$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ef37b5e7-b2bd-3b07-a4b2-0ff6d7c2f107.roa File: ef37b5e7-b2bd-3b07-a4b2-0ff6d7c2f107.roa (raw, json) Hash identifier: XcuPMHcIiqyIWpTtHPOy9iSmGbsN7xnBL4VssbbpoHc= Subject key identifier: A8:30:34:01:B8:67:DA:72:C6:EC:95:64:90:DD:93:34:44:F2:E2:68 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64DB2C7C4586209A6AD80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ef37b5e7-b2bd-3b07-a4b2-0ff6d7c2f107.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 12189 IP address blocks: 131.153.104.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4d:b2:c7:c4:58:62:09:a6:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=f338c205-7e54-416c-b28a-02a69efdd377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bd:09:63:44:0d:bf:d4:25:7b:63:60:55:91: fd:d8:00:2a:e4:84:a2:a1:bc:3d:07:64:86:30:20: a4:3d:ba:8f:6d:f8:f1:04:22:96:46:ed:16:b6:b0: f8:8d:d4:a2:10:06:d6:c5:02:1b:6e:74:fd:32:b8: ed:81:fe:4f:d2:58:c0:d7:85:07:68:d9:5a:1d:95: 4e:9d:71:37:59:52:38:2b:5a:70:16:54:1b:40:26: 52:95:d7:f9:27:03:6c:ce:3f:59:71:03:8c:77:80: 90:7f:87:60:9b:5e:89:17:b7:7c:01:ae:9c:a1:7e: 22:6c:81:8e:9f:0f:84:d9:bf:7a:4b:b0:aa:72:29: 46:f6:bd:87:7a:50:6b:fb:4d:7c:97:6a:7f:0e:31: 6e:3d:c5:e3:ce:52:d8:4e:1f:54:49:d8:38:3d:73: a2:79:2b:36:00:4d:ab:33:a6:7e:42:3e:3b:de:a1: aa:7b:f5:61:2b:a6:b4:09:fc:c7:d4:58:32:e5:d8: 99:fb:3b:6d:29:00:58:ae:8d:68:d7:66:f1:6d:1f: 9a:82:2e:22:a4:9a:4c:a3:a2:c3:d9:00:3c:40:cb: 2b:00:12:92:36:a0:22:0d:2a:d3:10:ee:2e:ca:76: 27:71:13:ed:93:39:40:30:c3:ec:a2:2f:3e:f0:84: 3d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:30:34:01:B8:67:DA:72:C6:EC:95:64:90:DD:93:34:44:F2:E2:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ef37b5e7-b2bd-3b07-a4b2-0ff6d7c2f107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:10:de:1e:08:1b:a9:2b:cc:0e:46:ae:53:8a:82:a3:94:92: 29:9f:87:c1:4e:88:22:c6:b4:03:cd:03:ba:33:df:4d:5d:67: ea:d6:e7:e0:e8:0f:b2:04:b3:89:38:75:05:3a:61:f1:4f:c3: 0b:ac:23:0e:0c:1b:2f:de:99:36:05:0b:fd:75:c7:aa:95:85: 89:7d:5b:a1:1a:08:73:ca:59:2e:3f:1a:08:30:91:54:95:f8: b8:f9:4c:a1:0c:76:0e:34:9d:5c:77:fa:c1:5f:ec:d8:71:cf: bf:a1:47:ac:57:00:88:ea:d5:7c:99:c2:02:b0:32:60:48:36: 78:90:8e:a0:6a:4b:66:58:13:c8:45:70:1b:65:13:36:74:1a: 0a:3b:f9:be:03:32:69:e6:d0:5a:ab:75:83:91:71:3d:08:ae: 9f:7d:9c:31:af:5d:82:01:35:1e:7e:69:44:11:1f:64:d6:e3: 00:2a:e3:c7:4e:cd:27:82:fd:77:02:3a:d3:1f:2a:9f:b0:fb: d7:59:e0:d5:f1:71:96:97:d5:7d:d4:25:42:4e:6a:f4:1f:16: ca:20:f1:4b:32:2b:57:ac:61:f7:b7:64:44:de:c2:76:fd:07: 8c:7d:ae:44:75:9e:14:bc:7b:bb:6c:b0:54:ac:3b:1f:2c:3a: af:bb:a8:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpk2yx8RYYgmmrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZjMzOGMyMDUtN2U1NC00MTZjLWIyOGEtMDJhNjllZmRkMzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4r0JY0QNv9Qle2NgVZH92AAq5ISiobw9B2SG MCCkPbqPbfjxBCKWRu0WtrD4jdSiEAbWxQIbbnT9Mrjtgf5P0ljA14UHaNlaHZVO nXE3WVI4K1pwFlQbQCZSldf5JwNszj9ZcQOMd4CQf4dgm16JF7d8Aa6coX4ibIGO nw+E2b96S7CqcilG9r2HelBr+018l2p/DjFuPcXjzlLYTh9USdg4PXOieSs2AE2r M6Z+Qj473qGqe/VhK6a0CfzH1Fgy5diZ+zttKQBYro1o12bxbR+agi4ipJpMo6LD 2QA8QMsrABKSNqAiDSrTEO4uynYncRPtkzlAMMPsoi8+8IQ9XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgwNAG4Z9pyxuyVZJDdkzRE8uJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZWYzN2I1ZTctYjJiZC0z YjA3LWE0YjItMGZmNmQ3YzJmMTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5loMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMQ3h4IG6krzA5GrlOKgqOUkimfh8FOiCLGtAPNA7oz301dZ+rW5+Do D7IEs4k4dQU6YfFPwwusIw4MGy/emTYFC/11x6qVhYl9W6EaCHPKWS4/GggwkVSV +Lj5TKEMdg40nVx3+sFf7Nhxz7+hR6xXAIjq1XyZwgKwMmBINniQjqBqS2ZYE8hF cBtlEzZ0Ggo7+b4DMmnm0FqrdYORcT0Irp99nDGvXYIBNR5+aUQRH2TW4wAq48dO zSeC/XcCOtMfKp+w+9dZ4NXxcZaX1X3UJUJOavQfFsog8UsyK1esYfe3ZETewnb9 B4x9rkR1nhS8e7tssFSsOx8sOq+7qAw= -----END CERTIFICATE-----Generated at Sat Aug 23 16:50:14 2025 by rpki-client