$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3ab54a66-25b0-3e50-a398-0c25be9a9b70.roa File: 3ab54a66-25b0-3e50-a398-0c25be9a9b70.roa (raw, json) Hash identifier: uK3S1Ij5ZI5baEuBLp/rhVucPT0pXKs4Fy13pM+QCGw= Subject key identifier: AE:F5:DC:D2:33:72:81:E2:9B:54:21:A3:1B:49:48:23:BD:7F:C3:08 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584A4C3B103D617D251C9D049C00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3ab54a66-25b0-3e50-a398-0c25be9a9b70.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 19181 IP address blocks: 131.153.224.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:10:3d:61:7d:25:1c:9d:04:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=2c07abd5-3b3e-4782-a4d1-392fc946046a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:df:fb:69:65:c9:98:ec:12:a2:67:bd:40:f6: 74:ee:e2:cf:39:f8:13:4f:bb:d8:ee:71:b2:de:fa: a5:7e:00:f8:59:f3:e1:11:85:da:97:44:8c:42:1f: 25:34:47:12:cb:94:6c:30:e5:53:c2:2e:7f:6c:ef: a8:31:2c:3c:95:fb:7a:19:dc:b7:b4:5c:e6:a1:2e: 26:25:70:e1:bf:3d:9c:92:c5:f9:85:53:ba:da:66: b1:67:b9:e6:4d:3e:e9:42:15:05:34:2f:e9:63:9e: cd:3d:ec:ed:34:f6:67:1f:91:c2:0b:86:6d:3f:eb: bc:a5:86:90:c3:04:47:a0:a0:ef:a1:5a:a6:93:b8: 57:98:15:8f:1a:04:24:b7:7d:8d:bb:37:18:bb:09: 46:4d:dd:8f:50:5e:99:c0:ac:18:64:1c:cd:ee:57: 2f:48:a8:ba:a7:22:99:05:8b:4c:36:6d:d6:00:b7: 9b:ce:ad:f1:ef:9f:1c:d9:4b:d0:4e:d8:f5:0d:2d: 4a:69:12:14:6f:6e:a9:c8:90:b7:ad:d3:54:02:9e: d0:a1:88:16:4b:4c:38:48:88:38:e3:1d:f4:47:4a: d7:72:7b:b4:d6:40:2d:ce:7c:fd:04:54:ff:9c:3a: 19:44:59:df:55:7d:c0:20:b0:5f:28:14:e0:a6:6d: 9b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F5:DC:D2:33:72:81:E2:9B:54:21:A3:1B:49:48:23:BD:7F:C3:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3ab54a66-25b0-3e50-a398-0c25be9a9b70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:89:3b:05:15:0b:5f:ab:7b:3a:e3:5c:d2:c8:6d:f2:2f:7b: 78:18:f6:5a:0e:5b:24:73:17:50:5e:86:bc:8a:27:97:12:c4: 43:94:d8:a8:5c:62:54:e2:ff:fa:b0:ed:f4:b9:6f:92:f0:b3: 57:c3:60:5c:fa:b0:b1:21:97:39:ed:66:69:15:b9:ab:ef:55: c6:4c:4b:a7:4d:11:af:70:ec:0f:63:d8:65:f7:11:2f:d9:8e: 22:19:a3:80:3e:e2:5c:ee:c0:69:92:83:f7:d0:a6:3d:5f:4d: 25:52:bc:cd:1c:c3:ec:da:7c:40:cc:ad:e8:ed:bb:0e:31:cb: 2a:f3:86:cd:08:b1:7b:0b:7b:f6:18:1d:c3:24:44:79:fc:a1: 7f:ea:61:f0:a9:ca:1d:d7:d4:ed:61:00:c0:d3:69:73:cf:20: 6c:40:e8:13:62:b0:de:cf:bf:7c:61:c3:90:4a:5a:13:5c:b4: 1d:7b:eb:39:14:f2:77:c3:6a:3c:06:fa:3c:df:d6:1e:d2:18: 40:78:7b:01:cc:24:24:a2:37:8e:6e:ba:f7:76:ef:8a:3e:8d: 13:77:1f:75:d1:ff:94:0f:56:4a:f1:ad:b9:29:23:11:b0:60: c8:a4:bf:5f:b9:7b:36:45:b7:c5:a5:66:b3:b5:8c:a0:9a:b0: 3b:02:4c:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxA9YX0lHJ0EnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MmMwN2FiZDUtM2IzZS00NzgyLWE0ZDEtMzkyZmM5NDYwNDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld/7aWXJmOwSome9QPZ07uLPOfgTT7vY7nGy 3vqlfgD4WfPhEYXal0SMQh8lNEcSy5RsMOVTwi5/bO+oMSw8lft6Gdy3tFzmoS4m JXDhvz2cksX5hVO62maxZ7nmTT7pQhUFNC/pY57NPeztNPZnH5HCC4ZtP+u8pYaQ wwRHoKDvoVqmk7hXmBWPGgQkt32NuzcYuwlGTd2PUF6ZwKwYZBzN7lcvSKi6pyKZ BYtMNm3WALebzq3x758c2UvQTtj1DS1KaRIUb26pyJC3rdNUAp7QoYgWS0w4SIg4 4x30R0rXcnu01kAtznz9BFT/nDoZRFnfVX3AILBfKBTgpm2bFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK713NIzcoHim1QhoxtJSCO9f8MIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2FiNTRhNjYtMjViMC0z ZTUwLWEzOTgtMGMyNWJlOWE5YjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5ngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmJOwUVC1+rezrjXNLIbfIve3gY9loOWyRzF1BehryKJ5cSxEOU2Khc YlTi//qw7fS5b5Lws1fDYFz6sLEhlzntZmkVuavvVcZMS6dNEa9w7A9j2GX3ES/Z jiIZo4A+4lzuwGmSg/fQpj1fTSVSvM0cw+zafEDMrejtuw4xyyrzhs0IsXsLe/YY HcMkRHn8oX/qYfCpyh3X1O1hAMDTaXPPIGxA6BNisN7Pv3xhw5BKWhNctB176zkU 8nfDajwG+jzf1h7SGEB4ewHMJCSiN45uuvd274o+jRN3H3XR/5QPVkrxrbkpIxGw YMikv1+5ezZFt8WlZrO1jKCasDsCTOI= -----END CERTIFICATE-----Generated at Sun Jun 29 13:46:13 2025 by rpki-client