$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7af57255-95e9-35f8-a3b4-964cc0e6608e.roa File: 7af57255-95e9-35f8-a3b4-964cc0e6608e.roa (raw, json) Hash identifier: zV6w5758JXfCrW1hjaP5QMAaEgOKBM21843olBIQpmM= Subject key identifier: 55:B1:55:43:ED:FB:44:B2:84:92:0F:91:BA:FC:A7:1A:68:21:7B:26 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACE0B9069445A7BF1772F2700 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7af57255-95e9-35f8-a3b4-964cc0e6608e.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 12189 IP address blocks: 131.153.72.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:90:69:44:5a:7b:f1:77:2f:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=34f1a782-fa62-40c1-adfd-61d6b41e91ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:01:12:1d:ed:15:c3:cb:b3:cc:8c:c8:90:ba: 28:f8:75:a8:65:42:a4:2f:b7:fa:5b:a2:83:e9:d3: 5e:66:87:02:51:79:52:e2:c1:2f:02:da:ee:3d:db: d6:7e:3e:45:b9:ef:e2:c4:81:d3:7e:3f:09:9d:9c: c2:2f:00:cf:a3:97:05:ab:d7:bf:c5:58:02:4c:ce: 23:05:b8:21:00:cb:8b:8f:82:0b:32:f2:ab:b5:75: 27:26:da:84:a9:ec:83:5b:2a:f6:a2:54:71:a1:18: bb:95:c1:9a:43:c7:dd:0f:8a:d8:39:a6:f1:6c:02: 07:09:ad:09:f8:5d:8d:38:32:9f:de:22:33:df:f2: 46:d8:7f:3f:68:fb:54:40:c8:53:8c:66:f3:ac:a2: 8a:18:70:8e:3c:78:1d:49:96:02:91:58:79:44:19: 0a:7c:6b:c2:09:82:6a:4b:be:c2:74:08:27:d3:d1: 63:41:ac:f6:64:0c:94:85:b0:31:cc:16:b2:95:00: 9a:66:61:2f:af:00:8a:c7:9a:eb:4b:0b:b3:7f:65: 1d:ea:b2:bb:f9:ff:c5:b9:87:6f:77:14:7b:b7:29: db:93:c7:db:ea:1b:f8:9f:8e:28:47:6a:4f:76:dd: 54:d8:e1:8a:d1:fb:d8:47:74:e9:6b:f4:66:ca:93: c9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B1:55:43:ED:FB:44:B2:84:92:0F:91:BA:FC:A7:1A:68:21:7B:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7af57255-95e9-35f8-a3b4-964cc0e6608e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b2:b2:88:8f:fb:76:aa:97:45:66:7e:76:15:0c:fe:86:f1: fd:c7:ea:75:25:7d:f7:1d:14:b7:8d:09:a1:0d:3c:df:4c:d1: 1e:6d:ba:02:8f:05:5a:12:5c:85:01:f1:5c:e7:20:89:71:e0: 92:57:30:3a:3c:91:f1:5d:4a:54:d4:ae:fe:45:0d:c6:9f:7a: ad:de:52:ec:63:a3:a0:9d:23:0c:4f:bc:f5:6d:64:b5:5a:4d: f5:1c:06:0d:3f:30:31:ee:21:0c:69:be:f6:aa:b6:cc:32:d4: 9b:3a:6f:66:c0:50:13:f6:a0:ca:ea:be:7c:e5:3e:90:f1:df: 17:d6:5c:c4:9b:db:da:99:1f:8c:47:81:7d:01:d2:91:9c:86: b9:f1:5c:94:11:f6:c8:b1:65:e8:fc:be:9a:b3:c9:81:74:a8: cd:55:5d:88:0e:86:0e:91:ee:a2:b5:fb:1f:7d:7f:93:49:71: bd:8d:ec:e2:d5:e8:39:70:51:1d:07:4a:9e:54:4d:2b:32:83: b3:55:bc:b3:52:a1:4a:50:af:31:2d:7f:29:3d:13:5b:05:69: 87:8b:42:5d:17:1f:4b:6b:56:34:fb:79:fb:b3:a1:4c:15:f2: bd:c7:d9:fa:06:d7:3d:f6:ee:bd:eb:28:8a:a0:c6:05:20:57: bf:8b:b3:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5BpRFp78XcvJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk MzRmMWE3ODItZmE2Mi00MGMxLWFkZmQtNjFkNmI0MWU5MWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAESHe0Vw8uzzIzIkLoo+HWoZUKkL7f6W6KD 6dNeZocCUXlS4sEvAtruPdvWfj5Fue/ixIHTfj8JnZzCLwDPo5cFq9e/xVgCTM4j BbghAMuLj4ILMvKrtXUnJtqEqeyDWyr2olRxoRi7lcGaQ8fdD4rYOabxbAIHCa0J +F2NODKf3iIz3/JG2H8/aPtUQMhTjGbzrKKKGHCOPHgdSZYCkVh5RBkKfGvCCYJq S77CdAgn09FjQaz2ZAyUhbAxzBaylQCaZmEvrwCKx5rrSwuzf2Ud6rK7+f/FuYdv dxR7tynbk8fb6hv4n44oR2pPdt1U2OGK0fvYR3Tpa/RmypPJhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWxVUPt+0SyhJIPkbr8pxpoIXsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvN2FmNTcyNTUtOTVlOS0z NWY4LWEzYjQtOTY0Y2MwZTY2MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqysoiP+3aql0VmfnYVDP6G8f3H6nUlffcdFLeNCaENPN9M0R5tugKP BVoSXIUB8VznIIlx4JJXMDo8kfFdSlTUrv5FDcafeq3eUuxjo6CdIwxPvPVtZLVa TfUcBg0/MDHuIQxpvvaqtswy1Js6b2bAUBP2oMrqvnzlPpDx3xfWXMSb29qZH4xH gX0B0pGchrnxXJQR9sixZej8vpqzyYF0qM1VXYgOhg6R7qK1+x99f5NJcb2N7OLV 6DlwUR0HSp5UTSsyg7NVvLNSoUpQrzEtfyk9E1sFaYeLQl0XH0trVjT7efuzoUwV 8r3H2foG1z327r3rKIqgxgUgV7+Lsx8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:01:08 2025 by rpki-client