$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c92b1589-85d9-3d07-b616-df79c5aff832.roa File: c92b1589-85d9-3d07-b616-df79c5aff832.roa (raw, json) Hash identifier: Ajy6aUmDS1Iu+M/zEpyOYYsU8uZNRvBJAZGHmRrfmPs= Subject key identifier: E3:64:D7:D7:F4:75:4E:8B:80:0C:F8:1F:97:B8:EF:E4:E1:CF:4C:2D Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490CB16B6612F79F906A0A0080 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c92b1589-85d9-3d07-b616-df79c5aff832.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 46385 IP address blocks: 131.153.61.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:6b:66:12:f7:9f:90:6a:0a:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=32ec4985-7d2f-4df4-a542-e646ceb09499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e3:5c:fa:07:0a:ff:82:9e:ca:f3:ad:2d:b3: 56:14:c6:cf:2a:06:5b:ba:4d:21:29:35:71:4a:0f: d6:c5:ce:7f:33:01:cf:4f:30:93:28:1b:96:43:1c: de:fb:b1:c2:f5:22:b4:89:c1:68:cb:7f:f4:dd:69: 90:12:ca:28:80:c5:32:3b:54:47:f6:c7:a2:d6:4c: 07:66:b2:79:b7:fc:4c:d5:0e:6b:58:69:58:a0:f8: f6:b8:3c:9f:c6:2f:7a:e4:17:b2:42:f8:42:d8:42: d0:97:78:b4:5e:36:86:47:b8:3d:39:22:85:f9:f6: 5f:bf:62:73:a3:1a:aa:fb:14:15:31:99:ec:c7:81: 72:8d:6b:02:59:34:3d:ca:f3:fe:9b:81:77:97:57: 16:a0:81:b0:9c:a9:16:32:3b:6f:9d:e9:48:81:b2: 68:61:9f:11:42:66:18:67:7d:01:c9:cb:dd:07:bc: dd:09:8c:3f:a3:51:37:cb:d8:fe:29:4d:3d:17:0a: 36:32:0d:09:f7:cb:e3:ee:f3:07:4a:bd:4c:ef:93: d2:be:a8:99:d1:0a:00:18:8f:ba:be:2e:a7:6d:6c: 5f:c8:91:fc:35:cf:e4:b7:35:e4:3d:41:16:7f:80: 15:75:68:fa:30:5a:91:4e:ad:11:b6:11:73:57:45: 2d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:64:D7:D7:F4:75:4E:8B:80:0C:F8:1F:97:B8:EF:E4:E1:CF:4C:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c92b1589-85d9-3d07-b616-df79c5aff832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:5c:5f:55:a3:a2:61:9a:92:10:5b:42:73:e2:30:5a:69:44: e7:fb:6d:55:27:e5:20:60:03:77:50:e1:bc:2e:28:9f:41:ec: 2c:11:08:df:dc:f5:d2:2a:24:9c:54:86:9e:ac:ea:f3:22:86: 56:f6:75:06:88:f5:77:e5:12:9e:1f:9f:9d:2e:a8:61:8a:d0: 94:2f:bd:b0:38:45:95:3a:90:de:a6:b3:3d:8c:44:64:97:03: af:4b:cb:37:77:cd:9a:9b:ec:c3:17:f3:84:cd:ad:a1:31:91: 8f:b1:ad:e9:51:9c:ad:84:e3:64:67:ed:64:25:80:b3:44:d9: a6:93:33:bf:96:75:9e:cd:c5:b6:26:26:8a:36:ab:a4:d7:38: fd:db:3d:06:c0:0e:6a:07:48:97:68:a9:4f:49:56:7b:9e:f0: 55:57:d4:d7:4c:96:58:9b:98:4b:01:bd:68:08:63:50:76:8b: aa:44:83:73:c5:a6:ef:89:02:73:44:db:62:57:12:ac:81:e4: 0e:f3:68:40:30:4a:58:3c:9b:0a:f4:bf:0b:50:65:63:c6:24: f5:90:a9:c0:31:09:75:04:e9:36:d1:70:a8:28:9b:24:be:29: 9e:af:c7:15:28:ea:3f:bc:88:ca:57:0d:8d:6f:d2:8a:7c:7e: 49:30:62:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWtmEvefkGoKAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk MzJlYzQ5ODUtN2QyZi00ZGY0LWE1NDItZTY0NmNlYjA5NDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeNc+gcK/4KeyvOtLbNWFMbPKgZbuk0hKTVx Sg/Wxc5/MwHPTzCTKBuWQxze+7HC9SK0icFoy3/03WmQEsoogMUyO1RH9sei1kwH ZrJ5t/xM1Q5rWGlYoPj2uDyfxi965BeyQvhC2ELQl3i0XjaGR7g9OSKF+fZfv2Jz oxqq+xQVMZnsx4FyjWsCWTQ9yvP+m4F3l1cWoIGwnKkWMjtvnelIgbJoYZ8RQmYY Z30BycvdB7zdCYw/o1E3y9j+KU09Fwo2Mg0J98vj7vMHSr1M75PSvqiZ0QoAGI+6 vi6nbWxfyJH8Nc/ktzXkPUEWf4AVdWj6MFqRTq0RthFzV0UtDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONk19f0dU6LgAz4H5e47+Thz0wtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYzkyYjE1ODktODVkOS0z ZDA3LWI2MTYtZGY3OWM1YWZmODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5k9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBcX1WjomGakhBbQnPiMFppROf7bVUn5SBgA3dQ4bwuKJ9B7CwRCN/c 9dIqJJxUhp6s6vMihlb2dQaI9XflEp4fn50uqGGK0JQvvbA4RZU6kN6msz2MRGSX A69Lyzd3zZqb7MMX84TNraExkY+xrelRnK2E42Rn7WQlgLNE2aaTM7+WdZ7NxbYm Joo2q6TXOP3bPQbADmoHSJdoqU9JVnue8FVX1NdMllibmEsBvWgIY1B2i6pEg3PF pu+JAnNE22JXEqyB5A7zaEAwSlg8mwr0vwtQZWPGJPWQqcAxCXUE6TbRcKgomyS+ KZ6vxxUo6j+8iMpXDY1v0op8fkkwYhE= -----END CERTIFICATE-----Generated at Mon May 5 14:32:37 2025 by rpki-client