$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/595fb046-9295-368f-8ffc-2a8deebe67e8.roa File: 595fb046-9295-368f-8ffc-2a8deebe67e8.roa (raw, json) Hash identifier: Y2iG7iF+bZlHIbMoRM8FVNMMppmH+XKugcjDCo80Jqs= Subject key identifier: 89:5C:53:76:B6:A6:0D:16:4C:8A:33:5F:78:A9:9F:FF:10:D9:25:D7 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64DC873E6DB7EC56A5DC0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/595fb046-9295-368f-8ffc-2a8deebe67e8.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 12189 IP address blocks: 131.153.108.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4d:c8:73:e6:db:7e:c5:6a:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=4ff9cf8f-6146-4a42-a9cd-f259131c96db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:a3:1a:e2:3e:fa:b1:ec:a3:5e:44:cd:af: fd:44:f3:f5:e2:3e:b4:73:71:90:f5:b5:9b:1a:da: 57:a1:4a:20:3d:6b:02:c8:8f:43:e7:e1:6e:41:7f: 1f:69:0b:6f:6e:11:92:ff:7f:40:1b:d8:5c:c0:27: 06:c4:20:b0:f0:0f:b7:58:39:e7:cb:38:17:5e:53: 47:14:e3:20:e0:2f:36:5b:23:e8:0a:e4:dd:c5:4a: a1:ae:b3:5a:4a:a0:94:fa:a7:66:f9:4c:6e:f5:72: 1f:49:9b:53:ec:bc:7f:fa:fd:22:03:e4:f0:da:70: 5d:a8:f9:77:d0:a4:03:d6:c9:27:ad:b5:f6:8d:1d: 5d:bb:fc:95:2e:20:a0:c6:c0:bb:83:35:33:84:b3: 34:3e:57:ee:83:e8:14:46:7a:d4:08:19:d3:40:5c: eb:d7:b5:93:3b:6e:c1:52:bd:42:7e:5c:24:fd:1a: 40:e0:80:40:a0:a7:9f:1f:0d:33:bc:26:5b:27:ee: b5:11:58:e0:b6:6c:43:5d:b7:33:09:f2:88:00:f1: 7b:85:79:8f:1b:18:18:2e:db:e3:be:0f:8a:c1:b8: 20:77:84:2c:18:70:a1:08:f7:a3:c7:80:7d:bd:59: b1:05:2c:41:4a:58:49:b7:ee:40:76:9c:43:53:a7: c2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5C:53:76:B6:A6:0D:16:4C:8A:33:5F:78:A9:9F:FF:10:D9:25:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/595fb046-9295-368f-8ffc-2a8deebe67e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:4a:0c:00:f8:ef:72:dd:77:0e:fd:53:df:78:4f:6a:47:dc: b4:44:ca:2d:27:e5:fd:bf:c1:62:df:33:32:7e:38:43:59:cd: bf:75:14:99:40:7d:c7:c2:33:e5:e9:55:ff:5b:e3:e0:5a:c6: 27:49:b6:d1:2f:2f:82:cf:b0:14:bf:ed:92:80:e8:fd:47:d0: ec:2e:7d:70:1e:b3:4d:00:a5:c3:7f:95:f7:6c:77:da:c2:b3: d9:bb:e6:15:ae:e4:2f:bf:15:a6:9b:dd:53:22:4e:c4:71:6e: 67:ba:11:94:37:94:cf:6b:13:46:43:98:da:f7:95:0d:02:93: da:ca:cf:ec:19:a8:d5:73:cb:f2:c4:f2:33:3a:ae:8d:38:c0: d1:04:67:f6:76:59:c5:b0:9c:61:e3:81:c8:9f:c8:73:57:6f: f6:30:15:ae:7b:15:57:a3:f3:16:8c:a3:6b:3c:2a:1f:0a:05: 8b:3c:47:48:bb:59:dd:fb:02:09:c5:3a:59:08:a1:ea:58:9b: d7:48:60:1a:4d:bf:78:14:a5:28:30:99:43:7c:33:2a:63:32: 7f:b3:56:19:b2:c0:00:f1:a5:48:51:25:42:65:8f:f0:a7:b0: 75:56:f0:20:16:aa:c3:3f:40:fe:98:2b:8f:b5:93:17:44:63: 74:95:8c:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpk3Ic+bbfsVqXcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk NGZmOWNmOGYtNjE0Ni00YTQyLWE5Y2QtZjI1OTEzMWM5NmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvGjGuI++rHso15Eza/9RPP14j60c3GQ9bWb GtpXoUogPWsCyI9D5+FuQX8faQtvbhGS/39AG9hcwCcGxCCw8A+3WDnnyzgXXlNH FOMg4C82WyPoCuTdxUqhrrNaSqCU+qdm+Uxu9XIfSZtT7Lx/+v0iA+Tw2nBdqPl3 0KQD1sknrbX2jR1du/yVLiCgxsC7gzUzhLM0Plfug+gURnrUCBnTQFzr17WTO27B Ur1Cflwk/RpA4IBAoKefHw0zvCZbJ+61EVjgtmxDXbczCfKIAPF7hXmPGxgYLtvj vg+Kwbggd4QsGHChCPejx4B9vVmxBSxBSlhJt+5AdpxDU6fCPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlcU3a2pg0WTIozX3ipn/8Q2SXXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNTk1ZmIwNDYtOTI5NS0z NjhmLThmZmMtMmE4ZGVlYmU2N2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANKDAD473Lddw79U994T2pH3LREyi0n5f2/wWLfMzJ+OENZzb91FJlA fcfCM+XpVf9b4+BaxidJttEvL4LPsBS/7ZKA6P1H0OwufXAes00ApcN/lfdsd9rC s9m75hWu5C+/Faab3VMiTsRxbme6EZQ3lM9rE0ZDmNr3lQ0Ck9rKz+wZqNVzy/LE 8jM6ro04wNEEZ/Z2WcWwnGHjgcifyHNXb/YwFa57FVej8xaMo2s8Kh8KBYs8R0i7 Wd37AgnFOlkIoepYm9dIYBpNv3gUpSgwmUN8MypjMn+zVhmywADxpUhRJUJlj/Cn sHVW8CAWqsM/QP6YK4+1kxdEY3SVjJk= -----END CERTIFICATE-----Generated at Sat Aug 23 17:33:40 2025 by rpki-client