$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6352be7b-1542-39bc-93ee-5ee5f8591782.roa File: 6352be7b-1542-39bc-93ee-5ee5f8591782.roa (raw, json) Hash identifier: Qp/E3bw9CtGfZPnreu9nAH7V8WxIbU5Icqa7cBQ7exI= Subject key identifier: DC:CF:79:3E:92:31:B1:45:4A:E9:BF:C6:EC:D1:1D:F8:21:46:10:4F Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACE0B9640EC68E1CD6DFDCF80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6352be7b-1542-39bc-93ee-5ee5f8591782.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 60558 IP address blocks: 131.153.158.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:96:40:ec:68:e1:cd:6d:fd:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=b1cdc594-0810-45ad-bbbf-d20bfd791b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7d:77:b7:be:ea:d3:42:6a:28:5b:92:6c:de: 2b:89:0c:1e:0e:07:b6:70:4b:13:27:07:aa:d0:f3: 1e:dc:f7:17:21:88:3b:c5:e4:7d:5e:32:a3:87:1a: 4d:f3:ba:a0:10:c1:73:4b:87:94:76:6f:d0:34:40: 3e:7d:2d:39:c1:af:ea:96:41:6a:ec:89:ce:12:95: 1c:53:6b:88:30:ad:67:80:24:35:00:64:58:63:23: 44:4e:32:72:07:11:0c:32:ae:b3:1f:93:b0:42:f8: 2b:4b:92:d4:ea:9f:27:4f:16:36:53:5d:32:b0:9c: a3:5d:c4:45:db:9f:48:43:e9:20:9a:4b:e5:04:34: c8:e8:34:68:f9:b9:62:5f:c7:ef:b3:73:99:df:b5: ec:6f:03:2c:5a:08:0e:eb:47:a6:8d:17:7e:4d:9b: 72:c0:d1:f9:e7:ff:ca:e4:5d:55:a8:da:e5:6c:cd: 9d:1f:21:d0:3c:53:72:51:6c:55:fc:be:dc:d6:31: bf:44:52:f0:75:b7:e5:90:20:96:bf:2b:c4:09:49: 5d:18:87:88:ea:b2:49:7a:a4:18:7f:c8:c3:0a:79: 0d:ac:8f:78:f7:6c:67:e7:07:8c:0a:1e:5e:47:ea: b5:2f:9d:63:79:d1:dd:2c:d6:98:dd:81:d5:4c:4b: 16:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CF:79:3E:92:31:B1:45:4A:E9:BF:C6:EC:D1:1D:F8:21:46:10:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6352be7b-1542-39bc-93ee-5ee5f8591782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:66:89:84:18:ca:04:01:d6:f7:7b:ce:08:95:c3:c0:ca:90: b8:d5:ce:70:68:8c:31:25:c9:ad:c3:db:79:6c:34:f2:87:74: 1c:df:0b:1d:55:cd:b3:c3:84:48:32:a7:aa:ac:c3:ea:ae:da: 4d:09:f6:ff:16:38:ba:8b:99:9e:84:cf:15:0e:af:e2:25:0c: da:8b:cf:52:d8:7d:68:81:f2:d5:ad:f8:63:b0:a8:1f:75:81: 16:cc:57:1a:bb:48:a1:8d:e8:f5:11:86:1f:40:86:7f:eb:0b: fb:23:92:bc:8c:e4:a4:6c:86:5d:2d:22:ac:fe:f5:17:9c:96: f2:db:30:11:7e:87:e5:76:07:92:67:7e:35:ba:0f:fb:9a:e0: cb:2f:1e:2b:ca:62:21:45:e7:d7:a2:e3:be:83:ad:d4:94:c4: 58:93:50:3f:ce:9c:29:90:1c:16:fa:6a:fa:1f:b7:68:ef:02: 1d:21:7e:e9:59:df:a3:ad:d1:f0:b7:bd:84:db:2f:4c:7a:32: 78:f5:6e:6f:b9:5d:1b:7b:8a:fb:f8:9a:80:c2:7b:db:dd:e3: 79:83:b1:fd:00:c1:7e:e1:e1:d8:e9:be:c8:9c:0e:bc:4c:a8: 4e:96:3e:1e:88:16:6a:28:42:b2:2c:52:a0:ad:f9:92:b6:70: 15:e0:1e:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5ZA7GjhzW39z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk YjFjZGM1OTQtMDgxMC00NWFkLWJiYmYtZDIwYmZkNzkxYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz313t77q00JqKFuSbN4riQweDge2cEsTJweq 0PMe3PcXIYg7xeR9XjKjhxpN87qgEMFzS4eUdm/QNEA+fS05wa/qlkFq7InOEpUc U2uIMK1ngCQ1AGRYYyNETjJyBxEMMq6zH5OwQvgrS5LU6p8nTxY2U10ysJyjXcRF 259IQ+kgmkvlBDTI6DRo+bliX8fvs3OZ37XsbwMsWggO60emjRd+TZtywNH55//K 5F1VqNrlbM2dHyHQPFNyUWxV/L7c1jG/RFLwdbflkCCWvyvECUldGIeI6rJJeqQY f8jDCnkNrI9492xn5weMCh5eR+q1L51jedHdLNaY3YHVTEsWjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzPeT6SMbFFSum/xuzRHfghRhBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNjM1MmJlN2ItMTU0Mi0z OWJjLTkzZWUtNWVlNWY4NTkxNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5meMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBmiYQYygQB1vd7zgiVw8DKkLjVznBojDElya3D23lsNPKHdBzfCx1V zbPDhEgyp6qsw+qu2k0J9v8WOLqLmZ6EzxUOr+IlDNqLz1LYfWiB8tWt+GOwqB91 gRbMVxq7SKGN6PURhh9Ahn/rC/sjkryM5KRshl0tIqz+9ReclvLbMBF+h+V2B5Jn fjW6D/ua4MsvHivKYiFF59ei476DrdSUxFiTUD/OnCmQHBb6avoft2jvAh0hfulZ 36Ot0fC3vYTbL0x6Mnj1bm+5XRt7ivv4moDCe9vd43mDsf0AwX7h4djpvsicDrxM qE6WPh6IFmooQrIsUqCt+ZK2cBXgHvk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:20:52 2025 by rpki-client