$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/820f6bb7-bdb6-34a1-8660-db02bea35986.roa File: 820f6bb7-bdb6-34a1-8660-db02bea35986.roa (raw, json) Hash identifier: 7HP4kbrGBjICWv5D9uHUElfZFcafpdHN038JFx/FZfE= Subject key identifier: 68:28:68:CB:78:B1:54:3C:BF:ED:DE:CC:95:A1:D4:35:3E:F0:3F:FC Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64D5C997F80FD75D08980 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/820f6bb7-bdb6-34a1-8660-db02bea35986.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 39239 IP address blocks: 131.153.105.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4d:5c:99:7f:80:fd:75:d0:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=8596d15f-c6cd-4ad2-8e61-a2bd03c279b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d7:fc:83:3d:b3:b3:61:85:4f:a0:60:d1:fa: 50:41:7a:e8:0c:15:8c:20:9e:b7:dd:35:0c:c3:1c: 96:35:d4:4a:35:98:14:d6:55:7a:91:15:5d:fc:09: 6b:cd:46:82:f2:e6:1c:03:47:0e:28:51:81:c9:5d: 37:78:d8:f0:77:5e:75:23:30:40:c7:8d:46:48:fe: 5d:89:3c:9a:35:d2:e3:8e:e6:ed:43:69:0d:b3:34: 05:4b:a6:80:ad:3b:72:61:e1:a5:00:f3:6e:65:9a: bf:10:96:7f:0e:ed:2e:f1:32:83:6b:b8:1a:e1:38: ee:78:eb:36:81:44:9e:97:b1:d0:c9:ac:86:07:51: de:45:26:04:9c:e8:39:2f:1e:95:53:f6:b8:ea:b7: 59:7a:85:79:54:cc:f5:07:a5:c7:71:eb:ce:e5:45: 0f:bd:6d:bf:14:34:74:e9:39:85:95:e0:53:c4:1d: 54:1b:f0:ae:bb:2b:e3:66:ad:a7:d4:39:a5:bf:e0: 75:e7:80:fe:d3:1a:58:54:ce:85:2f:31:01:c3:b8: 38:c4:a9:83:a4:b3:8d:9e:b5:9e:97:89:a2:df:29: 5c:db:cc:89:44:56:17:07:d4:a9:5f:ea:dc:77:66: f1:b3:36:04:b0:d5:9d:27:cb:d9:0a:c6:a4:4d:fd: 40:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:28:68:CB:78:B1:54:3C:BF:ED:DE:CC:95:A1:D4:35:3E:F0:3F:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/820f6bb7-bdb6-34a1-8660-db02bea35986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:35:ae:a7:50:26:d4:63:f2:be:94:75:7b:a8:8d:57:df:3f: 3a:92:69:1b:71:ad:40:dc:33:24:90:a9:ee:99:49:f2:4c:7e: d9:d6:1f:d1:d2:35:c8:7a:c3:86:7a:a7:de:c8:a8:ea:48:48: 1e:35:a0:ad:9d:67:6d:b5:2f:36:84:de:54:f2:02:df:b5:c3: 9e:28:94:71:e9:19:d8:57:6d:54:08:6c:9a:eb:8d:40:a0:13: 50:f4:b0:ba:1c:cf:47:05:54:e9:76:fa:8e:fd:bb:10:4c:81: c6:9d:97:da:33:f4:d1:d6:65:4b:91:23:cd:7f:93:c4:50:d9: 53:b8:e8:dc:8d:ac:d9:ba:2e:8c:2e:ef:6f:7c:6a:4b:ba:d9: eb:72:f6:a2:c4:35:7f:d4:4f:18:64:29:71:0f:95:77:1a:5c: da:87:49:ec:da:19:a7:2f:3e:2b:58:c7:54:76:31:51:94:36: f7:ec:e7:74:34:6c:36:0d:a2:c2:82:d2:7d:54:ac:87:bc:65: 2a:20:bc:e9:69:ba:14:3c:2d:57:5d:2e:76:96:09:b6:11:e0: d5:13:16:95:05:f0:e7:86:f8:ba:9c:ec:dc:c5:88:a0:80:44: 01:b6:41:14:f5:c7:7d:2f:6b:72:71:c3:e6:35:8d:e8:c7:6a: 5e:b7:07:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpk1cmX+A/XXQiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk ODU5NmQxNWYtYzZjZC00YWQyLThlNjEtYTJiZDAzYzI3OWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9f8gz2zs2GFT6Bg0fpQQXroDBWMIJ633TUM wxyWNdRKNZgU1lV6kRVd/AlrzUaC8uYcA0cOKFGByV03eNjwd151IzBAx41GSP5d iTyaNdLjjubtQ2kNszQFS6aArTtyYeGlAPNuZZq/EJZ/Du0u8TKDa7ga4TjueOs2 gUSel7HQyayGB1HeRSYEnOg5Lx6VU/a46rdZeoV5VMz1B6XHcevO5UUPvW2/FDR0 6TmFleBTxB1UG/CuuyvjZq2n1Dmlv+B154D+0xpYVM6FLzEBw7g4xKmDpLONnrWe l4mi3ylc28yJRFYXB9SpX+rcd2bxszYEsNWdJ8vZCsakTf1ASwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgoaMt4sVQ8v+3ezJWh1DU+8D/8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvODIwZjZiYjctYmRiNi0z NGExLTg2NjAtZGIwMmJlYTM1OTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGE1rqdQJtRj8r6UdXuojVffPzqSaRtxrUDcMySQqe6ZSfJMftnWH9HS Nch6w4Z6p97IqOpISB41oK2dZ221LzaE3lTyAt+1w54olHHpGdhXbVQIbJrrjUCg E1D0sLocz0cFVOl2+o79uxBMgcadl9oz9NHWZUuRI81/k8RQ2VO46NyNrNm6Lowu 7298aku62ety9qLENX/UTxhkKXEPlXcaXNqHSezaGacvPitYx1R2MVGUNvfs53Q0 bDYNosKC0n1UrIe8ZSogvOlpuhQ8LVddLnaWCbYR4NUTFpUF8OeG+Lqc7NzFiKCA RAG2QRT1x30va3Jxw+Y1jejHal63B5I= -----END CERTIFICATE-----Generated at Sat Aug 23 13:05:30 2025 by rpki-client