$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0d4b973e-bcf0-3096-9daf-6b8ec6792aa1.roa File: 0d4b973e-bcf0-3096-9daf-6b8ec6792aa1.roa (raw, json) Hash identifier: KdThcCS212mB9fxnSRIxPShisbvBbO2K6Zr38SnzfLg= Subject key identifier: 66:B7:13:C1:CF:81:85:BC:6C:F3:20:D6:D4:AE:81:E9:48:BA:6F:E4 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACE0B95FC9D152008AAE20A00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0d4b973e-bcf0-3096-9daf-6b8ec6792aa1.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 20454 IP address blocks: 131.153.142.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:95:fc:9d:15:20:08:aa:e2:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=bec63141-dcb8-4546-80b4-47435f50b6aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e9:f5:09:a6:71:bf:a1:76:69:e7:a6:8b:0d: 7a:6f:1a:a0:c3:c1:36:f0:31:d5:73:c4:2d:cb:21: af:02:b6:25:d7:6c:49:6c:c6:ab:18:77:00:05:0c: 30:2c:84:8b:61:95:80:25:77:e7:c0:61:e9:cb:11: 0c:6e:96:44:cd:cf:65:06:68:e4:79:70:3c:e2:34: 13:73:12:1c:a0:96:40:e6:de:43:11:c1:6d:d3:62: 2c:89:6e:f1:37:32:1e:e2:7a:91:b0:06:7f:c7:b5: 7c:95:f4:07:f2:df:89:95:a2:cf:f4:67:b8:1d:57: 5f:dd:44:a7:d3:4d:10:a2:64:d3:ab:62:fa:3a:44: cd:79:41:9b:d8:06:92:7d:16:b7:17:d7:a1:c5:14: 06:01:15:0a:aa:1c:94:4b:1f:25:30:c1:65:9d:e5: d5:17:c0:b1:8f:45:73:25:f3:7e:6c:4d:d5:97:03: d9:82:f6:1b:47:e3:0d:bf:f2:99:49:74:08:30:df: ab:e0:35:a2:aa:6b:4c:6c:ad:fa:6e:4c:e3:66:f9: 2a:6a:0d:9e:a1:73:6d:2e:94:93:12:5b:e1:f5:73: ed:5d:03:56:59:0e:86:51:06:35:46:54:a4:88:88: 70:ef:5b:3d:c1:e3:17:d4:a1:67:e2:08:14:21:72: 6f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B7:13:C1:CF:81:85:BC:6C:F3:20:D6:D4:AE:81:E9:48:BA:6F:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0d4b973e-bcf0-3096-9daf-6b8ec6792aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:22:3d:12:72:f7:e4:4b:4d:97:52:94:9c:55:d9:eb:58:92: a4:57:8c:50:13:d3:76:27:50:94:f7:b2:4b:c5:b8:f1:ea:cd: 76:5d:ec:f2:9f:be:de:d4:ec:cf:39:95:9e:69:ff:43:13:7f: d6:69:b1:7d:e8:63:da:9f:1e:a4:99:f3:38:c8:40:b9:bc:49: 8d:c0:dd:ab:10:c3:5c:6d:43:50:8f:82:59:16:35:0c:eb:80: 10:44:08:43:15:8e:52:fd:14:7d:52:94:6a:50:d8:ee:34:6f: 7b:aa:3b:18:73:df:e8:b0:de:1b:07:4f:89:f8:52:ca:12:49: 03:df:fc:e3:f3:97:56:9a:00:03:3a:16:3c:24:b6:b5:6a:18: 08:ec:3c:1d:28:a2:0a:2a:6f:bd:a9:bb:3b:f7:9b:72:96:76: fa:30:47:24:14:40:e0:8b:0e:7c:0c:73:28:df:2d:49:19:b7: e3:04:65:d3:4b:04:8d:97:14:f0:92:a9:ee:f6:85:03:32:50: 9f:74:ec:bc:23:95:70:c3:bf:8d:70:48:2a:8c:e7:be:1d:84: ce:61:f5:c0:8f:6e:77:f1:88:f7:74:18:4d:9c:23:e2:8b:1f: f6:f6:d0:38:71:b6:81:32:be:a0:7e:e2:8a:18:da:66:90:01: c8:d4:c6:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5X8nRUgCKriCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk YmVjNjMxNDEtZGNiOC00NTQ2LTgwYjQtNDc0MzVmNTBiNmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAien1CaZxv6F2aeemiw16bxqgw8E28DHVc8Qt yyGvArYl12xJbMarGHcABQwwLISLYZWAJXfnwGHpyxEMbpZEzc9lBmjkeXA84jQT cxIcoJZA5t5DEcFt02IsiW7xNzIe4nqRsAZ/x7V8lfQH8t+JlaLP9Ge4HVdf3USn 000QomTTq2L6OkTNeUGb2AaSfRa3F9ehxRQGARUKqhyUSx8lMMFlneXVF8Cxj0Vz JfN+bE3VlwPZgvYbR+MNv/KZSXQIMN+r4DWiqmtMbK36bkzjZvkqag2eoXNtLpST Elvh9XPtXQNWWQ6GUQY1RlSkiIhw71s9weMX1KFn4ggUIXJv+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGa3E8HPgYW8bPMg1tSugelIum/kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMGQ0Yjk3M2UtYmNmMC0z MDk2LTlkYWYtNmI4ZWM2NzkyYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5mOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMiPRJy9+RLTZdSlJxV2etYkqRXjFAT03YnUJT3skvFuPHqzXZd7PKf vt7U7M85lZ5p/0MTf9ZpsX3oY9qfHqSZ8zjIQLm8SY3A3asQw1xtQ1CPglkWNQzr gBBECEMVjlL9FH1SlGpQ2O40b3uqOxhz3+iw3hsHT4n4UsoSSQPf/OPzl1aaAAM6 FjwktrVqGAjsPB0oogoqb72puzv3m3KWdvowRyQUQOCLDnwMcyjfLUkZt+MEZdNL BI2XFPCSqe72hQMyUJ907LwjlXDDv41wSCqM574dhM5h9cCPbnfxiPd0GE2cI+KL H/b20DhxtoEyvqB+4ooY2maQAcjUxpY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:00:44 2025 by rpki-client