$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/845a3255-66a8-34dc-a162-c938627caa3a.roa File: 845a3255-66a8-34dc-a162-c938627caa3a.roa (raw, json) Hash identifier: KsxxbzRgVvf0RnbG/8+S4GFUk3diBpNBdFJKSNW0srM= Subject key identifier: 31:8D:EE:97:82:35:68:27:C8:60:17:04:6D:CE:44:C1:CD:F0:F2:B5 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACE0B96DFBC99BB3067CB6700 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/845a3255-66a8-34dc-a162-c938627caa3a.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 11572 IP address blocks: 131.153.24.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:96:df:bc:99:bb:30:67:cb:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=56ff3e1d-8d71-4000-a4a9-b64cf1cf03ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a9:cb:21:48:f1:49:41:19:4b:8c:a9:88:2e: f9:75:05:01:8d:be:07:7a:be:39:78:da:f6:ce:31: 73:c0:7c:a4:4c:2e:6f:89:48:91:03:22:cc:ae:57: db:d0:37:af:04:f3:c8:ee:0d:f2:d4:91:dd:2a:70: 23:5c:16:ff:93:f1:67:28:80:6b:d9:52:9b:b0:6e: 02:77:63:d5:fe:4b:19:de:2e:a5:57:25:85:8f:33: aa:d0:26:de:0b:db:d4:c7:7d:1e:be:3d:f0:86:bc: 95:e5:13:10:6d:b9:35:f7:ff:1d:e3:dc:f8:66:75: 8b:2a:2c:3a:96:5b:a3:1b:ba:b0:f8:44:58:10:b3: b0:4e:14:97:53:17:27:83:94:0b:20:f5:b1:53:6f: 41:11:d9:c6:e8:c1:6e:a9:1e:1e:99:ba:79:ea:50: e8:b2:ab:9a:42:16:9d:23:3b:54:cf:b2:7b:a4:63: 5c:b4:23:7b:c3:de:00:9d:a9:38:84:06:63:44:e6: 6f:84:28:00:c9:78:86:fe:8c:36:bc:7f:91:c1:7c: cc:af:44:c2:85:de:d5:39:e5:4d:2e:a4:25:85:a7: 0f:5d:86:26:e7:07:f5:4f:88:83:9b:2f:66:a6:3a: 10:20:69:5a:13:ee:f1:8b:4d:b2:10:1c:36:d6:bd: 80:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8D:EE:97:82:35:68:27:C8:60:17:04:6D:CE:44:C1:CD:F0:F2:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/845a3255-66a8-34dc-a162-c938627caa3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:33:c2:0e:83:8e:64:da:2d:39:8d:b1:de:71:fa:65:a1:13: d8:5c:a8:d1:bc:c7:06:b9:5a:1a:f1:f8:5a:34:ed:1b:f3:15: 7b:b0:67:28:8c:de:29:3d:78:35:88:d6:f0:a9:82:c8:55:ac: 23:01:6a:b7:55:35:d4:38:03:d4:e8:07:72:15:0c:15:87:db: 5b:d8:5b:dc:95:aa:ad:f7:92:b5:9e:12:1c:b8:75:ba:9a:f3: 7e:7d:be:d2:1f:58:d7:be:23:a5:ce:18:1f:ba:3f:55:fd:2f: 66:62:21:48:15:07:13:80:22:cc:16:29:f7:bb:0f:52:68:3b: 4d:1b:e3:ca:df:72:65:64:c6:41:81:15:ad:0a:4d:f1:8a:c3: b0:fd:12:42:76:fd:1c:05:27:d3:6a:6c:5d:30:4c:e6:00:3d: e6:ef:ad:55:08:f0:fb:91:62:d6:7f:dc:b3:fa:66:1b:90:e3: 08:ee:39:6a:2e:27:d7:2d:30:e4:34:10:f5:9b:90:98:fc:9c: dd:4d:bb:74:8f:fa:77:fc:79:78:0a:8d:31:89:9b:6a:43:a6: 7f:49:de:9b:01:f3:47:8e:be:4b:02:65:90:6b:43:78:75:a3: 4e:dc:20:41:f7:b7:91:01:2b:98:a9:42:b0:9f:26:e6:93:f4: da:14:72:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5bfvJm7MGfLZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk NTZmZjNlMWQtOGQ3MS00MDAwLWE0YTktYjY0Y2YxY2YwM2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96nLIUjxSUEZS4ypiC75dQUBjb4Her45eNr2 zjFzwHykTC5viUiRAyLMrlfb0DevBPPI7g3y1JHdKnAjXBb/k/FnKIBr2VKbsG4C d2PV/ksZ3i6lVyWFjzOq0CbeC9vUx30evj3whryV5RMQbbk19/8d49z4ZnWLKiw6 llujG7qw+ERYELOwThSXUxcng5QLIPWxU29BEdnG6MFuqR4embp56lDosquaQhad IztUz7J7pGNctCN7w94Anak4hAZjROZvhCgAyXiG/ow2vH+RwXzMr0TChd7VOeVN LqQlhacPXYYm5wf1T4iDmy9mpjoQIGlaE+7xi02yEBw21r2AYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGN7peCNWgnyGAXBG3ORMHN8PK1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvODQ1YTMyNTUtNjZhOC0z NGRjLWExNjItYzkzODYyN2NhYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5kYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgzwg6DjmTaLTmNsd5x+mWhE9hcqNG8xwa5Whrx+Fo07RvzFXuwZyiM 3ik9eDWI1vCpgshVrCMBardVNdQ4A9ToB3IVDBWH21vYW9yVqq33krWeEhy4dbqa 8359vtIfWNe+I6XOGB+6P1X9L2ZiIUgVBxOAIswWKfe7D1JoO00b48rfcmVkxkGB Fa0KTfGKw7D9EkJ2/RwFJ9NqbF0wTOYAPebvrVUI8PuRYtZ/3LP6ZhuQ4wjuOWou J9ctMOQ0EPWbkJj8nN1Nu3SP+nf8eXgKjTGJm2pDpn9J3psB80eOvksCZZBrQ3h1 o07cIEH3t5EBK5ipQrCfJuaT9NoUcm0= -----END CERTIFICATE-----Generated at Sat Aug 23 13:08:36 2025 by rpki-client