$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/05e9e738-30f7-33bb-9421-1b7513d3e6aa.roa File: 05e9e738-30f7-33bb-9421-1b7513d3e6aa.roa (raw, json) Hash identifier: Bs7l6PuOPtpjtK9VCqFMg+xlFU9I7cQE8whGUAmjcDU= Subject key identifier: D3:E1:75:23:2D:67:67:04:DB:A6:C4:2B:C5:26:9E:DB:46:B0:B6:71 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64CAC63E96D29AF791FC0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/05e9e738-30f7-33bb-9421-1b7513d3e6aa.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 397378 IP address blocks: 131.153.93.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4c:ac:63:e9:6d:29:af:79:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=11581161-d35a-4336-afa3-951d6a20080c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2e:4d:ad:2a:3f:c4:af:ab:59:ad:9c:39:43: c8:00:35:ac:3b:bc:2e:43:65:89:90:05:70:83:6c: e1:38:ee:f2:6a:2c:80:c1:05:d4:96:08:60:92:90: b2:06:cf:0c:13:14:ea:77:de:3d:35:8d:5e:87:2d: 8d:16:6b:5c:95:92:d8:2b:fe:76:57:8d:9e:86:22: 91:c0:4c:2b:89:67:de:87:45:7b:e5:64:15:ff:4a: b1:ab:d8:71:5a:45:e1:f1:4b:61:eb:68:61:ea:58: 1c:66:b2:9a:97:38:45:c5:32:cf:d3:bb:6e:e7:07: 64:01:d9:79:b2:da:6a:07:e5:79:81:e0:90:42:06: 95:3e:d2:3b:f7:98:9c:db:3f:4a:71:20:74:2a:e6: c6:35:8a:de:9c:1f:a7:95:6a:fb:63:89:66:42:f6: db:40:10:48:fc:1b:1d:65:f1:21:5e:0b:55:44:e8: 4a:d9:b0:24:25:c4:2c:07:c2:30:ef:83:4c:e0:3c: 3f:03:f3:11:d6:8a:f7:1f:6d:fc:03:1a:9e:16:29: 71:7e:8a:09:2b:fb:51:0c:22:04:42:f2:1b:9e:05: 79:1d:f7:f5:69:23:b0:c8:0a:f8:7a:0d:eb:be:a0: b7:6d:80:e6:af:f1:9f:a8:6a:39:12:2b:b1:24:2f: 1d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E1:75:23:2D:67:67:04:DB:A6:C4:2B:C5:26:9E:DB:46:B0:B6:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/05e9e738-30f7-33bb-9421-1b7513d3e6aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:91:9d:d0:3a:b0:0d:24:60:9b:0b:52:c2:60:1d:d5:05:4e: d8:d2:d5:4b:a5:7e:85:1d:4e:4c:3b:b2:ca:c0:53:d8:b1:de: df:fd:a5:3b:35:81:e2:17:0c:a9:d0:c1:f7:3a:6e:19:45:88: 03:fb:20:c6:ef:3b:a8:f5:37:ce:65:4d:81:02:59:0f:80:dd: b6:4e:d0:04:93:06:b3:f5:09:5d:65:55:9c:45:89:e8:96:03: a4:91:dd:b5:b8:53:b6:48:7a:65:14:e0:2f:c4:5b:30:22:d0: 43:7a:ba:13:99:5f:5c:f5:74:b4:4b:54:86:a1:b8:ff:7c:e6: 9a:6f:69:ac:fd:71:ed:58:00:71:28:9f:ce:37:7d:b5:ab:1e: d6:78:7e:f7:b8:24:92:e0:24:f0:23:05:ea:67:bc:d6:c6:56: c8:88:bb:4a:2f:54:6e:c4:ad:45:6e:54:b5:b6:1c:52:a4:2d: 63:8e:ba:e8:bc:f3:c4:0e:13:af:e3:aa:09:7f:b8:b9:7f:ed: ea:fa:ce:0c:6c:05:da:72:91:b6:e3:5b:b0:54:66:c4:3e:ff: 1f:03:3d:d5:4e:2c:3b:5d:14:b7:66:1e:d7:6b:09:c4:3e:02: e0:92:b8:c2:16:3c:27:7f:b2:3c:a6:19:55:9f:6c:6e:0f:3f: cc:ee:ae:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpkysY+ltKa95H8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MTE1ODExNjEtZDM1YS00MzM2LWFmYTMtOTUxZDZhMjAwODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS5NrSo/xK+rWa2cOUPIADWsO7wuQ2WJkAVw g2zhOO7yaiyAwQXUlghgkpCyBs8MExTqd949NY1ehy2NFmtclZLYK/52V42ehiKR wEwriWfeh0V75WQV/0qxq9hxWkXh8Uth62hh6lgcZrKalzhFxTLP07tu5wdkAdl5 stpqB+V5geCQQgaVPtI795ic2z9KcSB0KubGNYrenB+nlWr7Y4lmQvbbQBBI/Bsd ZfEhXgtVROhK2bAkJcQsB8Iw74NM4Dw/A/MR1or3H238AxqeFilxfooJK/tRDCIE QvIbngV5Hff1aSOwyAr4eg3rvqC3bYDmr/GfqGo5EiuxJC8dBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPhdSMtZ2cE26bEK8UmnttGsLZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMDVlOWU3MzgtMzBmNy0z M2JiLTk0MjEtMWI3NTEzZDNlNmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5ldMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2RndA6sA0kYJsLUsJgHdUFTtjS1UulfoUdTkw7ssrAU9ix3t/9pTs1 geIXDKnQwfc6bhlFiAP7IMbvO6j1N85lTYECWQ+A3bZO0ASTBrP1CV1lVZxFieiW A6SR3bW4U7ZIemUU4C/EWzAi0EN6uhOZX1z1dLRLVIahuP985ppvaaz9ce1YAHEo n843fbWrHtZ4fve4JJLgJPAjBepnvNbGVsiIu0ovVG7ErUVuVLW2HFKkLWOOuui8 88QOE6/jqgl/uLl/7er6zgxsBdpykbbjW7BUZsQ+/x8DPdVOLDtdFLdmHtdrCcQ+ AuCSuMIWPCd/sjymGVWfbG4PP8zurvU= -----END CERTIFICATE-----Generated at Sat Aug 23 14:55:16 2025 by rpki-client