$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db04736c-f31c-3c7f-873c-818d9665fd54.roa File: db04736c-f31c-3c7f-873c-818d9665fd54.roa (raw, json) Hash identifier: FBV3yOrs2tG/PfrObWGD/123NnKgChHVx+h9S6SHugQ= Subject key identifier: FA:A2:26:9A:D1:73:E7:1C:D9:D7:FA:37:1F:F1:06:42:E2:65:8D:B5 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64F8C03DAC9F6BC2EAF00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db04736c-f31c-3c7f-873c-818d9665fd54.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 11572 IP address blocks: 131.153.66.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4f:8c:03:da:c9:f6:bc:2e:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=c44a6d9e-c001-4753-a379-4c5c31c860fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:42:4a:2c:04:89:35:fe:31:38:21:33:17: 56:b6:b9:d7:e5:e4:58:e6:ad:2b:03:93:0e:19:6f: 4e:dd:e5:a2:44:6b:7a:9d:e4:56:50:91:d9:f0:33: b7:2d:dd:f1:37:99:98:3c:4f:f6:19:64:6b:fd:61: c3:4d:6e:60:91:34:6f:45:0b:7e:e1:92:89:91:6a: c1:84:cd:3a:5d:f1:2b:a8:2d:37:ee:a4:9b:2e:06: 5f:b4:ce:8b:42:7c:9e:63:12:fb:49:82:a0:f9:ce: 7a:19:1f:ae:13:d0:95:ef:d3:7c:57:1c:f6:f7:75: 33:3b:9a:d6:88:d0:ab:61:bf:08:1f:5d:f3:74:41: 76:cb:16:27:4a:fc:3b:d8:e9:1a:de:a2:50:9e:f2: d0:eb:de:06:0f:d7:6b:c3:85:f4:0c:9f:40:05:34: ed:a3:59:6f:9a:2b:62:b0:82:69:0b:47:2e:fb:ce: 5e:0a:fd:c6:af:8c:c6:70:f6:28:31:51:0a:73:1e: d5:42:6a:0c:e7:96:d3:bb:50:de:20:5e:a2:14:09: d8:3a:26:dd:e2:42:3d:0e:af:61:6d:e7:dc:50:e8: 3c:04:7b:4b:cb:61:86:76:8a:52:f1:6c:e3:7e:0a: 16:61:ef:59:02:4d:ea:aa:a5:ba:a5:75:e1:4f:d3: ee:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A2:26:9A:D1:73:E7:1C:D9:D7:FA:37:1F:F1:06:42:E2:65:8D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db04736c-f31c-3c7f-873c-818d9665fd54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:1c:16:a6:1d:19:6f:6c:9f:b5:5e:07:d1:9c:74:94:0b:48: d7:04:95:69:c9:59:92:85:27:77:a6:b4:1f:71:95:37:8e:ab: 53:a9:7c:12:b6:49:18:04:56:e1:02:54:e0:23:ff:46:7d:4e: 48:18:d6:1a:1d:d1:4f:1f:ed:e3:c3:fe:60:b1:54:39:cb:73: 5a:07:87:e2:39:a8:e9:09:f9:67:8e:13:d8:b0:41:bd:74:85: f2:c7:e3:33:92:94:6c:8d:61:ee:4a:26:4d:bf:f3:02:89:1b: 8e:29:b1:11:68:1b:a8:0c:1c:39:9d:82:fb:29:ce:15:ce:9f: ec:97:cd:2b:3d:73:0d:9c:0a:e5:2c:e0:0e:d0:84:d0:3d:3b: 7c:07:2e:df:2d:20:ad:e0:83:46:02:4b:b4:28:9b:d2:99:83: 0a:de:58:6a:dd:b3:6d:d7:4b:9f:20:ad:8c:eb:c5:60:90:ed: ee:7a:60:89:0d:6a:ff:60:72:84:8b:2a:19:59:0d:54:32:16: 58:2b:3c:1a:d9:21:c2:23:c6:cd:7a:ea:c4:c0:d4:91:3a:fd: 38:bf:17:28:40:3d:df:aa:24:29:33:1a:38:0c:16:6f:00:41: 2b:8f:54:68:d6:a4:c8:4a:56:00:11:45:b4:80:8f:71:ed:0a: 69:7d:8d:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpk+MA9rJ9rwurwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk YzQ0YTZkOWUtYzAwMS00NzUzLWEzNzktNGM1YzMxYzg2MGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+BCSiwEiTX+MTghMxdWtrnX5eRY5q0rA5MO GW9O3eWiRGt6neRWUJHZ8DO3Ld3xN5mYPE/2GWRr/WHDTW5gkTRvRQt+4ZKJkWrB hM06XfErqC037qSbLgZftM6LQnyeYxL7SYKg+c56GR+uE9CV79N8Vxz293UzO5rW iNCrYb8IH13zdEF2yxYnSvw72Oka3qJQnvLQ694GD9drw4X0DJ9ABTTto1lvmiti sIJpC0cu+85eCv3Gr4zGcPYoMVEKcx7VQmoM55bTu1DeIF6iFAnYOibd4kI9Dq9h befcUOg8BHtLy2GGdopS8WzjfgoWYe9ZAk3qqqW6pXXhT9Pu4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqiJprRc+cc2df6Nx/xBkLiZY21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZGIwNDczNmMtZjMxYy0z YzdmLTg3M2MtODE4ZDk2NjVmZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5lCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwcFqYdGW9sn7VeB9GcdJQLSNcElWnJWZKFJ3emtB9xlTeOq1OpfBK2 SRgEVuECVOAj/0Z9TkgY1hod0U8f7ePD/mCxVDnLc1oHh+I5qOkJ+WeOE9iwQb10 hfLH4zOSlGyNYe5KJk2/8wKJG44psRFoG6gMHDmdgvspzhXOn+yXzSs9cw2cCuUs 4A7QhNA9O3wHLt8tIK3gg0YCS7Qom9KZgwreWGrds23XS58grYzrxWCQ7e56YIkN av9gcoSLKhlZDVQyFlgrPBrZIcIjxs166sTA1JE6/Ti/FyhAPd+qJCkzGjgMFm8A QSuPVGjWpMhKVgARRbSAj3HtCml9jck= -----END CERTIFICATE-----Generated at Sat Aug 23 12:55:28 2025 by rpki-client