$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f11d2764-529a-3bd8-9f5c-74ccfbd98117.roa File: f11d2764-529a-3bd8-9f5c-74ccfbd98117.roa (raw, json) Hash identifier: Lcs6QCPXx3iVWwkMaiK7tnnxythFt2zdCYUybhYG5Sw= Subject key identifier: 95:CA:47:A1:38:FC:F9:EA:3A:D0:0D:28:9B:FD:8D:2B:18:DD:D4:6F Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA64D71BC5E2FBB29824080 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f11d2764-529a-3bd8-9f5c-74ccfbd98117.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 397378 IP address blocks: 131.153.121.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:4d:71:bc:5e:2f:bb:29:82:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=b0fd02c0-158e-4d0f-a74f-126618f2e017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d0:9c:72:95:57:66:b0:6c:6b:27:d4:f9:b2: 87:0e:60:cd:17:ae:f1:09:22:4b:ca:17:ef:12:95: b9:b9:14:22:fe:ef:a4:5b:48:e8:b2:14:88:4b:25: 08:a3:fe:49:25:95:f8:f7:bf:ae:d7:17:5a:4d:95: e8:0c:1d:5a:c8:a5:33:a5:68:47:b8:1a:db:44:9d: 88:ad:ff:ad:54:b0:0b:3d:59:15:8d:8f:05:3c:2e: 25:52:67:c4:2d:9f:f3:37:a4:49:ea:43:de:67:4c: 29:e2:c6:c0:39:4e:b2:c7:b0:2c:5a:65:63:f3:24: 66:47:38:9d:3c:5b:a7:54:27:4f:56:fe:0a:97:e7: 81:96:37:4d:ef:df:27:85:5d:0e:bb:16:43:f2:c1: 1a:ac:70:d9:6c:af:1d:08:21:4c:93:15:a6:e3:55: 53:c2:1b:0f:67:4a:8e:bd:29:ed:c1:53:1d:54:89: a1:f9:55:d7:62:a3:f3:3a:63:56:d7:0c:99:ed:bb: 74:54:a6:77:b3:0e:07:ce:32:a7:16:6a:0f:ac:c7: 92:c8:39:0c:b4:3a:56:26:78:47:50:af:1d:54:48: 39:06:ff:07:c0:dd:c1:49:5f:42:a3:71:87:31:54: c7:43:b5:3d:36:e4:c5:59:08:8f:b5:b7:0e:03:37: 77:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CA:47:A1:38:FC:F9:EA:3A:D0:0D:28:9B:FD:8D:2B:18:DD:D4:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f11d2764-529a-3bd8-9f5c-74ccfbd98117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:65:00:fb:d1:04:35:a2:56:c8:ab:02:9f:6e:2c:05:0e:3a: 22:93:47:04:94:74:51:4f:56:86:79:24:de:d2:e5:82:e2:68: 55:96:47:59:1a:45:2b:c3:b6:92:a4:8e:76:b6:ad:87:f2:e0: 89:7d:fd:05:89:01:95:4d:7f:98:fb:e3:1f:51:b2:b6:0e:27: f1:91:39:2c:c5:e1:8d:c1:56:ea:b3:db:4b:c4:12:b5:72:1b: 6c:26:cb:f4:5f:b6:a6:9e:77:5f:ad:ce:42:f5:ce:85:5b:5b: 7c:78:a0:32:3f:4e:7a:3c:e4:b4:60:19:17:f7:50:3d:4a:0f: 9b:fc:c2:e4:7a:9e:f6:6a:60:00:b3:25:9f:62:4b:8c:f8:ee: 45:70:ac:80:a1:a3:18:7f:9a:c6:d9:5f:32:13:46:7b:70:87: 74:3b:20:0f:39:7c:99:80:f5:41:b2:8f:28:19:8c:01:09:27: 34:4f:7e:4f:db:70:fc:19:cc:da:2c:4e:a0:24:f6:21:49:f9: de:2a:04:30:2a:b7:52:8e:c9:35:c6:88:66:8e:b5:27:6a:8a: 21:d2:2f:18:d7:15:4b:43:a9:4f:64:ba:6d:2c:39:0e:6f:fd: b4:98:78:6c:4e:4c:ab:81:73:d4:1f:02:16:0a:ee:08:19:34: ca:20:b0:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpk1xvF4vuymCQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk YjBmZDAyYzAtMTU4ZS00ZDBmLWE3NGYtMTI2NjE4ZjJlMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNCccpVXZrBsayfU+bKHDmDNF67xCSJLyhfv EpW5uRQi/u+kW0joshSISyUIo/5JJZX497+u1xdaTZXoDB1ayKUzpWhHuBrbRJ2I rf+tVLALPVkVjY8FPC4lUmfELZ/zN6RJ6kPeZ0wp4sbAOU6yx7AsWmVj8yRmRzid PFunVCdPVv4Kl+eBljdN798nhV0OuxZD8sEarHDZbK8dCCFMkxWm41VTwhsPZ0qO vSntwVMdVImh+VXXYqPzOmNW1wyZ7bt0VKZ3sw4HzjKnFmoPrMeSyDkMtDpWJnhH UK8dVEg5Bv8HwN3BSV9Co3GHMVTHQ7U9NuTFWQiPtbcOAzd3fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXKR6E4/PnqOtANKJv9jSsY3dRvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjExZDI3NjQtNTI5YS0z YmQ4LTlmNWMtNzRjY2ZiZDk4MTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5l5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhlAPvRBDWiVsirAp9uLAUOOiKTRwSUdFFPVoZ5JN7S5YLiaFWWR1ka RSvDtpKkjna2rYfy4Il9/QWJAZVNf5j74x9RsrYOJ/GROSzF4Y3BVuqz20vEErVy G2wmy/Rftqaed1+tzkL1zoVbW3x4oDI/Tno85LRgGRf3UD1KD5v8wuR6nvZqYACz JZ9iS4z47kVwrIChoxh/msbZXzITRntwh3Q7IA85fJmA9UGyjygZjAEJJzRPfk/b cPwZzNosTqAk9iFJ+d4qBDAqt1KOyTXGiGaOtSdqiiHSLxjXFUtDqU9kum0sOQ5v /bSYeGxOTKuBc9QfAhYK7ggZNMogsPA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:47:08 2025 by rpki-client