$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bf4148af-8cd4-36de-bd6e-b123d9726863.roa File: bf4148af-8cd4-36de-bd6e-b123d9726863.roa (raw, json) Hash identifier: Xq0vTR2ZEVc90oSnBls2+m+pl4i/SXm2GaM6u41kYIk= Subject key identifier: 14:51:FF:84:50:A3:A9:A7:84:69:55:91:27:7F:53:CA:0F:A4:6B:19 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584A4C3B182137D9C370BA4E7B40 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bf4148af-8cd4-36de-bd6e-b123d9726863.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 19437 IP address blocks: 131.153.232.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:18:21:37:d9:c3:70:ba:4e:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=e5c5f612-5585-41f0-9e11-52a7d8e5c6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:72:02:42:1c:da:64:17:9a:c4:3d:da:7e:14: 53:56:f8:53:f3:bd:63:32:20:75:47:08:ff:d8:14: 17:f4:79:de:d5:12:2d:c9:f5:7a:6e:2e:55:c9:65: ae:01:d5:c6:3b:b9:f4:2e:ef:ed:e1:1a:84:f7:29: 3e:63:ab:06:b5:76:92:68:c7:9f:aa:b0:30:b2:da: be:95:b4:49:3d:82:e1:f2:f0:dd:d9:49:2f:1a:f0: ee:28:bb:70:ac:6f:9e:3e:8b:d5:c6:9e:66:32:88: d5:a2:61:f7:09:df:e9:c3:e3:09:3c:6d:02:ed:89: 65:fe:cf:05:11:7d:ee:13:46:cb:89:ba:57:57:eb: aa:c4:68:5b:06:6f:be:bd:44:b0:4e:41:5b:5e:73: 77:09:6c:8c:68:b2:4e:46:a5:fb:79:a5:ee:b5:61: 1e:47:7d:97:31:66:4b:0f:8e:cb:cf:bb:54:ef:51: 60:44:57:cd:e6:f8:ac:f8:c4:49:e7:d8:b2:54:9d: 1e:85:6c:8e:53:27:d1:be:71:1d:e7:e2:7f:e8:92: 1d:f2:e0:84:4a:12:94:13:27:1d:86:96:f5:70:04: 8a:b2:39:25:00:d6:64:eb:9f:d3:66:6c:b6:3a:fb: a4:06:f3:23:2f:c8:3e:65:48:7e:55:77:9c:bb:72: b4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:51:FF:84:50:A3:A9:A7:84:69:55:91:27:7F:53:CA:0F:A4:6B:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/bf4148af-8cd4-36de-bd6e-b123d9726863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:af:c3:33:b7:1c:4e:0e:14:c8:ac:b8:5b:78:d2:1b:90:9a: 30:f0:1c:2c:bf:bf:75:85:7a:b6:8d:47:c1:d8:58:86:a8:36: e6:06:ae:f9:0e:d8:bc:e7:2d:88:12:09:39:02:11:e8:e5:e0: 37:10:a6:9c:76:ce:24:a4:74:39:17:14:c9:2a:ee:2c:c5:72: 5e:59:63:5b:c8:d4:97:65:b0:56:5a:77:4f:6b:c6:7c:59:b7: 8c:87:04:30:6e:3b:76:fd:36:bc:cc:a4:d1:5e:49:38:00:77: 6e:0a:4d:f6:73:02:6e:62:dc:19:ff:2c:1c:0f:16:7f:7e:c3: a3:18:49:fa:83:be:4d:8b:d2:04:b8:a8:a7:c5:3d:89:52:49: 3f:79:74:15:82:38:ca:3c:44:2b:5a:eb:6d:10:68:63:fc:a0: 90:d9:f6:d6:b6:45:3c:c2:34:b5:ff:ce:ee:c0:09:a2:40:38: 97:92:d5:0a:f6:7d:85:43:2c:08:7c:c0:d4:f2:b1:3c:0b:4d: 3d:55:43:f4:5f:94:3f:97:a2:d1:82:7a:db:fe:8d:58:e7:84: 05:b5:93:a3:1b:a3:5e:8d:81:7d:fc:ad:2c:21:dd:77:c3:82: 46:e4:48:40:ae:56:00:df:ce:ce:f8:8f:b5:2c:c3:b9:55:a0: 18:4b:e9:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxghN9nDcLpOe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk ZTVjNWY2MTItNTU4NS00MWYwLTllMTEtNTJhN2Q4ZTVjNmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXICQhzaZBeaxD3afhRTVvhT871jMiB1Rwj/ 2BQX9Hne1RItyfV6bi5VyWWuAdXGO7n0Lu/t4RqE9yk+Y6sGtXaSaMefqrAwstq+ lbRJPYLh8vDd2UkvGvDuKLtwrG+ePovVxp5mMojVomH3Cd/pw+MJPG0C7Yll/s8F EX3uE0bLibpXV+uqxGhbBm++vUSwTkFbXnN3CWyMaLJORqX7eaXutWEeR32XMWZL D47Lz7tU71FgRFfN5vis+MRJ59iyVJ0ehWyOUyfRvnEd5+J/6JId8uCEShKUEycd hpb1cASKsjklANZk65/TZmy2OvukBvMjL8g+ZUh+VXecu3K0ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRR/4RQo6mnhGlVkSd/U8oPpGsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYmY0MTQ4YWYtOGNkNC0z NmRlLWJkNmUtYjEyM2Q5NzI2ODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5noMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSvwzO3HE4OFMisuFt40huQmjDwHCy/v3WFeraNR8HYWIaoNuYGrvkO 2LznLYgSCTkCEejl4DcQppx2ziSkdDkXFMkq7izFcl5ZY1vI1JdlsFZad09rxnxZ t4yHBDBuO3b9NrzMpNFeSTgAd24KTfZzAm5i3Bn/LBwPFn9+w6MYSfqDvk2L0gS4 qKfFPYlSST95dBWCOMo8RCta620QaGP8oJDZ9ta2RTzCNLX/zu7ACaJAOJeS1Qr2 fYVDLAh8wNTysTwLTT1VQ/RflD+XotGCetv+jVjnhAW1k6Mbo16NgX38rSwh3XfD gkbkSECuVgDfzs74j7Usw7lVoBhL6c4= -----END CERTIFICATE-----Generated at Mon Jun 30 22:55:40 2025 by rpki-client