$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/498edecf-1b28-3ff2-8e56-58ead838dea2.roa File: 498edecf-1b28-3ff2-8e56-58ead838dea2.roa (raw, json) Hash identifier: 7keEUd7NUGB4JJZ1Ng6uUnoexBoACMJhG/kV4Os66UE= Subject key identifier: BD:B5:E1:30:52:77:10:21:4E:05:7B:6C:E2:2A:7F:4F:06:8F:B4:54 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64C6FA930E0FFBA616060 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/498edecf-1b28-3ff2-8e56-58ead838dea2.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 46385 IP address blocks: 131.153.84.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4c:6f:a9:30:e0:ff:ba:61:60:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=9c0f579e-3ea3-45c2-a6ac-bebddf2b0418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b7:99:75:ea:49:f1:53:24:43:8d:ef:27:f2: 0e:e3:a1:64:a1:a1:cc:ad:f5:42:6d:34:f3:42:7b: ce:35:37:91:9d:d6:f4:d6:88:c5:21:ae:5c:2b:59: d9:ef:df:9e:e4:57:32:47:72:e5:b5:7c:62:67:de: 14:23:2c:ce:7b:50:88:f8:50:f5:47:df:4e:de:5b: e6:ae:b6:af:cf:e4:be:bb:22:23:6f:22:a1:fb:8e: 71:96:89:04:d9:1b:bb:6e:5f:90:72:20:56:46:cc: 6e:ff:b3:60:a2:78:aa:ca:3e:06:0d:de:21:bf:ee: ac:43:f4:a7:28:7c:b6:0d:eb:a7:56:0f:0f:90:da: 3d:0a:85:a1:d3:f1:ff:6b:02:08:67:b9:92:51:8e: 95:b2:5f:1c:71:16:05:3b:7e:aa:e2:a1:3c:ce:fe: a4:df:08:87:00:f0:00:bc:ff:44:eb:55:cd:bb:ad: 6a:03:a0:00:8d:2d:30:85:0b:66:86:8c:82:b0:34: 93:63:52:ca:a7:34:7b:29:b9:71:d5:51:c1:dc:72: f6:92:65:4f:81:71:c0:35:02:c7:11:8c:1a:a2:5a: 69:b7:1f:a7:f5:bc:5c:98:cd:c2:92:60:68:be:5e: a3:3c:15:f8:90:96:f4:47:b7:7e:6c:a3:12:cc:1c: 85:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B5:E1:30:52:77:10:21:4E:05:7B:6C:E2:2A:7F:4F:06:8F:B4:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/498edecf-1b28-3ff2-8e56-58ead838dea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:2a:e4:83:4d:a0:21:1c:81:1a:57:76:fb:d2:23:d7:9d:d9: ef:fa:a6:c3:a9:7b:98:31:b9:32:70:2b:65:c7:9c:00:7c:61: 34:61:e1:0d:90:6b:bf:74:55:a5:c9:55:4c:73:80:1b:6b:ae: 9e:e0:2a:24:f6:bf:99:d6:31:cc:3b:e5:2a:ea:6f:be:d0:74: 57:de:0a:5e:13:01:8f:b8:9c:9a:7b:e0:8b:07:41:88:33:07: 8e:ea:ae:08:39:95:be:17:44:3e:c9:34:c5:c7:b9:73:c6:e9: d5:4c:3a:8d:28:37:27:ea:0e:6a:36:29:73:66:10:6a:fd:83: 16:c4:df:f6:11:42:f0:be:7c:5e:48:38:0a:2a:e2:1b:15:06: 83:f6:fc:ff:37:6d:0a:87:5d:fb:d1:c6:cb:b0:8b:6a:23:37: 2e:be:7f:79:38:1b:34:06:8d:95:23:dd:cf:d8:51:dc:67:c2: be:c5:cd:23:d8:ec:65:5d:b0:3e:01:36:fd:f5:71:4b:2f:c7: f0:25:84:4c:c0:05:74:aa:4a:0d:54:36:d6:41:18:3a:cf:d9: 10:a4:db:41:3a:ba:2c:28:e4:eb:5b:d6:1f:3a:74:ad:ad:36: 5c:4f:c6:f3:d9:c4:ef:e7:e5:57:81:bf:23:f7:79:06:34:94: 77:00:71:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpkxvqTDg/7phYGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk OWMwZjU3OWUtM2VhMy00NWMyLWE2YWMtYmViZGRmMmIwNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLeZdepJ8VMkQ43vJ/IO46FkoaHMrfVCbTTz QnvONTeRndb01ojFIa5cK1nZ79+e5FcyR3LltXxiZ94UIyzOe1CI+FD1R99O3lvm rravz+S+uyIjbyKh+45xlokE2Ru7bl+QciBWRsxu/7Ngoniqyj4GDd4hv+6sQ/Sn KHy2DeunVg8PkNo9CoWh0/H/awIIZ7mSUY6Vsl8ccRYFO36q4qE8zv6k3wiHAPAA vP9E61XNu61qA6AAjS0whQtmhoyCsDSTY1LKpzR7Kblx1VHB3HL2kmVPgXHANQLH EYwaolpptx+n9bxcmM3CkmBovl6jPBX4kJb0R7d+bKMSzByFgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL214TBSdxAhTgV7bOIqf08Gj7RUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNDk4ZWRlY2YtMWIyOC0z ZmYyLThlNTYtNThlYWQ4MzhkZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsq5INNoCEcgRpXdvvSI9ed2e/6psOpe5gxuTJwK2XHnAB8YTRh4Q2Q a790VaXJVUxzgBtrrp7gKiT2v5nWMcw75Srqb77QdFfeCl4TAY+4nJp74IsHQYgz B47qrgg5lb4XRD7JNMXHuXPG6dVMOo0oNyfqDmo2KXNmEGr9gxbE3/YRQvC+fF5I OAoq4hsVBoP2/P83bQqHXfvRxsuwi2ojNy6+f3k4GzQGjZUj3c/YUdxnwr7FzSPY 7GVdsD4BNv31cUsvx/AlhEzABXSqSg1UNtZBGDrP2RCk20E6uiwo5Otb1h86dK2t NlxPxvPZxO/n5VeBvyP3eQY0lHcAcVU= -----END CERTIFICATE-----Generated at Sat Aug 23 18:40:12 2025 by rpki-client