$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c65d17e9-2b10-369a-adb3-84d59213e320.roa File: c65d17e9-2b10-369a-adb3-84d59213e320.roa (raw, json) Hash identifier: Sxrv3LhA0DXvx2CybCTnrGXbvN/mWD3CMPtmanrHU8g= Subject key identifier: 48:59:A6:11:6B:CA:0C:DF:4A:57:0F:CB:B2:BB:BF:73:49:3F:31:9B Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849780F118D6395729764FE1400 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c65d17e9-2b10-369a-adb3-84d59213e320.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 19181 IP address blocks: 131.153.233.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:11:8d:63:95:72:97:64:fe:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=dd133266-5291-4854-83a0-ddf4521e3ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:9f:5d:2d:92:42:f8:57:b7:80:2e:cd:98: e5:5b:34:ff:00:f2:26:e9:71:56:5c:f7:ae:0a:ca: b2:ec:19:a0:3b:a5:dc:22:e2:ce:27:85:85:89:c2: 11:ca:c9:5f:3d:66:f1:da:78:00:ad:ea:ba:c2:fd: b6:08:83:89:ae:70:49:25:16:c8:a1:c4:66:ef:f6: 24:90:87:33:e7:87:53:85:4c:2a:f5:ed:06:b7:17: 43:8e:2a:5d:5e:ba:85:f4:ff:71:15:7a:34:19:1a: 2c:79:fc:d8:65:05:cb:26:0e:10:36:1c:42:5c:9b: 0c:91:be:8d:a8:9d:e8:e1:8d:98:c6:5e:9c:66:8e: 99:ae:b5:36:e8:58:39:3a:9e:30:58:6f:ea:d3:c9: 8c:b1:09:fe:21:19:27:f6:d5:d3:71:81:a5:19:74: 44:30:f5:31:d5:75:e1:01:66:c4:71:02:91:ae:43: 56:c6:0f:67:b3:9f:e0:bf:8e:1b:32:2c:5d:e8:a1: 77:97:db:94:d0:47:64:02:2e:bc:95:3b:44:d0:59: fd:73:16:f3:ab:d1:e0:fb:4b:d6:c2:ff:48:37:6b: 6d:6a:62:31:7c:cd:b6:7b:47:5f:b6:e1:58:5e:8f: f1:84:e7:9d:c8:65:e8:97:7a:38:31:19:fd:d9:03: 78:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:59:A6:11:6B:CA:0C:DF:4A:57:0F:CB:B2:BB:BF:73:49:3F:31:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c65d17e9-2b10-369a-adb3-84d59213e320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ed:42:de:f4:93:12:6d:c6:54:ee:c1:e7:7a:b9:ff:85:d1: c8:10:4c:ef:0c:a6:05:9e:b3:af:3d:ab:5b:4c:fc:5b:96:6d: 7c:92:d7:9c:36:de:df:39:41:2c:db:30:1b:b9:d1:17:8c:7b: 1e:26:e3:4d:8e:60:03:cb:bd:ea:18:1b:42:d3:3b:87:49:f0: ca:41:5d:7b:0a:e9:fc:51:b4:fb:85:9b:e7:6a:fd:90:57:c0: 46:63:0c:73:6e:41:e5:ea:9d:39:11:71:06:66:ed:13:6f:4c: f7:e2:db:da:85:46:22:f3:e1:dd:6c:84:6c:b4:79:29:a0:87: ef:e4:bb:25:2e:ef:4a:43:a1:42:31:c1:ee:5c:cd:31:00:cb: 67:de:7a:02:b1:24:7c:1d:83:1a:3c:f7:84:79:bc:ba:a4:be: d4:73:ad:59:fb:fe:b0:6c:9a:62:51:38:3e:44:a6:c7:63:1c: 5a:48:74:ba:04:32:fc:7a:f1:34:3b:45:3b:e1:2c:91:08:0e: 08:38:00:86:b4:07:54:a3:e3:b8:6b:28:ba:3e:c7:ea:34:54: c9:7e:ae:a5:c4:f9:38:a5:73:54:11:19:9a:f9:f6:53:f4:f8: 53:71:af:f4:2e:29:0f:49:50:74:de:cf:32:51:b0:c9:c2:fa: 43:66:3b:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4DxGNY5Vyl2T+FAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk ZGQxMzMyNjYtNTI5MS00ODU0LTgzYTAtZGRmNDUyMWUzZWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryufXS2SQvhXt4AuzZjlWzT/APIm6XFWXPeu Csqy7BmgO6XcIuLOJ4WFicIRyslfPWbx2ngAreq6wv22CIOJrnBJJRbIocRm7/Yk kIcz54dThUwq9e0GtxdDjipdXrqF9P9xFXo0GRosefzYZQXLJg4QNhxCXJsMkb6N qJ3o4Y2Yxl6cZo6ZrrU26Fg5Op4wWG/q08mMsQn+IRkn9tXTcYGlGXREMPUx1XXh AWbEcQKRrkNWxg9ns5/gv44bMixd6KF3l9uU0EdkAi68lTtE0Fn9cxbzq9Hg+0vW wv9IN2ttamIxfM22e0dftuFYXo/xhOedyGXol3o4MRn92QN4qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhZphFrygzfSlcPy7K7v3NJPzGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYzY1ZDE3ZTktMmIxMC0z NjlhLWFkYjMtODRkNTkyMTNlMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5npMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXtQt70kxJtxlTuwed6uf+F0cgQTO8MpgWes689q1tM/FuWbXyS15w2 3t85QSzbMBu50ReMex4m402OYAPLveoYG0LTO4dJ8MpBXXsK6fxRtPuFm+dq/ZBX wEZjDHNuQeXqnTkRcQZm7RNvTPfi29qFRiLz4d1shGy0eSmgh+/kuyUu70pDoUIx we5czTEAy2feegKxJHwdgxo894R5vLqkvtRzrVn7/rBsmmJROD5EpsdjHFpIdLoE Mvx68TQ7RTvhLJEIDgg4AIa0B1Sj47hrKLo+x+o0VMl+rqXE+Tilc1QRGZr59lP0 +FNxr/QuKQ9JUHTezzJRsMnC+kNmO60= -----END CERTIFICATE-----Generated at Mon May 5 09:04:27 2025 by rpki-client