$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa File: cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa (raw, json) Hash identifier: DZdZpJv2DPyfkZNAu9FgfuligI4SZ6MQB0i3LMyavio= Subject key identifier: AB:68:AB:71:A0:25:B4:C8:48:E4:3E:88:CE:BD:BA:C5:B7:A1:D4:25 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584AD23BABB027598FA1BF3B9980 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 19437 IP address blocks: 131.153.200.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ab:b0:27:59:8f:a1:bf:3b:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=39c692f4-032c-403c-9cec-c2d6758806a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:66:9f:e9:c7:49:80:e8:ae:57:74:68:55:ce: f0:a2:39:b1:10:9d:30:7d:71:bc:7d:46:a9:48:e2: d9:b1:69:9a:a6:16:24:38:6c:e9:61:60:67:d4:4e: 27:7e:c3:2a:e2:8f:04:f1:4d:9f:06:b2:b5:25:ef: 4b:42:07:e9:f6:bb:c8:98:60:8a:0f:af:45:b0:18: 0a:b8:a5:22:eb:a2:45:b5:2b:0e:92:9a:71:bc:47: 0f:49:8c:24:bf:26:86:de:76:be:66:bb:5c:b0:87: 23:ef:d2:34:f1:99:2a:11:d1:fa:bb:6b:20:f9:85: 29:d7:b4:80:be:83:a9:c7:c9:35:41:e2:7d:d6:31: e7:a7:cc:e1:c6:f2:8d:b7:d1:0c:da:6b:aa:30:9f: 5c:1e:8f:4d:f8:3f:68:93:ae:c1:63:b9:a3:ae:0a: 46:e6:ca:12:17:a7:fe:26:0c:79:b6:ca:b6:42:41: 7d:1a:fd:3f:47:94:20:cb:ce:c9:79:cd:94:02:60: 14:51:08:02:f6:cf:93:ad:17:31:3d:9a:7a:00:41: 63:3a:65:8e:62:dc:c4:87:97:db:58:1d:e4:d8:3c: bd:95:aa:95:18:57:9d:7e:31:67:58:e2:17:a4:19: 5e:3c:6c:28:21:85:b2:51:28:1a:56:b5:b4:30:88: 70:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:68:AB:71:A0:25:B4:C8:48:E4:3E:88:CE:BD:BA:C5:B7:A1:D4:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a5:91:ab:6b:ed:9d:b8:45:89:7d:fe:9b:a4:5f:85:dd:d0: de:fe:9a:9f:d5:3c:39:70:78:17:08:cd:f0:f2:bc:a9:46:3c: 2f:63:f9:d0:f3:03:10:ae:47:df:56:b7:9b:4b:41:28:31:b2: c2:64:24:b6:c7:32:b7:a5:e4:65:16:81:1f:90:63:b9:ef:2b: 8b:3f:3c:35:65:0a:15:3e:41:74:ab:d0:a0:56:d9:66:c0:c1: 16:2d:78:5e:1f:86:03:3c:fe:68:ba:f7:1b:1f:64:56:ed:60: a1:b5:d3:c4:dd:0c:4d:70:15:d2:ef:c5:d8:94:00:6a:6e:58: 1b:ab:09:3a:d7:f9:5f:a7:94:0c:a8:8a:b4:69:d7:ff:bc:d4: c0:77:1b:f1:f9:13:11:e6:ec:7e:55:b3:67:ff:4b:c2:8f:73: 39:46:e1:4e:a2:94:9b:65:de:3f:da:f7:e3:46:7a:6a:d5:8c: ad:3b:b9:d0:b3:5e:3d:04:67:04:8b:88:1e:c6:17:25:c4:47: 39:91:04:b9:48:32:32:07:f0:6e:dd:7a:a6:61:ca:b7:a5:b4: d8:2f:ef:59:34:3d:3e:49:13:7f:1e:19:03:84:16:fe:4c:0d: 33:20:bf:75:b7:9b:6b:ba:0e:9c:66:46:23:d5:a4:3e:9a:04: 14:bf:c5:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO6uwJ1mPob87mYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MzljNjkyZjQtMDMyYy00MDNjLTljZWMtYzJkNjc1ODgwNmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2af6cdJgOiuV3RoVc7wojmxEJ0wfXG8fUap SOLZsWmaphYkOGzpYWBn1E4nfsMq4o8E8U2fBrK1Je9LQgfp9rvImGCKD69FsBgK uKUi66JFtSsOkppxvEcPSYwkvyaG3na+ZrtcsIcj79I08ZkqEdH6u2sg+YUp17SA voOpx8k1QeJ91jHnp8zhxvKNt9EM2muqMJ9cHo9N+D9ok67BY7mjrgpG5soSF6f+ Jgx5tsq2QkF9Gv0/R5Qgy87Jec2UAmAUUQgC9s+TrRcxPZp6AEFjOmWOYtzEh5fb WB3k2Dy9laqVGFedfjFnWOIXpBlePGwoIYWyUSgaVrW0MIhwcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtoq3GgJbTISOQ+iM69usW3odQlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvY2JjMWY1NjctYzE0YS0z OGQxLTkxN2EtZTNmMWYxOTNjNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5nIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGlkatr7Z24RYl9/pukX4Xd0N7+mp/VPDlweBcIzfDyvKlGPC9j+dDz AxCuR99Wt5tLQSgxssJkJLbHMrel5GUWgR+QY7nvK4s/PDVlChU+QXSr0KBW2WbA wRYteF4fhgM8/mi69xsfZFbtYKG108TdDE1wFdLvxdiUAGpuWBurCTrX+V+nlAyo irRp1/+81MB3G/H5ExHm7H5Vs2f/S8KPczlG4U6ilJtl3j/a9+NGemrVjK07udCz Xj0EZwSLiB7GFyXERzmRBLlIMjIH8G7deqZhyreltNgv71k0PT5JE38eGQOEFv5M DTMgv3W3m2u6DpxmRiPVpD6aBBS/xZk= -----END CERTIFICATE-----Generated at Sat Aug 23 13:05:27 2025 by rpki-client