$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac5492f6-7473-38cf-b089-8eb390c48316.roa File: ac5492f6-7473-38cf-b089-8eb390c48316.roa (raw, json) Hash identifier: 767jUPQZupqL8MEZSMBiI6xVPHRFTnjfIf+0eLe1t9I= Subject key identifier: 9F:0E:E6:AB:76:49:70:9E:C4:12:10:65:1A:D7:0B:23:08:FB:E8:28 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64F66153342A0B9A6E800 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac5492f6-7473-38cf-b089-8eb390c48316.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 19181 IP address blocks: 131.153.58.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4f:66:15:33:42:a0:b9:a6:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=b2f604fb-f17b-45ca-bffa-929e7fc4d263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8b:42:9f:43:7c:99:a5:7f:dc:72:fc:d8:d3: 09:2a:e7:6e:21:40:ff:5e:96:72:82:bd:46:62:4f: 5a:bf:bc:d4:f3:4d:45:bc:ba:94:bf:1a:9e:1b:a3: ad:d8:5d:31:be:fe:40:5b:f3:d9:a8:12:ab:b0:5c: 1d:9d:71:66:5a:3f:81:95:40:47:5a:70:3a:89:0f: 13:dc:f5:03:ee:65:43:98:d4:b6:79:a8:20:c7:98: d8:16:8e:ef:29:cf:db:1b:2f:1c:09:ab:ad:5e:4f: b7:e4:8d:dc:b5:45:f0:34:7e:69:6e:33:f0:a4:78: 0d:53:63:e9:a7:f4:ad:e9:4b:c3:8b:61:c3:34:59: 5d:55:5a:c8:b7:1d:92:13:62:bb:39:51:aa:fb:f6: d3:79:ba:b9:29:26:b1:68:2f:1d:5d:f4:52:59:e1: ff:c1:2f:66:3e:19:38:cd:8b:47:c2:ad:a5:4a:fa: 02:01:55:10:81:c0:c6:4a:ad:7a:1a:a6:73:14:20: 8a:81:68:8f:55:f6:83:2c:a9:2b:16:e7:46:85:c0: cb:25:8a:92:24:72:4e:94:6f:ad:19:62:66:ba:2a: 75:82:75:10:72:d4:fb:2a:08:00:ac:e5:b2:c4:db: 63:72:3d:e5:86:c2:61:c1:8d:d9:bd:cc:4d:21:97: d0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0E:E6:AB:76:49:70:9E:C4:12:10:65:1A:D7:0B:23:08:FB:E8:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac5492f6-7473-38cf-b089-8eb390c48316.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:47:86:69:ce:b8:b2:16:96:df:d9:2e:8a:2a:8d:77:b7:88: 08:85:53:18:9b:41:0d:2f:25:74:3c:38:36:04:5c:d2:29:69: d5:5c:7b:32:c0:10:d9:4b:55:ff:cf:72:9a:c3:ef:8e:13:12: 9c:91:e2:a8:39:77:c0:4b:cc:58:78:c5:00:e6:c5:c3:4d:4e: 3f:99:23:a2:96:cd:ed:df:90:79:e6:20:0f:42:98:5d:9a:ff: 6c:20:0c:ca:80:26:97:a5:02:5d:96:bc:87:7e:1f:cd:b6:f7: db:4b:06:e9:d2:72:54:43:ce:8a:0b:32:4c:23:36:75:10:86: 19:56:a3:81:20:f9:e6:1f:38:c0:cd:e9:54:50:ff:b5:0f:24: 66:6e:e4:72:1c:ec:9e:b2:0e:50:a7:b8:6c:53:8b:70:0a:b4: a0:eb:41:bb:bc:df:e4:2d:81:5c:1e:46:9a:b8:65:89:b8:a5: 51:df:54:05:51:0d:d1:73:df:e3:30:d4:4e:74:53:69:99:e9: 3a:2e:fa:f1:4f:e1:91:4d:ac:91:cc:7d:f6:70:f1:71:87:31: 5b:13:fd:b1:5a:44:9a:6e:ab:28:f6:f2:23:76:07:54:bb:79: 9f:4e:a1:e2:cf:9c:7e:9b:4a:ba:cc:c7:49:38:35:95:a7:eb: 9c:ae:eb:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpk9mFTNCoLmm6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk YjJmNjA0ZmItZjE3Yi00NWNhLWJmZmEtOTI5ZTdmYzRkMjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4tCn0N8maV/3HL82NMJKuduIUD/XpZygr1G Yk9av7zU801FvLqUvxqeG6Ot2F0xvv5AW/PZqBKrsFwdnXFmWj+BlUBHWnA6iQ8T 3PUD7mVDmNS2eaggx5jYFo7vKc/bGy8cCautXk+35I3ctUXwNH5pbjPwpHgNU2Pp p/St6UvDi2HDNFldVVrItx2SE2K7OVGq+/bTebq5KSaxaC8dXfRSWeH/wS9mPhk4 zYtHwq2lSvoCAVUQgcDGSq16GqZzFCCKgWiPVfaDLKkrFudGhcDLJYqSJHJOlG+t GWJmuip1gnUQctT7KggArOWyxNtjcj3lhsJhwY3ZvcxNIZfQtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8O5qt2SXCexBIQZRrXCyMI++goMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYWM1NDkyZjYtNzQ3My0z OGNmLWIwODktOGViMzkwYzQ4MzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5k6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5HhmnOuLIWlt/ZLooqjXe3iAiFUxibQQ0vJXQ8ODYEXNIpadVcezLA ENlLVf/PcprD744TEpyR4qg5d8BLzFh4xQDmxcNNTj+ZI6KWze3fkHnmIA9CmF2a /2wgDMqAJpelAl2WvId+H82299tLBunSclRDzooLMkwjNnUQhhlWo4Eg+eYfOMDN 6VRQ/7UPJGZu5HIc7J6yDlCnuGxTi3AKtKDrQbu83+QtgVweRpq4ZYm4pVHfVAVR DdFz3+Mw1E50U2mZ6Tou+vFP4ZFNrJHMffZw8XGHMVsT/bFaRJpuqyj28iN2B1S7 eZ9OoeLPnH6bSrrMx0k4NZWn65yu67k= -----END CERTIFICATE-----Generated at Sat Aug 23 20:59:53 2025 by rpki-client