$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f167a86e-0304-38f6-baf0-2ee2779263a8.roa File: f167a86e-0304-38f6-baf0-2ee2779263a8.roa (raw, json) Hash identifier: 2hMQu5lFzKFIT5qIHO7os539wpPCDeQ1N7NSEeXgW/w= Subject key identifier: 2F:CD:01:75:E2:84:32:F8:18:BA:9E:03:26:D8:22:78:20:63:46:C1 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F43285849ED4FC9B374DDD21F98A4C220 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f167a86e-0304-38f6-baf0-2ee2779263a8.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 59210 IP address blocks: 131.153.159.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:c9:b3:74:dd:d2:1f:98:a4:c2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=30800422-ccbe-4aff-b735-4fd770093111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e7:6d:ca:2c:21:45:76:f2:7c:a5:63:a9:6c: 59:c8:79:c1:df:17:2f:0c:94:40:dd:1d:c6:2a:f2: 49:1c:31:d4:dc:d8:0e:3e:b0:e3:af:1f:27:bc:cb: fc:51:a3:66:5e:1b:ad:47:9b:50:80:c6:55:db:b8: 87:2c:d2:49:c0:92:39:29:51:9d:cb:54:8b:4e:97: d4:8a:de:11:76:1a:17:7d:d3:47:a0:7b:d9:10:e6: 33:f4:70:fa:01:ab:63:7e:72:46:d7:59:29:b6:e4: 3f:eb:6e:6b:c8:04:6a:ec:34:5f:4f:1a:2c:4a:76: e8:70:44:89:5d:f1:e0:8a:9e:3d:ad:8b:42:ae:27: 2a:99:df:18:62:46:e3:aa:86:41:e4:47:73:1b:20: bc:58:cb:6f:f9:33:ef:8d:99:26:f7:75:ae:18:da: d5:d8:a6:54:a6:1a:ee:6c:38:38:c8:5a:e5:d4:cb: 06:90:9c:7c:80:c6:42:cf:d0:d6:7c:b7:fb:f0:80: 9b:6b:a1:66:16:4e:05:51:12:03:63:e3:31:6f:bf: e0:d2:95:18:50:ee:16:d5:cf:ca:32:80:08:c6:24: 3d:88:10:3f:ee:be:2f:7a:70:7d:31:62:c0:bd:49: eb:da:c4:ad:af:64:ad:bc:f5:bd:71:57:44:d2:aa: d4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CD:01:75:E2:84:32:F8:18:BA:9E:03:26:D8:22:78:20:63:46:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f167a86e-0304-38f6-baf0-2ee2779263a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:68:f3:5a:a8:97:37:27:4d:9f:89:fe:ae:3f:f9:8e:1d:fe: 8f:42:7d:c5:ef:ab:6f:98:bb:7c:1c:61:92:c8:87:b1:19:3f: ad:b8:56:f8:db:c7:dd:58:41:f8:a0:82:8d:27:e6:e5:15:10: b1:4f:88:7e:f1:11:9d:68:a6:c0:eb:96:e0:5e:96:24:72:41: 2e:15:09:06:12:f2:d5:8a:be:8f:ff:74:2b:64:1d:f1:4f:f8: 55:72:e1:84:43:e0:e0:ed:5a:b5:bb:56:9e:2e:29:23:5f:23: f6:65:93:5e:22:0c:27:fa:e7:64:72:f2:b7:a1:6d:1c:8c:81: 4f:42:4b:e6:f5:96:77:03:bc:e4:a5:b3:f3:37:fb:cc:68:ef: 5d:eb:49:e1:8c:e3:14:80:dd:a2:4e:65:ff:81:f5:98:5d:0c: 5b:68:f7:7c:58:8c:3f:18:c4:30:48:3b:70:75:57:0a:b4:9f: 0d:c8:53:33:9d:d8:2e:29:89:f2:15:44:c3:65:1a:8f:34:21: 40:a8:e6:1b:0d:21:61:67:00:e2:bb:a9:fa:57:db:6d:09:f9: 05:5d:94:43:67:86:23:f5:75:95:e1:0e:ee:58:ce:1b:95:84: 02:45:00:e3:57:9f:79:45:d0:9b:83:90:ce:f4:77:76:74:2c: e1:56:dc:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8mzdN3SH5ikwiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk MzA4MDA0MjItY2NiZS00YWZmLWI3MzUtNGZkNzcwMDkzMTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+dtyiwhRXbyfKVjqWxZyHnB3xcvDJRA3R3G KvJJHDHU3NgOPrDjrx8nvMv8UaNmXhutR5tQgMZV27iHLNJJwJI5KVGdy1SLTpfU it4RdhoXfdNHoHvZEOYz9HD6AatjfnJG11kptuQ/625ryARq7DRfTxosSnbocESJ XfHgip49rYtCricqmd8YYkbjqoZB5EdzGyC8WMtv+TPvjZkm93WuGNrV2KZUphru bDg4yFrl1MsGkJx8gMZCz9DWfLf78ICba6FmFk4FURIDY+Mxb7/g0pUYUO4W1c/K MoAIxiQ9iBA/7r4venB9MWLAvUnr2sStr2StvPW9cVdE0qrUrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/NAXXihDL4GLqeAybYInggY0bBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjE2N2E4NmUtMDMwNC0z OGY2LWJhZjAtMmVlMjc3OTI2M2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5mfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRo81qolzcnTZ+J/q4/+Y4d/o9CfcXvq2+Yu3wcYZLIh7EZP624Vvjb x91YQfiggo0n5uUVELFPiH7xEZ1opsDrluBeliRyQS4VCQYS8tWKvo//dCtkHfFP +FVy4YRD4ODtWrW7Vp4uKSNfI/Zlk14iDCf652Ry8rehbRyMgU9CS+b1lncDvOSl s/M3+8xo713rSeGM4xSA3aJOZf+B9ZhdDFto93xYjD8YxDBIO3B1Vwq0nw3IUzOd 2C4pifIVRMNlGo80IUCo5hsNIWFnAOK7qfpX220J+QVdlENnhiP1dZXhDu5YzhuV hAJFAONXn3lF0JuDkM70d3Z0LOFW3Is= -----END CERTIFICATE-----Generated at Sun Jun 29 14:15:40 2025 by rpki-client