$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ebd5f0ba-0855-35b4-b758-5607a432fd86.roa File: ebd5f0ba-0855-35b4-b758-5607a432fd86.roa (raw, json) Hash identifier: 4CSrO/JWoIm4zHD2NjwJf8KCBdPs748/PUKVD3LUvLE= Subject key identifier: CF:06:8C:AC:85:24:22:70:9A:BD:59:C0:F5:85:02:47:72:D3:6D:41 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858490CB169BD91E90B6B37538AF8 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ebd5f0ba-0855-35b4-b758-5607a432fd86.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 19437 IP address blocks: 131.153.102.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:69:bd:91:e9:0b:6b:37:53:8a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=b3715b72-7b9d-4c2a-b61e-aa16f4cc9a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:28:80:19:4b:99:51:18:ce:95:2d:43:b7:5d: 3c:fc:c1:78:ec:9f:f4:f4:a3:bb:71:9c:b4:d3:a9: 2c:8a:0a:a4:9a:24:fe:85:c5:f9:28:c6:7f:46:f0: ba:55:43:ae:b0:df:50:c1:95:ac:fd:d6:df:49:37: 93:09:50:c6:68:3e:88:6a:77:bd:0a:b1:0a:95:82: c6:11:83:e9:ca:a5:bc:99:03:9c:2b:57:98:e5:fd: c6:9a:20:99:b4:8e:e0:1d:e1:bb:1f:44:ec:c4:c5: ae:92:7e:21:cb:c1:11:9a:36:ee:46:47:c2:0a:fc: a6:2c:88:d3:9e:b2:5b:cb:74:31:23:ed:b7:b9:b4: 79:64:73:74:8e:e3:54:98:66:ae:75:10:29:10:1e: 94:75:9a:1e:61:d5:0c:a3:a9:4d:f9:ae:36:3e:c6: 1d:d5:52:6e:37:3b:5f:10:22:44:d7:3d:fa:54:f1: 0c:21:ab:d6:1b:cd:b9:1c:ec:53:f6:0d:12:57:27: ba:c3:bf:19:ae:20:44:d4:af:9d:e4:cf:b7:39:05: 74:b0:52:9b:ba:11:2a:09:5b:b8:fa:88:11:d4:53: de:73:a8:85:6d:cf:c0:80:ff:54:e5:86:2f:54:a9: cc:21:e3:e0:ad:ca:d9:95:3a:54:4b:c2:73:37:c2: 9e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:06:8C:AC:85:24:22:70:9A:BD:59:C0:F5:85:02:47:72:D3:6D:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ebd5f0ba-0855-35b4-b758-5607a432fd86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ea:08:9d:32:9e:d1:dd:dc:2d:e1:f6:63:ac:ca:01:3b:b0: 1d:67:e8:e7:03:10:8a:ab:c5:7b:02:56:42:64:78:50:c6:b6: 28:82:5a:db:9c:0a:08:7d:c7:a0:bf:59:c3:c3:ba:06:37:32: 9e:88:6b:2f:ae:82:c2:7e:f6:2d:01:93:17:6f:c6:7f:73:b8: ff:e5:95:70:0f:61:bc:1f:72:81:84:b0:42:64:2c:9f:54:36: f0:38:a3:f5:26:72:64:92:2a:0c:52:07:99:8c:36:4b:71:b7: dc:a3:a5:a8:e7:54:b9:c2:cb:ee:a0:a1:fc:cd:e6:5d:23:cb: e2:0f:fc:4f:54:ec:4e:32:6c:11:1a:27:dd:92:b0:f4:46:83: 00:4d:b6:42:d9:42:18:2e:64:6b:18:1c:a0:b6:db:79:00:cd: 8c:89:fe:90:fc:1f:57:48:bb:54:95:be:66:6e:1b:7f:c5:0f: 45:65:08:55:59:b2:2f:3a:86:32:2a:45:37:4a:c7:34:ba:25: 48:0f:66:82:1b:23:f3:35:65:58:c7:cc:81:ff:ce:e9:97:aa: 56:67:fa:92:75:f0:aa:35:2c:48:09:05:0e:83:3f:3c:35:cc: 82:62:a0:29:db:fd:b8:c5:33:72:f5:62:34:b2:37:b0:9e:84: 4f:24:94:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsWm9kekLazdTivgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk YjM3MTViNzItN2I5ZC00YzJhLWI2MWUtYWExNmY0Y2M5YTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiiAGUuZURjOlS1Dt108/MF47J/09KO7cZy0 06ksigqkmiT+hcX5KMZ/RvC6VUOusN9QwZWs/dbfSTeTCVDGaD6Iane9CrEKlYLG EYPpyqW8mQOcK1eY5f3GmiCZtI7gHeG7H0TsxMWukn4hy8ERmjbuRkfCCvymLIjT nrJby3QxI+23ubR5ZHN0juNUmGaudRApEB6UdZoeYdUMo6lN+a42PsYd1VJuNztf ECJE1z36VPEMIavWG825HOxT9g0SVye6w78ZriBE1K+d5M+3OQV0sFKbuhEqCVu4 +ogR1FPec6iFbc/AgP9U5YYvVKnMIePgrcrZlTpUS8JzN8Ke5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8GjKyFJCJwmr1ZwPWFAkdy021BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZWJkNWYwYmEtMDg1NS0z NWI0LWI3NTgtNTYwN2E0MzJmZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfqCJ0yntHd3C3h9mOsygE7sB1n6OcDEIqrxXsCVkJkeFDGtiiCWtuc Cgh9x6C/WcPDugY3Mp6Iay+ugsJ+9i0Bkxdvxn9zuP/llXAPYbwfcoGEsEJkLJ9U NvA4o/UmcmSSKgxSB5mMNktxt9yjpajnVLnCy+6gofzN5l0jy+IP/E9U7E4ybBEa J92SsPRGgwBNtkLZQhguZGsYHKC223kAzYyJ/pD8H1dIu1SVvmZuG3/FD0VlCFVZ si86hjIqRTdKxzS6JUgPZoIbI/M1ZVjHzIH/zumXqlZn+pJ18Ko1LEgJBQ6DPzw1 zIJioCnb/bjFM3L1YjSyN7CehE8klM0= -----END CERTIFICATE-----Generated at Sat May 10 16:28:07 2025 by rpki-client