$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f2775d19-0fea-398d-aeb5-3b7bf776a2ec.roa File: f2775d19-0fea-398d-aeb5-3b7bf776a2ec.roa (raw, json) Hash identifier: YGpY3AHbxJGEmO7ONvqNsAejT4bwvSrNO7gXGsnuiV0= Subject key identifier: 29:4B:16:82:85:E6:8A:3D:C7:8E:D5:96:E8:05:20:8B:7A:CF:A4:41 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584ACCA6503414FA79CA58CCB480 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f2775d19-0fea-398d-aeb5-3b7bf776a2ec.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 207134 IP address blocks: 131.153.98.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:50:34:14:fa:79:ca:58:cc:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=b06bad6f-2f00-4378-bf85-179d5a6e4991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5d:58:a9:5d:e7:3f:4b:cd:b8:cc:28:84:39: dd:0e:95:4f:d9:83:75:57:ab:ab:b2:f7:96:c4:c2: 28:f1:d7:8f:14:05:32:45:87:4a:1e:10:b3:2c:2f: 57:94:95:96:c3:d3:24:c5:ad:1b:06:48:21:f8:93: 2a:70:5d:61:b3:0a:81:2a:e2:cf:7d:e4:de:7e:e9: 18:01:30:37:2c:a1:bf:3b:83:6c:69:80:1f:bd:82: f9:91:d0:f4:8d:22:20:a7:f5:be:45:dd:b8:6b:0d: aa:52:6d:82:34:75:ee:0c:ef:35:3a:9a:c7:bb:a1: 73:be:6c:d1:1b:59:2a:76:c5:64:2d:49:8a:e7:a8: b9:45:76:d0:96:b9:ef:73:79:bf:61:52:e4:1d:31: 2b:4b:a0:11:39:eb:24:82:bc:fd:34:c8:09:39:e7: 90:c8:46:a4:08:31:28:02:51:31:f0:fb:39:2c:ad: e1:96:51:4f:aa:47:f4:d2:56:c6:b0:8e:8c:54:71: 7f:7c:08:fa:53:40:fc:32:61:4f:c6:18:ca:c9:88: d8:f8:ce:5c:f2:08:cb:eb:fd:64:87:46:20:49:b6: 8c:91:58:e9:a9:ec:48:4f:06:5e:93:60:14:6c:53: 60:96:54:d5:bd:4a:58:e8:d5:67:9b:79:7d:8e:f2: ca:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4B:16:82:85:E6:8A:3D:C7:8E:D5:96:E8:05:20:8B:7A:CF:A4:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f2775d19-0fea-398d-aeb5-3b7bf776a2ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:0e:b5:88:a2:a3:24:25:e2:47:2c:b2:91:23:47:76:d7:b1: 82:f2:04:1e:50:96:c5:14:c4:4b:d9:c8:21:23:1f:7c:6e:22: a6:07:0f:18:30:9c:ef:48:51:bb:03:ea:86:2d:f5:5a:eb:1c: 25:00:11:4c:2f:7b:c1:bc:71:91:50:aa:35:7d:7d:c3:ff:c3: 13:78:ce:46:11:3b:1c:f2:e5:f3:2c:23:5e:43:00:dc:b4:1e: 5d:c9:cc:5f:4c:c0:90:dc:d8:3a:1e:66:f8:09:a7:60:ec:bf: 57:0e:7c:82:00:88:4a:ae:a5:27:87:14:17:e9:4c:b2:51:68: 21:1e:bc:13:2e:e5:60:e3:47:8e:f5:d0:e4:7d:d4:da:27:58: 75:bc:d6:7f:cb:21:68:22:57:d4:2a:2f:65:44:2e:42:e1:51: 06:bb:d7:f9:81:b9:21:fe:7d:60:40:d7:22:cc:cf:48:c0:21: db:90:aa:ad:a6:18:14:09:85:9f:6c:a5:32:9e:af:7a:2c:43: c4:69:23:39:43:25:90:68:31:7f:24:f3:51:df:c0:2f:5c:ff: cf:6c:23:be:83:14:01:8d:b8:14:e7:f4:75:9e:05:b3:91:ee: 42:2c:b9:9b:ad:99:ff:3d:68:47:c9:28:5f:ef:ec:bd:1f:b0: 79:03:84:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMplA0FPp5yljMtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk YjA2YmFkNmYtMmYwMC00Mzc4LWJmODUtMTc5ZDVhNmU0OTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk11YqV3nP0vNuMwohDndDpVP2YN1V6ursveW xMIo8dePFAUyRYdKHhCzLC9XlJWWw9Mkxa0bBkgh+JMqcF1hswqBKuLPfeTefukY ATA3LKG/O4NsaYAfvYL5kdD0jSIgp/W+Rd24aw2qUm2CNHXuDO81OprHu6FzvmzR G1kqdsVkLUmK56i5RXbQlrnvc3m/YVLkHTErS6AROeskgrz9NMgJOeeQyEakCDEo AlEx8Ps5LK3hllFPqkf00lbGsI6MVHF/fAj6U0D8MmFPxhjKyYjY+M5c8gjL6/1k h0YgSbaMkVjpqexITwZek2AUbFNgllTVvUpY6NVnm3l9jvLKvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClLFoKF5oo9x47VlugFIIt6z6RBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjI3NzVkMTktMGZlYS0z OThkLWFlYjUtM2I3YmY3NzZhMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5liMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEOtYiioyQl4kcsspEjR3bXsYLyBB5QlsUUxEvZyCEjH3xuIqYHDxgw nO9IUbsD6oYt9VrrHCUAEUwve8G8cZFQqjV9fcP/wxN4zkYROxzy5fMsI15DANy0 Hl3JzF9MwJDc2DoeZvgJp2Dsv1cOfIIAiEqupSeHFBfpTLJRaCEevBMu5WDjR471 0OR91NonWHW81n/LIWgiV9QqL2VELkLhUQa71/mBuSH+fWBA1yLMz0jAIduQqq2m GBQJhZ9spTKer3osQ8RpIzlDJZBoMX8k81HfwC9c/89sI76DFAGNuBTn9HWeBbOR 7kIsuZutmf89aEfJKF/v7L0fsHkDhLY= -----END CERTIFICATE-----Generated at Sat Aug 23 16:51:25 2025 by rpki-client