$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9e468c02-912e-327f-a060-95177befb6a0.roa File: 9e468c02-912e-327f-a060-95177befb6a0.roa (raw, json) Hash identifier: N1exJCWl1UuLngwkP8k6pS8JxSLNvu6poV6U/0AIHfo= Subject key identifier: 31:C8:66:4D:57:32:C1:BB:56:EB:BA:58:13:93:D0:B9:C7:50:A9:E1 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACE0B95E5D189650E9613EF60 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9e468c02-912e-327f-a060-95177befb6a0.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 12189 IP address blocks: 131.153.136.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:95:e5:d1:89:65:0e:96:13:ef:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=41b5efdc-eefa-4393-aa35-d213b4f81fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:99:37:27:ba:3a:73:82:4f:69:5f:b4:2e:1f: f0:13:45:72:ff:4e:f0:6d:d2:10:8c:b0:85:bc:3c: 0c:e4:45:e9:5c:c9:b6:23:5c:62:72:67:7b:38:0f: 8b:a9:71:af:5a:a2:bc:ae:43:3d:a2:59:3a:40:1f: e6:b0:fa:a6:ce:5a:48:66:b4:9b:48:54:a4:60:92: 62:9e:e4:16:8b:0b:f0:c4:96:b1:3f:40:bf:27:6d: 0a:58:f1:86:88:6f:d8:21:13:25:70:f6:03:73:00: c9:d8:a2:97:cf:26:f8:36:e1:d6:7e:bc:50:13:8a: 55:05:00:24:8d:27:dd:81:2c:fe:a0:74:f8:75:20: ba:52:36:18:6f:f5:31:f6:7e:3a:ca:1a:8f:3d:bd: 7f:ab:85:58:22:f1:32:f6:11:99:95:ea:37:1d:ad: d5:a4:c8:65:b0:ce:96:5c:20:02:04:eb:d7:dd:9d: 9d:79:52:7b:1f:9c:4b:76:c2:67:8a:29:71:70:99: 1a:17:d0:51:01:c1:b3:13:04:ae:e3:ec:5b:ee:b9: 65:ce:ea:c2:42:c5:d5:b7:19:e2:6f:d4:25:99:87: e1:86:8c:82:52:93:62:b5:22:59:cf:35:b4:3a:d1: 66:fc:3f:b9:eb:31:ca:3b:71:50:f1:fe:26:80:14: e7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C8:66:4D:57:32:C1:BB:56:EB:BA:58:13:93:D0:B9:C7:50:A9:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9e468c02-912e-327f-a060-95177befb6a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:25:e4:2d:bc:b9:7c:9b:93:06:e6:85:a1:a8:b5:36:2d:26: d6:86:0e:4a:01:c3:a8:32:db:4c:ee:00:b5:ce:d5:23:4f:b5: 65:01:5f:29:d7:16:04:64:1a:98:1c:cf:9f:63:00:ad:3a:40: 36:e0:0e:00:11:3b:5c:46:e2:f7:10:17:b7:f2:77:a8:18:77: 0c:d5:ad:37:b6:b4:e6:63:e2:57:ed:88:50:53:74:f8:b2:f6: f5:fa:21:94:11:c4:f2:f2:96:d8:7e:96:a8:e7:e1:09:01:37: 66:a2:fd:57:d7:56:ec:8c:5d:39:33:3b:03:87:4d:9b:03:7a: f7:83:9c:15:ab:dc:bd:51:a0:b5:64:23:ad:1f:01:cb:ea:25: 13:be:a9:9a:96:0a:67:e4:2d:55:49:b1:14:59:22:e5:70:d2: 6f:3c:fd:5e:ad:67:8d:36:bb:52:fa:02:43:5e:52:08:dc:d7: 94:a9:66:f0:83:00:0c:3d:ed:f0:79:17:06:5d:8d:7c:9a:4e: 2f:ec:ef:4e:67:3f:f1:cf:88:f8:ae:8c:d5:0a:5f:b0:ed:c9: be:70:3d:c9:a0:9e:1e:05:42:48:a4:a8:29:b0:05:fb:8e:2c: d1:87:94:dd:ec:0f:f4:10:e2:81:fb:d7:27:f7:5e:0f:b7:7e: f3:5b:60:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5Xl0YllDpYT72AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk NDFiNWVmZGMtZWVmYS00MzkzLWFhMzUtZDIxM2I0ZjgxZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspk3J7o6c4JPaV+0Lh/wE0Vy/07wbdIQjLCF vDwM5EXpXMm2I1xicmd7OA+LqXGvWqK8rkM9olk6QB/msPqmzlpIZrSbSFSkYJJi nuQWiwvwxJaxP0C/J20KWPGGiG/YIRMlcPYDcwDJ2KKXzyb4NuHWfrxQE4pVBQAk jSfdgSz+oHT4dSC6UjYYb/Ux9n46yhqPPb1/q4VYIvEy9hGZleo3Ha3VpMhlsM6W XCACBOvX3Z2deVJ7H5xLdsJniilxcJkaF9BRAcGzEwSu4+xb7rllzurCQsXVtxni b9QlmYfhhoyCUpNitSJZzzW0OtFm/D+56zHKO3FQ8f4mgBTn7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHIZk1XMsG7Vuu6WBOT0LnHUKnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvOWU0NjhjMDItOTEyZS0z MjdmLWEwNjAtOTUxNzdiZWZiNmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5mIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJol5C28uXybkwbmhaGotTYtJtaGDkoBw6gy20zuALXO1SNPtWUBXynX FgRkGpgcz59jAK06QDbgDgARO1xG4vcQF7fyd6gYdwzVrTe2tOZj4lftiFBTdPiy 9vX6IZQRxPLylth+lqjn4QkBN2ai/VfXVuyMXTkzOwOHTZsDeveDnBWr3L1RoLVk I60fAcvqJRO+qZqWCmfkLVVJsRRZIuVw0m88/V6tZ402u1L6AkNeUgjc15SpZvCD AAw97fB5FwZdjXyaTi/s705nP/HPiPiujNUKX7Dtyb5wPcmgnh4FQkikqCmwBfuO LNGHlN3sD/QQ4oH71yf3Xg+3fvNbYAo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:58:09 2025 by rpki-client