$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/592675de-1b35-3401-9682-044785d5e65a.roa File: 592675de-1b35-3401-9682-044785d5e65a.roa (raw, json) Hash identifier: XcfBNxaPYhqlzU7MY4P9WmAOicp5XDFxNwEHDQxnak0= Subject key identifier: 75:5F:9B:39:37:A1:3D:55:31:5F:7B:D0:29:B9:91:B9:2D:4D:14:D7 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACE0B8FED163307BEFC405178 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/592675de-1b35-3401-9682-044785d5e65a.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 46385 IP address blocks: 131.153.165.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:8f:ed:16:33:07:be:fc:40:51:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=02a711de-3004-4359-a434-cbf502d2b9bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1d:67:a2:ad:ce:5f:d4:22:d5:9d:56:b0:88: 82:ad:c2:54:5e:ff:5e:ae:fe:3a:36:82:38:a2:da: be:b7:fd:45:88:b2:53:5b:d0:c5:db:57:ec:9a:bb: d3:31:00:d7:65:89:86:cf:0a:ab:3b:e7:c2:c0:df: 94:77:ec:a2:b1:bf:2b:cc:8e:26:7f:26:9f:cb:13: 60:48:12:ec:2c:12:d4:9e:9d:ce:68:69:27:e3:c4: 30:ff:c1:aa:99:cf:b3:85:4a:cc:75:2c:0d:44:0d: 88:6f:72:89:39:7f:55:59:ab:53:c0:43:b9:b9:bd: c4:f7:59:6d:b4:b3:50:8f:1d:b5:49:a4:47:b9:20: e8:81:d0:ce:0d:4a:9a:91:b8:12:11:08:34:a8:15: e6:4a:9e:64:d7:2d:4e:3b:bb:0a:52:f0:77:e5:fb: ec:1e:92:ac:37:db:e2:f9:ef:0c:d8:f2:e2:e8:51: f3:ab:55:18:98:6b:7d:f9:73:9d:75:12:ce:bf:7f: e3:54:e7:41:1d:da:b4:5f:4e:91:2b:ea:11:fe:3c: fa:9d:13:4d:ed:e7:fc:04:d2:78:45:00:be:ff:a7: 72:c7:8c:ad:b4:c2:4e:d0:8a:ac:0d:2f:c8:04:9f: 6f:2f:73:22:2f:69:3c:33:c7:ec:96:e4:bc:64:e8: c1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5F:9B:39:37:A1:3D:55:31:5F:7B:D0:29:B9:91:B9:2D:4D:14:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/592675de-1b35-3401-9682-044785d5e65a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:9e:6a:89:1a:11:60:3a:13:33:9b:74:8b:f4:de:db:64:ee: 2b:ab:57:76:39:8c:d9:e5:bc:5b:a9:f7:b2:1b:5c:73:d8:4e: 99:47:3c:50:ce:bd:00:fd:61:fd:fd:55:3e:f9:dc:8c:02:5e: 56:f5:c8:f8:39:21:41:96:6f:6b:d8:7c:b3:37:f0:c5:16:c7: 09:fa:50:0d:16:3c:ec:99:2a:94:79:a3:38:c1:47:a6:c3:9b: 27:89:cb:52:99:33:9c:21:84:0f:c1:31:b0:84:89:7d:f7:b4: d4:ce:09:1c:bd:da:bc:3e:5c:42:75:18:13:0d:d0:20:df:50: 6c:cd:42:31:a3:d8:a4:03:76:ea:80:5a:18:8b:80:a7:74:4e: d2:c0:01:c7:4c:de:5d:7d:ec:17:8c:e3:41:a7:48:34:bb:97: 07:ff:55:ff:75:03:64:92:65:14:2f:83:f4:84:8b:46:da:87: 8e:39:94:c9:63:ed:45:f4:60:3c:1a:bb:55:b4:6f:e3:ab:61: ed:56:71:0d:98:e5:d9:31:9d:a0:63:6c:f1:f1:c7:57:18:b3: 0f:0c:a2:6b:c0:95:f1:9b:d1:ff:fb:20:a1:13:47:a7:ee:08: de:ca:43:7b:44:1f:00:1b:15:0e:56:d9:b4:36:84:7e:43:88: 32:ab:30:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC4/tFjMHvvxAUXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk MDJhNzExZGUtMzAwNC00MzU5LWE0MzQtY2JmNTAyZDJiOWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B1noq3OX9Qi1Z1WsIiCrcJUXv9erv46NoI4 otq+t/1FiLJTW9DF21fsmrvTMQDXZYmGzwqrO+fCwN+Ud+yisb8rzI4mfyafyxNg SBLsLBLUnp3OaGkn48Qw/8Gqmc+zhUrMdSwNRA2Ib3KJOX9VWatTwEO5ub3E91lt tLNQjx21SaRHuSDogdDODUqakbgSEQg0qBXmSp5k1y1OO7sKUvB35fvsHpKsN9vi +e8M2PLi6FHzq1UYmGt9+XOddRLOv3/jVOdBHdq0X06RK+oR/jz6nRNN7ef8BNJ4 RQC+/6dyx4yttMJO0IqsDS/IBJ9vL3MiL2k8M8fsluS8ZOjBQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVfmzk3oT1VMV970Cm5kbktTRTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNTkyNjc1ZGUtMWIzNS0z NDAxLTk2ODItMDQ0Nzg1ZDVlNjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5mlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCeaokaEWA6EzObdIv03ttk7iurV3Y5jNnlvFup97IbXHPYTplHPFDO vQD9Yf39VT753IwCXlb1yPg5IUGWb2vYfLM38MUWxwn6UA0WPOyZKpR5ozjBR6bD myeJy1KZM5whhA/BMbCEiX33tNTOCRy92rw+XEJ1GBMN0CDfUGzNQjGj2KQDduqA WhiLgKd0TtLAAcdM3l197BeM40GnSDS7lwf/Vf91A2SSZRQvg/SEi0bah445lMlj 7UX0YDwau1W0b+OrYe1WcQ2Y5dkxnaBjbPHxx1cYsw8MomvAlfGb0f/7IKETR6fu CN7KQ3tEHwAbFQ5W2bQ2hH5DiDKrMBI= -----END CERTIFICATE-----Generated at Sat Aug 23 18:09:03 2025 by rpki-client