$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1123680b-9df2-3e1d-af74-0486a85ed8bf.roa File: 1123680b-9df2-3e1d-af74-0486a85ed8bf.roa (raw, json) Hash identifier: u01F0s8yVR7AYlTb30FpSmbxi8Cv+uT7ldN4+yGNzqo= Subject key identifier: 76:64:C8:57:CD:17:95:CF:2D:31:50:90:EF:E1:B7:13:B0:86:A3:CF Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACE0B96B1ACF8AAF911821080 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1123680b-9df2-3e1d-af74-0486a85ed8bf.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 20454 IP address blocks: 131.153.8.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:96:b1:ac:f8:aa:f9:11:82:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=a3a76b07-f284-4fd3-9a91-98c7501583a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c1:e3:46:b7:7a:c4:3d:13:6b:72:80:10:a5: 3a:d6:66:3c:6a:24:e0:c6:d1:94:a6:8d:27:04:20: fb:5a:9b:14:25:19:9f:15:cd:c4:e8:fc:5c:50:4b: 77:3f:f7:9e:85:7e:8e:b1:e4:c5:f7:55:32:b3:fd: 64:ef:04:f0:f5:0d:49:15:4d:b7:37:15:7f:f8:3c: ee:6a:63:e6:a1:47:11:81:ef:86:7d:78:bd:a9:30: 22:4d:db:bb:84:c0:ae:b4:d3:90:d4:22:46:9d:b9: 3d:a5:fd:72:7e:c5:5d:7e:57:28:14:38:fa:05:6a: 5b:2e:72:f0:a7:f6:4b:8f:3f:69:c3:1d:2d:54:75: f6:36:35:30:c7:8a:99:fb:72:3a:ef:9e:c4:a3:5a: bb:ed:31:40:0d:37:8b:99:bf:e5:25:3e:d3:12:59: 1f:d0:db:95:26:fd:d7:b1:8a:b1:88:7b:ea:6f:3a: 53:24:e6:26:4d:34:83:23:d0:09:ad:b1:e8:27:3a: 03:7e:12:2b:3d:4f:f3:81:46:0f:78:16:eb:db:43: 65:d3:df:46:df:77:db:a1:6b:73:6a:c3:9e:b2:b9: ef:66:32:eb:e8:28:68:0b:8d:00:5f:bc:3c:d6:da: 6a:0a:5f:f2:81:b8:47:80:08:e3:b2:ad:e6:23:eb: 54:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:64:C8:57:CD:17:95:CF:2D:31:50:90:EF:E1:B7:13:B0:86:A3:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1123680b-9df2-3e1d-af74-0486a85ed8bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:01:fe:6f:24:ab:9f:a6:1a:8f:06:96:94:fd:5e:aa:03:e2: 79:7d:73:6a:c4:13:00:90:6f:e5:86:e3:aa:f2:bf:cc:bf:85: 1d:ed:4b:5a:06:7e:b1:5c:ce:91:16:25:6d:da:89:b4:97:99: f9:ec:46:4e:f0:27:d1:2a:c0:12:22:14:0c:14:2b:5d:8f:cd: 36:b6:fd:95:32:d5:24:c3:21:fb:c7:e3:26:b2:21:12:a9:19: 3f:3d:81:b1:a6:f2:16:7c:52:03:fe:78:39:00:28:59:bb:ba: 17:88:3f:87:23:52:f2:70:38:58:cf:96:f0:6e:dc:cd:74:22: c6:9f:8e:e1:4f:98:89:b9:1f:2d:41:a7:9a:f3:b2:d6:23:7e: ed:ce:11:5b:28:9e:3c:8c:61:42:33:cf:3d:d1:4d:d3:a9:1e: 14:5b:55:63:d7:cf:42:37:ed:f3:4a:1c:38:c4:4f:ef:b8:82: 6c:94:23:92:5a:9f:89:78:eb:d9:71:0c:f4:f8:d7:6c:0b:49: ed:ab:b7:82:73:2e:2a:6b:8c:2a:91:90:4d:e6:41:ca:7e:66: 97:cd:89:40:ed:60:bf:c2:a4:66:d7:a6:6c:d2:94:0f:f5:46: b0:67:05:4d:f8:39:a7:4f:7f:ae:e2:e9:ea:9f:c7:98:9c:66: 6b:26:6f:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5axrPiq+RGCEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk YTNhNzZiMDctZjI4NC00ZmQzLTlhOTEtOThjNzUwMTU4M2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMHjRrd6xD0Ta3KAEKU61mY8aiTgxtGUpo0n BCD7WpsUJRmfFc3E6PxcUEt3P/eehX6OseTF91Uys/1k7wTw9Q1JFU23NxV/+Dzu amPmoUcRge+GfXi9qTAiTdu7hMCutNOQ1CJGnbk9pf1yfsVdflcoFDj6BWpbLnLw p/ZLjz9pwx0tVHX2NjUwx4qZ+3I6757Eo1q77TFADTeLmb/lJT7TElkf0NuVJv3X sYqxiHvqbzpTJOYmTTSDI9AJrbHoJzoDfhIrPU/zgUYPeBbr20Nl099G33fboWtz asOesrnvZjLr6ChoC40AX7w81tpqCl/ygbhHgAjjsq3mI+tUQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZkyFfNF5XPLTFQkO/htxOwhqPPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTEyMzY4MGItOWRmMi0z ZTFkLWFmNzQtMDQ4NmE4NWVkOGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5kIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoB/m8kq5+mGo8GlpT9XqoD4nl9c2rEEwCQb+WG46ryv8y/hR3tS1oG frFczpEWJW3aibSXmfnsRk7wJ9EqwBIiFAwUK12PzTa2/ZUy1STDIfvH4yayIRKp GT89gbGm8hZ8UgP+eDkAKFm7uheIP4cjUvJwOFjPlvBu3M10IsafjuFPmIm5Hy1B p5rzstYjfu3OEVsonjyMYUIzzz3RTdOpHhRbVWPXz0I37fNKHDjET++4gmyUI5Ja n4l469lxDPT412wLSe2rt4JzLiprjCqRkE3mQcp+ZpfNiUDtYL/CpGbXpmzSlA/1 RrBnBU34OadPf67i6eqfx5icZmsmb1o= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:28 2025 by rpki-client