$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/36b43f4d-1b6e-39b4-a213-06d0cfd5f7d4.roa File: 36b43f4d-1b6e-39b4-a213-06d0cfd5f7d4.roa (raw, json) Hash identifier: paPirxNGPTwbH5XA/+eKVUA09FU9FlrATkovAuoPKDo= Subject key identifier: 97:F5:EF:4B:F5:16:40:D7:2B:EB:51:CA:5D:BD:C8:5A:A8:BA:37:4F Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64B7DE0EAC7B58338F520 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/36b43f4d-1b6e-39b4-a213-06d0cfd5f7d4.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 20454 IP address blocks: 131.153.52.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4b:7d:e0:ea:c7:b5:83:38:f5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=504caed9-2b25-4b05-b5d9-33c7a2313478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ff:c8:cc:a4:da:f9:9d:d8:e2:0d:23:4e:27: b3:66:3e:38:66:a2:85:44:77:17:df:ff:1c:54:24: bb:af:a3:28:74:58:ad:f6:15:b9:70:de:15:65:67: 82:21:67:49:cc:31:fc:8a:7e:20:30:a4:a8:ed:c7: c6:d4:3a:8c:cd:77:71:6b:19:07:a8:5c:d2:3c:f6: 01:4e:51:9f:a5:cd:92:2f:ad:5a:84:20:fe:6d:7c: ad:ec:fb:32:a6:b6:9a:33:d1:64:db:a2:dd:0b:a1: e1:f6:e4:57:a5:27:c3:f9:dc:45:02:a5:b6:fa:36: 00:2f:b8:33:90:d7:66:37:71:cd:2b:7c:2a:18:43: 1e:29:9f:01:f0:54:b5:c0:93:23:01:d2:44:ca:0f: 15:38:3b:e7:0e:01:93:dc:17:48:ba:43:1b:11:e1: 17:a3:3e:31:fb:9f:a2:28:ff:1c:81:99:34:98:9b: 25:13:09:64:08:ae:f2:07:58:4c:13:ed:53:33:50: cb:d2:0d:8f:7a:64:3b:9f:85:da:b4:57:44:fe:c9: 69:18:03:3a:7f:8b:6b:4a:9f:b6:0a:89:b9:7b:6e: c7:2a:0a:16:49:7e:2b:9e:ae:c6:27:4a:96:f1:b2: 52:e7:11:b4:7d:c7:0b:aa:b5:86:60:37:ee:dd:fa: b8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F5:EF:4B:F5:16:40:D7:2B:EB:51:CA:5D:BD:C8:5A:A8:BA:37:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/36b43f4d-1b6e-39b4-a213-06d0cfd5f7d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:14:4c:97:1f:85:68:16:c0:5d:fa:ad:14:bf:9a:29:c2:c5: 0d:e9:38:d1:9f:9f:7a:47:0a:1a:ff:01:95:c2:8a:f5:3e:5b: 66:ac:bd:40:63:1d:c9:5f:55:30:a4:e8:0a:18:e6:d7:96:af: 20:d7:22:7d:fd:49:b2:6f:40:86:37:b5:06:e2:1b:11:1c:56: 3b:54:31:54:cb:7f:47:70:84:8f:c8:9b:8d:f5:b2:12:52:6b: 91:32:99:e4:55:a4:e3:20:2c:ce:42:de:d7:b8:70:30:c0:a5: fb:e0:3e:f7:e4:ec:c5:0a:3b:b9:3c:7d:89:c8:e7:27:f1:15: 6d:b0:01:e4:cb:74:7d:9c:38:16:13:ae:ef:01:58:f5:55:ff: c6:2d:f9:4e:33:f4:7d:4e:d8:0a:11:c4:66:69:61:fc:b0:24: 2b:76:ba:21:c6:69:58:af:a2:6b:49:5e:63:52:77:19:ba:02: b5:ef:6e:68:e7:bb:79:ac:a0:3d:b1:df:cc:03:d5:12:aa:0d: 46:16:ac:c1:fc:d1:6e:bd:46:0f:f5:1b:d0:43:87:ab:34:9d: ab:51:23:de:bc:bd:6d:18:20:1d:d3:49:b1:69:a3:77:4c:72: d0:41:46:ba:cd:30:28:94:01:8b:ab:bf:16:96:9c:24:ab:63: 18:66:ed:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpkt94OrHtYM49SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk NTA0Y2FlZDktMmIyNS00YjA1LWI1ZDktMzNjN2EyMzEzNDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv/IzKTa+Z3Y4g0jTiezZj44ZqKFRHcX3/8c VCS7r6ModFit9hW5cN4VZWeCIWdJzDH8in4gMKSo7cfG1DqMzXdxaxkHqFzSPPYB TlGfpc2SL61ahCD+bXyt7PsypraaM9Fk26LdC6Hh9uRXpSfD+dxFAqW2+jYAL7gz kNdmN3HNK3wqGEMeKZ8B8FS1wJMjAdJEyg8VODvnDgGT3BdIukMbEeEXoz4x+5+i KP8cgZk0mJslEwlkCK7yB1hME+1TM1DL0g2PemQ7n4XatFdE/slpGAM6f4trSp+2 Com5e27HKgoWSX4rnq7GJ0qW8bJS5xG0fccLqrWGYDfu3fq4UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJf170v1FkDXK+tRyl29yFqoujdPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMzZiNDNmNGQtMWI2ZS0z OWI0LWEyMTMtMDZkMGNmZDVmN2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5k0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMUTJcfhWgWwF36rRS/minCxQ3pONGfn3pHChr/AZXCivU+W2asvUBj HclfVTCk6AoY5teWryDXIn39SbJvQIY3tQbiGxEcVjtUMVTLf0dwhI/Im431shJS a5EymeRVpOMgLM5C3te4cDDApfvgPvfk7MUKO7k8fYnI5yfxFW2wAeTLdH2cOBYT ru8BWPVV/8Yt+U4z9H1O2AoRxGZpYfywJCt2uiHGaVivomtJXmNSdxm6ArXvbmjn u3msoD2x38wD1RKqDUYWrMH80W69Rg/1G9BDh6s0natRI968vW0YIB3TSbFpo3dM ctBBRrrNMCiUAYurvxaWnCSrYxhm7co= -----END CERTIFICATE-----Generated at Sat Aug 23 18:45:06 2025 by rpki-client