$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/656fc147-50e3-39ef-ab55-4ef52a6cd0f2.roa File: 656fc147-50e3-39ef-ab55-4ef52a6cd0f2.roa (raw, json) Hash identifier: gucYFgVkQSrZvC91HdLcjGW3ANrJ8gcoNy+1PKn46eg= Subject key identifier: A3:D5:99:4D:DB:ED:02:C5:B3:19:87:CD:13:88:11:0D:76:5D:FE:C6 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584AD936614F5ED98837B9783220 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/656fc147-50e3-39ef-ab55-4ef52a6cd0f2.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 19437 IP address blocks: 131.153.196.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:61:4f:5e:d9:88:37:b9:78:32:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=3849b5b4-ea17-448f-b6c5-a0dd2fc961ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:49:11:5a:ad:0e:2c:be:c5:6b:19:e3:ca:c4: f9:e6:10:f3:27:9d:48:a4:3a:21:94:c8:80:c4:32: b9:ba:9a:02:51:7f:4e:ab:bd:cf:db:c1:5b:97:4c: e1:d7:95:ee:07:1d:55:20:61:97:3b:d4:8f:b6:1a: af:3a:cd:7e:e7:ff:95:fd:52:2c:e7:3b:7f:8c:90: 93:32:d3:4d:32:5f:f1:fb:a1:c8:5b:cf:2a:16:33: b4:e5:52:ae:f3:f7:4d:3c:44:4a:1c:18:4e:f4:8e: 9e:11:10:18:f5:60:03:6f:a3:c8:49:04:9a:60:ea: 62:97:71:9f:ff:23:ae:76:74:fa:d1:bd:92:63:a2: 8d:76:b1:0f:c9:94:9f:4f:14:58:90:35:ef:72:ed: 3e:cf:bc:1f:c4:4b:5e:c8:cf:89:99:c6:04:a9:a4: 3b:b6:e1:dc:c1:a6:5a:03:52:bd:95:93:4f:d6:0d: 74:20:5e:34:60:9a:dc:34:45:ab:85:3a:f4:6c:eb: 80:c3:d0:18:26:39:f3:0e:45:4a:00:41:6f:80:78: 1a:7e:12:df:db:d7:0e:5f:32:9a:b4:ce:0f:66:c9: 20:1e:b9:de:14:cd:ca:1b:bd:23:67:33:c9:3e:c1: 3a:06:cf:11:d1:d0:53:84:eb:0e:4b:88:20:bd:61: ed:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D5:99:4D:DB:ED:02:C5:B3:19:87:CD:13:88:11:0D:76:5D:FE:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/656fc147-50e3-39ef-ab55-4ef52a6cd0f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b9:bb:a6:b0:11:3f:2d:1e:51:a5:d5:b3:ff:89:ac:36:1e: 15:bb:49:4f:0c:0b:9b:69:b8:81:c2:04:54:88:d2:1b:69:ca: 64:ba:82:5e:d1:20:78:5a:f3:20:6a:8b:22:ae:0e:28:87:72: b0:5e:56:a0:86:07:c5:e2:b3:ac:2e:fd:18:67:1f:36:2b:08: cd:fc:bc:e7:15:ad:73:d8:2d:aa:4d:0b:c7:34:06:fd:4c:39: 7b:df:63:37:7d:a1:3d:f4:12:59:77:cd:4d:65:13:fc:45:4d: 63:d0:8f:a1:30:40:ee:3a:f2:7f:91:7e:af:23:c1:a5:a5:ac: 2d:11:18:1a:99:99:3d:a8:7e:0d:8c:6c:e0:4b:6d:e2:8d:bc: 5c:b0:df:bf:90:4b:cb:55:8a:8d:9c:2a:cc:a7:31:f8:5a:30: df:07:92:cb:3f:f2:34:db:3c:64:98:61:5e:77:49:c0:ad:d9: 2b:41:2b:20:4c:ab:d0:ab:12:da:89:50:95:26:94:87:bd:39: 35:96:b3:ca:40:77:7f:44:be:ef:8f:6f:03:db:bd:ba:ab:2d: b7:a4:96:ec:c7:18:d3:12:f8:b4:0e:df:71:d1:7f:cc:92:7e: af:a2:38:45:12:68:90:67:51:ad:b9:d3:33:2f:81:8a:35:59: 76:dc:d1:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNmFPXtmIN7l4MiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk Mzg0OWI1YjQtZWExNy00NDhmLWI2YzUtYTBkZDJmYzk2MWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUkRWq0OLL7FaxnjysT55hDzJ51IpDohlMiA xDK5upoCUX9Oq73P28Fbl0zh15XuBx1VIGGXO9SPthqvOs1+5/+V/VIs5zt/jJCT MtNNMl/x+6HIW88qFjO05VKu8/dNPERKHBhO9I6eERAY9WADb6PISQSaYOpil3Gf /yOudnT60b2SY6KNdrEPyZSfTxRYkDXvcu0+z7wfxEteyM+JmcYEqaQ7tuHcwaZa A1K9lZNP1g10IF40YJrcNEWrhTr0bOuAw9AYJjnzDkVKAEFvgHgafhLf29cOXzKa tM4PZskgHrneFM3KG70jZzPJPsE6Bs8R0dBThOsOS4ggvWHtswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPVmU3b7QLFsxmHzROIEQ12Xf7GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNjU2ZmMxNDctNTBlMy0z OWVmLWFiNTUtNGVmNTJhNmNkMGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5nEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm5u6awET8tHlGl1bP/iaw2HhW7SU8MC5tpuIHCBFSI0htpymS6gl7R IHha8yBqiyKuDiiHcrBeVqCGB8Xis6wu/RhnHzYrCM38vOcVrXPYLapNC8c0Bv1M OXvfYzd9oT30Ell3zU1lE/xFTWPQj6EwQO468n+Rfq8jwaWlrC0RGBqZmT2ofg2M bOBLbeKNvFyw37+QS8tVio2cKsynMfhaMN8Hkss/8jTbPGSYYV53ScCt2StBKyBM q9CrEtqJUJUmlIe9OTWWs8pAd39Evu+PbwPbvbqrLbekluzHGNMS+LQO33HRf8yS fq+iOEUSaJBnUa250zMvgYo1WXbc0fY= -----END CERTIFICATE-----Generated at Sat Aug 23 18:06:26 2025 by rpki-client