$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1823aeee-620e-331b-bd1e-36eec1af6cfa.roa File: 1823aeee-620e-331b-bd1e-36eec1af6cfa.roa (raw, json) Hash identifier: 5coIvp9b+Nap5RplOVwvxIFh0RBjOlW7yRBoTw9P30g= Subject key identifier: A0:20:AE:99:76:FE:D4:EB:DD:D3:75:AD:F3:CE:6C:57:39:6C:BF:8B Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64F39A524635C63328180 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1823aeee-620e-331b-bd1e-36eec1af6cfa.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 20454 IP address blocks: 131.153.42.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4f:39:a5:24:63:5c:63:32:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=6c96dbda-3773-4bd3-9e50-2424017b8c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:38:9b:4d:93:54:ff:28:30:24:90:6c:73:2d: ce:88:30:e6:8d:fe:31:14:a5:9b:15:c6:b6:88:b3: 01:ec:df:1d:7b:91:57:a8:8f:29:58:93:1b:40:7b: e1:5f:7e:dd:7e:ad:9a:fa:f1:c0:07:21:fa:b0:13: 94:9a:db:9c:fc:0d:cc:f3:11:a1:da:cf:fd:e0:bd: 68:48:41:9a:ae:46:0e:49:5a:0c:44:7c:3f:ff:e1: 82:41:a8:af:a2:e0:01:94:9b:61:6f:3d:76:0c:0f: ba:0d:b9:3b:ea:19:93:ac:a2:b7:ce:d2:92:66:62: ae:f3:fb:d0:0d:48:df:79:97:17:81:b0:e8:a1:72: 41:7a:e8:27:1d:47:42:c0:18:42:b1:bd:fe:7e:22: 2e:56:74:18:6f:27:82:6d:98:3f:86:b6:f2:1b:e8: 5b:2e:b6:28:66:21:87:7a:87:96:2f:7e:9a:ce:94: c1:f7:ea:d0:c5:ad:c7:24:36:5c:e1:4d:53:1d:4a: 22:11:7a:fe:14:d0:5c:ce:05:38:be:8d:19:74:1a: c5:5b:0a:5d:2b:5a:82:62:3d:48:3e:a6:bf:f0:f3: 06:bf:48:8d:23:81:e0:54:fd:97:a7:ca:a7:d3:96: 6e:74:83:02:53:4c:46:77:9c:d0:70:9b:8c:5f:8c: 3c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:20:AE:99:76:FE:D4:EB:DD:D3:75:AD:F3:CE:6C:57:39:6C:BF:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1823aeee-620e-331b-bd1e-36eec1af6cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:e7:6b:c8:35:c3:e8:f9:f1:be:d7:c5:3f:e7:b6:44:83:ca: a2:77:39:58:c6:b3:02:41:22:32:64:a2:01:e6:81:ce:60:f4: bb:99:7a:71:ef:c5:18:c6:a4:93:34:96:1a:a1:db:9a:8a:b2: db:e5:b0:0c:47:d7:1e:49:ee:5e:0a:86:60:d8:8c:6b:16:7e: 05:bf:8e:ee:88:c8:93:3b:97:02:73:bf:15:e8:0e:07:05:3a: 75:c5:7b:5a:a5:62:88:f6:f1:85:12:a9:85:fd:52:e3:5c:07: 52:f0:82:16:91:b4:16:58:b2:a7:78:4a:77:73:dc:fe:bd:84: 9d:3b:b5:1d:e0:26:9a:01:7e:b0:1e:d9:75:fe:e7:3d:07:a2: 4e:96:ed:43:7b:b7:72:55:03:d9:3b:aa:e4:49:15:90:2f:3c: bf:86:dd:9e:82:6c:af:15:8d:b5:26:25:82:aa:6e:bb:70:cf: a7:a8:89:75:d7:87:69:5d:16:b0:ed:1d:a2:a6:d2:b6:43:0e: a4:40:42:4a:e6:8b:80:d2:10:ab:a4:75:7a:b4:2e:e2:34:ff: e4:3b:64:96:14:68:50:3c:fc:12:3e:26:f4:c6:92:3e:34:a7: 77:5d:69:f4:b6:75:1d:46:92:89:d3:46:76:37:a2:df:2f:e2: 1b:1d:22:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpk85pSRjXGMygYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk NmM5NmRiZGEtMzc3My00YmQzLTllNTAtMjQyNDAxN2I4YzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTibTZNU/ygwJJBscy3OiDDmjf4xFKWbFca2 iLMB7N8de5FXqI8pWJMbQHvhX37dfq2a+vHAByH6sBOUmtuc/A3M8xGh2s/94L1o SEGarkYOSVoMRHw//+GCQaivouABlJthbz12DA+6Dbk76hmTrKK3ztKSZmKu8/vQ DUjfeZcXgbDooXJBeugnHUdCwBhCsb3+fiIuVnQYbyeCbZg/hrbyG+hbLrYoZiGH eoeWL36azpTB9+rQxa3HJDZc4U1THUoiEXr+FNBczgU4vo0ZdBrFWwpdK1qCYj1I Pqa/8PMGv0iNI4HgVP2Xp8qn05ZudIMCU0xGd5zQcJuMX4w8JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAgrpl2/tTr3dN1rfPObFc5bL+LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTgyM2FlZWUtNjIwZS0z MzFiLWJkMWUtMzZlZWMxYWY2Y2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5kqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXna8g1w+j58b7XxT/ntkSDyqJ3OVjGswJBIjJkogHmgc5g9LuZenHv xRjGpJM0lhqh25qKstvlsAxH1x5J7l4KhmDYjGsWfgW/ju6IyJM7lwJzvxXoDgcF OnXFe1qlYoj28YUSqYX9UuNcB1LwghaRtBZYsqd4Sndz3P69hJ07tR3gJpoBfrAe 2XX+5z0Hok6W7UN7t3JVA9k7quRJFZAvPL+G3Z6CbK8VjbUmJYKqbrtwz6eoiXXX h2ldFrDtHaKm0rZDDqRAQkrmi4DSEKukdXq0LuI0/+Q7ZJYUaFA8/BI+JvTGkj40 p3ddafS2dR1GkonTRnY3ot8v4hsdIsc= -----END CERTIFICATE-----Generated at Sat Aug 23 22:54:32 2025 by rpki-client