$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f6f9a004-d208-326b-81c8-642c2ada7bb8.roa File: f6f9a004-d208-326b-81c8-642c2ada7bb8.roa (raw, json) Hash identifier: 2ekmwE+ySXbHl07kQVqNEgFNZqWqq43BKCmkYqTmdS8= Subject key identifier: F8:A4:52:19:3B:60:02:EE:E4:6C:5E:D5:EE:13:A6:28:28:40:AE:86 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584A29556A51E7B1C63B04BDF238 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f6f9a004-d208-326b-81c8-642c2ada7bb8.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 152879 IP address blocks: 131.153.230.0/24 maxlen: 32 131.153.245.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:6a:51:e7:b1:c6:3b:04:bd:f2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=0bafcc55-5bc9-47a5-8f87-394b6443e55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:e6:29:0a:66:fc:3b:7e:72:0c:6f:5b:ab: f9:89:52:2e:56:bb:5a:31:2f:23:dd:31:e7:33:26: db:64:5b:b8:92:8e:13:33:89:64:9f:95:dc:47:68: f5:e0:fb:88:c0:21:02:a5:be:19:1a:b9:52:c4:16: c5:5f:61:ed:6e:f6:63:3b:27:67:2f:21:70:1c:f4: 6d:6b:5b:f1:8c:19:f7:c1:95:38:b9:22:59:ee:dc: 58:73:b7:4e:b4:71:ff:f2:f8:42:a8:2e:5d:82:c7: 18:f2:33:23:16:92:12:94:7e:8f:54:d6:74:26:ff: de:3c:56:76:38:55:c4:fa:42:5c:59:99:fa:9e:fd: c7:66:5f:4f:8b:3b:5e:9a:b6:c5:2a:be:f4:9f:c1: 8b:9a:e8:c5:f8:6d:6c:3b:db:d6:98:81:11:01:74: 08:7f:77:9d:92:43:c8:28:59:8f:95:f5:62:3b:a6: fd:c0:72:a6:7c:30:c6:79:b8:34:e6:6a:08:ef:14: 4f:01:84:9c:2f:27:93:7f:51:2b:ec:d8:9e:dd:6a: ff:de:f3:9a:64:2d:df:ca:a8:18:fe:72:88:8e:c2: 3b:33:1e:b2:80:92:d4:60:fb:e3:1b:c0:ef:25:36: ff:ea:0f:eb:fc:36:ab:c0:9f:5d:96:24:fa:cf:e1: 6d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A4:52:19:3B:60:02:EE:E4:6C:5E:D5:EE:13:A6:28:28:40:AE:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f6f9a004-d208-326b-81c8-642c2ada7bb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.230.0/24 131.153.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f8:ac:a0:8b:bf:c6:b8:ac:6a:e5:b7:e2:eb:68:9d:ee:91: 16:ec:0f:03:c6:b1:ad:1d:58:01:8c:64:d8:31:8c:91:33:3f: d8:fb:64:a5:c4:bb:36:df:f0:ca:02:78:eb:b5:11:d0:4f:04: 63:62:8d:69:3d:e5:6a:9f:0a:a4:bf:85:1c:93:f3:f7:95:66: b7:5d:8c:75:56:51:fc:e3:f9:7d:05:e1:22:60:d4:5c:c9:36: 6c:94:de:2e:e0:85:63:bd:88:b3:1b:30:ed:9a:0e:e8:38:15: ed:bd:2b:ff:4c:96:b0:5a:e1:b9:2e:81:fd:7d:95:da:16:fd: 8d:e8:a2:05:cf:d8:82:7b:c2:45:3e:15:01:68:bb:5f:a1:f0: 80:f0:9f:b6:ba:8c:a0:dc:c3:77:a1:b5:07:fe:cd:11:2d:94: 9c:cb:cb:a6:2d:1b:79:db:5b:7f:ff:b5:1a:ce:b3:4e:cb:12: c2:08:32:41:99:40:97:04:96:29:13:f2:f8:ac:f0:8c:43:9f: 7e:2d:8e:89:02:1b:a9:93:c5:2f:b4:14:90:a0:8a:71:11:ac: 47:77:54:05:d5:28:af:2a:88:28:58:4d:6a:86:5a:5e:18:1e: c8:7a:9f:92:c5:47:6b:ea:5e:e2:ea:8b:57:84:5b:2e:50:c2: 02:2f:78:6e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEopVWpR57HGOwS98jgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk MGJhZmNjNTUtNWJjOS00N2E1LThmODctMzk0YjY0NDNlNTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaXmKQpm/Dt+cgxvW6v5iVIuVrtaMS8j3THn MybbZFu4ko4TM4lkn5XcR2j14PuIwCECpb4ZGrlSxBbFX2HtbvZjOydnLyFwHPRt a1vxjBn3wZU4uSJZ7txYc7dOtHH/8vhCqC5dgscY8jMjFpISlH6PVNZ0Jv/ePFZ2 OFXE+kJcWZn6nv3HZl9PiztemrbFKr70n8GLmujF+G1sO9vWmIERAXQIf3edkkPI KFmPlfViO6b9wHKmfDDGebg05moI7xRPAYScLyeTf1Er7Nie3Wr/3vOaZC3fyqgY /nKIjsI7Mx6ygJLUYPvjG8DvJTb/6g/r/DarwJ9dliT6z+FtpQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPikUhk7YALu5Gxe1e4TpigoQK6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjZmOWEwMDQtZDIwOC0z MjZiLTgxYzgtNjQyYzJhZGE3YmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAg5nmAwQA g5n1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABL4rKCLv8a4rGrlt+LraJ3ukRbsDwPGsa0dWAGMZNgxjJEz P9j7ZKXEuzbf8MoCeOu1EdBPBGNijWk95WqfCqS/hRyT8/eVZrddjHVWUfzj+X0F 4SJg1FzJNmyU3i7ghWO9iLMbMO2aDug4Fe29K/9MlrBa4bkugf19ldoW/Y3oogXP 2IJ7wkU+FQFou1+h8IDwn7a6jKDcw3ehtQf+zREtlJzLy6YtG3nbW3//tRrOs07L EsIIMkGZQJcElikT8vis8IxDn34tjokCG6mTxS+0FJCginERrEd3VAXVKK8qiChY TWqGWl4YHsh6n5LFR2vqXuLqi1eEWy5QwgIveG4= -----END CERTIFICATE-----Generated at Mon Jun 30 06:00:57 2025 by rpki-client