$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/123cfc75-ee2c-3a64-af65-154a3f602d33.roa File: 123cfc75-ee2c-3a64-af65-154a3f602d33.roa (raw, json) Hash identifier: cdSM+xMRum40GQxAn8KXRjgZieDaXUTlS6ULIt+jQqo= Subject key identifier: 01:0C:B4:71:94:8D:D7:54:1E:7E:65:00:85:7F:C6:20:6B:AA:5F:27 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64D3C954FB8632AD9CD00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/123cfc75-ee2c-3a64-af65-154a3f602d33.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 19437 IP address blocks: 131.153.100.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4d:3c:95:4f:b8:63:2a:d9:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=7c39fd03-3539-4f44-a27e-35c0453446af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:d6:ab:5f:31:cf:87:03:ab:57:fb:b6:3b: a9:e3:7c:a3:84:df:7b:b7:8f:ae:2c:25:cc:05:02: ba:48:05:bd:fe:e0:09:07:20:dc:cc:78:33:68:42: ad:84:62:27:d7:cb:da:71:70:63:09:7c:0c:b6:3c: 61:52:59:f2:91:50:46:7f:17:b9:03:fb:bb:b1:31: b5:a5:66:29:0e:ac:b2:54:73:91:6b:51:43:57:66: 4e:13:b9:af:62:ab:28:ea:b7:47:de:1b:78:ec:82: 59:b8:36:22:e0:d3:c4:c1:27:5a:5b:e0:8e:fb:35: e2:4f:de:31:c4:27:00:92:6b:0e:16:e1:4c:43:30: 66:b2:4e:96:6d:95:71:9c:5e:16:e1:cd:14:77:18: 0f:67:09:d5:a7:8d:82:c2:f6:9d:eb:f4:82:93:58: 81:92:36:5a:37:28:f1:ea:c6:3b:ee:d5:37:e6:1b: b0:69:cb:53:ca:2f:4e:0a:ca:ab:6e:50:e4:ba:5f: d4:48:77:b8:7a:21:c5:d7:11:04:c7:b0:20:5a:c1: f9:3a:ce:72:fd:07:17:9a:30:e0:80:bd:eb:02:fd: 74:0a:0d:2b:d2:69:9b:7d:56:00:03:31:2f:5a:d5: 9b:8a:26:e4:04:a7:76:aa:36:88:2d:67:0a:7c:fc: 07:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0C:B4:71:94:8D:D7:54:1E:7E:65:00:85:7F:C6:20:6B:AA:5F:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/123cfc75-ee2c-3a64-af65-154a3f602d33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:91:9d:54:8b:aa:7f:82:ce:c9:f6:95:59:11:69:40:61:3c: c6:ff:a6:50:04:f2:df:be:57:ab:16:53:ba:83:fc:c7:95:5b: 9c:34:bd:a1:ea:8c:41:39:90:ee:da:80:91:da:0c:e6:d9:76: af:7b:11:5f:96:47:55:64:77:26:66:de:5d:7d:e9:99:01:03: 3b:d3:12:7c:68:c5:55:17:98:b0:a9:58:47:25:ce:6d:88:d7: 33:e2:cb:3e:a8:19:47:ab:63:62:9a:27:5c:03:6e:fd:0e:aa: e3:ec:6c:b5:81:fb:61:2b:d3:8f:18:72:23:f9:e5:ee:67:0d: 0c:03:03:31:30:f0:13:ec:a8:38:2b:b1:47:2d:a0:91:db:b2: 4f:ed:25:1d:cd:c3:46:00:b2:4b:ac:80:7a:65:18:d8:05:fd: 24:c5:b9:d8:c0:a9:12:88:51:f8:15:6c:71:e4:b6:ec:0b:69: 77:e0:21:db:eb:7a:20:91:28:b8:5c:6b:db:2d:e9:c5:04:43: a1:f3:7f:8f:d2:a8:0a:5f:08:13:5d:ef:79:ea:c0:8e:5c:95: ec:7f:b8:79:ce:24:d2:06:6e:8b:a5:a7:38:b3:44:85:23:66: fa:35:3e:fb:ca:6b:58:3d:81:6d:f4:85:8a:af:6d:3f:f6:06: 9d:eb:07:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpk08lU+4YyrZzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk N2MzOWZkMDMtMzUzOS00ZjQ0LWEyN2UtMzVjMDQ1MzQ0NmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh/Wq18xz4cDq1f7tjup43yjhN97t4+uLCXM BQK6SAW9/uAJByDczHgzaEKthGIn18vacXBjCXwMtjxhUlnykVBGfxe5A/u7sTG1 pWYpDqyyVHORa1FDV2ZOE7mvYqso6rdH3ht47IJZuDYi4NPEwSdaW+CO+zXiT94x xCcAkmsOFuFMQzBmsk6WbZVxnF4W4c0UdxgPZwnVp42Cwvad6/SCk1iBkjZaNyjx 6sY77tU35huwactTyi9OCsqrblDkul/USHe4eiHF1xEEx7AgWsH5Os5y/QcXmjDg gL3rAv10Cg0r0mmbfVYAAzEvWtWbiibkBKd2qjaILWcKfPwHQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEMtHGUjddUHn5lAIV/xiBrql8nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTIzY2ZjNzUtZWUyYy0z YTY0LWFmNjUtMTU0YTNmNjAyZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCRnVSLqn+Czsn2lVkRaUBhPMb/plAE8t++V6sWU7qD/MeVW5w0vaHq jEE5kO7agJHaDObZdq97EV+WR1VkdyZm3l196ZkBAzvTEnxoxVUXmLCpWEclzm2I 1zPiyz6oGUerY2KaJ1wDbv0OquPsbLWB+2Er048YciP55e5nDQwDAzEw8BPsqDgr sUctoJHbsk/tJR3Nw0YAskusgHplGNgF/STFudjAqRKIUfgVbHHktuwLaXfgIdvr eiCRKLhca9st6cUEQ6Hzf4/SqApfCBNd73nqwI5clex/uHnOJNIGboulpzizRIUj Zvo1PvvKa1g9gW30hYqvbT/2Bp3rB7s= -----END CERTIFICATE-----Generated at Sat Aug 23 17:34:34 2025 by rpki-client