$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/06595940-0bb5-3c4e-89d3-7ec091d5d6ab.roa File: 06595940-0bb5-3c4e-89d3-7ec091d5d6ab.roa (raw, json) Hash identifier: bDOv9NVFNpo9ZB4GGrRtULl+Y+eHtHMMP6a1HjLcOrc= Subject key identifier: 0D:8B:90:A1:58:11:B2:53:53:3A:07:D6:AD:88:0B:F5:C5:31:BB:BF Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACE0B96F79EF58DD80D223E00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/06595940-0bb5-3c4e-89d3-7ec091d5d6ab.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 20454 IP address blocks: 131.153.32.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:96:f7:9e:f5:8d:d8:0d:22:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=e143e263-5bae-4c7e-9c64-5d2889db88a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:42:6d:67:46:0d:30:6f:08:1c:c4:1e:0e:25: 97:6d:b2:f5:c7:68:cc:87:bc:56:d9:14:e1:3a:41: 1f:04:dc:88:a2:17:46:25:f7:63:56:84:f8:73:dd: 12:bf:aa:ed:0c:08:96:06:bf:b8:53:55:9c:04:31: 6c:c8:93:47:1a:12:d4:dc:1b:c4:80:3b:e5:53:28: d1:b5:d3:2a:a4:bd:a3:b2:c5:b3:82:87:25:17:73: 30:b2:d5:4f:de:37:48:31:96:8c:7e:68:11:13:02: fa:ba:02:b5:f3:cf:ba:83:f4:11:bf:cf:57:33:78: 70:7e:af:d5:ee:70:b1:84:81:4c:64:65:78:3f:ad: 63:f2:b2:d0:37:84:a4:a0:86:98:a2:8a:fb:97:b1: 10:74:d1:b3:58:b9:22:22:19:d3:e4:0f:a0:6f:7c: 4d:0c:d3:0a:07:3d:41:8a:e1:0f:af:d0:46:1f:ee: bf:54:8f:96:2a:96:e1:8f:fb:bc:d0:aa:a6:0f:de: db:91:86:3c:ed:15:19:8d:5e:79:61:17:71:b3:33: 4a:23:95:cb:dc:b7:90:64:0d:f1:74:44:1b:4e:42: 76:ac:1e:6b:58:3d:d9:09:a4:76:15:2f:aa:57:50: 2a:eb:b1:06:f2:58:b5:30:5f:b3:f7:00:d3:1f:be: 09:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8B:90:A1:58:11:B2:53:53:3A:07:D6:AD:88:0B:F5:C5:31:BB:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/06595940-0bb5-3c4e-89d3-7ec091d5d6ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:85:37:0f:af:9c:3b:59:5b:fd:a1:70:e8:fd:01:50:1e:f9: 80:43:07:19:be:67:34:83:a0:b0:86:91:cb:c9:5a:07:de:0c: 12:57:c8:a9:37:7e:41:24:13:70:c1:ea:18:1b:e3:28:00:19: 51:81:cf:02:ae:32:1f:25:e6:0e:e4:3d:90:9f:13:c7:d8:f5: 2c:ef:4e:f2:72:5f:9e:d6:9f:f0:6c:29:5d:7f:7b:19:9f:cb: 2c:00:0d:40:ea:71:e6:35:19:1f:fc:08:b2:dc:41:6d:ab:9d: 1a:12:3d:8f:07:90:18:12:1e:b9:ee:af:ba:13:8e:c2:5f:60: 11:c5:ba:04:59:6c:9b:5c:59:13:58:34:fa:1f:65:49:28:42: 25:0d:7f:dc:dd:ce:48:d2:97:0a:77:0c:5e:87:1b:5f:5a:e1: 9d:f7:85:d9:46:af:f7:f7:3a:b1:ca:0d:a1:90:19:4f:d8:05: 0f:fc:b7:55:a4:ba:be:d3:b4:c0:b0:28:a6:17:67:88:d4:e7: 62:a9:b1:9c:6a:c0:3b:2e:be:ca:80:84:71:b5:c6:2b:2d:3d: 1e:61:82:f2:10:d0:5c:db:4c:56:97:d9:0b:0a:b2:a8:88:a5: d7:8b:cb:1f:83:e6:06:0e:a7:c6:4a:0c:a1:77:c5:6d:a2:d0: d5:ff:00:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5b3nvWN2A0iPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk ZTE0M2UyNjMtNWJhZS00YzdlLTljNjQtNWQyODg5ZGI4OGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kJtZ0YNMG8IHMQeDiWXbbL1x2jMh7xW2RTh OkEfBNyIohdGJfdjVoT4c90Sv6rtDAiWBr+4U1WcBDFsyJNHGhLU3BvEgDvlUyjR tdMqpL2jssWzgoclF3MwstVP3jdIMZaMfmgREwL6ugK188+6g/QRv89XM3hwfq/V 7nCxhIFMZGV4P61j8rLQN4SkoIaYoor7l7EQdNGzWLkiIhnT5A+gb3xNDNMKBz1B iuEPr9BGH+6/VI+WKpbhj/u80KqmD97bkYY87RUZjV55YRdxszNKI5XL3LeQZA3x dEQbTkJ2rB5rWD3ZCaR2FS+qV1Aq67EG8li1MF+z9wDTH74J3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2LkKFYEbJTUzoH1q2IC/XFMbu/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMDY1OTU5NDAtMGJiNS0z YzRlLTg5ZDMtN2VjMDkxZDVkNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5kgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqFNw+vnDtZW/2hcOj9AVAe+YBDBxm+ZzSDoLCGkcvJWgfeDBJXyKk3 fkEkE3DB6hgb4ygAGVGBzwKuMh8l5g7kPZCfE8fY9SzvTvJyX57Wn/BsKV1/exmf yywADUDqceY1GR/8CLLcQW2rnRoSPY8HkBgSHrnur7oTjsJfYBHFugRZbJtcWRNY NPofZUkoQiUNf9zdzkjSlwp3DF6HG19a4Z33hdlGr/f3OrHKDaGQGU/YBQ/8t1Wk ur7TtMCwKKYXZ4jU52KpsZxqwDsuvsqAhHG1xistPR5hgvIQ0FzbTFaX2QsKsqiI pdeLyx+D5gYOp8ZKDKF3xW2i0NX/AP8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:58:34 2025 by rpki-client