$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa File: ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa (raw, json) Hash identifier: fY7qilvM2KX1qhnpvZB035gsu7FJG0Fa+2F5RBbYsOE= Subject key identifier: 17:E1:42:63:A7:9F:24:95:66:D2:3A:62:67:0B:A1:D1:A7:9F:D5:10 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64F9EFC18444CBCC95960 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 20454 IP address blocks: 131.153.68.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4f:9e:fc:18:44:4c:bc:c9:59:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=74b7ac72-1595-4502-81e2-fba7c46e576e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:70:37:75:84:33:6e:9f:e7:df:d6:85:02: 34:3f:a1:dc:97:b0:a8:16:8d:0f:10:9e:81:93:b7: 06:19:13:e7:af:d6:85:ac:32:9a:3a:65:de:a2:c3: 0c:58:a4:89:4d:77:e0:e4:ef:fe:91:47:36:5d:22: f3:67:f5:29:d9:c7:be:f2:18:62:5d:0e:f7:ed:0f: e0:ee:59:ce:c5:9a:ea:9c:4b:9e:35:42:9a:37:4c: c7:48:fe:82:54:70:19:44:c3:f4:64:f4:5a:d9:3a: f3:84:06:70:67:8d:d0:d1:b3:de:98:22:fe:9d:53: 1c:67:75:9e:43:f1:6f:ca:4b:80:4d:b0:c7:b0:19: a6:b5:42:b5:44:31:51:af:10:38:e2:d9:29:d3:c0: 55:89:87:8c:53:25:ae:68:5b:6c:51:3c:e9:dd:ed: 87:07:b2:a4:a6:ee:99:22:23:9f:b5:e3:b5:ac:2e: 3e:05:3f:4b:3c:d0:82:88:19:9a:0a:9c:c4:2e:a4: e9:a4:df:e6:7f:b5:d3:9c:0e:6f:d5:5e:b8:fc:4a: fd:1e:f4:73:bc:6b:f3:99:62:e4:65:63:f5:b9:cb: 73:ca:3a:d1:08:5e:42:7e:1e:f8:b5:10:70:9e:22: 0b:46:e3:ed:85:a4:56:81:aa:25:43:33:88:f3:44: f3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E1:42:63:A7:9F:24:95:66:D2:3A:62:67:0B:A1:D1:A7:9F:D5:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:77:b4:12:32:d8:63:c4:a8:09:a2:d6:e0:c7:38:bb:57:4a: 9e:d2:49:f0:62:61:c2:5f:4b:4c:1f:d8:51:b1:6f:9c:91:20: 22:41:e6:e4:bf:ed:39:71:30:ac:9e:f7:e4:71:8e:a2:05:b5: 4d:26:8c:e9:e2:72:52:e3:ef:af:3f:65:01:44:f6:96:69:27: 9d:d1:95:77:2d:48:a1:ee:27:73:8e:f9:79:ae:2c:b5:f7:e1: 36:9c:8f:3f:79:ed:e4:16:ab:9c:a9:f8:11:70:f5:e3:98:42: c7:b4:05:ff:14:e7:6c:04:a0:6c:64:0d:9e:da:7a:c8:79:3f: 6c:a3:30:2d:da:79:4a:1c:a7:5e:e7:d2:f4:ad:27:fd:47:ae: 0c:fa:03:34:6b:b1:7b:e9:0e:07:61:80:57:1b:7f:47:8f:78: 65:7b:5f:c3:2b:30:93:8a:4d:de:a5:be:ca:a5:d3:79:d3:76: 88:03:76:66:9e:36:04:e2:41:1a:7f:b1:c3:d7:b6:3e:7a:38: cd:63:d2:de:1a:ed:6e:b3:74:63:e2:db:90:d8:5f:8e:c2:93: 82:15:ed:ab:28:17:0e:15:ef:46:6e:6d:e5:5e:4a:f2:14:a5: c6:1a:09:93:5b:eb:12:c7:64:ac:e8:04:fa:96:65:0c:90:0c: de:40:66:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpk+e/BhETLzJWWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk NzRiN2FjNzItMTU5NS00NTAyLTgxZTItZmJhN2M0NmU1NzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl9wN3WEM26f59/WhQI0P6Hcl7CoFo0PEJ6B k7cGGRPnr9aFrDKaOmXeosMMWKSJTXfg5O/+kUc2XSLzZ/Up2ce+8hhiXQ737Q/g 7lnOxZrqnEueNUKaN0zHSP6CVHAZRMP0ZPRa2TrzhAZwZ43Q0bPemCL+nVMcZ3We Q/FvykuATbDHsBmmtUK1RDFRrxA44tkp08BViYeMUyWuaFtsUTzp3e2HB7Kkpu6Z IiOfteO1rC4+BT9LPNCCiBmaCpzELqTppN/mf7XTnA5v1V64/Er9HvRzvGvzmWLk ZWP1uctzyjrRCF5Cfh74tRBwniILRuPthaRWgaolQzOI80Tz2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfhQmOnnySVZtI6YmcLodGnn9UQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYWM3YjRlMWUtMGExMC0z NzIwLThjZDMtMzM1NjM4MWQzNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5lEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC93tBIy2GPEqAmi1uDHOLtXSp7SSfBiYcJfS0wf2FGxb5yRICJB5uS/ 7TlxMKye9+RxjqIFtU0mjOniclLj768/ZQFE9pZpJ53RlXctSKHuJ3OO+XmuLLX3 4Tacjz957eQWq5yp+BFw9eOYQse0Bf8U52wEoGxkDZ7aesh5P2yjMC3aeUocp17n 0vStJ/1Hrgz6AzRrsXvpDgdhgFcbf0ePeGV7X8MrMJOKTd6lvsql03nTdogDdmae NgTiQRp/scPXtj56OM1j0t4a7W6zdGPi25DYX47Ck4IV7asoFw4V70ZubeVeSvIU pcYaCZNb6xLHZKzoBPqWZQyQDN5AZiQ= -----END CERTIFICATE-----Generated at Sat Aug 23 18:05:50 2025 by rpki-client