$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1953286a-a99c-383c-b91c-34fa8adbd086.roa File: 1953286a-a99c-383c-b91c-34fa8adbd086.roa (raw, json) Hash identifier: 30ITuh5skWyP+/zIid+jOuTe98qDiRuQ7GbGberPzlw= Subject key identifier: B9:65:8C:D3:2F:70:8C:43:8E:8C:9C:DA:15:F1:41:A5:EF:30:42:A1 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACE0B8FC3E89D06904EF6FD00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1953286a-a99c-383c-b91c-34fa8adbd086.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 19437 IP address blocks: 131.153.162.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:8f:c3:e8:9d:06:90:4e:f6:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=a096fd34-7c2c-4c65-83ca-250dfbb86b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d7:cf:22:23:f9:2c:f1:a6:cf:3e:da:66:06: fb:a2:65:b6:90:1b:df:f2:2d:53:8d:7d:81:ee:11: 8d:f1:02:7c:21:32:1f:f8:7e:81:53:26:5e:af:4e: 30:d8:7b:88:98:5a:95:ca:29:02:b2:45:b9:f6:11: 39:5f:3e:36:5e:fb:3d:28:d0:55:d9:c9:7a:b0:52: 06:4e:ec:76:62:d9:49:f0:5b:a3:35:d2:8a:22:47: 0a:69:b5:9f:39:9b:bc:8b:e4:f7:ab:a0:2d:a9:db: de:cd:04:5b:b2:d3:b9:61:4a:a6:78:64:3c:4a:68: 65:99:0a:ff:8c:29:f6:db:f2:ac:ca:e0:d1:e2:54: 7a:b2:b3:6d:96:84:73:71:b9:36:90:c6:00:26:a7: 1d:58:52:51:64:50:fc:a3:a2:5c:c0:2c:24:2c:b4: 45:20:a6:0e:09:34:67:87:31:52:05:f0:e5:cf:0c: e7:81:87:79:91:1f:6c:a2:c0:49:91:50:f2:0e:d2: 37:fd:99:54:44:50:37:c6:45:e5:7e:84:bf:f3:04: f8:e0:ae:c6:45:49:e5:4a:a9:94:c4:d4:b8:2d:d1: 54:0f:41:14:6b:1f:32:11:6b:24:13:be:b8:37:f7: 6b:a4:94:ed:8b:7d:e6:95:6a:f1:99:f0:40:4c:c9: e0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:65:8C:D3:2F:70:8C:43:8E:8C:9C:DA:15:F1:41:A5:EF:30:42:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1953286a-a99c-383c-b91c-34fa8adbd086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a1:0f:39:7f:53:d6:f0:4f:39:57:36:34:96:f1:2f:01:1a: a0:a3:6c:e3:ed:0f:de:93:dc:9e:39:1e:03:20:fa:91:a9:3c: 92:88:6f:d3:ea:37:c7:07:7a:38:13:9e:24:db:49:36:63:ec: 66:c5:52:65:75:bb:66:a3:42:c9:5b:aa:38:d3:0d:86:c0:69: 66:d4:a8:2e:68:d2:26:5c:66:35:ef:58:56:f5:6c:0c:14:43: 6d:8f:8e:4d:ae:46:27:01:4c:0c:af:79:32:2c:40:19:70:fb: f8:76:99:b9:1b:d3:29:34:2a:3f:41:e5:e3:90:87:7d:e4:cf: 9e:08:7e:3f:50:8f:05:11:7a:5f:b5:5c:b3:40:54:2c:87:45: bd:0b:65:62:4f:a1:03:bb:b4:6f:dd:90:4a:35:fe:24:da:e9: 76:1a:06:a8:ea:91:56:b8:1f:5f:9a:34:38:01:f5:08:5c:52: 9d:ec:45:01:e5:7b:b0:f4:b6:3c:51:26:e8:a2:3f:7b:e8:8a: 84:05:d1:65:27:83:e6:68:d1:5c:c8:a3:c1:4c:11:e6:26:96: 9d:25:ae:3c:42:bf:fd:3f:6f:9b:0a:c9:a6:c1:10:2d:f1:e0: 76:06:40:ec:26:f7:a8:8a:9c:46:93:3f:ec:ca:a0:60:f8:fc: 92:97:69:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC4/D6J0GkE72/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk YTA5NmZkMzQtN2MyYy00YzY1LTgzY2EtMjUwZGZiYjg2YjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29fPIiP5LPGmzz7aZgb7omW2kBvf8i1TjX2B 7hGN8QJ8ITIf+H6BUyZer04w2HuImFqVyikCskW59hE5Xz42Xvs9KNBV2cl6sFIG Tux2YtlJ8FujNdKKIkcKabWfOZu8i+T3q6AtqdvezQRbstO5YUqmeGQ8SmhlmQr/ jCn22/KsyuDR4lR6srNtloRzcbk2kMYAJqcdWFJRZFD8o6JcwCwkLLRFIKYOCTRn hzFSBfDlzwzngYd5kR9sosBJkVDyDtI3/ZlURFA3xkXlfoS/8wT44K7GRUnlSqmU xNS4LdFUD0EUax8yEWskE764N/drpJTti33mlWrxmfBATMngewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlljNMvcIxDjoyc2hXxQaXvMEKhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTk1MzI4NmEtYTk5Yy0z ODNjLWI5MWMtMzRmYThhZGJkMDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5miMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADehDzl/U9bwTzlXNjSW8S8BGqCjbOPtD96T3J45HgMg+pGpPJKIb9Pq N8cHejgTniTbSTZj7GbFUmV1u2ajQslbqjjTDYbAaWbUqC5o0iZcZjXvWFb1bAwU Q22Pjk2uRicBTAyveTIsQBlw+/h2mbkb0yk0Kj9B5eOQh33kz54Ifj9QjwURel+1 XLNAVCyHRb0LZWJPoQO7tG/dkEo1/iTa6XYaBqjqkVa4H1+aNDgB9QhcUp3sRQHl e7D0tjxRJuiiP3voioQF0WUng+Zo0VzIo8FMEeYmlp0lrjxCv/0/b5sKyabBEC3x 4HYGQOwm96iKnEaTP+zKoGD4/JKXaXM= -----END CERTIFICATE-----Generated at Sat Aug 23 16:52:27 2025 by rpki-client