$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa File: ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa (raw, json) Hash identifier: XmnM2Z5+CL3gdr9ljulyMt9UHeV9cYx8iZJaFsx7TeM= Subject key identifier: 31:18:32:70:BC:92:24:2F:08:89:A8:C2:06:FB:11:25:1B:AC:1F:C9 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584AD23BB0FE1CAEF018C97EFB00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 0 IP address blocks: 131.153.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b0:fe:1c:ae:f0:18:c9:7e:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=e55652f8-fabc-4c6c-b645-7b279a89cd08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:19:5b:89:50:de:f1:fa:c5:6b:9b:21:69:55: 8f:7d:38:f0:f3:43:7d:6b:3b:87:7d:6b:c6:59:41: 4a:36:ea:49:73:af:da:25:ce:13:87:77:56:14:e1: 2f:06:eb:bc:84:23:98:5a:f4:2c:1d:29:e7:46:79: 8d:29:62:90:ea:50:e0:34:6b:01:3d:61:7c:94:89: 07:79:74:a0:87:bb:91:65:0a:ee:be:0e:7d:3f:8e: d8:cf:60:a3:39:63:e5:c8:6c:44:3f:ea:b7:9b:51: 44:0f:3c:85:76:95:38:9a:fd:dd:6b:38:9d:7f:5b: f4:59:c3:77:05:47:fb:73:9f:31:ef:10:8f:7f:01: e5:62:55:e1:f2:9a:0f:67:fb:3a:74:cf:13:48:87: 7c:ea:16:9e:ed:2f:36:3b:b8:ce:fd:a1:02:76:29: 79:73:52:d7:0c:f1:6a:a3:ce:33:72:6c:2d:ca:0c: 0a:2a:7a:ca:c4:06:40:8f:f1:bf:49:40:43:99:1d: 5e:99:a0:ba:e4:64:d1:4f:77:6e:da:9e:8f:63:f2: 08:b8:bf:76:87:4c:e1:43:6f:7b:43:82:5c:93:e2: b2:cc:92:eb:e5:94:d7:80:dd:77:62:66:b4:57:97: b9:f6:4f:e9:3d:75:8a:10:80:72:cf:a6:9a:c2:f1: 5a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:18:32:70:BC:92:24:2F:08:89:A8:C2:06:FB:11:25:1B:AC:1F:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:54:52:b3:36:e0:8e:f6:44:2f:69:38:13:d3:96:0c:da:50: c0:d7:1d:c6:be:da:7d:8b:84:3f:73:33:91:40:87:88:24:98: cf:08:15:7e:cc:97:9e:31:c1:aa:d0:b4:c8:b3:e7:83:36:a6: d2:67:26:64:81:7a:70:c7:c9:d6:56:0b:28:6a:e5:c1:ab:47: 47:00:ca:9f:20:4f:65:1c:7b:3a:95:be:22:a6:d0:b8:8f:13: b1:c4:51:eb:8b:2f:db:60:5b:46:30:79:7d:c4:8f:23:ce:d0: fc:a1:76:38:3c:3b:e7:52:80:c0:d8:56:56:2d:55:97:91:46: 14:3b:fc:b9:a0:90:ef:7e:a4:b3:8c:ce:d4:e6:db:28:08:e0: 42:1e:c4:f2:f0:33:8e:79:0b:31:9e:c1:7f:1e:ba:81:5d:98: fd:3e:62:9e:d6:40:46:c8:fa:30:17:01:3f:d8:9a:5a:d9:bd: b6:df:88:1b:dc:cd:de:49:47:9c:bd:33:84:ce:d8:2d:4f:36: a8:33:6d:d4:e0:e2:66:dd:cc:d3:85:8d:24:be:53:53:58:32: 19:10:2e:8c:a8:03:5d:2f:5d:03:85:ca:08:be:a0:88:11:5f: d4:3b:2f:a4:f5:34:25:0a:5f:19:02:33:e8:6f:99:b7:eb:a7: f4:3f:5e:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7D+HK7wGMl++wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZTU1NjUyZjgtZmFiYy00YzZjLWI2NDUtN2IyNzlhODljZDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRlbiVDe8frFa5shaVWPfTjw80N9azuHfWvG WUFKNupJc6/aJc4Th3dWFOEvBuu8hCOYWvQsHSnnRnmNKWKQ6lDgNGsBPWF8lIkH eXSgh7uRZQruvg59P47Yz2CjOWPlyGxEP+q3m1FEDzyFdpU4mv3dazidf1v0WcN3 BUf7c58x7xCPfwHlYlXh8poPZ/s6dM8TSId86hae7S82O7jO/aECdil5c1LXDPFq o84zcmwtygwKKnrKxAZAj/G/SUBDmR1emaC65GTRT3du2p6PY/IIuL92h0zhQ297 Q4Jck+KyzJLr5ZTXgN13Yma0V5e59k/pPXWKEIByz6aawvFacQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEYMnC8kiQvCImowgb7ESUbrB/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZGRjYWQ0ZDAtNTBmOS0z ZjYzLTk2NjAtN2I1YjkzMWJiYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5nwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFUUrM24I72RC9pOBPTlgzaUMDXHca+2n2LhD9zM5FAh4gkmM8IFX7M l54xwarQtMiz54M2ptJnJmSBenDHydZWCyhq5cGrR0cAyp8gT2UcezqVviKm0LiP E7HEUeuLL9tgW0YweX3EjyPO0Pyhdjg8O+dSgMDYVlYtVZeRRhQ7/LmgkO9+pLOM ztTm2ygI4EIexPLwM455CzGewX8euoFdmP0+Yp7WQEbI+jAXAT/YmlrZvbbfiBvc zd5JR5y9M4TO2C1PNqgzbdTg4mbdzNOFjSS+U1NYMhkQLoyoA10vXQOFygi+oIgR X9Q7L6T1NCUKXxkCM+hvmbfrp/Q/Xkg= -----END CERTIFICATE-----Generated at Sat Aug 23 08:14:47 2025 by rpki-client