$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0a5f3109-fd1f-385b-ab65-9e307183fab3.roa File: 0a5f3109-fd1f-385b-ab65-9e307183fab3.roa (raw, json) Hash identifier: 0eXNc5fQYvknXnoLdYISJoESVXP//LNNjyLA6d4kJ4s= Subject key identifier: 44:E9:A0:60:18:A9:B3:9B:67:F8:C0:98:0C:05:46:31:26:0F:3A:9D Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584AE891253C2D94728F85D11B00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0a5f3109-fd1f-385b-ab65-9e307183fab3.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 60558 IP address blocks: 131.153.243.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:25:3c:2d:94:72:8f:85:d1:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=45d2cbbb-d8ab-46ef-a76b-48656e0dc659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:78:84:bc:f2:b5:a6:f9:5b:7c:ab:4d:93:b9: 1e:65:be:a6:0e:64:11:e8:50:fe:95:de:35:ab:bd: 5b:29:d8:bd:3a:a4:80:51:18:1b:df:08:42:ec:85: ab:91:f2:36:66:db:22:a5:04:76:57:de:49:1b:0b: 53:88:1b:7a:9e:b2:d6:71:87:ad:ba:00:d8:26:9c: 9a:e6:1c:52:e3:94:32:20:ec:47:c0:b8:7c:39:0c: be:19:15:a7:4b:5b:94:dc:f3:8c:8c:37:e4:d5:c4: a9:d8:34:fc:e4:28:8b:21:53:41:19:92:7a:0d:d0: 25:ee:6e:88:69:69:2b:ab:c1:98:77:fa:e7:29:3f: 39:48:ea:ed:e3:54:02:7a:37:df:6c:04:65:42:a3: e3:37:75:72:bc:cd:1e:5c:36:c2:bd:e0:92:40:fd: fa:33:0d:99:f5:99:8f:1e:15:c5:9e:be:43:74:5e: 7a:e8:98:da:f3:b3:ec:fa:72:de:45:29:14:2f:cd: 9b:f1:a3:73:75:a8:c5:e3:e2:05:fe:6f:98:61:dd: 11:ec:f8:ad:b7:cb:22:a2:b5:b7:d2:7e:2f:9d:43: f4:90:60:f3:fc:54:bc:91:2e:2f:b6:7d:1a:db:68: ce:cb:87:ba:5f:25:38:80:d6:74:78:09:a0:ff:5d: 7a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E9:A0:60:18:A9:B3:9B:67:F8:C0:98:0C:05:46:31:26:0F:3A:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0a5f3109-fd1f-385b-ab65-9e307183fab3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ce:ac:1a:da:01:d5:c6:4a:cf:d0:0c:d9:56:0e:a8:b4:95: df:c0:41:9a:76:97:dc:98:f3:7d:c1:a7:cd:56:bc:4d:59:0d: 9c:98:4a:99:8a:c6:9c:61:45:82:60:27:4d:22:c1:09:cd:c8: 45:3b:51:94:53:67:71:73:7c:95:47:e9:d1:48:0a:ac:9a:b6: 2c:97:54:50:97:1f:d2:5e:87:c7:40:d9:bb:57:ab:51:14:4f: 58:d2:46:e1:61:88:69:b1:29:3d:16:4f:25:37:d9:85:ad:d5: a4:7f:24:a9:5e:6c:a3:e1:a6:ff:12:cd:16:30:42:6e:6f:42: 05:cf:c3:ae:71:38:b2:9e:ee:b9:7f:e8:53:0f:46:74:62:44: b4:98:bc:56:0d:05:d8:ee:20:e0:70:67:00:7e:5b:ff:00:ed: cf:32:e5:79:12:49:71:50:36:3b:b4:5a:33:33:51:7c:ef:11: 64:0e:2f:8d:35:28:b4:47:2e:c2:9f:ed:75:d1:10:89:46:7a: ab:ba:5b:71:8a:3e:9f:6b:88:0c:fd:53:12:7d:cd:ce:ab:7a: e3:9f:18:0c:7d:8b:0b:29:0a:84:2b:41:24:36:66:57:7b:91: b3:d4:fd:e8:91:cd:4d:ca:98:83:70:45:fd:68:7d:92:ca:5e: 6c:02:27:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSU8LZRyj4XRGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NDVkMmNiYmItZDhhYi00NmVmLWE3NmItNDg2NTZlMGRjNjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XiEvPK1pvlbfKtNk7keZb6mDmQR6FD+ld41 q71bKdi9OqSAURgb3whC7IWrkfI2ZtsipQR2V95JGwtTiBt6nrLWcYetugDYJpya 5hxS45QyIOxHwLh8OQy+GRWnS1uU3POMjDfk1cSp2DT85CiLIVNBGZJ6DdAl7m6I aWkrq8GYd/rnKT85SOrt41QCejffbARlQqPjN3VyvM0eXDbCveCSQP36Mw2Z9ZmP HhXFnr5DdF566Jja87Ps+nLeRSkUL82b8aNzdajF4+IF/m+YYd0R7Pitt8siorW3 0n4vnUP0kGDz/FS8kS4vtn0a22jOy4e6XyU4gNZ0eAmg/116IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETpoGAYqbObZ/jAmAwFRjEmDzqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMGE1ZjMxMDktZmQxZi0z ODViLWFiNjUtOWUzMDcxODNmYWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLOrBraAdXGSs/QDNlWDqi0ld/AQZp2l9yY833Bp81WvE1ZDZyYSpmK xpxhRYJgJ00iwQnNyEU7UZRTZ3FzfJVH6dFICqyatiyXVFCXH9Jeh8dA2btXq1EU T1jSRuFhiGmxKT0WTyU32YWt1aR/JKlebKPhpv8SzRYwQm5vQgXPw65xOLKe7rl/ 6FMPRnRiRLSYvFYNBdjuIOBwZwB+W/8A7c8y5XkSSXFQNju0WjMzUXzvEWQOL401 KLRHLsKf7XXREIlGequ6W3GKPp9riAz9UxJ9zc6reuOfGAx9iwspCoQrQSQ2Zld7 kbPU/eiRzU3KmINwRf1ofZLKXmwCJ1s= -----END CERTIFICATE-----Generated at Sat Aug 23 14:56:10 2025 by rpki-client