$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a6091126-5698-3d7b-9b6e-5ffe37b7fdd1.roa File: a6091126-5698-3d7b-9b6e-5ffe37b7fdd1.roa (raw, json) Hash identifier: ocdK7hs6poGntWCmYx3Gd+0Mu5QKo/YYQv5J5BkPI9E= Subject key identifier: 3B:5A:C6:A0:8B:05:3D:75:05:E6:F8:34:6D:4E:4A:50:23:B1:6A:CE Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACE0B8F2DC51A991C7FEBDC80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a6091126-5698-3d7b-9b6e-5ffe37b7fdd1.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 12189 IP address blocks: 131.153.120.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:8f:2d:c5:1a:99:1c:7f:eb:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=b829db9d-8648-4b83-8b54-18b5586acd3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1e:7a:c9:59:be:df:a0:e2:1c:a2:e8:1b:c6: 1c:f5:8a:19:74:5a:1e:11:04:aa:80:41:da:e7:9f: 22:e4:79:c9:22:a2:11:fa:65:5d:12:f8:27:a7:73: f4:02:43:43:a9:a9:83:84:a5:e2:64:6b:fd:bd:c7: 9b:0d:32:4f:ad:79:c6:5b:bd:3c:eb:2c:42:1b:60: 05:43:04:68:b6:f0:c1:51:86:99:e3:00:a0:0f:4f: c1:1c:3a:94:79:e3:f0:a4:93:b5:80:e8:eb:72:2b: e0:14:8e:a8:ac:68:55:9c:f9:55:e9:14:68:db:da: 91:42:80:40:a3:ae:b0:13:e9:de:8a:9c:6a:bb:1d: f0:ad:8d:ec:1d:05:f8:e8:0e:95:42:27:17:b3:26: 3c:62:1c:cf:f2:9b:4f:bf:32:4e:da:1f:98:cb:b4: be:3d:8a:ca:0b:17:a6:12:6e:9c:7a:17:7d:d4:78: 15:72:b3:89:6e:9f:17:d8:26:15:90:2b:83:33:56: b0:ec:9e:e7:be:64:22:a0:98:72:4c:a2:ac:c7:76: 00:9a:41:49:27:dc:d5:62:cf:a2:b1:46:95:6b:7e: 2c:f2:9e:60:b1:d4:28:a7:1b:af:93:db:a5:43:60: b5:7b:72:8d:be:84:b2:b9:55:15:22:f4:9c:dc:76: 77:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5A:C6:A0:8B:05:3D:75:05:E6:F8:34:6D:4E:4A:50:23:B1:6A:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a6091126-5698-3d7b-9b6e-5ffe37b7fdd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:75:10:5e:f7:17:e9:92:87:3d:b3:2a:bc:d0:4b:b6:f8:aa: 92:df:f2:f8:fc:6f:f3:6c:f6:46:c8:d3:ba:d2:74:00:34:a0: 75:7a:e2:8e:0d:47:49:9c:6c:1d:6a:10:0d:85:31:cd:58:db: 6b:e6:4a:32:ef:ae:86:3f:e8:b5:79:c6:21:f6:57:7a:cd:17: 96:8f:ce:46:f3:7c:53:c2:8f:55:e2:dc:7e:d0:38:0d:c5:f8: 65:c7:e9:92:09:9a:51:f9:f8:3c:7f:c6:3c:65:67:98:bd:3b: 6b:18:f7:96:d6:3f:52:c7:24:d7:ac:54:f8:98:4f:c0:58:45: 15:d6:c2:e8:83:d8:d3:8a:90:42:3d:55:ba:24:5b:c6:b8:66: 0b:c0:a7:c4:b1:c4:97:cf:1e:68:ba:be:58:89:3f:52:2f:9c: db:57:96:26:91:a9:f3:51:3c:23:88:c5:81:9c:1a:66:53:da: 44:cd:7d:91:03:20:c8:16:c8:c5:ea:52:7c:85:f2:40:34:10: 28:54:67:76:44:fc:cb:7c:8d:2e:05:8f:c4:27:50:33:90:33: 09:2b:d1:f5:86:5e:21:70:01:19:ef:85:42:d2:89:6e:0a:87: 73:71:fd:44:52:dd:07:68:c5:77:16:b7:54:f7:bb:c9:9d:fc: a9:de:7c:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC48txRqZHH/r3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk YjgyOWRiOWQtODY0OC00YjgzLThiNTQtMThiNTU4NmFjZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB56yVm+36DiHKLoG8Yc9YoZdFoeEQSqgEHa 558i5HnJIqIR+mVdEvgnp3P0AkNDqamDhKXiZGv9vcebDTJPrXnGW7086yxCG2AF QwRotvDBUYaZ4wCgD0/BHDqUeePwpJO1gOjrcivgFI6orGhVnPlV6RRo29qRQoBA o66wE+neipxqux3wrY3sHQX46A6VQicXsyY8YhzP8ptPvzJO2h+Yy7S+PYrKCxem Em6cehd91HgVcrOJbp8X2CYVkCuDM1aw7J7nvmQioJhyTKKsx3YAmkFJJ9zVYs+i sUaVa34s8p5gsdQopxuvk9ulQ2C1e3KNvoSyuVUVIvSc3HZ3QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtaxqCLBT11Beb4NG1OSlAjsWrOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYTYwOTExMjYtNTY5OC0z ZDdiLTliNmUtNWZmZTM3YjdmZGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5l4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHB1EF73F+mShz2zKrzQS7b4qpLf8vj8b/Ns9kbI07rSdAA0oHV64o4N R0mcbB1qEA2FMc1Y22vmSjLvroY/6LV5xiH2V3rNF5aPzkbzfFPCj1Xi3H7QOA3F +GXH6ZIJmlH5+Dx/xjxlZ5i9O2sY95bWP1LHJNesVPiYT8BYRRXWwuiD2NOKkEI9 VbokW8a4ZgvAp8SxxJfPHmi6vliJP1IvnNtXliaRqfNRPCOIxYGcGmZT2kTNfZED IMgWyMXqUnyF8kA0EChUZ3ZE/Mt8jS4Fj8QnUDOQMwkr0fWGXiFwARnvhULSiW4K h3Nx/URS3QdoxXcWt1T3u8md/KnefLg= -----END CERTIFICATE-----Generated at Sat Aug 23 22:00:07 2025 by rpki-client