$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f26924a7-3907-31ca-928b-e3ff0f341667.roa File: f26924a7-3907-31ca-928b-e3ff0f341667.roa (raw, json) Hash identifier: yQ/NgeeRdmI15Y0gIX7xtj3EogzqBEQxeh76x7FHxWg= Subject key identifier: CE:FB:65:21:80:5C:A4:5D:8C:02:98:66:49:78:49:D3:0D:FF:4F:0C Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACE0B966C47275C107B308D40 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f26924a7-3907-31ca-928b-e3ff0f341667.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 19437 IP address blocks: 131.153.168.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:96:6c:47:27:5c:10:7b:30:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=8a5d8155-cc70-477b-a33b-77f882feed52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e3:9e:7f:14:2f:76:9e:c5:17:4c:f1:9b:dd: 96:aa:cb:cd:92:95:12:2c:b9:e2:f6:5b:13:c2:7b: a8:66:89:41:6d:a3:39:b3:4b:39:a8:72:8a:91:81: d5:e5:46:09:10:af:f9:da:c0:30:d7:16:96:29:60: 14:e9:a8:b2:73:71:bc:d1:14:f5:df:d8:0e:d2:dd: a8:6a:f9:34:52:fd:4e:2c:fe:2e:3d:7b:d1:89:00: b1:8e:7e:b7:76:3d:a7:dc:c4:c7:ac:79:90:63:75: b6:25:f0:f6:15:a0:1b:f1:cf:51:c9:45:c9:15:58: 63:05:24:b7:8b:f3:71:8c:bc:5c:5e:c9:9d:a7:17: 1d:76:53:b0:11:ff:1a:cb:4f:de:92:9b:c3:a5:df: 11:b0:85:b0:95:a7:f0:e0:fb:52:f1:8d:39:25:de: 2f:d9:55:14:8e:4c:e2:96:fa:31:66:e1:b6:2e:bb: bc:ce:f1:e8:c3:98:40:d7:f6:c0:ca:24:dc:45:86: 8c:7e:26:01:bc:20:59:fb:6b:63:6e:b8:d3:d7:72: 51:4e:80:ff:e7:67:8f:04:16:20:be:ff:cf:18:91: 82:92:51:34:17:aa:18:f1:df:0a:bc:e7:6a:e8:4f: 99:29:91:6f:ca:e8:23:e8:9f:cc:51:2a:34:07:d1: ae:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FB:65:21:80:5C:A4:5D:8C:02:98:66:49:78:49:D3:0D:FF:4F:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f26924a7-3907-31ca-928b-e3ff0f341667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:40:01:ae:79:c4:8d:84:f5:04:1d:36:27:fb:e6:ba:09:33: 15:98:55:c3:37:cf:06:42:f7:5b:48:f9:69:26:ab:52:ac:36: cc:7b:c7:1d:7d:c7:e5:65:1a:47:89:7f:44:b8:fe:3f:03:c8: ed:14:09:3b:7f:02:d2:3b:70:fe:4c:0e:45:a7:0f:65:4f:1a: 1d:4e:ae:b3:8c:2b:7a:58:60:d1:35:5b:51:8b:15:ed:18:c6: e5:c5:0d:d9:ab:ca:d4:6c:c1:fa:8b:4a:8b:2d:d7:eb:5e:1b: c5:46:6b:2a:c3:55:bd:2c:fe:9d:90:34:d7:3b:1c:29:93:eb: 37:e1:b0:51:7b:7d:38:6d:81:4a:85:f7:39:76:9d:fa:09:19: 15:d6:98:f7:5f:3f:7e:1d:05:66:73:99:27:28:42:0e:fb:aa: 1a:68:ce:51:6e:7b:14:bf:59:0c:8e:d9:b3:da:58:a5:22:06: a4:4a:d1:39:7f:f7:24:78:c9:4d:4c:03:6a:ac:97:37:04:45: 61:49:9a:12:4f:95:c7:91:37:0f:7b:ff:4b:d7:de:22:0e:89: fe:ef:e3:e4:5a:8e:60:65:53:bc:08:d5:15:cf:12:5c:14:02: 21:39:bc:45:96:4b:0b:fc:ce:aa:f9:9c:35:20:83:1b:e2:f5: 2c:2a:23:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErOC5ZsRydcEHswjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk OGE1ZDgxNTUtY2M3MC00NzdiLWEzM2ItNzdmODgyZmVlZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeOefxQvdp7FF0zxm92WqsvNkpUSLLni9lsT wnuoZolBbaM5s0s5qHKKkYHV5UYJEK/52sAw1xaWKWAU6aiyc3G80RT139gO0t2o avk0Uv1OLP4uPXvRiQCxjn63dj2n3MTHrHmQY3W2JfD2FaAb8c9RyUXJFVhjBSS3 i/NxjLxcXsmdpxcddlOwEf8ay0/ekpvDpd8RsIWwlafw4PtS8Y05Jd4v2VUUjkzi lvoxZuG2Lru8zvHow5hA1/bAyiTcRYaMfiYBvCBZ+2tjbrjT13JRToD/52ePBBYg vv/PGJGCklE0F6oY8d8KvOdq6E+ZKZFvyugj6J/MUSo0B9GuWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM77ZSGAXKRdjAKYZkl4SdMN/08MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjI2OTI0YTctMzkwNy0z MWNhLTkyOGItZTNmZjBmMzQxNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5moMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1AAa55xI2E9QQdNif75roJMxWYVcM3zwZC91tI+Wkmq1KsNsx7xx19 x+VlGkeJf0S4/j8DyO0UCTt/AtI7cP5MDkWnD2VPGh1OrrOMK3pYYNE1W1GLFe0Y xuXFDdmrytRswfqLSost1+teG8VGayrDVb0s/p2QNNc7HCmT6zfhsFF7fThtgUqF 9zl2nfoJGRXWmPdfP34dBWZzmScoQg77qhpozlFuexS/WQyO2bPaWKUiBqRK0Tl/ 9yR4yU1MA2qslzcERWFJmhJPlceRNw97/0vX3iIOif7v4+RajmBlU7wI1RXPElwU AiE5vEWWSwv8zqr5nDUggxvi9SwqI9A= -----END CERTIFICATE-----Generated at Sat Aug 23 14:19:14 2025 by rpki-client