$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f11d2764-529a-3bd8-9f5c-74ccfbd98117.roa File: f11d2764-529a-3bd8-9f5c-74ccfbd98117.roa (raw, json) Hash identifier: J2HjrU34Rrcs+NkHK3g16TYZXBZTg3vUHYvkdO9Ec6s= Subject key identifier: 2E:25:52:A8:17:E6:74:EE:1F:0B:61:3D:FD:2F:9C:B0:F5:67:33:58 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849EBEA4CB88DC83C505A49C280 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f11d2764-529a-3bd8-9f5c-74ccfbd98117.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 397378 IP address blocks: 131.153.121.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:4c:b8:8d:c8:3c:50:5a:49:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=f66c83ce-739f-4a02-85c7-f623ef0bde1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:69:63:11:2f:bf:81:72:ce:ee:a9:f7:7e:01: a6:2c:1c:ac:77:35:12:53:ff:65:c9:33:df:fc:13: b0:9c:ca:dc:03:41:b4:80:ec:7c:8d:a2:63:bf:e9: 3c:80:d6:a4:50:2c:9c:a3:d1:2b:c3:14:15:2f:9e: b5:75:69:0f:bb:07:a8:32:7c:83:b1:f3:13:66:05: 65:7c:7b:4b:e5:2d:d7:12:f5:34:1e:9f:10:b8:de: 67:99:c1:d9:05:af:54:3f:99:f4:ac:59:2c:9b:03: 98:59:ca:44:12:48:62:2b:f4:4f:5d:85:e2:9a:1b: d7:4e:80:2f:00:d6:da:36:ba:3c:42:d7:4a:52:73: 70:a5:90:1c:a0:e2:03:aa:7f:14:ae:d5:67:d3:84: 91:b5:70:a1:b8:4e:49:de:ea:78:a2:e7:75:75:3e: cf:44:27:46:04:89:6d:90:d9:09:5c:51:0e:aa:46: 93:19:15:6e:f7:92:0f:75:87:ef:7e:2e:cf:1e:86: 65:1c:78:c3:9d:c3:6d:b2:a7:8b:d4:ef:eb:9d:6e: f0:48:13:5f:e8:fe:19:47:78:10:e8:9a:77:47:28: 4e:40:f9:e8:42:3b:58:61:9d:d4:53:5e:a8:72:1f: 1f:3a:2d:19:6d:ea:1e:2d:9b:10:1b:04:01:67:e3: 76:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:25:52:A8:17:E6:74:EE:1F:0B:61:3D:FD:2F:9C:B0:F5:67:33:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f11d2764-529a-3bd8-9f5c-74ccfbd98117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:30:2e:12:7e:c5:ab:fe:a8:ec:33:a4:2e:91:28:b6:9e:82: a9:fe:83:73:a7:d2:dc:77:b0:03:2f:ee:f6:10:13:8e:6a:71: b3:0b:4e:36:67:2c:5e:9c:87:e4:b9:a4:82:f8:61:17:60:a9: 38:72:fe:4b:01:7e:c3:54:2a:99:58:31:af:e9:1f:dc:ff:d3: 38:44:d7:21:0c:60:6b:d1:e5:72:8d:fd:1b:a5:d5:72:7a:74: 04:8a:b6:80:c7:0d:72:f3:6a:94:2f:49:b9:b6:bf:fa:bf:e9: 18:82:ac:7f:c3:fe:89:fc:78:7e:51:c8:ff:3d:35:3e:b0:2e: b2:f6:81:c9:1c:02:53:a2:4c:3b:b2:b7:40:f1:a7:36:0c:0d: 14:61:81:38:dc:69:1b:c7:bd:4a:66:b8:2a:93:36:d7:45:23: 82:51:a6:87:99:23:9e:4e:d6:00:ea:ea:7d:dd:3e:dc:bb:37: d4:47:cd:cf:d6:71:35:61:a2:ea:2d:fa:2b:f5:ec:92:69:5d: 62:d0:6a:c9:f1:a3:f4:8e:30:03:45:5d:2e:2a:77:8c:2f:6f: 1d:eb:60:40:82:b1:7b:f5:ea:48:f5:7b:0f:97:34:ed:98:40: a4:99:d0:f1:35:ee:6c:19:a9:4e:1f:30:51:20:14:ae:73:7b: 70:19:2a:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6ky4jcg8UFpJwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk ZjY2YzgzY2UtNzM5Zi00YTAyLTg1YzctZjYyM2VmMGJkZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGljES+/gXLO7qn3fgGmLBysdzUSU/9lyTPf /BOwnMrcA0G0gOx8jaJjv+k8gNakUCyco9ErwxQVL561dWkPuweoMnyDsfMTZgVl fHtL5S3XEvU0Hp8QuN5nmcHZBa9UP5n0rFksmwOYWcpEEkhiK/RPXYXimhvXToAv ANbaNro8QtdKUnNwpZAcoOIDqn8UrtVn04SRtXChuE5J3up4oud1dT7PRCdGBIlt kNkJXFEOqkaTGRVu95IPdYfvfi7PHoZlHHjDncNtsqeL1O/rnW7wSBNf6P4ZR3gQ 6Jp3RyhOQPnoQjtYYZ3UU16och8fOi0ZbeoeLZsQGwQBZ+N2MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4lUqgX5nTuHwthPf0vnLD1ZzNYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjExZDI3NjQtNTI5YS0z YmQ4LTlmNWMtNzRjY2ZiZDk4MTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5l5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIwLhJ+xav+qOwzpC6RKLaegqn+g3On0tx3sAMv7vYQE45qcbMLTjZn LF6ch+S5pIL4YRdgqThy/ksBfsNUKplYMa/pH9z/0zhE1yEMYGvR5XKN/Rul1XJ6 dASKtoDHDXLzapQvSbm2v/q/6RiCrH/D/on8eH5RyP89NT6wLrL2gckcAlOiTDuy t0DxpzYMDRRhgTjcaRvHvUpmuCqTNtdFI4JRpoeZI55O1gDq6n3dPty7N9RHzc/W cTVhouot+iv17JJpXWLQasnxo/SOMANFXS4qd4wvbx3rYECCsXv16kj1ew+XNO2Y QKSZ0PE17mwZqU4fMFEgFK5ze3AZKgs= -----END CERTIFICATE-----Generated at Sun Jun 29 13:12:14 2025 by rpki-client