$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/27e7076b-0319-36fe-a986-009cd77f209f.roa File: 27e7076b-0319-36fe-a986-009cd77f209f.roa (raw, json) Hash identifier: fCFDwGoDhNuiEKlMBKF5HC+X/CVFa7F9XKSyhMzxHWI= Subject key identifier: E5:69:1A:CB:F7:55:D5:E6:4E:FA:59:B3:F6:CC:E3:2E:21:96:2B:42 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACE0B96C870B08A48E894A480 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/27e7076b-0319-36fe-a986-009cd77f209f.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 60558 IP address blocks: 131.153.16.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:96:c8:70:b0:8a:48:e8:94:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=c9c66ba9-0628-4326-8934-79ba6edb4888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6f:0e:d4:b3:7f:b1:ea:d1:cd:91:13:6c:d2: f7:3e:97:ea:0e:48:a1:c9:14:87:12:c5:57:06:93: e4:19:c4:a5:fb:9a:f9:3a:63:51:18:fd:6b:65:53: 25:8c:5d:2d:b9:e9:5b:50:2b:ce:b2:1a:67:ee:b8: ae:76:f3:e2:cf:10:74:4d:f0:75:08:9a:52:76:08: 33:39:49:52:ad:6a:0f:a1:c1:f7:94:54:23:64:fd: 6d:0b:8e:2a:e0:f9:f2:af:90:23:46:22:00:c9:c8: b6:dc:99:78:ce:88:28:5c:e0:93:eb:bb:a2:42:c5: 55:df:40:f6:44:a1:60:65:f6:88:a6:8e:2f:c4:30: 7c:74:04:3d:f5:b6:62:cb:32:f6:98:36:ef:81:6d: e9:4e:e2:d4:99:bd:5d:2a:54:7e:6d:00:83:c3:b5: 4c:ca:03:e9:2a:9d:ee:9d:1a:2a:48:6e:07:82:70: 3c:5d:32:dd:9c:d5:bf:28:fb:f1:24:44:9a:ac:00: 2c:fd:26:58:ca:64:50:99:a0:75:48:99:2d:9c:2a: 8c:fa:42:e7:f0:fc:93:d8:cf:84:48:8e:4e:01:96: 63:75:75:9a:c2:f0:db:0a:db:c5:23:cb:f7:9a:cd: 4f:13:4f:9f:71:52:2d:36:e3:10:df:05:10:bd:23: 6f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:69:1A:CB:F7:55:D5:E6:4E:FA:59:B3:F6:CC:E3:2E:21:96:2B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/27e7076b-0319-36fe-a986-009cd77f209f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:9e:63:b8:10:73:0e:a5:25:be:fa:38:33:d4:2c:50:1a:a3: aa:20:a6:86:62:64:51:93:c4:85:85:85:d1:a5:61:25:78:54: 0f:34:72:fb:de:0c:90:86:f3:d4:a4:a0:42:a9:57:ca:6a:8e: 89:33:63:47:4e:65:5b:fa:ef:72:1c:f5:9a:20:e5:4f:08:ae: dc:87:5c:1b:3e:19:61:22:6a:82:07:b6:af:01:76:0c:f9:ea: 98:39:23:bd:ba:8d:68:9b:5d:73:7b:52:8e:f1:87:bc:87:fb: c8:4e:1f:ae:6b:f0:ad:f5:7b:96:ba:4f:86:a3:e9:cc:cb:ff: 51:f8:06:fd:a7:ca:c6:16:ba:6c:43:e6:87:92:64:6b:a5:0e: 30:8d:bc:1a:6c:3d:e0:6a:87:a5:57:59:cd:ec:a7:b4:3a:24: 25:9e:e1:75:d5:e3:d5:f7:e2:c0:07:f7:76:de:a0:51:5b:b2: 09:76:11:a0:ed:0a:6c:f3:83:80:67:13:40:89:56:f3:9e:19: 37:e2:88:4a:04:0e:7f:a0:ff:73:03:1b:62:5c:e1:13:4b:16: bb:63:3c:1f:7b:43:02:e3:54:53:0b:11:93:28:ee:53:7c:3c: 9b:58:a4:07:57:15:0a:65:01:92:d3:96:5c:16:9c:ed:0b:6c: 0d:ce:83:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5bIcLCKSOiUpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk YzljNjZiYTktMDYyOC00MzI2LTg5MzQtNzliYTZlZGI0ODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi28O1LN/serRzZETbNL3PpfqDkihyRSHEsVX BpPkGcSl+5r5OmNRGP1rZVMljF0tuelbUCvOshpn7riudvPizxB0TfB1CJpSdggz OUlSrWoPocH3lFQjZP1tC44q4Pnyr5AjRiIAyci23Jl4zogoXOCT67uiQsVV30D2 RKFgZfaIpo4vxDB8dAQ99bZiyzL2mDbvgW3pTuLUmb1dKlR+bQCDw7VMygPpKp3u nRoqSG4HgnA8XTLdnNW/KPvxJESarAAs/SZYymRQmaB1SJktnCqM+kLn8PyT2M+E SI5OAZZjdXWawvDbCtvFI8v3ms1PE0+fcVItNuMQ3wUQvSNvQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVpGsv3VdXmTvpZs/bM4y4hlitCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMjdlNzA3NmItMDMxOS0z NmZlLWE5ODYtMDA5Y2Q3N2YyMDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5kQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmeY7gQcw6lJb76ODPULFAao6ogpoZiZFGTxIWFhdGlYSV4VA80cvve DJCG89SkoEKpV8pqjokzY0dOZVv673Ic9Zog5U8IrtyHXBs+GWEiaoIHtq8Bdgz5 6pg5I726jWibXXN7Uo7xh7yH+8hOH65r8K31e5a6T4aj6czL/1H4Bv2nysYWumxD 5oeSZGulDjCNvBpsPeBqh6VXWc3sp7Q6JCWe4XXV49X34sAH93beoFFbsgl2EaDt Cmzzg4BnE0CJVvOeGTfiiEoEDn+g/3MDG2Jc4RNLFrtjPB97QwLjVFMLEZMo7lN8 PJtYpAdXFQplAZLTllwWnO0LbA3OgyQ= -----END CERTIFICATE-----Generated at Sat Aug 23 13:05:45 2025 by rpki-client