$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa File: cc973301-7c68-348a-bd7d-e22b5396a832.roa (raw, json) Hash identifier: HqktP0NUTgndqnJAFGC5I1zJVLYUe8nQLn3ggmIRsAY= Subject key identifier: A8:3C:B2:2E:B9:55:0A:83:0B:21:27:E4:F8:D3:E2:AF:F8:B4:38:6F Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64DE307E8410C808D7580 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 12189 IP address blocks: 131.153.112.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4d:e3:07:e8:41:0c:80:8d:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=d56e9612-373e-4673-923c-4f0e7e283894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7d:c1:5a:30:4b:fc:5c:83:c2:56:d2:97:5a: dd:63:11:d9:10:27:f1:a6:64:50:d1:72:01:54:3a: c0:9c:15:26:f5:4c:28:e2:33:83:8c:17:b0:9c:0f: 62:90:c6:73:54:23:ed:30:14:ec:5c:87:da:23:e0: 98:93:1d:36:3f:c7:13:ee:8e:ec:f0:4c:c7:dc:32: 60:b2:48:ce:6a:0f:f6:b4:7e:98:c9:ec:d7:90:d8: 18:41:00:ad:76:f6:3f:1e:b2:9b:c5:ba:c4:af:73: 08:15:4b:89:02:76:98:86:3d:36:bd:b8:6d:7f:fc: f6:62:66:a4:ab:5b:de:b2:55:df:13:c7:d1:50:02: 88:cc:65:81:08:9f:c0:96:5d:ca:76:b3:00:6e:86: 7d:89:ea:9d:ae:26:c4:24:1f:70:6a:af:af:97:23: d5:e6:b8:33:ad:25:22:ec:4d:4e:df:03:97:cb:b5: aa:28:19:91:28:a0:92:b6:26:f8:aa:6b:cd:dd:7c: 49:10:0c:2c:ea:6a:b7:33:41:da:c1:9f:80:d1:ca: f9:35:e0:4d:e5:ad:08:29:3b:74:e0:e9:1e:c5:27: 0b:e9:ab:30:46:89:65:e2:f1:8b:7a:f0:0f:1a:a9: 87:25:08:a3:dc:6e:94:23:68:a3:9b:d9:1f:d3:23: 06:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3C:B2:2E:B9:55:0A:83:0B:21:27:E4:F8:D3:E2:AF:F8:B4:38:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e7:ab:79:ad:47:f8:1a:40:a8:52:89:43:5d:fe:84:ab:8a: 58:c1:e6:89:48:94:14:81:c8:f1:94:ab:59:bc:1b:c5:85:4b: e9:75:72:38:7d:3f:99:60:be:71:0b:56:8e:4c:ed:a4:99:f9: 82:d9:67:9b:04:93:3f:4e:a7:66:4a:cd:7f:27:df:7f:4c:82: 8d:21:b8:c1:98:6f:f7:e2:8d:30:54:21:77:3e:32:79:4c:de: 4b:b8:30:93:c4:a6:cb:69:47:23:9f:00:0c:0b:11:81:87:5f: 6d:35:d7:d3:98:59:4a:75:ea:b2:18:c7:d9:2a:9f:b4:e0:97: 01:2f:88:14:49:da:9a:ef:40:f3:d2:b7:d4:95:75:09:c0:78: 64:17:ea:14:84:f5:fa:7d:85:b4:f5:bd:dd:21:e9:ae:bf:60: f2:cb:ca:c5:c9:93:e5:a1:d6:0e:20:bb:32:79:52:ec:e8:e7: 0b:30:81:f1:64:3b:f8:8c:37:16:16:77:00:3d:eb:38:8e:f5: 20:07:8e:66:2a:aa:94:65:f8:e2:c6:4e:2b:b4:08:ec:51:7d: c0:bd:06:09:a8:9c:d7:3e:ba:d3:44:d4:7f:19:cb:9d:05:dd: 45:d6:5f:15:99:c8:34:b6:48:35:94:f0:4f:e3:cc:8e:f2:4f: fe:7d:00:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpk3jB+hBDICNdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDU2ZTk2MTItMzczZS00NjczLTkyM2MtNGYwZTdlMjgzODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl33BWjBL/FyDwlbSl1rdYxHZECfxpmRQ0XIB VDrAnBUm9Uwo4jODjBewnA9ikMZzVCPtMBTsXIfaI+CYkx02P8cT7o7s8EzH3DJg skjOag/2tH6YyezXkNgYQQCtdvY/HrKbxbrEr3MIFUuJAnaYhj02vbhtf/z2Ymak q1veslXfE8fRUAKIzGWBCJ/All3KdrMAboZ9ieqdribEJB9waq+vlyPV5rgzrSUi 7E1O3wOXy7WqKBmRKKCStib4qmvN3XxJEAws6mq3M0HawZ+A0cr5NeBN5a0IKTt0 4OkexScL6aswRoll4vGLevAPGqmHJQij3G6UI2ijm9kf0yMGnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKg8si65VQqDCyEn5PjT4q/4tDhvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvY2M5NzMzMDEtN2M2OC0z NDhhLWJkN2QtZTIyYjUzOTZhODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3nq3mtR/gaQKhSiUNd/oSriljB5olIlBSByPGUq1m8G8WFS+l1cjh9 P5lgvnELVo5M7aSZ+YLZZ5sEkz9Op2ZKzX8n339Mgo0huMGYb/fijTBUIXc+MnlM 3ku4MJPEpstpRyOfAAwLEYGHX20119OYWUp16rIYx9kqn7TglwEviBRJ2prvQPPS t9SVdQnAeGQX6hSE9fp9hbT1vd0h6a6/YPLLysXJk+Wh1g4guzJ5Uuzo5wswgfFk O/iMNxYWdwA96ziO9SAHjmYqqpRl+OLGTiu0COxRfcC9BgmonNc+utNE1H8Zy50F 3UXWXxWZyDS2SDWU8E/jzI7yT/59ABk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:48:57 2025 by rpki-client