$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc47fe57-b252-3fe7-a59a-1a298b383d54.roa File: cc47fe57-b252-3fe7-a59a-1a298b383d54.roa (raw, json) Hash identifier: B7bl51/OIcgXsb6yNXh55xhIK1SmnGhXVhM3IW7af5A= Subject key identifier: 14:23:92:D3:A2:1E:93:07:14:8A:04:2D:B5:CC:C5:8B:B1:BA:8B:A9 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64CDC1C070E2A6FB6A800 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc47fe57-b252-3fe7-a59a-1a298b383d54.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 207134 IP address blocks: 131.153.96.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4c:dc:1c:07:0e:2a:6f:b6:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=edd13c64-eb30-453a-a530-b347d0ed7ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:68:38:e1:b6:8c:43:33:3f:cb:11:b2:c2:9c: 72:da:fb:9e:1b:0f:b1:35:2d:e4:cc:ce:55:4a:8b: 89:60:88:e6:a3:24:da:2a:b6:af:3e:8b:a0:55:31: 1e:b9:33:70:9c:ab:ec:8a:0a:27:ba:56:5d:4b:c8: d4:66:9a:99:d4:b9:3e:d7:89:65:c5:ae:16:57:ff: 7b:4b:3a:48:3f:12:03:ca:a3:e8:dd:07:71:76:7c: 28:c7:51:61:23:52:66:b9:06:55:d0:60:78:a1:aa: 95:fd:78:c3:64:22:da:0e:ff:46:f3:2a:c0:4c:49: 00:01:2f:5f:9e:1a:76:bd:0a:5d:78:a8:ee:4f:7e: 34:48:ff:c5:c7:9e:0c:e2:d4:61:b1:3a:be:77:f7: 4c:9c:92:64:a3:f5:f0:ea:5b:30:93:14:00:0f:59: be:83:02:cd:74:9e:46:cd:53:1e:2a:ae:68:ac:53: 03:16:e6:a5:27:c3:49:38:4d:05:26:44:15:52:a0: 1e:55:b4:76:1d:82:bb:5d:1c:f3:f3:ec:bb:57:95: 0e:61:02:89:23:d6:fe:46:8e:5f:b9:df:3e:33:08: ad:66:42:37:ee:bc:d2:51:e1:69:6b:c5:ea:2e:39: c0:8c:bb:bb:9d:73:43:4f:3a:c2:a9:af:43:74:24: be:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:23:92:D3:A2:1E:93:07:14:8A:04:2D:B5:CC:C5:8B:B1:BA:8B:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc47fe57-b252-3fe7-a59a-1a298b383d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:28:88:79:3a:56:db:d5:f0:5f:21:b1:02:86:a4:b1:cb:1f: 65:14:74:a1:6e:94:02:e7:c1:e2:1e:4e:2d:85:60:db:9f:47: 46:ce:1c:67:2a:c0:ab:1e:25:2d:ff:81:65:88:6c:47:3c:69: 27:78:c3:c6:38:12:14:e1:d3:ca:1b:e4:0f:ef:45:f5:3d:16: 77:a5:cd:a9:c8:7e:fe:53:4b:c5:d7:21:ef:56:56:de:b1:c4: d4:5c:65:13:3d:8f:a6:fc:ee:be:64:64:f3:95:f9:98:b0:f0: 3a:d0:a6:1a:ad:fc:99:a5:3e:12:ca:87:9d:19:66:cd:3d:3f: a6:5a:3a:93:68:6a:21:51:9d:a7:a2:0a:f6:76:07:45:27:04: d9:f6:26:08:ae:df:dd:e3:ee:81:1b:56:1e:3f:51:d1:04:65: ac:d2:bf:c5:6d:a5:c5:9a:a1:17:20:34:bc:15:23:64:12:16: 7c:ec:fb:d5:0e:5a:de:ed:28:51:be:78:5a:81:b3:06:c5:24: 2d:59:b3:dd:09:b8:40:92:5c:a4:c9:07:4b:ef:1f:54:d7:94: ee:ca:1b:62:70:0f:c6:27:b4:d1:e5:73:13:f6:f2:31:19:e7: 60:89:94:0a:0c:10:49:ad:42:28:df:98:19:f3:fb:f8:61:c9: e1:59:1f:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpkzcHAcOKm+2qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZWRkMTNjNjQtZWIzMC00NTNhLWE1MzAtYjM0N2QwZWQ3Y2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2g44baMQzM/yxGywpxy2vueGw+xNS3kzM5V SouJYIjmoyTaKravPougVTEeuTNwnKvsigonulZdS8jUZpqZ1Lk+14llxa4WV/97 SzpIPxIDyqPo3Qdxdnwox1FhI1JmuQZV0GB4oaqV/XjDZCLaDv9G8yrATEkAAS9f nhp2vQpdeKjuT340SP/Fx54M4tRhsTq+d/dMnJJko/Xw6lswkxQAD1m+gwLNdJ5G zVMeKq5orFMDFualJ8NJOE0FJkQVUqAeVbR2HYK7XRzz8+y7V5UOYQKJI9b+Ro5f ud8+MwitZkI37rzSUeFpa8XqLjnAjLu7nXNDTzrCqa9DdCS+dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQjktOiHpMHFIoELbXMxYuxuoupMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvY2M0N2ZlNTctYjI1Mi0z ZmU3LWE1OWEtMWEyOThiMzgzZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5lgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAoiHk6VtvV8F8hsQKGpLHLH2UUdKFulALnweIeTi2FYNufR0bOHGcq wKseJS3/gWWIbEc8aSd4w8Y4EhTh08ob5A/vRfU9FnelzanIfv5TS8XXIe9WVt6x xNRcZRM9j6b87r5kZPOV+Ziw8DrQphqt/JmlPhLKh50ZZs09P6ZaOpNoaiFRnaei CvZ2B0UnBNn2Jgiu393j7oEbVh4/UdEEZazSv8VtpcWaoRcgNLwVI2QSFnzs+9UO Wt7tKFG+eFqBswbFJC1Zs90JuECSXKTJB0vvH1TXlO7KG2JwD8YntNHlcxP28jEZ 52CJlAoMEEmtQijfmBnz+/hhyeFZHxs= -----END CERTIFICATE-----Generated at Sat Aug 23 15:03:52 2025 by rpki-client