$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa File: bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa (raw, json) Hash identifier: 2IqrdJVW0IB0mnLGN/qunH8xnPR4C9cimGR+/dPOsIA= Subject key identifier: 44:65:CB:3F:C8:17:C4:16:FE:C0:E4:4B:50:F8:80:AA:4F:92:FB:8E Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64C98592B5E2D2DC9DD80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 136899 IP address blocks: 131.153.92.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4c:98:59:2b:5e:2d:2d:c9:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=f3afc8db-49a9-460c-9eaa-f5fd9b7d3e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:95:eb:75:66:0b:f2:c6:7f:b6:ef:17:9f: d2:75:21:a5:13:3c:af:42:90:3e:42:5c:ac:0a:c0: 76:fb:2c:8b:be:aa:f9:db:c9:40:ff:0d:6f:03:d6: e1:94:62:49:cd:90:f3:cd:f7:78:07:e6:6a:4d:13: 1f:63:94:1e:d6:31:8a:61:96:06:e3:12:23:ab:c2: ff:21:30:61:4d:c0:01:48:8b:14:43:20:97:22:84: 90:ff:68:40:8a:91:0c:31:65:00:e8:6e:b9:c9:0c: 47:9b:ac:fa:4f:3c:2c:f1:a6:99:12:cf:d4:06:ae: 5b:b6:66:cc:63:80:1d:ac:5a:94:c3:91:b9:7c:90: 60:41:50:26:e6:21:6b:9c:5b:55:8c:c5:b6:ce:33: e4:39:4e:c8:4e:21:b5:da:7e:34:81:d8:a9:17:f6: 69:62:4d:4c:a4:6f:9d:be:cc:bf:6a:38:fd:f3:d3: f8:7c:2c:55:54:0e:74:2e:64:bb:a3:80:1a:1d:4f: a2:cf:6b:70:f5:db:e6:2b:00:f8:30:76:27:06:54: 69:95:ae:e9:9a:7b:2d:dd:cb:34:37:0f:03:3f:e4: 25:ec:db:a3:aa:cf:90:38:8b:af:08:4b:45:7f:ef: 93:09:29:8e:07:3c:ff:38:5b:d1:7d:ee:d1:ee:02: f4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:65:CB:3F:C8:17:C4:16:FE:C0:E4:4B:50:F8:80:AA:4F:92:FB:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bb2bc32d-cc6b-3226-bbeb-caa3e9feba3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:df:e7:87:aa:05:85:3a:69:b0:cb:b0:ca:5b:f2:2f:a4:16: 90:eb:5c:44:a1:7e:e5:75:8c:7a:c5:75:24:68:f2:56:4d:a2: f6:72:fc:a9:b9:07:af:00:de:33:fd:af:e0:6a:f1:36:b7:65: 8f:3b:66:ff:16:67:f9:87:09:e6:6d:8a:7a:69:7f:af:6e:9d: a6:f5:8c:52:55:b2:e6:ac:0f:32:6b:a9:e0:db:96:01:a4:39: 9f:69:3c:e1:41:dd:09:6a:31:74:b0:87:e2:74:67:7b:fe:7d: fa:43:b6:71:15:d1:bd:bc:9d:b4:08:f9:7b:41:9a:f8:37:e3: b3:bf:70:09:90:e7:cd:f3:a4:9d:07:ac:a3:d4:fe:01:21:6f: dc:35:9e:c6:ce:18:c1:fe:0b:88:1c:db:5a:89:09:01:e8:06: 22:d5:5a:27:7b:b4:a3:44:54:8a:cd:b9:d9:a7:4d:e8:6b:2b: ff:ca:20:aa:d6:92:84:cd:c0:3b:b4:82:7f:20:4b:c2:21:88: 67:74:f9:65:c4:52:77:c1:8e:35:d7:18:c6:94:25:2a:74:6e: c4:9f:5e:c3:67:c8:f1:d4:af:21:1c:fa:eb:3a:89:db:1c:96: 54:23:55:d2:62:42:68:f3:c0:40:df:07:b1:2b:b8:8e:7b:b2: 76:31:48:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpkyYWSteLS3J3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZjNhZmM4ZGItNDlhOS00NjBjLTllYWEtZjVmZDliN2QzZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5yV63VmC/LGf7bvF5/SdSGlEzyvQpA+Qlys CsB2+yyLvqr528lA/w1vA9bhlGJJzZDzzfd4B+ZqTRMfY5Qe1jGKYZYG4xIjq8L/ ITBhTcABSIsUQyCXIoSQ/2hAipEMMWUA6G65yQxHm6z6Tzws8aaZEs/UBq5btmbM Y4AdrFqUw5G5fJBgQVAm5iFrnFtVjMW2zjPkOU7ITiG12n40gdipF/ZpYk1MpG+d vsy/ajj989P4fCxVVA50LmS7o4AaHU+iz2tw9dvmKwD4MHYnBlRpla7pmnst3cs0 Nw8DP+Ql7Nujqs+QOIuvCEtFf++TCSmOBzz/OFvRfe7R7gL0WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERlyz/IF8QW/sDkS1D4gKpPkvuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYmIyYmMzMmQtY2M2Yi0z MjI2LWJiZWItY2FhM2U5ZmViYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbf54eqBYU6abDLsMpb8i+kFpDrXEShfuV1jHrFdSRo8lZNovZy/Km5 B68A3jP9r+Bq8Ta3ZY87Zv8WZ/mHCeZtinppf69unab1jFJVsuasDzJrqeDblgGk OZ9pPOFB3QlqMXSwh+J0Z3v+ffpDtnEV0b28nbQI+XtBmvg347O/cAmQ583zpJ0H rKPU/gEhb9w1nsbOGMH+C4gc21qJCQHoBiLVWid7tKNEVIrNudmnTehrK//KIKrW koTNwDu0gn8gS8IhiGd0+WXEUnfBjjXXGMaUJSp0bsSfXsNnyPHUryEc+us6idsc llQjVdJiQmjzwEDfB7EruI57snYxSMc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:59:26 2025 by rpki-client