$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa File: cc973301-7c68-348a-bd7d-e22b5396a832.roa (raw, json) Hash identifier: wNv5hAUTsCJ0tSm9gvaYOHM29sSXe/+tZyjPG9y1D5c= Subject key identifier: 60:87:8E:4E:40:D4:30:8A:8C:6E:0D:39:D3:0D:36:41:3E:19:CD:EE Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490CB16A53369572A882BB2380 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 12189 IP address blocks: 131.153.112.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:6a:53:36:95:72:a8:82:bb:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=af49a317-0fd0-4ced-ac3d-807a01bb13ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fa:30:ac:52:5b:11:09:48:8b:25:29:2d:ad: f7:ab:20:fb:de:50:bc:dd:5e:a1:a6:03:c7:4a:9b: 2a:ed:63:84:19:ce:b6:3d:d4:55:33:de:8e:49:1d: 2e:13:ce:9b:5c:30:61:fe:03:c5:83:e7:f1:d3:7a: e1:23:08:98:84:6b:f5:ab:a5:ee:b6:07:c3:1f:2a: 3c:9f:09:57:50:5a:e3:8a:72:b6:16:5a:46:6c:03: 51:ab:d3:12:ef:40:db:79:78:45:32:dc:b9:86:73: 26:70:24:a6:53:e7:f2:16:50:16:2e:ce:7f:6f:af: a3:27:c3:06:b2:ed:a6:88:21:8e:23:80:18:89:55: 9d:bd:6b:5a:cc:bb:79:5a:61:c2:6c:68:ff:14:ff: 56:73:c4:f7:7f:4a:64:2b:0e:a6:ce:e5:b9:be:c4: b7:44:f5:9a:5b:36:6b:a8:66:e9:db:28:b4:c8:db: 7e:fc:50:1d:5d:54:e0:d0:7f:00:13:f2:3e:39:18: 4b:2d:72:30:ff:99:6d:ea:18:ef:67:38:9e:f0:da: 7e:64:e2:b9:19:ea:ef:01:de:6d:9d:85:e6:f2:c6: e9:b9:f6:9c:0b:22:8b:21:db:88:e2:6d:09:2f:e9: 85:7e:11:11:67:fb:4a:ca:60:d3:e7:5e:68:86:d6: 77:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:87:8E:4E:40:D4:30:8A:8C:6E:0D:39:D3:0D:36:41:3E:19:CD:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f6:3d:c5:cb:db:2e:b0:c6:58:90:59:ba:7d:98:fb:03:3e: 32:6b:81:c0:01:56:fc:5a:7b:50:82:64:b6:67:c1:84:6e:b3: 23:88:d4:55:cc:63:eb:9f:ba:39:a1:0e:86:22:42:0c:ec:3c: 7f:10:06:4d:88:2c:c5:1c:da:df:60:7e:89:9c:49:e4:13:a2: 3d:b2:af:8e:69:18:3e:c4:48:1f:5a:66:e3:40:42:42:5b:30: 8f:6d:4a:2a:63:1c:82:14:56:84:ef:ed:7f:ac:c3:a9:89:57: 15:63:a1:bd:73:8a:d0:50:d5:d7:38:ce:00:1a:eb:57:7b:59: d6:de:97:6a:b9:58:0b:3b:e7:3d:e3:6b:e5:e0:d8:f5:29:ab: 86:e0:7b:88:cd:de:3a:fa:86:cb:a3:f9:df:c9:29:6a:49:9f: 03:f7:ca:98:ad:30:99:1d:ab:c3:c5:2b:2f:d3:44:a0:4a:30: aa:87:70:01:dd:38:9b:24:4c:7b:f4:34:66:d1:ca:b2:72:a6: 64:51:58:68:c5:65:9e:15:b2:18:10:72:2c:78:51:a3:eb:14: e5:ba:92:97:93:26:b0:64:ae:01:ef:7b:d2:bf:ab:6e:62:7b: fb:ee:61:74:9d:a7:64:22:99:97:4b:d9:0f:a1:ac:48:50:be: 08:f4:ed:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWpTNpVyqIK7I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk YWY0OWEzMTctMGZkMC00Y2VkLWFjM2QtODA3YTAxYmIxM2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/owrFJbEQlIiyUpLa33qyD73lC83V6hpgPH Spsq7WOEGc62PdRVM96OSR0uE86bXDBh/gPFg+fx03rhIwiYhGv1q6XutgfDHyo8 nwlXUFrjinK2FlpGbANRq9MS70DbeXhFMty5hnMmcCSmU+fyFlAWLs5/b6+jJ8MG su2miCGOI4AYiVWdvWtazLt5WmHCbGj/FP9Wc8T3f0pkKw6mzuW5vsS3RPWaWzZr qGbp2yi0yNt+/FAdXVTg0H8AE/I+ORhLLXIw/5lt6hjvZzie8Np+ZOK5GervAd5t nYXm8sbpufacCyKLIduI4m0JL+mFfhERZ/tKymDT515ohtZ3JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCHjk5A1DCKjG4NOdMNNkE+Gc3uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvY2M5NzMzMDEtN2M2OC0z NDhhLWJkN2QtZTIyYjUzOTZhODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX2PcXL2y6wxliQWbp9mPsDPjJrgcABVvxae1CCZLZnwYRusyOI1FXM Y+ufujmhDoYiQgzsPH8QBk2ILMUc2t9gfomcSeQToj2yr45pGD7ESB9aZuNAQkJb MI9tSipjHIIUVoTv7X+sw6mJVxVjob1zitBQ1dc4zgAa61d7Wdbel2q5WAs75z3j a+Xg2PUpq4bge4jN3jr6hsuj+d/JKWpJnwP3ypitMJkdq8PFKy/TRKBKMKqHcAHd OJskTHv0NGbRyrJypmRRWGjFZZ4VshgQcix4UaPrFOW6kpeTJrBkrgHve9K/q25i e/vuYXSdp2QimZdL2Q+hrEhQvgj07dE= -----END CERTIFICATE-----Generated at Mon May 5 20:54:51 2025 by rpki-client