$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/b31675c0-2c36-3160-853a-bfd750bd4d40.roa File: b31675c0-2c36-3160-853a-bfd750bd4d40.roa (raw, json) Hash identifier: satRrERPlA/YwK5jxpNqzTa5MmWh31rFQJfLsXs4+cI= Subject key identifier: 1D:E2:04:AC:51:FB:44:1B:72:E0:31:06:8C:B8:AD:F2:29:77:8A:37 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACE0B970FFBE949FA54FBD5C0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/b31675c0-2c36-3160-853a-bfd750bd4d40.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 20454 IP address blocks: 131.153.38.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:97:0f:fb:e9:49:fa:54:fb:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=ffd152b3-78d3-4028-84e4-c6a3cd5189f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:71:8d:82:3a:d2:8e:69:41:2b:57:66:0f:0e: 15:5d:bd:1b:4f:62:e7:33:fe:da:95:65:8d:bd:e4: 5a:6c:c7:4b:44:41:6f:a0:17:6f:9e:9a:e9:64:61: 78:1b:90:71:6a:aa:3c:a4:93:03:9b:8c:e7:c5:9d: df:e2:4c:0c:56:f1:59:fc:d9:c7:f7:f8:d5:a3:8a: 12:84:03:6d:90:d1:27:e5:ed:2b:87:c8:72:53:4d: be:39:2e:3b:d5:9b:7a:66:e2:d0:b7:44:72:c0:54: d7:9d:5c:b4:9d:55:74:40:21:a6:49:81:78:fd:da: 03:11:f2:8c:18:c7:4d:19:eb:93:85:39:58:ba:9e: 08:1a:1f:39:32:8d:95:a6:8f:e4:8b:2b:41:4b:a5: e4:4c:a4:44:26:08:80:5c:f0:86:3a:ad:1f:b4:09: 1e:64:73:4c:1a:14:98:97:8e:00:b2:4d:47:e4:02: 24:c3:fd:31:7c:cf:6b:78:5b:a5:0d:74:a7:9f:6f: 73:b5:4d:fa:37:a9:ea:43:d2:79:39:c6:cf:02:7c: 4b:65:a2:45:8f:75:45:6b:85:01:f5:fa:de:93:10: c5:ec:07:6e:b9:da:e3:3f:2f:fa:7e:5b:4b:be:75: 87:de:aa:f0:dc:d3:8c:e7:26:17:df:4a:66:25:3f: 27:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E2:04:AC:51:FB:44:1B:72:E0:31:06:8C:B8:AD:F2:29:77:8A:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/b31675c0-2c36-3160-853a-bfd750bd4d40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:8d:f6:fc:ee:7e:23:26:15:43:6e:e5:78:0e:e4:7d:bb:61: 55:df:74:bd:08:99:e9:ad:23:d6:f8:61:01:f8:c9:7b:22:46: 88:86:e2:69:c8:1b:1b:00:d7:0c:36:b9:3b:38:67:8b:74:02: ad:80:1d:f6:da:82:e9:8d:21:b1:76:45:ca:b2:20:ad:4c:53: 5d:15:ed:b5:6d:41:a5:1d:1a:8f:dd:3b:bb:e1:db:81:9f:9b: 9c:c7:bc:30:6d:fb:95:ce:c1:0a:cc:31:d6:b9:1e:83:b6:c3: 6a:05:86:30:c6:06:6a:4f:d1:ee:02:09:d4:22:86:a6:c0:9b: ce:14:57:30:3f:41:ee:44:c1:90:1f:33:d0:31:e5:60:82:10: 07:85:85:ac:73:c2:8a:5e:71:72:c1:72:e2:65:87:c8:03:2a: 06:4d:41:c0:a6:0b:56:41:42:a9:23:36:ac:0a:18:7e:00:c0: c4:f7:19:a8:1f:ce:ea:b5:c3:16:f6:45:4b:a7:e1:c6:ef:88: 35:5e:b8:27:df:30:5c:46:65:93:8e:e5:07:e6:74:e1:68:bf: 6b:94:76:e7:12:c7:e2:1c:1c:4f:38:e6:fd:db:74:74:08:32: d5:2e:d8:80:05:71:a7:7e:bb:60:1c:69:5d:f0:ff:5c:16:03: d9:cb:67:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5cP++lJ+lT71cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk ZmZkMTUyYjMtNzhkMy00MDI4LTg0ZTQtYzZhM2NkNTE4OWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3GNgjrSjmlBK1dmDw4VXb0bT2LnM/7alWWN veRabMdLREFvoBdvnprpZGF4G5Bxaqo8pJMDm4znxZ3f4kwMVvFZ/NnH9/jVo4oS hANtkNEn5e0rh8hyU02+OS471Zt6ZuLQt0RywFTXnVy0nVV0QCGmSYF4/doDEfKM GMdNGeuThTlYup4IGh85Mo2Vpo/kiytBS6XkTKREJgiAXPCGOq0ftAkeZHNMGhSY l44Ask1H5AIkw/0xfM9reFulDXSnn29ztU36N6nqQ9J5OcbPAnxLZaJFj3VFa4UB 9frekxDF7AduudrjPy/6fltLvnWH3qrw3NOM5yYX30pmJT8nEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3iBKxR+0QbcuAxBoy4rfIpd4o3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYjMxNjc1YzAtMmMzNi0z MTYwLTg1M2EtYmZkNzUwYmQ0ZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5kmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESN9vzufiMmFUNu5XgO5H27YVXfdL0ImemtI9b4YQH4yXsiRoiG4mnI GxsA1ww2uTs4Z4t0Aq2AHfbagumNIbF2RcqyIK1MU10V7bVtQaUdGo/dO7vh24Gf m5zHvDBt+5XOwQrMMda5HoO2w2oFhjDGBmpP0e4CCdQihqbAm84UVzA/Qe5EwZAf M9Ax5WCCEAeFhaxzwopecXLBcuJlh8gDKgZNQcCmC1ZBQqkjNqwKGH4AwMT3Gagf zuq1wxb2RUun4cbviDVeuCffMFxGZZOO5QfmdOFov2uUducSx+IcHE845v3bdHQI MtUu2IAFcad+u2AcaV3w/1wWA9nLZ28= -----END CERTIFICATE-----Generated at Sat Aug 23 15:59:48 2025 by rpki-client