$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ad1c90b2-c732-3cb5-90af-3fb6422126d7.roa File: ad1c90b2-c732-3cb5-90af-3fb6422126d7.roa (raw, json) Hash identifier: 3Ndm4Kk/J8fEPvxcqcB7E+Eg//lzT7yAGoqnsCGXyxk= Subject key identifier: 6E:19:5E:0E:BB:EC:08:74:9B:88:55:01:38:20:CA:AB:2B:6D:91:26 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64F53A4B008D79F7AB880 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ad1c90b2-c732-3cb5-90af-3fb6422126d7.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 20454 IP address blocks: 131.153.43.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4f:53:a4:b0:08:d7:9f:7a:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=3127ceaf-9a9b-44b8-bc38-eecf35c6f8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b3:29:31:35:d5:d1:f6:4e:37:77:2e:78:94: 40:38:2c:1e:41:ec:97:e6:cc:e4:07:d9:28:fa:51: 7a:d3:c3:ff:3d:81:5b:04:12:b7:b0:ab:62:8d:37: 2d:9b:d0:f9:d9:e9:bd:69:9a:06:fc:e9:19:53:e5: ed:37:e9:6d:c4:63:05:5a:9c:2b:c2:32:80:1d:75: fb:3d:ee:c3:3c:b2:76:6d:cd:2b:63:01:14:dc:c8: 38:c3:d4:6c:c6:1a:d3:c1:f9:42:64:8b:34:67:82: 99:e0:d4:73:bb:04:c0:a9:dc:bd:fa:cb:e9:b2:2d: 58:7e:47:ea:a1:a3:a7:14:ee:e6:50:59:ef:fc:3e: d4:e3:4a:e9:78:70:9a:7c:0e:ae:51:34:97:17:48: d8:7f:da:f8:e3:8c:c9:f1:31:f6:0e:cf:07:99:3c: 90:dc:34:8c:fb:ae:66:5b:79:77:06:d5:f5:91:33: 06:a9:3a:ba:70:05:5f:75:c1:2c:12:9b:41:0b:58: 9c:19:ed:b5:0c:d2:fa:bc:de:11:f9:88:e6:5d:d7: 84:2f:91:32:f4:e9:36:e4:72:66:c7:bc:db:ee:2b: a1:73:a3:6f:82:da:aa:af:f6:32:7c:ee:ed:f4:c2: bf:1b:04:15:2f:8f:30:79:ff:34:4d:33:bb:d6:b9: 42:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:19:5E:0E:BB:EC:08:74:9B:88:55:01:38:20:CA:AB:2B:6D:91:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ad1c90b2-c732-3cb5-90af-3fb6422126d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a1:a4:4c:93:23:96:98:b5:80:ab:e0:82:17:d8:31:ac:0c: 81:8c:22:55:c0:0a:56:a5:fc:9a:75:57:bb:f1:fd:29:b6:80: 9e:65:d7:51:ea:4f:52:1c:5f:d4:8a:4f:64:a6:3e:a4:8d:d6: 2b:7a:f7:01:d8:88:62:36:4e:87:5c:7a:bf:ee:10:db:b7:b5: 0c:b1:d2:7e:16:c9:b1:dc:a8:82:ca:a4:bd:61:10:9a:0f:3b: 52:44:97:50:f9:e1:64:b3:eb:47:eb:c3:14:a0:7d:9a:da:2c: 16:47:95:d3:ed:48:ba:62:0d:cc:d9:5e:61:c0:14:dc:b7:5b: a3:39:39:75:9d:e3:e0:d2:f4:9a:00:27:d3:47:cc:05:17:9b: 9e:33:56:76:a5:96:ea:0f:2a:e3:54:7e:30:1a:b9:d9:0a:84: 25:1c:99:41:66:5c:98:de:16:33:9e:45:06:43:23:de:fa:0a: 0d:ad:b6:28:38:e0:bc:2f:d9:3d:70:e5:dd:53:69:72:ac:49: 2c:bd:27:29:4f:b7:41:23:f5:17:0e:73:48:e1:38:f1:db:16: 7a:b4:19:04:e0:89:2d:23:78:94:1e:d8:d0:b4:c6:e7:28:83: cd:85:05:94:c1:be:c0:f4:38:3e:2b:3c:1f:f6:7f:1a:bf:85: 66:f8:a1:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpk9TpLAI1596uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MzEyN2NlYWYtOWE5Yi00NGI4LWJjMzgtZWVjZjM1YzZmOGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07MpMTXV0fZON3cueJRAOCweQeyX5szkB9ko +lF608P/PYFbBBK3sKtijTctm9D52em9aZoG/OkZU+XtN+ltxGMFWpwrwjKAHXX7 Pe7DPLJ2bc0rYwEU3Mg4w9RsxhrTwflCZIs0Z4KZ4NRzuwTAqdy9+svpsi1Yfkfq oaOnFO7mUFnv/D7U40rpeHCafA6uUTSXF0jYf9r444zJ8TH2Ds8HmTyQ3DSM+65m W3l3BtX1kTMGqTq6cAVfdcEsEptBC1icGe21DNL6vN4R+YjmXdeEL5Ey9Ok25HJm x7zb7iuhc6Nvgtqqr/YyfO7t9MK/GwQVL48wef80TTO71rlCrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4ZXg677Ah0m4hVATggyqsrbZEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYWQxYzkwYjItYzczMi0z Y2I1LTkwYWYtM2ZiNjQyMjEyNmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5krMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWhpEyTI5aYtYCr4IIX2DGsDIGMIlXAClal/Jp1V7vx/Sm2gJ5l11Hq T1IcX9SKT2SmPqSN1it69wHYiGI2Todcer/uENu3tQyx0n4WybHcqILKpL1hEJoP O1JEl1D54WSz60frwxSgfZraLBZHldPtSLpiDczZXmHAFNy3W6M5OXWd4+DS9JoA J9NHzAUXm54zVnalluoPKuNUfjAaudkKhCUcmUFmXJjeFjOeRQZDI976Cg2ttig4 4Lwv2T1w5d1TaXKsSSy9JylPt0Ej9RcOc0jhOPHbFnq0GQTgiS0jeJQe2NC0xuco g82FBZTBvsD0OD4rPB/2fxq/hWb4oYI= -----END CERTIFICATE-----Generated at Sat Aug 23 13:10:00 2025 by rpki-client