifier: SJSuRV25Pw07FjGJGjEwabN3FZ2BMW55t6a2OQMQ8Xo= Subject key identifier: 8F:AF:D9:3A:84:1C:E9:F6:1E:4F:F3:3D:1E:74:D8:33:AC:81:CB:28 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858496FAF0B2B56ABA2500184E200 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c5c70e70-bb5c-30b4-8842-4be1aca4a393.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 20454 IP address blocks: 131.153.225.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:0b:2b:56:ab:a2:50:01:84:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=a854b812-7578-4717-9b14-33f8b56a42e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d5:a8:f9:22:4e:a1:ba:6b:df:14:dd:25:46: 3d:45:d2:91:ee:32:ee:8a:b8:dc:52:e6:66:46:54: 6e:c5:55:e2:a0:b0:4c:51:d4:8e:2a:f6:d8:10:38: 26:7c:7f:34:92:f3:f3:b4:71:34:fe:ae:aa:dc:aa: 00:60:3d:3d:35:d1:9e:1b:01:d9:44:3d:4b:b6:d4: 99:8d:9a:4e:3e:22:38:f1:c1:b5:a6:ad:69:ac:4d: 89:34:85:3d:7e:c9:ac:1d:db:45:6c:7f:a1:03:58: 7d:3d:53:5f:8c:a7:1c:a6:e7:2b:82:2b:cf:d4:a1: e4:c3:40:62:f9:a8:eb:e1:56:b8:e9:4f:9d:28:c8: 5e:2c:60:11:92:65:fb:44:b4:81:b0:ad:c7:eb:76: 1a:0d:0c:d5:e4:a9:6c:82:c9:8f:94:ef:9f:54:ce: 65:87:72:51:68:b6:c2:2a:ca:a2:de:79:a9:07:2a: 20:70:f7:40:d9:d3:87:45:f3:5a:01:30:e1:81:c2: a6:7d:a2:32:ba:a3:34:1a:35:b7:0e:50:fb:37:46: a4:f4:58:45:8a:d6:c1:1d:12:47:10:1f:f2:59:4b: e2:5e:ea:46:d8:e7:ae:d0:fb:a1:d8:f8:49:d2:21: 1e:c2:0c:a6:05:24:ec:5d:e4:bf:8c:50:b6:f5:c5: cf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AF:D9:3A:84:1C:E9:F6:1E:4F:F3:3D:1E:74:D8:33:AC:81:CB:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c5c70e70-bb5c-30b4-8842-4be1aca4a393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:dc:3e:3e:78:6a:1c:7a:63:39:90:6e:01:d4:b7:7e:23:55: eb:a4:82:56:26:8a:76:58:f0:b5:af:73:0e:3c:db:85:5b:e5: 6b:41:9e:68:fe:e0:05:3d:86:f0:f1:a3:68:5e:6b:a9:26:ef: f4:3f:87:dc:e8:ea:4e:a5:bc:d1:ef:06:14:5c:6c:75:5a:aa: eb:c0:ca:b6:a3:6b:71:47:50:4e:31:c9:af:01:c5:cb:2b:57: 40:01:7f:9d:c3:e8:56:cb:4d:b0:35:a2:92:76:27:4f:a4:e9: 43:6e:ff:27:34:ac:20:1a:2a:94:d8:90:75:52:d7:5b:73:2e: 66:eb:2d:c8:3e:05:af:36:42:88:37:ca:33:fc:4a:5e:a8:1f: 93:1d:e0:e9:9e:0b:de:99:d4:ae:a6:f2:ed:3d:15:39:92:04: 78:4d:99:45:96:40:d3:5d:e0:bd:6d:18:ea:76:22:a6:16:d7: 0a:ab:35:b0:23:bd:c1:2f:db:86:91:7b:0a:1e:a1:6e:d2:3d: 2e:a4:52:13:b5:85:f1:c2:be:c7:c2:ef:1e:4b:1d:0b:4d:57: ba:4f:17:51:a6:87:92:8f:29:ca:d3:cb:ce:10:c6:96:86:95: a8:71:7e:19:e5:cc:df:db:c9:0e:c3:5a:cd:53:db:ae:76:71: 27:e3:a1:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrwsrVquiUAGE4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk YTg1NGI4MTItNzU3OC00NzE3LTliMTQtMzNmOGI1NmE0MmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdWo+SJOobpr3xTdJUY9RdKR7jLuirjcUuZm RlRuxVXioLBMUdSOKvbYEDgmfH80kvPztHE0/q6q3KoAYD09NdGeGwHZRD1LttSZ jZpOPiI48cG1pq1prE2JNIU9fsmsHdtFbH+hA1h9PVNfjKccpucrgivP1KHkw0Bi +ajr4Va46U+dKMheLGARkmX7RLSBsK3H63YaDQzV5KlsgsmPlO+fVM5lh3JRaLbC Ksqi3nmpByogcPdA2dOHRfNaATDhgcKmfaIyuqM0GjW3DlD7N0ak9FhFitbBHRJH EB/yWUviXupG2Oeu0Puh2PhJ0iEewgymBSTsXeS/jFC29cXPjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+v2TqEHOn2Hk/zPR502DOsgcsoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYzVjNzBlNzAtYmI1Yy0z MGI0LTg4NDItNGJlMWFjYTRhMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjcPj54ahx6YzmQbgHUt34jVeukglYminZY8LWvcw4824Vb5WtBnmj+ 4AU9hvDxo2hea6km7/Q/h9zo6k6lvNHvBhRcbHVaquvAyraja3FHUE4xya8Bxcsr V0ABf53D6FbLTbA1opJ2J0+k6UNu/yc0rCAaKpTYkHVS11tzLmbrLcg+Ba82Qog3 yjP8Sl6oH5Md4OmeC96Z1K6m8u09FTmSBHhNmUWWQNNd4L1tGOp2IqYW1wqrNbAj vcEv24aRewoeoW7SPS6kUhO1hfHCvsfC7x5LHQtNV7pPF1Gmh5KPKcrTy84QxpaG lahxfhnlzN/byQ7DWs1T2652cSfjoTU= -----END CERTIFICATE-----Generated at Tue May 6 00:51:34 2025 by rpki-client