$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c5f832f0-28d0-357b-9710-b9890d67dfc5.roa File: c5f832f0-28d0-357b-9710-b9890d67dfc5.roa (raw, json) Hash identifier: iVMIUZH5ukI5W10y2bBakxDtHqFhMKvEbz2waWMywPM= Subject key identifier: CE:2E:C2:CD:BF:83:6C:48:7E:6E:E5:50:1B:AB:93:D3:25:A4:6D:76 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64EEB8DAAF63FF28DDC40 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c5f832f0-28d0-357b-9710-b9890d67dfc5.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 19437 IP address blocks: 131.153.192.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4e:eb:8d:aa:f6:3f:f2:8d:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=bd1a7ee0-aade-415c-85b1-67ecfac9ba13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:91:fd:c5:d3:57:e1:8c:c2:67:77:47:ad:07: 5b:f1:85:c6:95:ba:62:62:c0:65:b8:df:13:7b:ac: eb:87:9f:83:96:34:6c:ca:7a:c4:86:57:78:91:51: ac:48:75:6a:df:71:ed:70:61:5d:9a:f4:aa:8a:a0: a9:ee:d8:8b:ef:a3:6a:5e:c1:d2:63:5b:75:9d:c3: eb:72:18:c6:4b:52:49:11:86:f3:0e:1d:64:b0:12: 65:9d:4f:42:6f:ae:7e:21:24:b9:02:a5:95:c0:06: 76:bf:31:95:a2:53:67:34:33:90:c2:fb:df:d9:bd: 4a:92:7f:e5:7e:c7:f0:90:4c:1e:03:ed:6d:f4:af: 87:98:94:c9:0b:b4:d5:b9:fe:35:dc:db:ed:79:06: a1:42:ba:d8:a1:97:32:25:56:7f:83:83:79:6f:00: 97:c8:a5:be:3b:46:ec:4a:d5:d6:b2:1e:a8:32:40: 4c:48:d8:65:a0:0b:7d:a7:ce:6c:54:89:7a:58:07: e6:2e:0d:39:07:52:d5:9a:66:98:30:36:97:60:50: 88:47:d5:ea:c9:8c:d1:37:f7:de:0b:0b:8b:74:17: 26:70:ec:3d:70:e0:e2:77:96:8a:b4:2e:cc:ca:ec: c3:de:e9:a8:83:20:df:96:29:3a:2a:fe:8b:5a:aa: d9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2E:C2:CD:BF:83:6C:48:7E:6E:E5:50:1B:AB:93:D3:25:A4:6D:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c5f832f0-28d0-357b-9710-b9890d67dfc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d0:eb:21:24:6e:e7:1d:6f:25:bf:08:ba:0f:c7:4e:e8:42: ee:0e:63:2e:0c:db:16:fe:d4:30:a9:98:0e:33:97:83:24:ce: e5:cc:7a:bb:b8:88:a0:94:13:05:61:dc:d7:eb:12:fb:8e:de: ac:c3:ae:bc:6e:d0:c9:3a:1b:f0:aa:15:8b:8a:14:6a:8e:7c: ff:e5:36:17:a4:f0:83:1e:4d:1d:dc:d8:ce:2f:f1:42:14:34: 48:fd:69:3f:1a:dc:45:e0:e7:77:42:41:2e:ff:77:04:ff:9d: 5c:4b:b8:c3:46:bd:85:37:8f:c2:19:88:bc:2a:89:26:8b:dd: a0:36:61:27:b6:ac:ae:f9:7e:bb:78:73:86:53:e9:89:7b:52: 5b:71:5e:fc:e5:3d:83:0a:5a:b4:18:28:2f:b4:a0:4f:c7:1a: ec:e3:d4:36:d0:75:cb:34:7f:00:2a:9b:32:31:90:80:a0:1a: ea:9a:c7:2e:12:87:83:19:77:38:18:77:b6:ef:ab:9d:57:09: 0d:c3:a9:5d:ab:51:48:c8:e2:f3:bf:0a:5f:3a:e7:32:42:b5: 2d:6f:38:2d:6e:5e:d7:79:82:47:9b:83:d2:61:8a:b5:0f:b9: af:f1:ca:ff:a0:48:35:ac:42:e1:e3:d4:6f:7b:b1:54:08:48: c9:4d:d6:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpk7rjar2P/KN3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk YmQxYTdlZTAtYWFkZS00MTVjLTg1YjEtNjdlY2ZhYzliYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZH9xdNX4YzCZ3dHrQdb8YXGlbpiYsBluN8T e6zrh5+DljRsynrEhld4kVGsSHVq33HtcGFdmvSqiqCp7tiL76NqXsHSY1t1ncPr chjGS1JJEYbzDh1ksBJlnU9Cb65+ISS5AqWVwAZ2vzGVolNnNDOQwvvf2b1Kkn/l fsfwkEweA+1t9K+HmJTJC7TVuf413NvteQahQrrYoZcyJVZ/g4N5bwCXyKW+O0bs StXWsh6oMkBMSNhloAt9p85sVIl6WAfmLg05B1LVmmaYMDaXYFCIR9XqyYzRN/fe CwuLdBcmcOw9cODid5aKtC7MyuzD3umogyDflik6Kv6LWqrZwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4uws2/g2xIfm7lUBurk9MlpG12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYzVmODMyZjAtMjhkMC0z NTdiLTk3MTAtYjk4OTBkNjdkZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5nAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnQ6yEkbucdbyW/CLoPx07oQu4OYy4M2xb+1DCpmA4zl4MkzuXMeru4 iKCUEwVh3NfrEvuO3qzDrrxu0Mk6G/CqFYuKFGqOfP/lNhek8IMeTR3c2M4v8UIU NEj9aT8a3EXg53dCQS7/dwT/nVxLuMNGvYU3j8IZiLwqiSaL3aA2YSe2rK75frt4 c4ZT6Yl7UltxXvzlPYMKWrQYKC+0oE/HGuzj1DbQdcs0fwAqmzIxkICgGuqaxy4S h4MZdzgYd7bvq51XCQ3DqV2rUUjI4vO/Cl865zJCtS1vOC1uXtd5gkebg9JhirUP ua/xyv+gSDWsQuHj1G97sVQISMlN1sc= -----END CERTIFICATE-----Generated at Sat Aug 23 16:59:32 2025 by rpki-client