$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa File: 8d254be0-4973-3adb-9609-4a7ab5dad347.roa (raw, json) Hash identifier: PjqU/c4aT33J3sFoghHhocNbCApiIXTJpLM9Ws+1jNk= Subject key identifier: B1:FB:FF:BF:6F:02:58:C4:99:77:AF:22:1A:A7:4E:F9:47:EB:9D:D3 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64DFEA5F2881DE2628C80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 12189 IP address blocks: 131.153.116.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4d:fe:a5:f2:88:1d:e2:62:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=ab37c486-f557-43e3-b361-2d1d9049b81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ce:e3:5d:a9:1f:ce:47:0d:99:45:6c:d4:65: 52:a9:e9:18:6a:32:ee:0f:b2:39:95:ef:34:b7:02: cf:25:06:0c:93:92:0a:e9:21:a9:81:15:a6:6f:bd: 86:a5:f8:ca:19:f5:55:1d:3c:ed:44:a4:77:40:da: 55:df:e5:85:3e:11:14:27:3c:06:6b:43:96:35:21: 5b:87:cc:53:9b:cd:af:d7:19:03:7a:cd:af:05:57: b4:2e:df:32:25:ef:95:ca:3d:78:78:fb:dc:dd:53: d7:b0:3b:2b:f0:67:be:cf:9e:93:88:4d:1a:60:d0: f0:a5:22:e2:22:b3:0b:03:c4:2c:d9:59:fc:1e:65: 3d:64:96:64:bc:5d:c6:58:3f:e9:5b:70:40:b9:f9: 90:ec:dc:f5:be:9f:0a:53:2d:8e:fd:5c:64:0e:b6: 7b:6d:bb:d0:75:ce:73:38:ff:4e:91:23:94:67:1a: a7:04:74:10:55:44:6a:ef:16:6e:2a:81:4d:b1:d8: ce:92:91:31:70:ef:55:70:bf:92:9e:16:b2:f2:75: a3:10:82:d9:66:1b:8f:1f:f0:4d:bd:3b:a4:3e:f2: ae:30:40:8a:6a:ed:a8:81:69:25:73:b1:51:79:41: 26:51:ee:d0:13:23:54:cf:98:ef:04:e6:4b:c3:1a: 4a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FB:FF:BF:6F:02:58:C4:99:77:AF:22:1A:A7:4E:F9:47:EB:9D:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:7c:eb:68:cc:45:67:16:9c:60:e2:13:ec:b4:3b:89:26:40: f7:f8:79:53:c5:72:92:57:da:4b:61:bb:92:23:8e:47:06:34: bc:26:b4:71:78:f7:74:0c:32:90:cc:4a:c6:1e:94:4a:e3:9c: 17:30:fa:37:65:5c:79:4d:1e:78:fb:1d:48:31:e8:07:32:49: 34:5e:d4:12:73:54:71:d8:4c:12:b1:76:92:57:1a:ec:f9:16: 78:ff:92:5f:68:a3:7c:86:0c:88:37:ad:08:42:83:f3:6d:fe: 51:a0:ea:6a:0d:2f:f0:a8:1f:01:7e:9b:22:94:1f:51:79:d9: 7f:cc:e9:5f:7b:f3:c0:ca:b1:d3:10:47:1e:37:e7:1b:7b:a3: 67:9f:ae:dc:a5:ff:17:36:58:69:26:17:8f:ca:4a:47:65:4a: 96:cc:54:a3:fc:83:81:33:95:75:98:63:36:62:c0:b3:e6:df: 83:c2:6c:79:87:5d:7e:b5:d8:26:e6:e1:63:d5:9e:fe:9e:7a: d1:b5:db:9b:12:c8:59:c8:5d:ee:63:a2:82:7f:ff:8f:7f:5c: ca:a5:71:d2:4b:7f:d0:7b:38:54:3b:22:dc:03:a0:57:43:99: ee:c3:6b:3d:ea:7b:12:3d:28:cf:cf:78:76:d3:e0:ca:b2:bc: e3:29:f7:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpk3+pfKIHeJijIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk YWIzN2M0ODYtZjU1Ny00M2UzLWIzNjEtMmQxZDkwNDliODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM7jXakfzkcNmUVs1GVSqekYajLuD7I5le80 twLPJQYMk5IK6SGpgRWmb72GpfjKGfVVHTztRKR3QNpV3+WFPhEUJzwGa0OWNSFb h8xTm82v1xkDes2vBVe0Lt8yJe+Vyj14ePvc3VPXsDsr8Ge+z56TiE0aYNDwpSLi IrMLA8Qs2Vn8HmU9ZJZkvF3GWD/pW3BAufmQ7Nz1vp8KUy2O/VxkDrZ7bbvQdc5z OP9OkSOUZxqnBHQQVURq7xZuKoFNsdjOkpExcO9VcL+Snhay8nWjEILZZhuPH/BN vTukPvKuMECKau2ogWklc7FReUEmUe7QEyNUz5jvBOZLwxpKFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLH7/79vAljEmXevIhqnTvlH653TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvOGQyNTRiZTAtNDk3My0z YWRiLTk2MDktNGE3YWI1ZGFkMzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5l0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV862jMRWcWnGDiE+y0O4kmQPf4eVPFcpJX2kthu5IjjkcGNLwmtHF4 93QMMpDMSsYelErjnBcw+jdlXHlNHnj7HUgx6AcySTRe1BJzVHHYTBKxdpJXGuz5 Fnj/kl9oo3yGDIg3rQhCg/Nt/lGg6moNL/CoHwF+myKUH1F52X/M6V9788DKsdMQ Rx435xt7o2efrtyl/xc2WGkmF4/KSkdlSpbMVKP8g4EzlXWYYzZiwLPm34PCbHmH XX612Cbm4WPVnv6eetG125sSyFnIXe5jooJ//49/XMqlcdJLf9B7OFQ7ItwDoFdD me7Daz3qexI9KM/PeHbT4MqyvOMp9/o= -----END CERTIFICATE-----Generated at Sat Aug 23 15:00:42 2025 by rpki-client