$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f167a86e-0304-38f6-baf0-2ee2779263a8.roa File: f167a86e-0304-38f6-baf0-2ee2779263a8.roa (raw, json) Hash identifier: WInwWQma/2rk5SOGHDZd7T/iPVL6kZqgGShpKK6NyX0= Subject key identifier: 70:46:D9:6C:36:CE:B4:5B:42:02:4C:92:19:97:52:EB:ED:E9:83:4E Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACE0B9658C1E7CC35FA930240 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f167a86e-0304-38f6-baf0-2ee2779263a8.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 59210 IP address blocks: 131.153.159.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:96:58:c1:e7:cc:35:fa:93:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=8d422c5f-e92c-4dd1-8f6b-0c8602616512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8e:11:a3:a7:cf:70:89:d3:06:97:55:0d:6a: 81:1f:46:9a:51:b4:56:7c:9f:fa:76:5a:9f:ac:3d: 2f:85:f3:f8:b1:a7:99:c1:1f:eb:57:69:05:a3:1b: 4a:40:72:1a:3e:ba:bf:c6:da:25:82:b3:56:13:d9: 9e:29:f6:ff:4e:dc:6d:94:e1:09:ee:83:cb:be:b8: 76:4d:5f:62:d5:66:63:f5:e1:b4:10:13:f2:71:07: 72:4f:80:0b:0b:62:8f:fa:94:00:69:e9:4f:0a:0b: f3:31:34:d9:99:d9:b1:85:68:a8:72:8f:30:f8:7a: bd:5b:ef:d0:07:65:36:8d:cc:cf:e7:92:e0:04:f7: ef:74:6e:cd:46:d5:aa:54:3e:44:c5:09:b8:5e:b9: d7:d5:34:b6:a0:70:e5:f8:c2:e8:0b:16:e1:89:72: ec:b7:e3:76:28:f2:d9:be:c2:cb:31:53:4e:10:b7: e7:c7:78:c1:43:5f:4b:a3:bb:d1:25:66:2c:35:6a: c6:51:8a:69:78:cf:85:32:b3:da:1e:b0:d1:cd:f2: f1:d9:15:6b:8e:42:41:91:f5:46:d4:77:a9:35:0a: ae:d1:99:64:b1:d6:8d:a0:65:79:60:38:a1:ca:24: d4:fd:be:86:dd:40:18:65:a8:b6:8e:da:90:35:d7: 0f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:46:D9:6C:36:CE:B4:5B:42:02:4C:92:19:97:52:EB:ED:E9:83:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f167a86e-0304-38f6-baf0-2ee2779263a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:9b:f4:09:c9:47:10:8e:ac:56:8e:4c:57:74:9e:a5:a7:85: 04:c7:70:00:1a:58:c7:12:39:42:d9:20:c1:63:8f:53:3e:9e: 3b:c1:a9:09:fb:53:06:4f:bb:87:01:04:11:97:07:7e:c8:99: 6f:55:94:dd:a7:de:e4:1d:ce:90:3e:e0:32:ba:f4:3f:c5:79: 02:66:02:91:4a:dd:58:1c:cf:f5:35:b9:ee:86:4e:ea:f5:21: e1:de:f1:6a:d4:f2:cc:fc:61:cc:6e:f7:73:bd:b7:74:cd:bb: b9:e9:14:f8:03:70:b2:1f:b6:cf:19:95:d7:29:ae:c7:d0:77: 35:6e:06:f3:ba:d3:a2:0d:65:a3:7f:48:44:a9:d2:72:b9:c0: c4:93:3f:7a:19:06:bf:a1:e1:5b:e1:ff:1d:8c:22:ac:26:f9: 95:f3:74:7c:00:1b:a9:b1:77:3e:a4:81:d6:b7:eb:5c:0a:df: 84:b2:fa:89:e7:8b:7d:d8:d3:4e:9a:e9:72:de:b2:a0:7a:dd: 71:0f:16:b1:d0:db:14:4e:4b:66:d2:32:0c:95:35:96:58:c9: 7d:93:ae:a0:63:2f:55:8c:8b:67:23:72:de:2c:f6:dc:5f:27: 3f:6c:05:67:cf:af:95:f6:78:db:82:ee:3a:28:b6:6d:29:8b: 67:9b:bb:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5ZYwefMNfqTAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk OGQ0MjJjNWYtZTkyYy00ZGQxLThmNmItMGM4NjAyNjE2NTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio4Ro6fPcInTBpdVDWqBH0aaUbRWfJ/6dlqf rD0vhfP4saeZwR/rV2kFoxtKQHIaPrq/xtolgrNWE9meKfb/TtxtlOEJ7oPLvrh2 TV9i1WZj9eG0EBPycQdyT4ALC2KP+pQAaelPCgvzMTTZmdmxhWioco8w+Hq9W+/Q B2U2jczP55LgBPfvdG7NRtWqVD5ExQm4XrnX1TS2oHDl+MLoCxbhiXLst+N2KPLZ vsLLMVNOELfnx3jBQ19Lo7vRJWYsNWrGUYppeM+FMrPaHrDRzfLx2RVrjkJBkfVG 1HepNQqu0ZlksdaNoGV5YDihyiTU/b6G3UAYZai2jtqQNdcPKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBG2Ww2zrRbQgJMkhmXUuvt6YNOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjE2N2E4NmUtMDMwNC0z OGY2LWJhZjAtMmVlMjc3OTI2M2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5mfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCb9AnJRxCOrFaOTFd0nqWnhQTHcAAaWMcSOULZIMFjj1M+njvBqQn7 UwZPu4cBBBGXB37ImW9VlN2n3uQdzpA+4DK69D/FeQJmApFK3Vgcz/U1ue6GTur1 IeHe8WrU8sz8Ycxu93O9t3TNu7npFPgDcLIfts8ZldcprsfQdzVuBvO606INZaN/ SESp0nK5wMSTP3oZBr+h4Vvh/x2MIqwm+ZXzdHwAG6mxdz6kgda361wK34Sy+onn i33Y006a6XLesqB63XEPFrHQ2xROS2bSMgyVNZZYyX2TrqBjL1WMi2cjct4s9txf Jz9sBWfPr5X2eNuC7jootm0pi2ebu6I= -----END CERTIFICATE-----Generated at Sat Aug 23 22:01:14 2025 by rpki-client