$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d00dfcb1-8997-3cd3-af05-0800d9a48025.roa File: d00dfcb1-8997-3cd3-af05-0800d9a48025.roa (raw, json) Hash identifier: 60Cal6DYL3YNDFlKpA9gckLd1XJ4MfBDKZiKkLgUZFE= Subject key identifier: 3F:EA:00:AE:5F:26:41:8A:A2:96:2A:12:1C:8B:74:B9:17:9F:B0:01 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64B24775780B0182FF700 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d00dfcb1-8997-3cd3-af05-0800d9a48025.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 20454 IP address blocks: 131.153.45.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4b:24:77:57:80:b0:18:2f:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=98ff81fa-3859-446b-a35e-d6a20f61ebea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4f:c5:e7:ea:78:77:82:34:be:b3:58:8f:6f: 67:88:5c:c5:79:71:da:4a:60:af:9a:1c:28:e3:ed: a5:96:d3:38:c7:02:86:2c:cd:d5:f7:01:3b:ac:ad: 43:b5:a6:77:b6:05:b6:95:47:69:d2:36:a5:60:0e: 13:78:51:81:e9:23:41:19:38:d2:e2:40:3c:b5:de: d6:53:e9:b1:2f:c2:61:94:c5:43:0a:2b:9a:81:da: 61:a7:bb:f0:29:a6:43:a2:fc:27:fd:32:cd:e1:a8: ce:f2:2c:fa:eb:4a:40:79:7c:69:4f:d9:55:1f:27: 65:c5:4b:db:d6:6c:6c:02:59:ac:2d:a6:3b:ff:37: a6:19:59:08:70:be:82:f7:3c:15:f5:b7:47:1e:5b: 7c:71:b3:58:75:90:92:9a:f3:df:61:2c:d0:14:26: 49:8b:95:57:ad:47:8a:4a:d8:9f:cd:70:14:56:43: 3a:d0:c5:e9:cd:40:f6:1b:be:5a:4e:cf:7f:ce:10: d0:10:48:dc:49:20:2c:7f:91:f1:c1:5b:a0:aa:2e: 31:ab:e6:7a:f0:6d:0a:26:fe:4f:fe:53:b4:54:31: 84:d2:3f:e4:f9:02:58:6c:56:1a:d9:18:f8:70:c2: e9:dc:04:87:38:16:97:b7:3d:f9:fd:c0:4f:56:24: a5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EA:00:AE:5F:26:41:8A:A2:96:2A:12:1C:8B:74:B9:17:9F:B0:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d00dfcb1-8997-3cd3-af05-0800d9a48025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:12:d5:4e:8e:58:bc:b8:ce:67:c4:29:ed:e4:18:81:0a:04: 48:ea:81:19:8f:3f:37:89:e2:16:63:85:4b:76:86:d8:d5:a5: 17:cd:fe:45:d9:9f:ce:36:5f:74:cf:17:e3:d8:1f:50:71:2d: 0e:89:99:cd:9a:45:d8:bd:74:bf:e3:8f:af:64:79:c9:2e:83: 7f:cf:85:0c:70:2b:25:05:f6:5f:07:65:a8:19:4b:4f:d0:6f: d9:2c:5d:fd:e1:7c:a7:18:ec:9b:e7:41:ae:96:25:30:73:5d: 4d:23:b5:3a:d6:9f:94:fa:81:77:44:da:c9:be:cd:48:3f:3d: a0:25:c3:3b:16:f4:31:0c:a7:cb:4b:49:7f:48:50:89:2b:a9: a2:d4:c8:43:bb:26:7e:d8:5a:55:d5:69:ce:bc:ec:da:81:33: 16:05:3b:3f:40:69:6c:fe:e3:82:7c:e4:d8:e8:70:1c:41:b8: 80:4c:cd:58:68:8a:13:fe:d8:1f:85:97:e1:c3:4b:9b:fc:88: df:e7:48:01:3b:88:94:76:54:51:10:78:25:07:8e:60:58:00: 35:45:07:f1:e3:d4:1c:39:89:69:0a:1a:b0:a5:67:13:41:ac: 76:f8:79:cd:b2:5b:a3:e0:5b:65:18:8c:f8:a2:e4:d5:9f:1f: 64:f9:42:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpkskd1eAsBgv9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk OThmZjgxZmEtMzg1OS00NDZiLWEzNWUtZDZhMjBmNjFlYmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k/F5+p4d4I0vrNYj29niFzFeXHaSmCvmhwo 4+2lltM4xwKGLM3V9wE7rK1DtaZ3tgW2lUdp0jalYA4TeFGB6SNBGTjS4kA8td7W U+mxL8JhlMVDCiuagdphp7vwKaZDovwn/TLN4ajO8iz660pAeXxpT9lVHydlxUvb 1mxsAlmsLaY7/zemGVkIcL6C9zwV9bdHHlt8cbNYdZCSmvPfYSzQFCZJi5VXrUeK StifzXAUVkM60MXpzUD2G75aTs9/zhDQEEjcSSAsf5HxwVugqi4xq+Z68G0KJv5P /lO0VDGE0j/k+QJYbFYa2Rj4cMLp3ASHOBaXtz35/cBPViSlEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/qAK5fJkGKopYqEhyLdLkXn7ABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDAwZGZjYjEtODk5Ny0z Y2QzLWFmMDUtMDgwMGQ5YTQ4MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5ktMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgS1U6OWLy4zmfEKe3kGIEKBEjqgRmPPzeJ4hZjhUt2htjVpRfN/kXZ n842X3TPF+PYH1BxLQ6Jmc2aRdi9dL/jj69keckug3/PhQxwKyUF9l8HZagZS0/Q b9ksXf3hfKcY7JvnQa6WJTBzXU0jtTrWn5T6gXdE2sm+zUg/PaAlwzsW9DEMp8tL SX9IUIkrqaLUyEO7Jn7YWlXVac687NqBMxYFOz9AaWz+44J85NjocBxBuIBMzVho ihP+2B+Fl+HDS5v8iN/nSAE7iJR2VFEQeCUHjmBYADVFB/Hj1Bw5iWkKGrClZxNB rHb4ec2yW6PgW2UYjPii5NWfH2T5Qt0= -----END CERTIFICATE-----Generated at Sat Aug 23 16:56:19 2025 by rpki-client