$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6c7c27f8-94f4-3e50-8a1a-539f4f5831ed.roa File: 6c7c27f8-94f4-3e50-8a1a-539f4f5831ed.roa (raw, json) Hash identifier: KLGOX9+W6bRLPtvV5Qpr23wZH2yRiaKVQBKM9eCHcsA= Subject key identifier: 15:64:C2:11:D9:52:17:9C:1E:23:1F:4D:93:1F:07:80:19:32:8B:C6 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64D9EB29B98701BBC5D00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6c7c27f8-94f4-3e50-8a1a-539f4f5831ed.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 208136 IP address blocks: 131.153.137.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4d:9e:b2:9b:98:70:1b:bc:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=d625c1ca-03d5-47d1-b3d0-9d704d344de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:14:fb:45:be:6a:2e:37:d8:2d:dc:ba:b5: 41:96:3a:79:00:cc:a3:cf:a5:7f:8d:d3:e0:53:76: 2a:d5:1b:1d:de:6c:16:6e:6d:49:68:af:2c:1c:77: 97:ab:68:20:23:c6:17:28:f1:f6:63:17:55:db:37: ed:08:75:2e:01:ac:d7:42:b7:ff:d3:34:0c:53:05: fb:ea:31:18:90:15:18:db:7d:63:4d:5a:d0:d0:ec: ab:02:7c:8d:60:5c:77:c4:6b:57:14:b7:50:00:50: 51:ec:9c:4c:d1:c3:de:38:55:9b:f1:e8:f7:24:2f: e1:8e:ea:21:f0:f0:c7:34:10:c0:b4:8b:1d:df:63: 20:7e:ce:c6:77:c6:7b:60:a3:04:c3:84:c6:26:f3: 6f:e6:02:92:8d:54:0b:60:61:a9:d5:94:79:6b:b6: 41:79:c1:61:b1:02:d3:b4:88:e3:a1:bb:6e:70:89: 48:f7:7e:b9:ec:ee:d0:3b:ac:29:ff:87:4c:04:cd: cd:7f:d3:fb:d2:cd:46:99:7d:74:45:39:6c:6d:7c: 38:dd:41:de:a8:cf:65:b1:31:f7:c4:dc:2d:1f:cd: 1d:bc:b9:ec:0a:69:60:9b:71:d7:bd:35:e1:42:cd: 66:b7:c3:f4:92:5d:ba:24:f0:5d:18:5c:74:16:06: 22:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:64:C2:11:D9:52:17:9C:1E:23:1F:4D:93:1F:07:80:19:32:8B:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6c7c27f8-94f4-3e50-8a1a-539f4f5831ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:57:9f:56:b1:1b:43:56:c6:97:7c:5a:25:20:bb:91:93:13: 5c:e7:a8:ba:8f:5d:77:16:90:25:92:44:2c:e8:18:2a:ec:10: 88:f0:f6:55:c1:5a:ff:fb:d8:ce:ec:7c:98:20:9c:28:e3:11: 5a:be:22:52:2c:46:73:b7:61:b7:3a:fc:d5:1b:10:c7:6e:0b: 34:a3:e9:c6:2f:ba:05:0d:69:51:c0:a6:18:81:e8:ad:93:01: a5:b4:4b:00:d3:ff:7e:e7:c6:6e:1d:ca:e4:de:e8:17:19:9a: f8:53:13:98:5a:75:28:46:10:ed:c6:02:ae:b6:49:df:0d:2b: 36:ed:d0:7e:c6:50:23:1f:73:88:a8:a1:86:54:54:86:43:2b: 31:7c:50:62:df:da:ab:53:bf:be:8e:e1:34:28:ff:93:38:8c: fb:5c:f9:18:56:30:62:cf:fc:15:a6:92:db:20:8d:b1:ec:b2: be:c2:05:6d:3f:dc:61:2f:ac:d3:a9:76:af:16:12:ad:ce:3e: 17:26:43:eb:7a:cf:e8:70:5c:3f:69:76:81:7a:4e:3a:3d:6a: b4:95:15:0d:aa:29:b8:2f:f2:59:73:b7:a4:eb:86:10:7a:f6: 2f:7c:9d:38:e7:de:79:b1:fd:85:0c:8d:c9:ca:f4:e8:e0:aa: 03:7d:b8:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpk2espuYcBu8XQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDYyNWMxY2EtMDNkNS00N2QxLWIzZDAtOWQ3MDRkMzQ0ZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9gU+0W+ai432C3curVBljp5AMyjz6V/jdPg U3Yq1Rsd3mwWbm1JaK8sHHeXq2ggI8YXKPH2YxdV2zftCHUuAazXQrf/0zQMUwX7 6jEYkBUY231jTVrQ0OyrAnyNYFx3xGtXFLdQAFBR7JxM0cPeOFWb8ej3JC/hjuoh 8PDHNBDAtIsd32Mgfs7Gd8Z7YKMEw4TGJvNv5gKSjVQLYGGp1ZR5a7ZBecFhsQLT tIjjobtucIlI93657O7QO6wp/4dMBM3Nf9P70s1GmX10RTlsbXw43UHeqM9lsTH3 xNwtH80dvLnsCmlgm3HXvTXhQs1mt8P0kl26JPBdGFx0FgYi6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVkwhHZUhecHiMfTZMfB4AZMovGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNmM3YzI3ZjgtOTRmNC0z ZTUwLThhMWEtNTM5ZjRmNTgzMWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5mJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1Xn1axG0NWxpd8WiUgu5GTE1znqLqPXXcWkCWSRCzoGCrsEIjw9lXB Wv/72M7sfJggnCjjEVq+IlIsRnO3Ybc6/NUbEMduCzSj6cYvugUNaVHAphiB6K2T AaW0SwDT/37nxm4dyuTe6BcZmvhTE5hadShGEO3GAq62Sd8NKzbt0H7GUCMfc4io oYZUVIZDKzF8UGLf2qtTv76O4TQo/5M4jPtc+RhWMGLP/BWmktsgjbHssr7CBW0/ 3GEvrNOpdq8WEq3OPhcmQ+t6z+hwXD9pdoF6Tjo9arSVFQ2qKbgv8llzt6TrhhB6 9i98nTjn3nmx/YUMjcnK9OjgqgN9uF4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:59:15 2025 by rpki-client