$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e1dce588-9e68-346f-b534-f20542057fe9.roa File: e1dce588-9e68-346f-b534-f20542057fe9.roa (raw, json) Hash identifier: Jj0x1ifDMd6ZVt3v2lbG7q66QpuYx9C97FHRPYR659c= Subject key identifier: 69:B3:64:C4:EF:A1:8A:E3:AB:29:67:8E:57:1D:52:67:F0:D2:E9:29 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584AD23BAD05AE48220CD0105080 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e1dce588-9e68-346f-b534-f20542057fe9.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 12189 IP address blocks: 131.153.36.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ad:05:ae:48:22:0c:d0:10:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=493518dd-558f-4270-bf3b-31956a174372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8d:37:f6:95:e8:d8:e7:8c:2d:cc:b2:32:3a: 2a:77:32:ee:1c:f8:a1:70:3a:ac:c4:32:4f:2c:44: 2d:4c:35:54:63:9e:a8:cd:56:93:28:0a:f7:eb:3a: af:5a:68:bd:5b:f0:d8:dc:80:b0:06:66:d0:cd:5b: 2b:8d:c0:a6:27:9b:01:db:76:fc:c5:95:d0:38:b3: 68:13:3a:7f:4b:72:07:a1:15:70:80:39:4e:38:f1: 6f:f4:bf:59:b5:f2:74:4d:c6:86:f5:91:f3:8c:18: d7:9c:36:a9:4a:20:f3:45:2a:e4:db:02:76:66:dc: 87:12:4b:82:c4:16:20:e7:19:7b:dc:af:a4:dc:67: a4:59:e3:44:cb:1a:c8:86:7e:be:bd:cd:c0:80:34: 69:78:d9:2d:ac:06:77:ef:ea:56:2d:cb:ea:84:a7: 4e:5e:e8:6f:ee:da:67:1b:34:c7:72:87:86:ba:7c: 28:8e:03:51:c8:f1:10:ff:64:f9:3e:94:af:4a:35: d5:03:dd:53:90:55:42:7c:51:21:84:5c:64:d1:f8: ac:da:6f:3e:7c:fb:e6:c0:7f:6b:e1:21:33:4f:b1: b2:b7:a6:7d:ce:d2:4d:10:5f:aa:e4:94:f1:60:4d: 11:36:97:68:4a:74:dd:79:37:19:c3:07:d3:61:92: 19:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B3:64:C4:EF:A1:8A:E3:AB:29:67:8E:57:1D:52:67:F0:D2:E9:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e1dce588-9e68-346f-b534-f20542057fe9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:cf:3a:2d:6a:61:49:41:97:9c:ba:f4:41:97:a3:c4:7f:15: 36:08:7f:7f:50:01:3f:13:ac:31:31:93:70:95:2c:9d:2b:26: 35:06:70:b1:2c:ec:fc:5a:f1:a1:d5:2f:b4:0c:ae:50:48:4b: 4f:28:03:b1:e5:5e:7b:ea:4e:b5:0a:d0:7a:a9:c5:3a:c8:71: 39:86:73:3a:32:54:b6:70:d8:bd:52:55:14:17:9d:7b:84:3e: 74:b5:21:ae:8e:ec:da:c3:53:1e:e3:3b:30:03:50:f9:bb:14: 7b:98:61:9a:19:47:f4:26:4d:27:f1:8e:42:f9:2d:7d:54:ca: 75:43:24:c0:e4:c7:e0:ea:20:42:f2:d8:f1:b6:46:71:0c:15: 56:5a:a6:14:21:c1:bf:d4:ac:d0:d0:dd:fa:6d:92:33:79:54: d7:45:4a:17:47:11:df:da:1e:e3:ac:a1:eb:cf:74:29:b1:87: f8:7a:08:e0:5f:5d:62:eb:58:70:89:4b:a2:b0:7f:9a:f6:c7: 49:63:78:ed:66:56:ea:bd:36:f7:c3:6c:14:59:ad:d4:86:61: 71:c2:d1:70:f9:9d:42:8c:4c:09:a7:1e:32:e7:a7:9b:da:e4: c5:1e:0f:06:37:ca:cd:92:23:0a:aa:ab:5b:12:38:03:8f:2c: af:81:51:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO60FrkgiDNAQUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NDkzNTE4ZGQtNTU4Zi00MjcwLWJmM2ItMzE5NTZhMTc0MzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxY039pXo2OeMLcyyMjoqdzLuHPihcDqsxDJP LEQtTDVUY56ozVaTKAr36zqvWmi9W/DY3ICwBmbQzVsrjcCmJ5sB23b8xZXQOLNo Ezp/S3IHoRVwgDlOOPFv9L9ZtfJ0TcaG9ZHzjBjXnDapSiDzRSrk2wJ2ZtyHEkuC xBYg5xl73K+k3GekWeNEyxrIhn6+vc3AgDRpeNktrAZ37+pWLcvqhKdOXuhv7tpn GzTHcoeGunwojgNRyPEQ/2T5PpSvSjXVA91TkFVCfFEhhFxk0fis2m8+fPvmwH9r 4SEzT7Gyt6Z9ztJNEF+q5JTxYE0RNpdoSnTdeTcZwwfTYZIZEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmzZMTvoYrjqylnjlcdUmfw0ukpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZTFkY2U1ODgtOWU2OC0z NDZmLWI1MzQtZjIwNTQyMDU3ZmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5kkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXPOi1qYUlBl5y69EGXo8R/FTYIf39QAT8TrDExk3CVLJ0rJjUGcLEs 7Pxa8aHVL7QMrlBIS08oA7HlXnvqTrUK0HqpxTrIcTmGczoyVLZw2L1SVRQXnXuE PnS1Ia6O7NrDUx7jOzADUPm7FHuYYZoZR/QmTSfxjkL5LX1UynVDJMDkx+DqIELy 2PG2RnEMFVZaphQhwb/UrNDQ3fptkjN5VNdFShdHEd/aHuOsoevPdCmxh/h6COBf XWLrWHCJS6Kwf5r2x0ljeO1mVuq9NvfDbBRZrdSGYXHC0XD5nUKMTAmnHjLnp5va 5MUeDwY3ys2SIwqqq1sSOAOPLK+BUQY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:52 2025 by rpki-client