$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8bef63dc-0f20-36c6-a69a-bde8c91fe05a.roa File: 8bef63dc-0f20-36c6-a69a-bde8c91fe05a.roa (raw, json) Hash identifier: +j4wMpKQVeZtQYCv1X4xY2mYv1FdTlm5Eqzln96yS7g= Subject key identifier: 1D:36:7E:E1:0B:22:98:85:73:83:96:BB:2C:27:77:3F:BD:78:F5:EB Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64D23199609D956290C40 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8bef63dc-0f20-36c6-a69a-bde8c91fe05a.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 397651 IP address blocks: 131.153.103.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4d:23:19:96:09:d9:56:29:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=2f1c16f7-3af0-4d48-8b01-63c9e566cf3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2b:e1:4d:11:e7:c7:9a:03:dd:a6:8a:9a:0e: 9f:9b:a3:ef:13:60:75:f3:ce:e1:ea:0b:bc:02:d1: 53:a3:13:10:ae:25:bc:2f:ff:32:95:05:e6:b6:87: 95:16:75:16:93:6c:5c:b2:50:d8:54:2c:9e:91:72: 2e:6b:48:78:65:a7:66:86:8d:f8:1d:e7:d9:34:70: db:fb:88:df:df:47:c4:10:4e:56:a9:f0:08:73:7d: fd:2b:88:44:80:36:69:0a:5b:7e:2e:ca:cb:27:16: 22:ed:9d:50:c5:c9:ac:33:e3:43:1d:00:53:8b:e3: 39:f4:2f:f4:ad:be:57:4b:e3:4b:5a:c1:ca:75:1a: d3:04:01:ef:22:c9:f9:93:0d:f5:23:74:ed:ca:cb: 0d:c6:56:6c:7c:58:04:56:9b:93:0d:65:01:b3:a6: a7:57:f0:e9:d9:be:d2:37:60:17:1f:68:b9:b5:82: 35:26:3e:5a:f6:1e:82:4d:6f:4e:ce:66:b3:18:61: ce:c9:5a:69:52:47:41:49:6a:f1:ba:35:35:af:34: b5:b7:bb:2a:e3:67:ba:47:ad:81:a4:d7:7a:d8:e4: 8b:c8:cd:79:08:f3:47:fd:6a:dc:d5:e9:37:c0:6d: b6:f8:f7:0d:9a:2b:68:63:6f:42:a8:31:14:38:27: a2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:36:7E:E1:0B:22:98:85:73:83:96:BB:2C:27:77:3F:BD:78:F5:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8bef63dc-0f20-36c6-a69a-bde8c91fe05a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:00:41:d7:91:4a:08:b1:88:51:1e:03:bf:6d:3c:b5:32:8a: c6:86:92:ea:1b:bf:f5:83:e0:e1:09:d7:0f:d5:fe:c1:4c:d1: 1f:63:77:bb:a6:10:27:d0:ce:b9:65:f0:b4:7d:c6:8e:1c:db: 9d:e3:ff:df:77:43:67:ed:c7:cd:66:e3:2e:77:82:66:a8:cb: 3e:ea:2c:7d:58:7b:8e:81:ae:ec:c0:df:ef:c6:d5:80:f4:f8: 2d:6e:1f:7d:ca:8d:9f:27:14:ed:24:12:19:a2:ec:f5:ab:b0: 3f:e9:9b:00:ee:9d:e8:75:56:20:be:dc:59:7b:ce:cb:24:f0: da:b3:81:55:c0:f7:e2:ef:d2:2e:8f:49:e1:75:17:c3:6b:06: 63:4c:5c:98:e3:a4:bf:42:5a:6f:0c:ed:d1:1e:ea:dd:05:8e: 6c:89:f5:8b:9d:fe:c9:e6:bc:6c:48:61:63:65:cf:a0:3c:e3: d6:28:63:4e:df:73:36:c0:57:8b:b1:56:90:d9:40:e3:61:48: 19:ab:f8:28:80:f2:92:bb:90:4a:0a:d5:46:27:59:13:75:7c: c6:91:03:6a:0b:9d:1a:13:37:16:4b:62:2e:f3:57:bd:35:67: e8:a6:17:8a:49:29:30:d2:5d:88:ed:4c:5f:27:c4:2b:30:8b: d1:3e:6d:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpk0jGZYJ2VYpDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MmYxYzE2ZjctM2FmMC00ZDQ4LThiMDEtNjNjOWU1NjZjZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCvhTRHnx5oD3aaKmg6fm6PvE2B1887h6gu8 AtFToxMQriW8L/8ylQXmtoeVFnUWk2xcslDYVCyekXIua0h4Zadmho34HefZNHDb +4jf30fEEE5WqfAIc339K4hEgDZpClt+LsrLJxYi7Z1QxcmsM+NDHQBTi+M59C/0 rb5XS+NLWsHKdRrTBAHvIsn5kw31I3TtyssNxlZsfFgEVpuTDWUBs6anV/Dp2b7S N2AXH2i5tYI1Jj5a9h6CTW9OzmazGGHOyVppUkdBSWrxujU1rzS1t7sq42e6R62B pNd62OSLyM15CPNH/Wrc1ek3wG22+PcNmitoY29CqDEUOCeiqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB02fuELIpiFc4OWuywndz+9ePXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvOGJlZjYzZGMtMGYyMC0z NmM2LWE2OWEtYmRlOGM5MWZlMDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUAQdeRSgixiFEeA79tPLUyisaGkuobv/WD4OEJ1w/V/sFM0R9jd7um ECfQzrll8LR9xo4c253j/993Q2ftx81m4y53gmaoyz7qLH1Ye46BruzA3+/G1YD0 +C1uH33KjZ8nFO0kEhmi7PWrsD/pmwDuneh1ViC+3Fl7zssk8NqzgVXA9+Lv0i6P SeF1F8NrBmNMXJjjpL9CWm8M7dEe6t0FjmyJ9Yud/snmvGxIYWNlz6A849YoY07f czbAV4uxVpDZQONhSBmr+CiA8pK7kEoK1UYnWRN1fMaRA2oLnRoTNxZLYi7zV701 Z+imF4pJKTDSXYjtTF8nxCswi9E+bcc= -----END CERTIFICATE-----Generated at Sat Aug 23 20:54:09 2025 by rpki-client